On Friday 02 January 2015 17:43:14 Prash Dush wrote: > Hi Mailer, > > Does libCurl support NTLM with FIPS mode enabled on Linux machines.? > > I can see there are local implementation in libCurl source Code where local > implementation of MD4 and MD5 can be used instead of using openssl MD4 and > MD5 implementation.
Whether the local implementation of MD4/MD5 will be used is decided solely at the compile time. libcurl never fallbacks to the local implementation of MD4/MD5 if the crypto backend returns an error. The actual problem is that the NTLM implementation in libcurl ignores failures of the MD4/MD5/DES algorithms all over the code. This needs to be fixed I guess. Kamil > Is it a kind of right approach to support ntlm with fips. > > Please let me know your thoughts... > > > Thanks > Dushyant ------------------------------------------------------------------- List admin: http://cool.haxx.se/list/listinfo/curl-library Etiquette: http://curl.haxx.se/mail/etiquette.html
