Hello all,

I have a question on FIPS. We have OpenSSL FIPS module integrated with our
product. We have an option to enable/disable FIPS at run time.  We are
executing the following openSSL API's every time when FIPS status changes.

{
We have mapped OpenSSL crypto locks to mutex intenally. Hence we delete it
and create it every time when FIPS status changes.
ERR_free_strings()
ERR_remove_state(0);
EVP_cleanup();
SSL_library_init()
SSLeay_add_all_algorithms()
}

Without executing this we are hitting the error,
error:0409A09E:lib(4):func(154):reason(158). I wanted to know if our
approach is correct?

Regards
Jayalakshmi
_______________________________________________
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to