You have to statically link the openssl dynamic libraries
--
View this message in context:
http://openssl.6102.n7.nabble.com/Apache-2-2-24-doesnt-come-up-with-FIPS-capable-openssl-1-0-1c-tp44630p44634.html
Sent from the OpenSSL - Dev mailing list archive at Nabble.com.
_
On Fri Mar 22 20:41:21 2013, fr...@baggins.org wrote:
> Hello
>
> When using OpenSSL-1.0.1e-fips a call to PEM_write_bio_PrivateKey
> silently fails and produces a corrupt pem file when using an
> EVP_PKEY_EC key and a binary curve. The same function works fine when
> not using a FIPS capable OpenS
Any thoughts on this issue?
As things currently stand binary curves are pretty much unusable in a FIPS
capable OpenSSL build.
Thanks
Matt
On 22 March 2013 19:41, Matt Caswell via RT wrote:
> Hello
>
> When using OpenSSL-1.0.1e-fips a call to PEM_write_bio_PrivateKey
> silently fails and produ
Hi All,
I installed openssl 1.0.1c with FIPS and it works fine.
export OPENSSL_FIPS=1
[root@PC ~]# openssl SHA1 incore
SHA1(incore)= b5acba7f6333aafdfe9804d2aebe373c39024bc3
[root@PC ~]# openssl md5 incore
Error setting digest md5
139723413960360:error:060A80A3:digital envelope
routines:FIPS_DIG
On 03/28/2013 10:31 AM, Matt Caswell wrote:
> On 27 March 2013 21:03, Ben Laurie wrote:
>> The OSF is not actually the one that would benefit from such a
>> licence, so the whole idea that it (or we) should pay for one seems
>> weird to me.
>>
> Well, I wasn't actually suggesting that the OSF shou