SSL_connect failed with FATAL FIPS SELFTEST FAILURE

2011-03-27 Thread Yolanda Liu (liuyu)
Hi: Our application crashed during startup when tried to connect to the remote server via libCurl which calls SSL_connect with the following error: fips.c(146): OpenSSL internal error, assertion failed: FATAL FIPS SELFTEST FAILURE Program received signal SIGABRT, Aborted. Wondering what could

OpenSSL_add_all_algorithms issue

2011-03-16 Thread Yolanda Liu (liuyu)
Hi, all: In one of our components, there is a call to OpenSSL_add_all_algorithms() in a function AppInit() which is called when the application is initialized. From a debugger, I am seeing the AppInit() is definitely called, however, when it comes to make call to PEM_bio_read_PrivateKey(),

RSA Private Key Format Different in FIPS Mode

2011-02-28 Thread Yolanda Liu (liuyu)
Hi, I manually ran openssl genrsa -out key.rsa 2048 in FIPS on and off mode, the generated private keys are in different format. In FIPS off mode: -BEGIN RSA PRIVATE KEY- MIIEpAIBAAKCAQEAwhVeHVTVFcrWJn6d8WJWgQ49lETK7a7rPS8nCxgOHJWmT3bV in FIPS on mode, the rsa key is in the

non-blocking BIO_do_connect problems with select

2008-01-17 Thread Yolanda Liu (liuyu)
Hi, all: Wondering if anybody has done something related this and give me some suggestions. I am using OpenSsl library to do connection to a port. OpenSSL doesn't provide a configurable timeout for BIO_do_connect. It is relying on the underlying OS connection. If the port is unreachable, it

RE: SSL_CTX_use_certificate_chain_file failure

2007-08-30 Thread Yolanda Liu \(liuyu\)
Hi, Thanks for the reply. The test program works only if I put it in the main() or if I create a global function then call it in the main(). It fails if I pack the function as a member function of a cpp class in a shared library xxx.so, then call it from the main(). I know the context initialized

SSL_CTX_use_certificate_chain_file failure

2007-08-29 Thread Yolanda Liu \(liuyu\)
Hi, all: I am trying to use SSL_CTX_use_certificate_chain_file to load a chained certificate, but it return non-1. The wired thing is that it doesn't print any error, I try everything ERR_print_errors_fp(), Err_get_error(), etc. The first thing I want to rule out is that the file can't be