Re: [openssl-users] How to enable FIPS mode system-wide for the FIPS capable OpenSSL?

2016-01-29 Thread Steve Marquess
On 01/28/2016 07:11 PM, security veteran wrote: > Hi All: > > Is there a way to enable FIPS mode globally, instead of having to > explicitly invoke the FIPS_mode_set() API from each application, for > enabling the FIPS mode? > > ... Kinda-sorta, via OPENSSL_config() and openssl.conf. See the

[openssl-users] Building without SOVERSION

2016-01-29 Thread Armin Novak
Hi, I'm currently experimenting with OpenSSL 1.1 android build with shared libraries. Since android is not (properly) supporting shared library versioning, is there a easy way to turn versioning off? ___ openssl-users mailing list To unsubscribe:

[openssl-users] Certificate verification failure

2016-01-29 Thread Yan, Bob
Dear Sir/Madam, I have an application which acting as SSL server. When the application loads the root and intermediate CA files from a CA path, the handshake between my application and openssl client was failed at the point when my application was authenticating the client's certificate. But