Dear team
    The API FIPS_selftest() is failing .
The content of the file /proc/sys/crypto/fips_enabled is 1
    I have executed the below mentioned code
   
    The code is  
#include "stdio.h"
int main()
{
int ret=0;
ret=FIPS_mode();
printf("\nFIPS_mode = %u  \n",ret);
ret=FIPS_selftest();
printf("\nFIPS_selftest=%u  \n",ret);
ERR_print_errors_fp(stderr);
}


     Output  is 
"
FIPS_mode = 1

FIPS_selftest=0
140091346814640:error:0607B0A3:lib(6):func(123):reason(163):evp_enc.c:313:
140091346814640:error:2D06F065:lib(45):func(111):reason(101):fips_des_selftest.c:134:
"

     Looks like flag EVP_CIPH_FLAG_FIPS is not set for the cipher returned by EVP_des_ede_ecb() .

     I am using openssl-1.0.2k-19.el7.x86_64 on "CentOS Linux release 7.6.1810 (Core)"
 
Please let me know you thoughts on this

Thanks and Regards
Akshar

_______________________________________________
CentOS-devel mailing list
CentOS-devel@centos.org
https://lists.centos.org/mailman/listinfo/centos-devel