Dear team The API FIPS_selftest() is failing . The content of the file /proc/sys/crypto/fips_enabled is 1 I have executed the below mentioned code
The code is #include "stdio.h" int main() { int ret=0; ret=FIPS_mode(); printf("\nFIPS_mode = %u \n",ret); ret=FIPS_selftest(); printf("\nFIPS_selftest=%u \n",ret); ERR_print_errors_fp(stderr); }
Output is " FIPS_mode = 1
FIPS_selftest=0 140091346814640:error:0607B0A3:lib(6):func(123):reason(163):evp_enc.c:313: 140091346814640:error:2D06F065:lib(45):func(111):reason(101):fips_des_selftest.c:134: "
Looks like flag EVP_CIPH_FLAG_FIPS is not set for the cipher returned by EVP_des_ede_ecb() .
I am using openssl-1.0.2k-19.el7.x86_64 on "CentOS Linux release 7.6.1810 (Core)"
Please let me know you thoughts on this
Thanks and Regards Akshar
terriann.farias@navy.mil
On Fri, Mar 6, 2020 at 4:55 AM Akshar Kanak akshar.kanak1@gmail.com wrote:
Dear team The API FIPS_selftest() is failing . The content of the file /proc/sys/crypto/fips_enabled is 1 I have executed the below mentioned code
The code is#include "stdio.h" int main() { int ret=0; ret=FIPS_mode(); printf("\nFIPS_mode = %u \n",ret); ret=FIPS_selftest(); printf("\nFIPS_selftest=%u \n",ret); ERR_print_errors_fp(stderr); }
Output is" FIPS_mode = 1
FIPS_selftest=0 140091346814640:error:0607B0A3:lib(6):func(123):reason(163):evp_enc.c:313:
140091346814640:error:2D06F065:lib(45):func(111):reason(101):fips_des_selftest.c:134: "
Looks like flag EVP_CIPH_FLAG_FIPS is not set for the cipher returnedby EVP_des_ede_ecb() .
I am using openssl-1.0.2k-19.el7.x86_64 on "CentOS Linux release7.6.1810 (Core)"
Please let me know you thoughts on this
Thanks and Regards Akshar _______________________________________________ CentOS-devel mailing list CentOS-devel@centos.org https://lists.centos.org/mailman/listinfo/centos-devel
-
Akshar Kanak -
Terri Farias