On Wed, Jun 07, 2006, David Gillingham wrote: > Hello all, > > I've been tasked to internally investigate a system that utilizes > STunnel and OpenSSL to create a secure wrapper for a propietary > protocol. Additionally, this solution must eventually be FIPS 140-2 > compliant. > > 608008D: error:0608008D:digital envelope > routines:EVP_DigestInit:disabled for fips >
That's the problem. I'd guess that this is due to a certificate using an algorithm that isn't allowed in FIPS mode: probably MD5. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
