I got the same error:
C:\OpenSSL\openssl-0.9.7j\out32dll>openssl.exe
3300:error:2A069066:FIPS routines:FIPS_mode_set:fips mode already set:fips.c:239:
3300:error:2A069066:FIPS routines:FIPS_mode_set:fips mode already set:fips.c:239:
(Last week, when I run openssl wihtout OPENSSL_FIPS set, it's running OK. Recently,I looked the source code, openssl.c calls FIPS_mode_set after check getenv(OPENSSL_FIPS). So in order to truely run in FIPS mode, OPENSSL_FIPS needs to be set)
Did anybody see this error? Thanks for any suggestion.
Shicai
Shicai Hu <[EMAIL PROTECTED]> wrote:
In linux, I can call FIPS_mode, if return value is zero, then I can call FIPS_mode_set( 1 ) to set FIPS mode;
however, in windows, call FIPS_mode, the return value is zero, but when I call FIPS_mode_set(1), it still return the ERROR message : 2496:error:2A069066:FIPS routines:FIPS_mode_set:fips mode already set:fips.c:239:
I think it's a problem that I can not skip?
Shicai Hu <[EMAIL PROTECTED]> wrote:I am writing a sample application both in Linux and Windows using OpenSSL FIPS mode. In both of Linux and Windows, call FIPS_mode_set in the source code, and use fipsld in Linux and fipslink.pl in windows, all the build procedures followed the OpenSSL FIPS 140-2 User Guide. However, when I run the application, the windows application get the following error message:2496:error:2A069066:FIPS routines:FIPS_mode_set:fips mode already set:fips.c:239:Can I just ignore this error message, because it said fips mode already set?My Linux application doesn't have this issue.Shicai
Shicai Hu <[EMAIL PROTECTED]> wrote:Yes, you are right. The problem is gone away in VC 2005 ( Unfortunately I have only VC 2005 Beta version -old, but it works). VC 2001 plus service pack 6 was installed (which caused the problem).Thanks for the help.Shicai
"Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote:On Wed, Jul 12, 2006, Shicai Hu wrote:
> Hi Dr. Henson:
>
> Thank you very much.
>
> I followed the build instruction of User Guide (page 31) to build. But when I run
>
> nmake -f ms\ntdll.mak
>
> command, first time an error message always pop up:
>
> "fips_premain_dso.exe has encountered a problem and needs to close. ...."
>
Are you using Visual Studio 2003? That has problems with the FIPS build. VC++
6 and VS 2005 should be OK though.
Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]
Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2?min or less.
Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2?min or less.
Do you Yahoo!?
Next-gen email? Have it all with the all-new Yahoo! Mail Beta.
Reply via email to
