On Mon, Jun 18, 2012, Nou Dadoun wrote: > > Why is it failing with the fips library and passing with the non-fips library > - does it have anything to do with the 1024 bit key? (i.e. 2048 and 4096-key > certs both work, and the ca cert has a 2048-bit key) >
Do you get an additional error from ERR_print_errors_fp(stderr)? Is the key size 1024 bits exactly or 1023? What digest algorithm is used? Is it FIPS approved SHA1 or SHA2 or an unapproved algorithm like MD5? Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org