OpenSSL 1.0.1e failure in set_fips_mode() and unit test

2013-06-01 Thread Jan Willamowius
Hi, I'm trying to use OpenSSL 1.0.1e with fips module 2.0.4 on Win7 (64bit). set_fips_mode(1) fails with "error:2D06B06F:FIPS routines:FIPS_check_incore_fingerprint:fingerprint does not match". While searching for the cause, I noticed that the unit test ("nmake -f ms\ntdll.mak test") fails for

Disabling EC

2013-06-01 Thread Rahul Godbole
Hi I am using OpenSSL 1.0.1c with fips 2.0.2 module. I have issues with the amount of flash and memory it is using since I am using OpenSSL on an embedded system. We are not using Elliptic curve anywhere in the product and would like to disable it. However, if I disable it using the no-ec family

Re: SSL_VERIFY_PEER and self-signed certificates

2013-06-01 Thread Brice André
Dear Dave, Thanks for your help. I solved my problem and I am very ashamed... I tried with the ssl client command line of my freshly compiled openssl version and got the same error. After investigation, I realised that the official windows binary client failed too. Thus, I was wondering why it w