Re: [openssl-users] Help needed on FIPS error 0409A09E:lib(4):func(154):reason(158).

2015-09-10 Thread Jayalakshmi bhat
Hi Tom, Thanks a lot for clarifying the doubt. Regards Jayalakshmi On Thu, Sep 10, 2015 at 8:44 AM, Tom Francis wrote: > > > On Sep 10, 2015, at 8:44 AM, Jayalakshmi bhat < > bhat.jayalaks...@gmail.com> wrote: > > > > Hello all, > > > > I have a question on FIPS. We have OpenSSL FIPS module i

Re: [openssl-users] Strange problem in using verify command

2015-09-10 Thread David Li
Hi Jakob, The computer has been up running for quite a while. I wonder if it really needs NTP to take that long to sync up. David On Thu, Sep 10, 2015 at 7:20 PM, Jakob Bohm wrote: > On 11/09/2015 02:13, David Li wrote: >> >> Hi, >> >> I am using "openssl verify -CAfile " to verify the >> cert

Re: [openssl-users] Strange problem in using verify command

2015-09-10 Thread Jakob Bohm
On 11/09/2015 02:13, David Li wrote: Hi, I am using "openssl verify -CAfile " to verify the certificate. It's been running as expected. Recently I started to run this command on a different x86 platform. What I found is the the first few times I always got: error 9 at 1 depth lookup:certifica

[openssl-users] Strange problem in using verify command

2015-09-10 Thread David Li
Hi, I am using "openssl verify -CAfile " to verify the certificate. It's been running as expected. Recently I started to run this command on a different x86 platform. What I found is the the first few times I always got: error 9 at 1 depth lookup:certificate is not yet valid Then I waited 10 m

Re: [openssl-users] Help needed on FIPS error 0409A09E:lib(4):func(154):reason(158).

2015-09-10 Thread Tom Francis
> On Sep 10, 2015, at 8:44 AM, Jayalakshmi bhat > wrote: > > Hello all, > > I have a question on FIPS. We have OpenSSL FIPS module integrated with our > product. We have an option to enable/disable FIPS at run time. We are > executing the following openSSL API's every time when FIPS status

Re: [openssl-users] Help needed on FIPS error 0409A09E:lib(4):func(154):reason(158).

2015-09-10 Thread Jeffrey Walton
> ... > Without executing this we are hitting the error, > error:0409A09E:lib(4):func(154):reason(158). I wanted to know if our > approach is correct? > $ openssl errstr 0x0409A09E error:0409A09E:rsa routines:PKEY_RSA_VERIFY:operation not allowed in fips mode ___

[openssl-users] Help needed on FIPS error 0409A09E:lib(4):func(154):reason(158).

2015-09-10 Thread Jayalakshmi bhat
Hello all, I have a question on FIPS. We have OpenSSL FIPS module integrated with our product. We have an option to enable/disable FIPS at run time. We are executing the following openSSL API's every time when FIPS status changes. { We have mapped OpenSSL crypto locks to mutex intenally. Hence w