[openssl-users] FIPS mode on Windows

2018-09-21 Thread Nelson Caro
On Mon Sep 10 11:26:25 UTC 2018, Hubert Kario wrote: > On Friday, 7 September 2018 20:18:38 CEST Alessandro Gherardi wrote: >> I'm running Windows 10. >> I downloaded the FIPS module sources >> from https://www.openssl.org/source/openssl-fips-2.0.16.tar.gz and the >> OpenSSL sources from https://ww

Re: [openssl-users] FIPS mode on Windows

2018-09-10 Thread Hubert Kario
On Friday, 7 September 2018 20:18:38 CEST Alessandro Gherardi wrote: > I'm running Windows 10. > I downloaded the FIPS module sources > from https://www.openssl.org/source/openssl-fips-2.0.16.tar.gz and the > OpenSSL sources from https://www.openssl.org/source/openssl-1.0.2p.tar.gz . > I built both

Re: [openssl-users] FIPS mode on Windows

2018-09-07 Thread Hubert Kario
On Friday, 7 September 2018 16:18:48 CEST Alessandro Gherardi wrote: > Thank you for your reply. > Looking at the OpenSSL FIPS Security > Policy https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-valid > ation-program/documents/security-policies/140sp1747.pdf, I see the following > sta

Re: [openssl-users] FIPS mode on Windows

2018-09-07 Thread Hubert Kario
On Thursday, 6 September 2018 04:18:38 CEST Alessandro Gherardi via openssl- users wrote: > I have a question: On Windows, should OpenSSL FIPS automatically enable FIPS > mode (FIPS_mode_set(1)) if the FIPS registry > entry HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithm > Pol

[openssl-users] FIPS mode on Windows

2018-09-05 Thread Alessandro Gherardi via openssl-users
I have a question: On Windows, should OpenSSL FIPS automatically enable FIPS mode (FIPS_mode_set(1)) if the FIPS registry entry  HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy\Enabled is set to 1? This is to emulate the Linux behavior - if I understand correctly, if