Re: [openssl-users] Question about Openssl FIPS module and Python-openssl

2015-09-14 Thread Salz, Rich
>Is there anyway to make the FIPS mode always enabled by default in the library >layer, so that there's no need to invoke the FIPS_mode_set API? No. You'd have to end up calling some explicit routine of your own which called FIPS_mode_set. ___ openssl

[openssl-users] Question about Openssl FIPS module and Python-openssl

2015-09-14 Thread security veteran
Thanks John. In that case it may be more complicated to invoke the *FIPS_mode_set *API from the Python layer. Is there anyway to make the FIPS mode always enabled by default in the library layer, so that there's no need to invoke the FIPS_mode_set API? Thanks. Your first questi

Re: [openssl-users] Question about Openssl FIPS module and Python-openssl

2015-09-14 Thread John Foley
Your first question should be presented to the Python developers that provide support for OpenSSL. They would be the user of the OpenSSL API. I'm not a Python expert, but somewhere they would have a native layer that leverages the OpenSSL API. This native layer code would need to invoke FIPS_mod

[openssl-users] Question about Openssl FIPS module and Python-openssl

2015-09-14 Thread security veteran
Hi, I've built an openssl library with the FIPS objects modules, and I was testing the new lib files by replacing the original library files such as libcrypto.so with the new ones. >From the FIPS user guide I understand that any applications which need to use the OpenSSL FIPS modules will need to