[OpenSSL 1.1.1b FIPS on Fedora 29]
What can a return code <= 0 from EVP_DigestSign(),
with ERR_peek_error() return of 0,
be caused by?
ERR_error_string() decodes the 0 as ":lib(0):func(0):reason(0)"
(assuming the ERR_peek_error(), ERR_get_error() sequence is not
lying to
same test message. And no strlen() on a binary buffer. :-)
However, I'm trying to use a FIPS capable OpenSSL and, in FIPS mode,
I get "Low level API call to digest SHA1 forbidden" when I call SHA1(),
so I switched to using EVP_DigestSign*() and EVP_DigestVerify*()
instead. Then I got
y debug is to do a raw public key operation and trace
the result.
On 8/16/2013 4:09 PM, Thomas J Pinkl wrote:
I'm using OpenSSL 1.0.1e and attempting to use the EVP_DigestSign*() and
EVP_DigestVerify*() functions from within my C code. I am able to
produce a digital signature using EVP
I'm using OpenSSL 1.0.1e and attempting to use the EVP_DigestSign*() and
EVP_DigestVerify*() functions from within my C code. I am able to
produce a digital signature using EVP_DigestSignInit(),
EVP_DigestSignUpdate(), and EVP_DigestSignFinal(). However, when I use
the correspo