Re: FIPS_rand_set_key and FIPS_rand_seed

2013-04-24 Thread Cipher
I found the solution, it has nothing to do with forking. Here is what i did- I was writing IN FIPS MODE message to *stdout*. When sshd forks child process to handle scp, this stdout was being passed over the pipe causing the issue. My issue got resolved after writing the FIPS mode message

Re: FIPS_rand_set_key and FIPS_rand_seed

2013-04-22 Thread Cipher
I have related problem. My *sshd* is compiled with FIPS 2.0.2 incorporated openssl 1.0.1c and runs fine in SBX. But when i try to do scp from a remote system, initial connection is successful but connection get closed immediately. If i am not wrong, scp internally calls ssh which forks a new proces

Re: FIPS_rand_set_key and FIPS_rand_seed

2013-04-18 Thread Dr. Stephen Henson
On Thu, Apr 18, 2013, no_spam...@yahoo.com wrote: > Second try... > > The FIPS_rand_set_key and FIPS_rand_seed functions in 0.9.8 appear to have > been removed in newer OpenSSL FIPS Object Module v2.0. > Those functions relate to the old X9.31 PRNG which isn't the default

FIPS_rand_set_key and FIPS_rand_seed

2013-04-18 Thread no_spam_98
Second try... The FIPS_rand_set_key and FIPS_rand_seed functions in 0.9.8 appear to have been removed in newer OpenSSL FIPS Object Module v2.0. Are there replacements?  Or are they not needed anymore?  If an application is in FIPS mode (i.e. the OpenSSL FIPS Object Module is in FIPS mode), can