Re: [openssl-users] Question about Openssl FIPS module and Python-openssl

2015-09-14 Thread Salz, Rich
>Is there anyway to make the FIPS mode always enabled by default in the library >layer, so that there's no need to invoke the FIPS_mode_set API? No. You'd have to end up calling some explicit routine of your own which called FIPS_mode_set. ___ openssl

Re: [openssl-users] Question about Openssl FIPS module and Python-openssl

2015-09-14 Thread John Foley
Your first question should be presented to the Python developers that provide support for OpenSSL. They would be the user of the OpenSSL API. I'm not a Python expert, but somewhere they would have a native layer that leverages the OpenSSL API. This native layer code would need to invoke FIPS_mod