Re: [openssl-users] [openssl-dev] Low level API call to digest SHA1 forbidden in FIPS mode - within openssl code

2016-03-23 Thread Glen Matthews
sl-users, copied and reply-to'd. On 23/03/2016 17:25, Glen Matthews wrote: We're receiving this assertion at the start of negotiating an SSL connection: c:\s\15\src\openssl\build\openssl-1.0.2f\crypto\sha\sha_locl.h(128): OpenSSL internal error, assertion failed: Low level API call to diges

Re: [openssl-users] [openssl-dev] Low level API call to digest SHA1 forbidden in FIPS mode - within openssl code

2016-03-24 Thread Glen Matthews
: Thursday, March 24, 2016 1:36 PM To: openssl-users@openssl.org Subject: Re: [openssl-users] [openssl-dev] Low level API call to digest SHA1 forbidden in FIPS mode - within openssl code On Wed, Mar 23, 2016, Glen Matthews wrote: > Hi > > Right, sorry about the wrong posting - and thanks

Re: [openssl-users] [openssl-dev] Low level API call to digest SHA1 forbidden in FIPS mode - within openssl code

2016-03-24 Thread Glen Matthews
sions() - calculating another digest at that point - and the test for FIPS_mode() worked, so I think we are in FIPS mode all through that call stack. glen -Original Message- From: Glen Matthews Sent: Thursday, March 24, 2016 1:55 PM To: 'openssl-users@openssl.org' Subject: RE: [openssl-

Re: [openssl-users] [openssl-dev] Low level API call to digest SHA1 forbidden in FIPS mode - within openssl code

2016-03-26 Thread Glen Matthews
eck back in the dump and see where we are in the code in each method call Sent from my iPhone > On Mar 26, 2016, at 5:30 PM, Dr. Stephen Henson wrote: > >> On Thu, Mar 24, 2016, Glen Matthews wrote: >> >> Hi >> >> Yes it's a standard build. FIPS 2.0 wit

RE: Problems with compile on Version-0.9.6e under win32.

2002-07-31 Thread Glen Matthews
Hi, must be some bad config on my part here, but i added tmp32dll\cryptlib.obj to the ms\ntdll.mak file in $(O_SSL): $(SSLOBJ) $(LINK) $(MLFLAGS) /out:$(O_SSL) /def:ms/SSLEAY32.def @<< tmp32dll\cryptlib.obj $(SHLIB_EX_OBJ) $(SSLOBJ) $(L_CRYPTO) wsock32.lib gdi32.lib advapi32.lib <<

bad record mac record alert

2002-10-11 Thread Glen Matthews
Hi, i'm getting a bad record mac alert back from the server, just before it closes the connection. the ciphersuite that was negotiated was DES-CBC-SHA, and the initial handshakes, etc. completed successfully. anyone have any idea what's up? or where in the code i should look? the protocol versi