FIPS_mod_set() fails with reason 111 (Do_Dsa_Sign())

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

FIPS_mod_set() fails with reason 111 (Do_Dsa_Sign())

Dipak B
Hi,

Can anyone help me with following?

1) Calling FIPS_mode_set() from inside a DLL just after SSL_library_init() fails with
[error:2D06B06F:lib(45):func(107):reason(111)] 

2) This DLL links to
a] static libraries (libeay, libssl, libcompat)from FIPS capable OpenSSL.

b] static libcurl which is again prepared using above static FIPS capable OpenSSL 

c] Includes fips_premain.c and preprocessor directive of HMACSHA=checksum of itself

3)This is done in order to achieve FIPS compliance for a windows service which loads above DLL for all its communications.

4) What am I missing? 

5) Do I need to rebase the DLL to an address as per fipslink.pl? If yes, what would be input linker parameters to fipslink.pl?

Appreciate your input on this.

Thank you.