Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.security > #404

Re: configure FIPS for openssl/stunnel in compile or run time?

From Bit Twister <BitTwister@mouse-potato.com>
Newsgroups comp.os.linux.security
Subject Re: configure FIPS for openssl/stunnel in compile or run time?
Date 2013-12-18 12:23 +0000
Organization A noiseless patient Spider
Message-ID <slrnlb34ui.1nb.BitTwister@wb.home.test> (permalink)
References <alpine.DEB.2.10.1312182018130.13496@lyonesse>

Show all headers | View raw


On Wed, 18 Dec 2013 20:18:58 +0800, Zhang Weiwu wrote:
>
> Hello. Recently had a failure running binary distribution of stunnel on 
> OpenSUSE 13.1, error was "FIPS mode not set". I can see 5 possibilities:
>
> 1. FIPS is set before compiling stunnel.
> 2. FIPS is set in run time for stunnel.
> 3. FIPS is set before compiling openssl.
> 4. FIPS is set in run time for openssl.
> 5. FIPS is an OS thing, had to get enterprise edition of SUSE to use it, 
> or getting youself a version of stunnel without it.

Not running Suse, but my solution to the error was adding
fips = no
to /etc/stunnel/stunnel.conf

Back to comp.os.linux.security | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

configure FIPS for openssl/stunnel in compile or run time? Zhang Weiwu <tristan@realss.com> - 2013-12-18 20:18 +0800
  Re: configure FIPS for openssl/stunnel in compile or run time? Bit Twister <BitTwister@mouse-potato.com> - 2013-12-18 12:23 +0000
    Re: configure FIPS for openssl/stunnel in compile or run time? Zhang Weiwu <tristan@realss.com> - 2013-12-19 16:46 +0800

csiph-web