Hi All,
I would like to ask a question about stunnel fips mode. There are lots of
question and answers on the internet related with this, but I could not
find any answer related with mine.
I am compiling with openssl (auto detecting fips) . Here is a part of
confgiure output :
checking for FIPS_mode_set... yes
configure: FIPS mode detected
So I am thinking that fips also is being included.
Then I try to run stunnel on target platform (in stunnel.conf fips=yes)
and it gives below error :
Compiled/running with OpenSSL 0.9.8w-fips 23 Apr 2012
Threading:PTHREAD Sockets:POLL,IPv6 SSL:ENGINE,OCSP,FIPS
Reading configuration from file stunnel.conf
FIPS_mode_set: 2D06906E: error:2D06906E:FIPS
routines:FIPS_CHECK_INCORE_FINGERPRINT:fingerprint does not match
there are lots of information about this errror on internet.
Then when I configure stunnel.conf with fips=no, stunnel is running
successfully.
I know that fips=yes means that enables FIPS 140-2 mode and I guess my fips
canister does not supoort fips 140-2 mode (I do not know which fips mode it
has supported).
Now my question is coming :
When I set fips=no, stunnel also starts with other available fips modes
which the canister included?
Or it skips running fips mode completely?
Plase inform me if anyone has any idea?
Regards
