Subject: When using OpenSSL 1.0.2d with FIPS module 2.0.10, call to _libssh2_cipher_crypt doesn't encrypt

When using OpenSSL 1.0.2d with FIPS module 2.0.10, call to _libssh2_cipher_crypt doesn't encrypt

From: Eugene Kaminsky <nothing551_at_yahoo.com>
Date: Wed, 30 Sep 2015 17:05:32 +0000 (UTC)

I need to upgrade our OpenSSL library and use the latest FIPs module provided. After a call to FIPS_mode_set() and a successful key exchange, the client closes the connection. I've tracked it down to the EVP_Cipher call in _libss2_cipher_crypt not returning an encrypted packet. My basic question is, is LIBSSH2 v1.6.0 supported for the latest version of OpenSSL with FIPS

If needed a section of the debug output, as can be seen the, the packet data after send() as is before

SSH Debug:[libssh2] 13.914161 Transport: Requesting userauth service
SSH Debug:=> libssh2_transport_write plain (17 bytes)
SSH Debug:0000: 05 00 00 00 0C 73 73 68  2D 75 73 65 72 61 75 74 : .....ssh-useraut
SSH Debug:0010: 68                                               : h
SSH Debug:[libssh2] 13.914161 Socket: Sent 132/132 bytes at 0C82C1BC
SSH Debug:=> libssh2_transport_write send() (132 bytes)
SSH Debug:0000: 00 00 00 6C 5A 05 00 00  00 0C 73 73 68 2D 75 73 : ...lZ.....ssh-us
SSH Debug:0010: 65 72 61 75 74 68 FF 1C  93 A8 0C C6 EC AC E8 87 : erauth..........
SSH Debug:0020: A9 C5 FE C8 FA 55 6B 5B  97 40 D8 6D A3 37 F9 16 : .....Uk[.@.m.7..
SSH Debug:0030: F9 B1 82 21 2E 65 45 2C  19 FB 25 BB 28 FE 67 E7 : ...!.eE,..%.(.g.
SSH Debug:0040: 32 8D CF A0 E1 1F 9F 37  CF 26 DD F2 11 A9 6F C1 : 2......7.&....o.
SSH Debug:0050: D1 EB 01 61 C5 5B 06 2F  96 33 89 C9 FA 77 C2 C2 : ...a.[./.3...w..
SSH Debug:0060: CE 80 8D F9 87 0F 77 1E  03 D5 DF 29 D0 15 95 F7 : ......w....)....

_______________________________________________
libssh2-devel http://cool.haxx.se/cgi-bin/mailman/listinfo/libssh2-devel
Received on 2015-09-30