Summary

Orbacus FSSL for C hello demo failed when loading openssl.

Environment

Orbacus FSSL for C 4.3.5
OpenSSL 1.0.2j
All Operating Systems

Clarifying Information

When the hello demo starts, it tries to create the Context with the certificate chain, key, password and ciphers but fails when enabling OpenSSL EC automatic curve selection support.

Error Message

Error calling SSL_CTX_set_ecdh_auto()

Throwing CORBA::INITIALZE()

Cause

This issue is caused when an older/non-certified version of OpenSSL is loaded by the FSSL server/client. Normally this happens, if this old/non-certified version is in front of the correct openssl version(which should 1.0.2j) in the PATH environment variable.

In this particular case, OpenSSL 1.0.1 version was in the PATH before the required OpenSSL 1.0.2j and due to that reason, OpenSSL EC automatic curve selection could not be enabled.

Resolution

After adding the required OpenSSL 1.0.2j's bin folder in front of the PATH variable, the hello demo was able to enable OpenSSL EC automatic curve selection and it worked fine with the client.