RE: Migration from 1.1.1 to 3.x

You may enable FIPS system wide without writing any special code by using the openssl.conf configuration file.  If you explicitly enable the fips and base providers, and do not enable the default provider, all openssl cryptographic operations are done in FIPS mode.  For example:


.include /path/to/your/fipsmodule.cnf



[openssl_init]

providers = provider_sect

alg_section = algorithm_sect



# List of providers to load

[provider_sect]

# default = default_sect

# The fips section name should match the section name inside the

# included fipsmodule.cnf.

fips = fips_sect

base = base_sect



[base_sect]

activate = 1


From: [email protected] <[email protected]> On Behalf Of Mody, Darshan Arvindkumar (Darshan)
Sent: Monday, June 2, 2025 12:29 AM
To: [email protected]
Subject: Migration from 1.1.1 to 3.x

Hi

We are migrating from 1.1.1 to 3.x openssl. We also need to support FIPs cipher and FIPs mode.

My question is do we need to use the API the OSSL_PROVIDER_load. If we directly EVP_default_properties_enable_fips what are the implications.

Thanks and Regards
Darshan


--
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org<mailto:openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org>.
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/PH0PR15MB4526934B9B0CE1696B7785EEA762A%40PH0PR15MB4526.namprd15.prod.outlook.com<https://groups.google.com/a/openssl.org/d/msgid/openssl-users/PH0PR15MB4526934B9B0CE1696B7785EEA762A%40PH0PR15MB4526.namprd15.prod.outlook.com?utm_medium=email&utm_source=footer>.

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/MW4PR09MB9284F0FEC54185B2D5C8E194EE62A%40MW4PR09MB9284.namprd09.prod.outlook.com.