Re: How to test a build of the FIPS provider
Igor Ustinov <[email protected]> Tue, 20 Jan 2026 22:22:35 +0100
| Newsgroups | gmane.comp.encryption.openssl.user |
|---|---|
| Message-ID | <CACdz_dE84PkmJXi9NVSXNLek1yaw6LGucVqecccD93fQSvSsjQ@mail.gmail.com> |
It is not expected that an application will be linked with a provider directly; instead, link your application with libcrypto and use the provider via its API. On Tue, 20 Jan 2026 at 20:30, Ken Goldman <kgoldman-r/[email protected]> wrote: > I know I can install there, but how does my C application and makefile > point to it. > > E.g., the fips provider is fips.so, not libfips.so, so I cannot simply > link with -lfips. > > On 1/20/2026 3:09 AM, Igor Ustinov wrote: > > You can build OpenSSL to be installed in a separate directory, e.g. > > $HOME/openssl, by calling Configure with parameters --prefix=$HOME/ > > openssl --libdir=lib --openssldir=$HOME/openssl > -Wl,-rpath,$HOME/openssl/lib > > > > On Tue, 20 Jan 2026 at 00:49, Ken Goldman <kgoldman-r/ > > [email protected] <mailto:kgoldman-r/ > > [email protected]>> wrote: > > > > Fedora 42, x86 - I built openssl 3.6.1 with enable-fips and got > fips.so > > > > I'd like to test it locally, as non-root, but not install it in the > > system area. Are there instructions for this? > > > > I want to test the EVP API, not TLS or the command line. > > > > -- > You received this message because you are subscribed to the Google Groups > "openssl-users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org > To view this discussion visit > https://groups.google.com/a/openssl.org/d/msgid/openssl-users/10kol2o%24k77%241%40ciao.gmane.io > . > -- *Igor Ustinov* Senior Software Engineer, OpenSSL Foundation <http://openssl-foundation.org/> Join the Code Protectors <https://openssl-foundation.org/donate/corporate/> | Support us on Github Sponsors <https://github.com/sponsors/openssl> -- You received this message because you are subscribed to the Google Groups "openssl-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CACdz_dE84PkmJXi9NVSXNLek1yaw6LGucVqecccD93fQSvSsjQ%40mail.gmail.com.