Re: How to test a build of the FIPS provider

Igor Ustinov <[email protected]> Tue, 20 Jan 2026 22:22:35 +0100
Newsgroups gmane.comp.encryption.openssl.user
Message-ID <CACdz_dE84PkmJXi9NVSXNLek1yaw6LGucVqecccD93fQSvSsjQ@mail.gmail.com>
It is not expected that an application will be linked with a provider
directly; instead, link your application with libcrypto and use the
provider via its API.

On Tue, 20 Jan 2026 at 20:30, Ken Goldman <kgoldman-r/[email protected]> wrote:

> I know I can install there, but how does my C application and makefile
> point to it.
>
> E.g., the fips provider is fips.so, not libfips.so, so I cannot simply
> link with -lfips.
>
> On 1/20/2026 3:09 AM, Igor Ustinov wrote:
> > You can build OpenSSL to be installed in a separate directory, e.g.
> > $HOME/openssl, by calling Configure with parameters --prefix=$HOME/
> > openssl --libdir=lib --openssldir=$HOME/openssl
> -Wl,-rpath,$HOME/openssl/lib
> >
> > On Tue, 20 Jan 2026 at 00:49, Ken Goldman <kgoldman-r/
> > [email protected] <mailto:kgoldman-r/
> > [email protected]>> wrote:
> >
> >     Fedora 42, x86 - I built openssl 3.6.1 with enable-fips and got
> fips.so
> >
> >     I'd like to test it locally, as non-root, but not install it in the
> >     system area. Are there instructions for this?
> >
> >     I want to test the EVP API, not TLS or the command line.
> >
>
> --
> You received this message because you are subscribed to the Google Groups
> "openssl-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
> To view this discussion visit
> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/10kol2o%24k77%241%40ciao.gmane.io
> .
>


-- 
*Igor Ustinov*
Senior Software Engineer, OpenSSL Foundation
<http://openssl-foundation.org/>

Join the Code Protectors <https://openssl-foundation.org/donate/corporate/>
| Support us on Github Sponsors <https://github.com/sponsors/openssl>

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CACdz_dE84PkmJXi9NVSXNLek1yaw6LGucVqecccD93fQSvSsjQ%40mail.gmail.com.