Re: How to test a build of the FIPS provider

Viktor,
The question was how to test "as non-root" and "not install it in the
system area", and no word about "existing application".
We don't know what conditions are most important for Ken, so let him decide.

On Thu, 22 Jan 2026 at 10:23, Viktor Dukhovni <[email protected]>
wrote:

> On Thu, Jan 22, 2026 at 08:10:15AM +0100, Igor Ustinov wrote:
>
> > There are two OpenSSL directories: the build directory where you build
> > OpenSSL, and the install directory where OpenSSL will be installed if
> > you call make install.
> > Viktor and I describe two different approaches:
>
> NO.  I'm answering Ken's question about how to test a candidate FIPS
> provider with an existing application.  You've misunderstood his
> question and are distracting his attention. :-(
>
> > Viktor prefers to link an application directly with the library in the
> > build directory,
>
> No.  I am not suggesting ANY steps to compile a *new* application.  The
> existing application linked against **ANY** OpenSSL 3.x version can be
> tested with **ANY** version of the FIPS provider.  The instructions
> explain how to install a FIPS provider into a suitable test directory
> and test the application.  IF all goes well, later that FIPS provider
> can be installed into a production "ossl-modules" directory used by
> the live application.
>
> > and I prefer to install OpenSSL first and then link an application
> > with the installed library.
>
> Which is a distraction.  Please STOP.
>
> --
>     Viktor.  🇺🇦 Слава Україні!
>
> --
> You received this message because you are subscribed to the Google Groups
> "openssl-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
> To view this discussion visit
> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/aXHsmzOHI73oYNnT%40chardros.imrryr.org
> .
>


-- 
*Igor Ustinov*
Senior Software Engineer, OpenSSL Foundation
<http://openssl-foundation.org/>

Join the Code Protectors <https://openssl-foundation.org/donate/corporate/>
| Support us on Github Sponsors <https://github.com/sponsors/openssl>

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CACdz_dGn6H13JPATM1RBB3GHTLd%2BtdPQWTCw1gEeeJrmQxncHQ%40mail.gmail.com.