Re: How to test a build of the FIPS provider

These instructions include "install" steps. I don't want to
install.  I want to test as non-root in a non-system area.

On 1/21/2026 2:15 AM, Viktor Dukhovni wrote:
> On Tue, Jan 20, 2026 at 05:26:12PM -0500, Ken Goldman wrote:
> 
>> Could you describe "its API".
> 
> Apologies for the poor advice you've seen so far...
> 
> Trying to make amends:
> 
> Providers are generally expected to be loaded via
> the configuration file.  In particular, for the
> FIPS provider you'll need:
> 
>      - A configuration file that requests that the FIPS
>        provider be loaded and used.
> 
>      - A "modules"/ directory containing the "fips.so"
>        shared executable.
> 
>      - A "fipsmodule.cnf" file created by "openssl fipsinstall".
>        This is normally installed by "make install_fips".
> 
>          $ make -n install_fips
>          [...]
>          cp "providers/fips.so" "/usr/local/lib64/ossl-modules/fips.so.new"
>          chmod 755 "/usr/local/lib64/ossl-modules/fips.so.new"
>          mv -f "/usr/local/lib64/ossl-modules/fips.so.new" \
>                 "/usr/local/lib64/ossl-modules/fips.so"
>          cp providers/fipsmodule.cnf "/usr/local/ssl/fipsmodule.cnf"
> 
> As a base config example, look at "test/fips-and-base.cnf"
> (the base64 cruft in the demo script is a condensed version).
> 
> Demo script below my signature.  At the bottom of that script
> you can add any additional tests of your choice.
> 


-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/10l8m1s%24lvr%242%40ciao.gmane.io.