Re: How to test a build of the FIPS provider

On 1/21/2026 2:15 AM, Viktor Dukhovni wrote:
> Providers are generally expected to be loaded via
> the configuration file.  In particular, for the
> FIPS provider you'll need:
> 
>      - A configuration file that requests that the FIPS
>        provider be loaded and used.
> 
>      - A "modules"/ directory containing the "fips.so"
>        shared executable.
> 
>      - A "fipsmodule.cnf" file created by "openssl fipsinstall".
>        This is normally installed by "make install_fips".
> 
>          $ make -n install_fips
>          [...]
>          cp "providers/fips.so" "/usr/local/lib64/ossl-modules/fips.so.new"
>          chmod 755 "/usr/local/lib64/ossl-modules/fips.so.new"
>          mv -f "/usr/local/lib64/ossl-modules/fips.so.new" \
>                 "/usr/local/lib64/ossl-modules/fips.so"
>          cp providers/fipsmodule.cnf "/usr/local/ssl/fipsmodule.cnf"

It's still not finding the fips module. I ran this:

	make install_fips

And uncommented these in openssl.cnf

	.include fipsmodule.cnf
	fips = fips_sect

It feels like I'm missing a step. How does my application (via
configuration files) point to

	lib/ossl-modules/fips.so

I also tried adding

	[evp_properties]
	default_properties = "fips=yes"

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/10lbemj%249tn%241%40ciao.gmane.io.