Re: How to test a build of the FIPS provider

On 1/22/2026 2:10 AM, Igor Ustinov wrote:
> There are two OpenSSL directories: the build directory where you build 
> OpenSSL, and the install directory where OpenSSL will be installed if 
> you call
> make install.
> Viktor and I describe two different approaches: Viktor prefers to link 
> an application directly with the library in the build directory, and I 
> prefer to install OpenSSL first and then link an application with the 
> installed library. You can choose one of these approaches that you like 
> more.
> If you choose Viktor's way, follow his instructions.
> If you choose my way, set the install directory by Configure with parameters
> --prefix=$MYPATH --libdir=lib --openssldir=$MYPATH -Wl,-rpath,$MYPATH/lib
> (change $MYPATH to the desired install directory path or set MYPATH 
> variables in advance),
> build and install OpenSSL,
> link your application with the installed library by using parameters
> -L$MYPATH/lib -Wl,-rpath=$MYPATH/lib -lcrypto

It seems like there are more steps. At run time, the application has to 
find the fips module.

I suspect that some configuration files must be edited.

     base = OSSL_PROVIDER_load(NULL, "base"); - success
     fips = OSSL_PROVIDER_load(NULL, "fips"); - fails



-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/10lbfke%24r9k%241%40ciao.gmane.io.