Custom OpenSSL

Tomasz Kurzawa <[email protected]> Tue, 6 Aug 2024 13:02:55 -0400
Newsgroups dev.linux.lists.cryptsetup
Message-ID <CABYE94Hx36XOAzqtjpcKdT4S4YyBoCiXVdVXo2bCu02JguBgEA@mail.gmail.com>
Hi All,

I am currently working on building Cryptsetup with the --enable-fips
option and integrating it with my custom OpenSSL build, rather than
the default OpenSSL provided by the operating system. Despite my
efforts, the debug messages indicate that the system’s OpenSSL version
is still being used.

Here is the command I used for the build (custom OpenSSL is installed
in /usr/local):

LIBCRYPTO_LIBS="/usr/local/lib64" LDFLAGS="-Wl,-rpath,/usr/local/lib64
-L/usr/local/lib64" CPPFLAGS="-I/usr/local/include" LIBS="-lcrypto
-lssl" ./configure --enable-fips
make

I would greatly appreciate any guidance or suggestions on how to
successfully configure Cryptsetup to utilize my custom OpenSSL in FIPS
mode.

Thank you in advance for your help.