[openssl-users] undefined reference to `FIPS_mode'

[Steve Marquess]

On 12/21/2015 07:31 AM, Marcos Bontempo wrote:
> Hello,
> 
> I resolved the error after compiling FIPS with ./config fips shared. I
> also needed to export LD_LIBRARY_PATH=/usr/local/ssl/lib:$LD_LIBRARY_PATH. 
> 
> Now I have a new problem.
> 
> I executed this code to set the FIPS mode and no error is prompted:
> 
> result = FIPS_mode_set(1);
> if(result != 1)
> {
> ERR_load_crypto_strings();
> printf("*** Failed to enable FIPS module. ***\n");
> printf("%s\n", ERR_error_string(ERR_get_error(), NULL));
> }
> 
> But when I check the FIPS mode I still get mode 0.
> 
> mode = FIPS_mode();
> if(mode == 0)
> {
> printf("*** FIPS module is disabled. ***\n");
> }
> if(mode == 1)
> {
> printf("*** FIPS module is enabled. ***\n");
> }
> 
> When I execute the code as sudo, I get this error:
> 
> error:0F06D065:common libcrypto routines:FIPS_mode_set:fips mode not
> supported

Your specific platform isn't supported. The OpenSSL FIPS module doesn't
run on as many platforms as OpenSSL proper.

-Steve M.

-- 
Steve Marquess
OpenSSL Software Foundation
1829 Mount Ephraim Road
Adamstown, MD  21710
USA
+1 877 673 6775 s/b
+1 301 874 2571 direct
marquess at openssl.com
gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc