[openssl-users] Execute failed when I tried to enable fips_mode.

[Ken Chow]

It's working now, and I pushed the installation makefile and test program
on  https://github.com/kenchowcn/build-openssl-for-FIPS , although the
UserGuide2.0 is great, I still hope that can help.

Thank you so much Steve.

<http://about.me/kenchowcn>


Ken Chow
about.me/kenchowcn
[image: Ken Chow on about.me]
  <http://about.me/kenchowcn>

2016-04-08 19:39 GMT+08:00 Steve Marquess <marquess at openssl.com>:

> On 04/08/2016 03:31 AM, Ken Chow wrote:
> > Dear all,
> >
> > I am trying to compile a sample for testing openssl FIP mode, I have
> > successfully compiled executable file in ubuntu 14.04.
> >
> > *Sample:*
> > /* test.c */
> > #include <stdio.h>
> > #include <openssl/crypto.h>
> > #include <openssl/err.h>
> > #include <openssl/fips.h>
> >
> > int main()
> > {
> > #ifdef OPENSSL_FIPS
> >     if(!FIPS_mode_set(1))
> >     {
> >         fprintf(stderr, "MSG: \n");
> >         ERR_load_crypto_strings();
> >         ERR_print_errors_fp(stderr);
> >         exit(1);
> >     }
> >     else
> >         fprintf(stderr,"*** IN FIPS MODE ***\n");
> >
> > #else
> >     fprintf(stderr, "NO DEFINE_FIPS !\n");
> > #endif
> > }
> > /
> > /
> > *The error message I got:*
> > /
> > /
> > MSG:
> > 140270859593376:error:0F06D065:common libcrypto
> > routines:FIPS_mode_set:fips mode not supported:o_fips.c:92:
> > ...
>
> You linked your test program with a stock version of OpenSSL, not the
> "FIPS capable" OpenSSL that contains the OpenSSL FIPS Object Module.
>
> Building of the "FIPS capable" OpenSSL is discussed in the OpenSSL FIPS
> User Guide:
>
>   https://www.openssl.org/docs/fips/UserGuide-2.0.pdf
>
> -Steve M.
>
>
>
> --
> Steve Marquess
> OpenSSL Validation Services, Inc.
> 1829 Mount Ephraim Road
> Adamstown, MD  21710
> USA
> +1 877 673 6775 s/b
> +1 301 874 2571 direct
> marquess at openssl.com
> gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160409/95f7d063/attachment.html>