<div dir="ltr"><div class="gmail_default" style="font-family:'courier new',monospace;font-size:small;color:rgb(68,68,68)"><br></div><div class="gmail_default" style="font-family:'courier new',monospace;font-size:small;color:rgb(68,68,68)">It's working now, and I pushed the installation makefile and test program on  <a href="https://github.com/kenchowcn/build-openssl-for-FIPS">https://github.com/kenchowcn/build-openssl-for-FIPS</a> , although the UserGuide2.0 is great, I still hope that can help.</div><div class="gmail_default" style="font-family:'courier new',monospace;font-size:small;color:rgb(68,68,68)"><br></div><div class="gmail_default" style="font-family:'courier new',monospace;font-size:small;color:rgb(68,68,68)">Thank you so much Steve.<br></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><a href="http://about.me/kenchowcn" style="margin:0px;padding:0px;border:0px;outline:0px;font-size:14px;font-family:proxima-nova-1,proxima-nova-2,Tahoma,Helvetica,Verdana,sans-serif;vertical-align:baseline;color:rgb(58,169,233);text-decoration:none;line-height:18.200000762939453px" target="_blank"></a><a href="http://about.me/kenchowcn" style="margin:0px;padding:0px;border:0px;outline:0px;vertical-align:baseline;color:rgb(58,169,233);text-decoration:none" target="_blank"><table border="0" cellpadding="0" cellspacing="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;border-spacing:0px"><tbody style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-size:0px;font-family:inherit;vertical-align:baseline;height:30px"> </td></tr><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td align="left" valign="top" style="padding:0px;border:0px;outline:0px;font-style:inherit;font-family:inherit;vertical-align:top;line-height:1"><div style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:bold;font-style:inherit;font-size:18px;font-family:proxima-nova-1,Proxima-Nova,Helvetica,Arial,sans-serif;vertical-align:baseline;line-height:1;color:rgb(51,51,51)">Ken Chow</div><div style="margin:3px 0px 0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-size:12px;font-family:proxima-nova-1,Proxima-Nova,Helvetica,Arial,sans-serif;vertical-align:baseline;color:rgb(43,130,173)">about.me/kenchowcn</div></td></tr><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td align="left" valign="top" style="padding:8px 0px 0px;border:0px;outline:0px;font-style:inherit;font-family:inherit;vertical-align:top;line-height:1"><div style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;text-align:right;height:4px;background-color:rgb(197,208,224)"><img src="http://d13pix9kaak6wt.cloudfront.net/signature/colorbar.png" alt="Ken Chow on about.me" width="88" height="4" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;float:right;display:block"></div></td></tr><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-size:0px;font-family:inherit;vertical-align:baseline;height:20px"> </td></tr></tbody></table></a></div></div></div>
<br><div class="gmail_quote">2016-04-08 19:39 GMT+08:00 Steve Marquess <span dir="ltr"><<a href="mailto:marquess@openssl.com" target="_blank">marquess@openssl.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 04/08/2016 03:31 AM, Ken Chow wrote:<br>
> Dear all,<br>
><br>
> I am trying to compile a sample for testing openssl FIP mode, I have<br>
> successfully compiled executable file in ubuntu 14.04.<br>
><br>
</span>> *Sample:*<br>
<span class="">> /* test.c */<br>
> #include <stdio.h><br>
> #include <openssl/crypto.h><br>
> #include <openssl/err.h><br>
> #include <openssl/fips.h><br>
><br>
> int main()<br>
> {<br>
> #ifdef OPENSSL_FIPS<br>
>     if(!FIPS_mode_set(1))<br>
>     {<br>
>         fprintf(stderr, "MSG: \n");<br>
>         ERR_load_crypto_strings();<br>
>         ERR_print_errors_fp(stderr);<br>
>         exit(1);<br>
>     }<br>
>     else<br>
>         fprintf(stderr,"*** IN FIPS MODE ***\n");<br>
><br>
> #else<br>
>     fprintf(stderr, "NO DEFINE_FIPS !\n");<br>
> #endif<br>
> }<br>
</span>> /<br>
> /<br>
> *The error message I got:*<br>
> /<br>
> /<br>
<span class="">> MSG:<br>
> 140270859593376:error:0F06D065:common libcrypto<br>
> routines:FIPS_mode_set:fips mode not supported:o_fips.c:92:<br>
</span>> ...<br>
<br>
You linked your test program with a stock version of OpenSSL, not the<br>
"FIPS capable" OpenSSL that contains the OpenSSL FIPS Object Module.<br>
<br>
Building of the "FIPS capable" OpenSSL is discussed in the OpenSSL FIPS<br>
User Guide:<br>
<br>
  <a href="https://www.openssl.org/docs/fips/UserGuide-2.0.pdf" rel="noreferrer" target="_blank">https://www.openssl.org/docs/fips/UserGuide-2.0.pdf</a><br>
<br>
-Steve M.<br>
<span class="HOEnZb"><font color="#888888"><br>
<br>
<br>
--<br>
Steve Marquess<br>
OpenSSL Validation Services, Inc.<br>
1829 Mount Ephraim Road<br>
Adamstown, MD  21710<br>
USA<br>
<a href="tel:%2B1%20877%20673%206775" value="+18776736775">+1 877 673 6775</a> s/b<br>
<a href="tel:%2B1%20301%20874%202571" value="+13018742571">+1 301 874 2571</a> direct<br>
<a href="mailto:marquess@openssl.com">marquess@openssl.com</a><br>
gpg/pgp key: <a href="http://openssl.com/docs/0x6D1892F5.asc" rel="noreferrer" target="_blank">http://openssl.com/docs/0x6D1892F5.asc</a><br>
--<br>
openssl-users mailing list<br>
To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-users" rel="noreferrer" target="_blank">https://mta.openssl.org/mailman/listinfo/openssl-users</a><br>
</font></span></blockquote></div><br></div>