It's working now, and I pushed the installation makefile and test program on https://github.com/kenchowcn/build-openssl-for-FIPS , although the UserGuide2.0 is great, I still hope that can help. Thank you so much Steve. <http://about.me/kenchowcn> Ken Chow about.me/kenchowcn [image: Ken Chow on about.me] <http://about.me/kenchowcn> 2016-04-08 19:39 GMT+08:00 Steve Marquess <marquess at openssl.com>: > On 04/08/2016 03:31 AM, Ken Chow wrote: > > Dear all, > > > > I am trying to compile a sample for testing openssl FIP mode, I have > > successfully compiled executable file in ubuntu 14.04. > > > > *Sample:* > > /* test.c */ > > #include <stdio.h> > > #include <openssl/crypto.h> > > #include <openssl/err.h> > > #include <openssl/fips.h> > > > > int main() > > { > > #ifdef OPENSSL_FIPS > > if(!FIPS_mode_set(1)) > > { > > fprintf(stderr, "MSG: \n"); > > ERR_load_crypto_strings(); > > ERR_print_errors_fp(stderr); > > exit(1); > > } > > else > > fprintf(stderr,"*** IN FIPS MODE ***\n"); > > > > #else > > fprintf(stderr, "NO DEFINE_FIPS !\n"); > > #endif > > } > > / > > / > > *The error message I got:* > > / > > / > > MSG: > > 140270859593376:error:0F06D065:common libcrypto > > routines:FIPS_mode_set:fips mode not supported:o_fips.c:92: > > ... > > You linked your test program with a stock version of OpenSSL, not the > "FIPS capable" OpenSSL that contains the OpenSSL FIPS Object Module. > > Building of the "FIPS capable" OpenSSL is discussed in the OpenSSL FIPS > User Guide: > > https://www.openssl.org/docs/fips/UserGuide-2.0.pdf > > -Steve M. > > > > -- > Steve Marquess > OpenSSL Validation Services, Inc. > 1829 Mount Ephraim Road > Adamstown, MD 21710 > USA > +1 877 673 6775 s/b > +1 301 874 2571 direct > marquess at openssl.com > gpg/pgp key: http://openssl.com/docs/0x6D1892F5.asc > -- > openssl-users mailing list > To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160409/95f7d063/attachment.html>
