On Mon, Jan 28, 2013 at 7:18 AM, Rahul Godbole <rahulmg1...@gmail.com> wrote:
>
> When I call the function FIPS_mode_set() from my code, the function returns
> 0. It returns 0 because the flag OPENSSL_FIPS is not set during compilation.
> What option should I pass to the Configure or config script so that it gets
> set during compilation?
>
> I need FIPS_mode_set() to perform necessary KAT tests and return 1 for my
> work.
So, how did you build the FIPS Object Module, and how did you build
the FIPS Capable Library? And did you run incore to embed the FIPS
fingerprint on the resulting binary executable?
You don't really have a choice fro the FIPS Object Module; but the
FIPS Capable Library needs the following as minimum:
./config fips <other config options>
If the FIPS Object Module and the FIPS Capable Library are both built
and installed correctly, I would suspect incore is not being run.
All of this is covered in detail for multiple platforms (from Linux to
Windows to Android to iOS) at
http://www.openssl.org/docs/fips/UserGuide-2.0.pdf.
Jeff
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
