Not able to perform FIPS self-tests

2022-02-07 Thread Gahlot, Ashish Kumar
Hello All, I'm trying to execute self-tests that FIPS runs after installation manually by calling the APIs. I'm using code from https://github.com/openssl/openssl/blob/7cce994d3e57345ba729388b9321d9bf8b661b4f/providers/fips/self_test_kats.c but I'm getting NULL when I'm trying to fetch the encr

RE: [EXTERNAL] Re: Not able to perform FIPS self-tests

2022-02-10 Thread Gahlot, Ashish Kumar
[EXTERNAL] Re: Not able to perform FIPS self-tests Have you considered using the provided for this: OSSL_PROVIDER_self_test()? https://www.openssl.org/docs/man3.0/man3/OSSL_PROVIDER.html<https://clicktime.symantec.com/3MLQWE4xgv1bwQFXJyvrWt87GS?u=https%3A%2F%2Fwww.openssl.org%2Fdocs%2Fman3.0%2Fman3

Getting FIPS Provider Context

2022-03-09 Thread Gahlot, Ashish Kumar
Hi, I'm trying to enable FIPS using the configuration file. So instead of explicitly calling the LOAD APIs I'm able doing by adding these line in the openssl cnf file: openssl_conf = openssl_init .include /usr/local/ssl/fipsmodule.cnf [openssl_init] providers = provider_sect [provider_sect] f

Unable to load Legacy Provider

2022-04-22 Thread Gahlot, Ashish Kumar
Hi, I'm trying to load the Legacy Provider by following this guide here https://wiki.openssl.org/index.php/OpenSSL_3.0 using this following code: /* Load Multiple providers into the default (NULL) library context */ legacy = OSSL_PROVIDER_load(NULL, "legacy"); if (legacy == NULL) {

libproviders.so file not found

2022-10-19 Thread Gahlot, Ashish Kumar
Hi everyone, I'm trying to enable fips provider in openssl3 by writing the following lines into openssl.cnf file: openssl_conf = openssl_init .include fipsmodule.cnf [openssl_init] providers = provider_sect [provider_sect] fips = fips_sect base = base_sect [base_sect] activate = 1 Now when