Revision fac61ea4618c83826b51aebf03cbc2bc3ac7b8c8 authored by Tomas Mraz on 23 October 2023, 12:26:32 UTC, committed by Matt Caswell on 23 October 2023, 12:45:09 UTC
Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22472)
1 parent bde5411
fips.cnf
openssl_conf = openssl_init
# Comment out the next line to ignore configuration errors
config_diagnostics = 1
.include fipsmodule.cnf
[openssl_init]
providers = provider_sect
alg_section = evp_properties
[evp_properties]
# Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g.
# TEST-RAND). This also means that EVP_default_properties_is_fips_enabled()
# returns the expected value
default_properties = "fips=yes"
[provider_sect]
fips = fips_sect

Computing file changes ...