[thirdparty/openssl.git] / test / fips.cnf

openssl_conf = openssl_init

# Comment out the next line to ignore configuration errors
config_diagnostics = 1

.include fipsmodule.cnf

[openssl_init]
providers = provider_sect
alg_section = evp_properties

[evp_properties]
# Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g.
# TEST-RAND). This also means that EVP_default_properties_is_fips_enabled()
# returns the expected value
default_properties = "fips=yes"

[provider_sect]
fips = fips_sect
Commit	Line	Data
e2f72313 RL	1	openssl_conf = openssl_init
e2f72313 RL	2
92c03668 P	3	# Comment out the next line to ignore configuration errors
	4	config_diagnostics = 1
	5
1cd2c1f8	6	.include fipsmodule.cnf
7bb82f92	7
e2f72313 RL	8	[openssl_init]
e2f72313 RL	9	providers = provider_sect
bfa6aaab MC	10	alg_section = evp_properties
	11
	12	[evp_properties]
	13	# Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g.
	14	# TEST-RAND). This also means that EVP_default_properties_is_fips_enabled()
	15	# returns the expected value
	16	default_properties = "fips=yes"
e2f72313 RL	17
	18	[provider_sect]
	19	fips = fips_sect