[thirdparty/openssl.git] / test / fips.cnf

openssl_conf = openssl_init

.include fipsmodule.cnf

[openssl_init]
providers = provider_sect
alg_section = evp_properties

[evp_properties]
# Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g.
# TEST-RAND). This also means that EVP_default_properties_is_fips_enabled()
# returns the expected value
default_properties = "fips=yes"

[provider_sect]
fips = fips_sect
Commit	Line	Data
e2f72313 RL	1	openssl_conf = openssl_init
e2f72313 RL	2
1cd2c1f8	3	.include fipsmodule.cnf
7bb82f92	4
e2f72313 RL	5	[openssl_init]
e2f72313 RL	6	providers = provider_sect
bfa6aaab MC	7	alg_section = evp_properties
	8
	9	[evp_properties]
	10	# Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g.
	11	# TEST-RAND). This also means that EVP_default_properties_is_fips_enabled()
	12	# returns the expected value
	13	default_properties = "fips=yes"
e2f72313 RL	14
	15	[provider_sect]
	16	fips = fips_sect