]> git.ipfire.org Git - thirdparty/openssl.git/commit
Clarify and expand FIPS deferred tests design
authorSimo Sorce <simo@redhat.com>
Wed, 12 Nov 2025 20:56:06 +0000 (15:56 -0500)
committerPauli <paul.dale@oracle.com>
Tue, 25 Nov 2025 21:50:25 +0000 (08:50 +1100)
commit7962a7ec98e47bb529f8fe0c66f8d8bf53380011
tree6928c2b57dd59030ed9d836de0dbb0ca6795c972
parent35396be7abac129afdffa6f46c105d79423d7a89
Clarify and expand FIPS deferred tests design

Add a new "Examples" section to the design document to illustrate the intended
behavior of the self-test mechanism. These examples cover simple tests,
composite algorithms, and the specific semantics of the `also_satisfies` and
`depends_on` lists.

This change also clarifies several key points:
- The `also_satisfies` list is not processed recursively, while `depends_on`
is.
- The entire FIPS module will enter a failure state if any individual self-
test fails.

Finally, the document is updated with various grammatical fixes and improved
wording for better readability.

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29004)
doc/designs/fips_deferred_tests.md