From: Pauli <pauli@openssl.org>
Date: Fri, 30 Apr 2021 02:14:33 +0000 (+1000)
Subject: acvp-test: disable the ACVP testing code by default
X-Git-Tag: openssl-3.0.0-alpha16~58
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d1a770414acd34c774248ce8efbe202fd7a44041;p=thirdparty%2Fopenssl.git

acvp-test: disable the ACVP testing code by default

It's only useful for the FIPS lab and shouldn't be in production.

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/15092)
---

diff --git a/Configure b/Configure
index 7acbbc56b94..dc0b1924b76 100755
--- a/Configure
+++ b/Configure
@@ -513,6 +513,7 @@ my %deprecated_disablables = (
 
 our %disabled = ( # "what"         => "comment"
                   "fips"                => "default",
+                  "acvp-tests"          => "default",
                   "asan"                => "default",
                   "buildtest-c++"       => "default",
                   "crypto-mdebug"       => "default",
diff --git a/INSTALL.md b/INSTALL.md
index 9414556427b..f89e1aed53d 100644
--- a/INSTALL.md
+++ b/INSTALL.md
@@ -521,9 +521,9 @@ never be used in production environments.  It will only work when used with
 gcc or clang and should be used in conjunction with the [no-shared](#no-shared)
 option.
 
-### no-acvp-tests
+### enable-acvp-tests
 
-Do not build support for Automated Cryptographic Validation Protocol (ACVP)
+Build support for Automated Cryptographic Validation Protocol (ACVP)
 tests.
 
 This is required for FIPS validation purposes. Certain ACVP tests require