From: Pauli <pauli@openssl.org>
Date: Sun, 22 Jan 2023 22:52:17 +0000 (+1100)
Subject: test: note that a default property query must be included for FIPS validity
X-Git-Tag: openssl-3.2.0-alpha1~1401
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d8523bf16205399363604c8fc90256791ad8c019;p=thirdparty%2Fopenssl.git

test: note that a default property query must be included for FIPS validity

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20079)
---

diff --git a/test/fips-and-base.cnf b/test/fips-and-base.cnf
index 494e96a87ef..f233f830623 100644
--- a/test/fips-and-base.cnf
+++ b/test/fips-and-base.cnf
@@ -7,6 +7,12 @@ config_diagnostics = 1
 
 [openssl_init]
 providers = provider_sect
+# You MUST uncomment the following line to operate in a FIPS approved manner,
+# It is commented out here purely for testing purposes.
+#alg_section = evp_properties
+
+[evp_properties]
+default_properties = "fips=yes"
 
 [provider_sect]
 fips = fips_sect