Lines Matching +full:conditional +full:- +full:select

2 {- OpenSSL::safe::output_do_not_edit_headers(); -}
6 openssl-fipsinstall - perform FIPS configuration installation
11 [B<-help>]
12 [B<-in> I<configfilename>]
13 [B<-out> I<configfilename>]
14 [B<-module> I<modulefilename>]
15 [B<-provider_name> I<providername>]
16 [B<-section_name> I<sectionname>]
17 [B<-verify>]
18 [B<-mac_name> I<macname>]
19 [B<-macopt> I<nm>:I<v>]
20 [B<-noout>]
21 [B<-quiet>]
22 [B<-no_conditional_errors>]
23 [B<-no_security_checks>]
24 [B<-self_test_onload>]
25 [B<-corrupt_desc> I<selftest_description>]
26 [B<-corrupt_type> I<selftest_type>]
27 [B<-config> I<parent_config>]
41 =item - A MAC of the FIPS module file.
43 =item - A test status indicator.
47 =item - A MAC of the status indicator.
49 =item - A control for conditional self tests errors.
60 =item - A control to indicate whether run-time security checks are done.
62 This indicates if run-time checks related to enforcement of security parameters
76 =item B<-help>
80 =item B<-module> I<filename>
86 =item B<-out> I<configfilename>
90 =item B<-in> I<configfilename>
93 Must be used if the B<-verify> option is specified.
95 =item B<-verify>
99 =item B<-provider_name> I<providername>
104 =item B<-section_name> I<sectionname>
109 =item B<-mac_name> I<name>
115 C<openssl list -mac-algorithms>.  The default is B<HMAC>.
117 =item B<-macopt> I<nm>:I<v>
149 C<openssl list -digest-commands>.
150 The default digest is SHA-256.
154 =item B<-noout>
158 =item B<-no_conditional_errors>
160 Configure the module to not enter an error state if a conditional self test
163 =item B<-no_security_checks>
165 Configure the module to not perform run-time security checks as described above.
167 =item B<-self_test_onload>
177 =item B<-quiet>
179 Do not output pass/fail messages. Implies B<-noout>.
181 =item B<-corrupt_desc> I<selftest_description>,
182 B<-corrupt_type> I<selftest_type>
186 Either option or both may be used to select the tests to corrupt.
187 Refer to the entries for B<st-desc> and B<st-type> in L<OSSL_PROVIDER-FIPS(7)> for
190 =item B<-config> I<parent_config>
196 All other options are ignored if '-config' is used.
202 Self tests results are logged by default if the options B<-quiet> and B<-noout>
203 are not specified, or if either of the options B<-corrupt_desc> or
204 B<-corrupt_type> are used.
208 test output and the options B<-corrupt_desc> and B<-corrupt_type> will be ignored.
217  openssl fipsinstall -module ./fips.so -out fips.cnf -provider_name fips
221  openssl fipsinstall -module ./fips.so -in fips.cnf  -provider_name fips -verify
225  openssl fipsinstall -module ./fips.so -out fips.cnf -provider_name fips \
226          -corrupt_desc 'SHA1'
231  export OPENSSL_MODULES=<provider-path>
232  openssl fipsinstall -config' 'default.cnf'
239 L<OSSL_PROVIDER-FIPS(7)>,
244 The B<openssl-fipsinstall> application was added in OpenSSL 3.0.
248 Copyright 2019-2021 The OpenSSL Project Authors. All Rights Reserved.