Lines Matching +full:fips +full:- +full:140 +full:- +full:2
2 * Copyright 2019-2023 The OpenSSL Project Authors. All Rights Reserved.
23 * We're cheating here. Normally we don't allow RUN_ONCE usage inside the FIPS
34 #define FIPS_STATE_RUNNING 2
78 * See FIPS 140-2 IG 9.10
85 * this has side-effect of _WIN32 getting defined, which otherwise is
148 * We force the self-tests to run as part of the FIPS provider initialisation
189 OSSL_PARAM params[2], *p = params; in verify_integrity()
233 /* This API is triggered either on loading of the FIPS module or on demand */
274 || st->module_checksum_data == NULL) { in SELF_TEST_post()
279 ev = OSSL_SELF_TEST_new(st->cb, st->cb_arg); in SELF_TEST_post()
283 module_checksum = OPENSSL_hexstr2buf(st->module_checksum_data, in SELF_TEST_post()
289 bio_module = (*st->bio_new_file_cb)(st->module_filename, "rb"); in SELF_TEST_post()
291 /* Always check the integrity of the fips module */ in SELF_TEST_post()
293 || !verify_integrity(bio_module, st->bio_read_ex_cb, in SELF_TEST_post()
294 module_checksum, checksum_len, st->libctx, in SELF_TEST_post()
300 /* This will be NULL during installation - so the self test KATS will run */ in SELF_TEST_post()
301 if (st->indicator_data != NULL) { in SELF_TEST_post()
303 * If the kats have already passed indicator is set - then check the in SELF_TEST_post()
306 if (st->indicator_checksum_data == NULL) { in SELF_TEST_post()
310 indicator_checksum = OPENSSL_hexstr2buf(st->indicator_checksum_data, in SELF_TEST_post()
318 (*st->bio_new_buffer_cb)(st->indicator_data, in SELF_TEST_post()
319 strlen(st->indicator_data)); in SELF_TEST_post()
321 || !verify_integrity(bio_indicator, st->bio_read_ex_cb, in SELF_TEST_post()
323 st->libctx, ev, in SELF_TEST_post()
338 if (!SELF_TEST_kats(ev, st->libctx)) { in SELF_TEST_post()
350 (*st->bio_free_cb)(bio_indicator); in SELF_TEST_post()
351 (*st->bio_free_cb)(bio_module); in SELF_TEST_post()