Lines Matching +full:de +full:- +full:activated
18 .\" Set up some character translations and predefined strings. \*(-- will
24 .tr \(*W-
27 . ds -- \(*W-
29 . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
30 . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
37 . ds -- \|\(em\|
61 . de IX
71 .\" Fear. Run. Save yourself. No user-serviceable parts.
81 . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
97 . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
98 . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
99 . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
100 . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
101 . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
102 . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
104 . \" troff and (daisy-wheel) nroff accents
123 . ds d- d\h'-1'\(ga
124 . ds D- D\h'-1'\(hy
133 .IX Title "OPENSSL-FIPSINSTALL 1ossl"
134 .TH OPENSSL-FIPSINSTALL 1ossl "2023-09-22" "3.0.11" "OpenSSL"
140 openssl\-fipsinstall \- perform FIPS configuration installation
144 [\fB\-help\fR]
145 [\fB\-in\fR \fIconfigfilename\fR]
146 [\fB\-out\fR \fIconfigfilename\fR]
147 [\fB\-module\fR \fImodulefilename\fR]
148 [\fB\-provider_name\fR \fIprovidername\fR]
149 [\fB\-section_name\fR \fIsectionname\fR]
150 [\fB\-verify\fR]
151 [\fB\-mac_name\fR \fImacname\fR]
152 [\fB\-macopt\fR \fInm\fR:\fIv\fR]
153 [\fB\-noout\fR]
154 [\fB\-quiet\fR]
155 [\fB\-no_conditional_errors\fR]
156 [\fB\-no_security_checks\fR]
157 [\fB\-self_test_onload\fR]
158 [\fB\-corrupt_desc\fR \fIselftest_description\fR]
159 [\fB\-corrupt_type\fR \fIselftest_type\fR]
160 [\fB\-config\fR \fIparent_config\fR]
163 This command is used to generate a \s-1FIPS\s0 module configuration file.
164 This configuration file can be used each time a \s-1FIPS\s0 module is loaded
165 in order to pass data to the \s-1FIPS\s0 module self tests. The \s-1FIPS\s0 module always
166 verifies its \s-1MAC,\s0 but optionally only needs to run the \s-1KAT\s0's once,
170 .IP "\- A \s-1MAC\s0 of the \s-1FIPS\s0 module file." 4
171 .IX Item "- A MAC of the FIPS module file."
173 .IP "\- A test status indicator." 4
174 .IX Item "- A test status indicator."
176 This indicates if the Known Answer Self Tests (\s-1KAT\s0's) have successfully run.
177 .IP "\- A \s-1MAC\s0 of the status indicator." 4
178 .IX Item "- A MAC of the status indicator."
180 .IP "\- A control for conditional self tests errors." 4
181 .IX Item "- A control for conditional self tests errors."
183 By default if a continuous test (e.g a key pair test) fails then the \s-1FIPS\s0 module
191 .IP "\- A control to indicate whether run-time security checks are done." 4
192 .IX Item "- A control to indicate whether run-time security checks are done."
193 This indicates if run-time checks related to enforcement of security parameters
196 If the value is '0' the checks are not performed and \s-1FIPS\s0 compliance must
202 .IP "\fB\-help\fR" 4
203 .IX Item "-help"
205 .IP "\fB\-module\fR \fIfilename\fR" 4
206 .IX Item "-module filename"
207 Filename of the \s-1FIPS\s0 module to perform an integrity check on.
209 activated, and this overrides the environment variable \fB\s-1OPENSSL_MODULES\s0\fR.
210 .IP "\fB\-out\fR \fIconfigfilename\fR" 4
211 .IX Item "-out configfilename"
213 .IP "\fB\-in\fR \fIconfigfilename\fR" 4
214 .IX Item "-in configfilename"
216 Must be used if the \fB\-verify\fR option is specified.
217 .IP "\fB\-verify\fR" 4
218 .IX Item "-verify"
220 .IP "\fB\-provider_name\fR \fIprovidername\fR" 4
221 .IX Item "-provider_name providername"
224 .IP "\fB\-section_name\fR \fIsectionname\fR" 4
225 .IX Item "-section_name sectionname"
228 .IP "\fB\-mac_name\fR \fIname\fR" 4
229 .IX Item "-mac_name name"
230 Specifies the name of a supported \s-1MAC\s0 algorithm which will be used.
231 The \s-1MAC\s0 mechanisms that are available will depend on the options
233 To see the list of supported \s-1MAC\s0's use the command
234 \&\f(CW\*(C`openssl list \-mac\-algorithms\*(C'\fR. The default is \fB\s-1HMAC\s0\fR.
235 .IP "\fB\-macopt\fR \fInm\fR:\fIv\fR" 4
236 .IX Item "-macopt nm:v"
237 Passes options to the \s-1MAC\s0 algorithm.
238 A comprehensive list of controls can be found in the \s-1EVP_MAC\s0 implementation
244 Specifies the \s-1MAC\s0 key as an alphanumeric string (use if the key contains
246 The string length must conform to any restrictions of the \s-1MAC\s0 algorithm.
247 A key must be specified for every \s-1MAC\s0 algorithm.
252 Specifies the \s-1MAC\s0 key in hexadecimal form (two hex digits per byte).
253 The key length must conform to any restrictions of the \s-1MAC\s0 algorithm.
254 A key must be specified for every \s-1MAC\s0 algorithm.
259 Used by \s-1HMAC\s0 as an alphanumeric string (use if the key contains printable
261 The string length must conform to any restrictions of the \s-1MAC\s0 algorithm.
263 \&\f(CW\*(C`openssl list \-digest\-commands\*(C'\fR.
264 The default digest is \s-1SHA\-256.\s0
268 .IP "\fB\-noout\fR" 4
269 .IX Item "-noout"
271 .IP "\fB\-no_conditional_errors\fR" 4
272 .IX Item "-no_conditional_errors"
275 .IP "\fB\-no_security_checks\fR" 4
276 .IX Item "-no_security_checks"
277 Configure the module to not perform run-time security checks as described above.
278 .IP "\fB\-self_test_onload\fR" 4
279 .IX Item "-self_test_onload"
281 \&\*(L"\s-1MAC\s0 status indicator\*(R" to the output configuration file. Without these fields
282 the self tests \s-1KATS\s0 will run each time the module is loaded. This option could be
287 .IP "\fB\-quiet\fR" 4
288 .IX Item "-quiet"
289 Do not output pass/fail messages. Implies \fB\-noout\fR.
290 .IP "\fB\-corrupt_desc\fR \fIselftest_description\fR, \fB\-corrupt_type\fR \fIselftest_type\fR" 4
291 .IX Item "-corrupt_desc selftest_description, -corrupt_type selftest_type"
295 Refer to the entries for \fBst-desc\fR and \fBst-type\fR in \s-1\fBOSSL_PROVIDER\-FIPS\s0\fR\|(7) f…
297 .IP "\fB\-config\fR \fIparent_config\fR" 4
298 .IX Item "-config parent_config"
299 Test that a \s-1FIPS\s0 provider can be loaded from the specified configuration file.
303 All other options are ignored if '\-config' is used.
306 Self tests results are logged by default if the options \fB\-quiet\fR and \fB\-noout\fR
307 are not specified, or if either of the options \fB\-corrupt_desc\fR or
308 \&\fB\-corrupt_type\fR are used.
310 fips module will be loaded and self tested \s-1BEFORE\s0 the fipsinstall application
312 test output and the options \fB\-corrupt_desc\fR and \fB\-corrupt_type\fR will be ignored.
317 Calculate the mac of a \s-1FIPS\s0 module \fIfips.so\fR and run a \s-1FIPS\s0 self test
321 \& openssl fipsinstall \-module ./fips.so \-out fips.cnf \-provider_name fips
327 \& openssl fipsinstall \-module ./fips.so \-in fips.cnf \-provider_name fips \-verify
333 \& openssl fipsinstall \-module ./fips.so \-out fips.cnf \-provider_name fips \e
334 \& \-corrupt_desc \*(AqSHA1\*(Aq
341 \& export OPENSSL_MODULES=<provider\-path>
342 \& openssl fipsinstall \-config\*(Aq \*(Aqdefault.cnf\*(Aq
348 \&\s-1\fBOSSL_PROVIDER\-FIPS\s0\fR\|(7),
349 \&\s-1\fBEVP_MAC\s0\fR\|(3)
352 Copyright 2019\-2021 The OpenSSL Project Authors. All Rights Reserved.
356 in the file \s-1LICENSE\s0 in the source distribution or at