xref: /freebsd/crypto/openssl/test/fips-alt.cnf (revision e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6)
1*e0c4386eSCy Schubertopenssl_conf = openssl_init
2*e0c4386eSCy Schubert
3*e0c4386eSCy Schubert.include fipsmodule.cnf
4*e0c4386eSCy Schubert
5*e0c4386eSCy Schubert[openssl_init]
6*e0c4386eSCy Schubertproviders = provider_sect
7*e0c4386eSCy Schubertalg_section = evp_properties
8*e0c4386eSCy Schubert
9*e0c4386eSCy Schubert[evp_properties]
10*e0c4386eSCy Schubert# Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g.
11*e0c4386eSCy Schubert# TEST-RAND). This also means that EVP_default_properties_is_fips_enabled()
12*e0c4386eSCy Schubert# returns the expected value
13*e0c4386eSCy Schubertfips_mode = true
14*e0c4386eSCy Schubert
15*e0c4386eSCy Schubert[provider_sect]
16*e0c4386eSCy Schubertfips = fips_sect
17