xref: /freebsd/crypto/openssl/test/fips-alt.cnf (revision 56b17de1e8360fe131d425de20b5e75ff3ea897c)
1openssl_conf = openssl_init
2
3.include fipsmodule.cnf
4
5[openssl_init]
6providers = provider_sect
7alg_section = evp_properties
8
9[evp_properties]
10# Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g.
11# TEST-RAND). This also means that EVP_default_properties_is_fips_enabled()
12# returns the expected value
13fips_mode = true
14
15[provider_sect]
16fips = fips_sect
17