| 1 | openssl_conf = openssl_init
|
|---|
| 2 |
|
|---|
| 3 | # Comment out the next line to ignore configuration errors
|
|---|
| 4 | config_diagnostics = 1
|
|---|
| 5 |
|
|---|
| 6 | .include fipsmodule.cnf
|
|---|
| 7 |
|
|---|
| 8 | [openssl_init]
|
|---|
| 9 | providers = provider_sect
|
|---|
| 10 | alg_section = evp_properties
|
|---|
| 11 |
|
|---|
| 12 | [evp_properties]
|
|---|
| 13 | # Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g.
|
|---|
| 14 | # TEST-RAND). This also means that EVP_default_properties_is_fips_enabled()
|
|---|
| 15 | # returns the expected value
|
|---|
| 16 | default_properties = "fips=yes"
|
|---|
| 17 |
|
|---|
| 18 | [provider_sect]
|
|---|
| 19 | fips = fips_sect
|
|---|
