mirrors/openssl
0
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-11-23 18:13:39 +08:00
Code Issues Packages Projects Releases Wiki Activity

fips: setup the FIPS provider in pendantic mode for testing

Browse Source 
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)
This commit is contained in:
Pauli 2023-04-18 11:11:17 +10:00 committed by Hugo Landau
parent 4454c20f02
commit c04e78f0c6
2 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
test/recipes/00-prep_fipsmodule_cnf.t
View File

@ -30,7 +30,7 @@ my $fipsmoduleconf = bldtop_file('test', 'fipsmodule.cnf');
plan tests => 1;
# Create the $fipsmoduleconf file
ok(run(app(['openssl', 'fipsinstall',
ok(run(app(['openssl', 'fipsinstall', '-pedantic',
'-module', $fipsmodule, '-provider_name', 'fips',
'-section_name', 'fips_sect', '-out', $fipsmoduleconf])),
"fips install");

9
util/mk-fipsmodule-cnf.pl
View File

@ -8,9 +8,14 @@
use Getopt::Long;
my $activate = 1;
# Module options for pedantic FIPS mode
# self_test_onload happens if install_mac isn't included, don't add it below
my $conditional_errors = 1;
my $security_checks = 1;
my $ems_check = 0;
my $drgb_no_trunc_dgst = 0;
my $activate = 1;
my $mac_key;
my $module_name;
my $section_name = "fips_sect";
@ -40,5 +45,7 @@ print <<_____;
activate = $activate
conditional-errors = $conditional_errors
security-checks = $security_checks
ems_check = $ems_check
drgb_no_trunc_dgst = $drgb_no_trunc_dgst
module-mac = $module_mac
_____