[openssl-users] OpenSSL FIPS: OPENSSL_config() and self-tests

[Dr. Stephen Henson]

On Tue, Feb 02, 2016, security veteran wrote:

> Hi All:
> 
> Based on the OpenSSL FIPS user guide, the FIPS_mode_set API from the
> OpenSSL FIPS modules run a the necessary self-tests.
> 
> I was wondering does the OPENSSL_config() API also run the self-tests?
> 

Short answer: yes.

Longer answer: if you enable FIPS mode in a config file then
OPENSSL_config() will call FIPS_mode_set().

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org