[openssl-users] OpenSSL FIPS: OPENSSL_config() and self-tests

Dr. Stephen Henson steve at openssl.org
Wed Feb 3 01:15:42 UTC 2016

On Tue, Feb 02, 2016, security veteran wrote:

> Hi All:
> Based on the OpenSSL FIPS user guide, the FIPS_mode_set API from the
> OpenSSL FIPS modules run a the necessary self-tests.
> I was wondering does the OPENSSL_config() API also run the self-tests?

Short answer: yes.

Longer answer: if you enable FIPS mode in a config file then
OPENSSL_config() will call FIPS_mode_set().

Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

More information about the openssl-users mailing list