[openssl-users] OpenSSL FIPS: OPENSSL_config() and self-tests
Dr. Stephen Henson
steve at openssl.org
Wed Feb 3 01:15:42 UTC 2016
On Tue, Feb 02, 2016, security veteran wrote:
> Hi All:
> Based on the OpenSSL FIPS user guide, the FIPS_mode_set API from the
> OpenSSL FIPS modules run a the necessary self-tests.
> I was wondering does the OPENSSL_config() API also run the self-tests?
Short answer: yes.
Longer answer: if you enable FIPS mode in a config file then
OPENSSL_config() will call FIPS_mode_set().
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
More information about the openssl-users