FIPS and default properties

Matt Caswell matt at openssl.org
Fri Jul 31 09:18:03 UTC 2020



On 31/07/2020 00:12, Thomas Dwyer III wrote:
> Is the result of EVP_default_properties_is_fips_enabled() supposed to
> take into account the default properties specified in the config file? I
> don't see it doing that. Also, regarding #11594, if default properties
> are currently still broken, why do those in the config appear to work
> properly?

EVP_default_is_fips_enabled() is supposed to take into account the
default properties specified in the config file, so it sounds like you
may have encountered a bug. I've raised this issue here:

https://github.com/openssl/openssl/issues/12565

Matt

> 
> And finally the burning question: Any ETA on a fix? :-) :-) :-)
> 
> 
> Thanks,
> Tom.III
> 


More information about the openssl-users mailing list