| openssl_conf = openssl_init | |
| .include fipsmodule.cnf | |
| [openssl_init] | |
| providers = provider_sect | |
| alg_section = evp_properties | |
| [evp_properties] | |
| # Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g. | |
| # TEST-RAND). This also means that EVP_default_properties_is_fips_enabled() | |
| # returns the expected value | |
| fips_mode = true | |
| [provider_sect] | |
| fips = fips_sect |