openssl_conf = openssl_init | |
.include fipsmodule.cnf | |
[openssl_init] | |
providers = provider_sect | |
alg_section = evp_properties | |
[evp_properties] | |
# Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g. | |
# TEST-RAND). This also means that EVP_default_properties_is_fips_enabled() | |
# returns the expected value | |
fips_mode = true | |
[provider_sect] | |
fips = fips_sect |