1 1.1 christos openssl_conf = openssl_init 2 1.1 christos 3 1.1 christos # Comment out the next line to ignore configuration errors 4 1.1 christos config_diagnostics = 1 5 1.1 christos 6 1.1 christos .include fipsmodule.cnf 7 1.1 christos 8 1.1 christos [openssl_init] 9 1.1 christos providers = provider_sect 10 1.1 christos alg_section = evp_properties 11 1.1 christos 12 1.1 christos [evp_properties] 13 1.1 christos # Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g. 14 1.1 christos # TEST-RAND). This also means that EVP_default_properties_is_fips_enabled() 15 1.1 christos # returns the expected value 16 1.1 christos default_properties = "fips=yes" 17 1.1 christos 18 1.1 christos [provider_sect] 19 1.1 christos fips = fips_sect 20