diff options
| author | Pauli <pauli@openssl.org> | 2023-07-05 19:02:02 +1000 |
|---|---|---|
| committer | Pauli <pauli@openssl.org> | 2023-07-09 16:27:22 +1000 |
| commit | dc6f3b9b8d6e54ea7d8669a158fd73b451862c7d (patch) | |
| tree | d8002ea030ddb52c33a2211f6f388ca730ff1219 | |
| parent | 0345cac6d29da328739e8b06b02260b63d4a91e9 (diff) | |
fips: make installations FIPS compliant by default
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/21363)
| -rw-r--r-- | util/mk-fipsmodule-cnf.pl | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/util/mk-fipsmodule-cnf.pl b/util/mk-fipsmodule-cnf.pl index e55ce180b7..a186714064 100644 --- a/util/mk-fipsmodule-cnf.pl +++ b/util/mk-fipsmodule-cnf.pl @@ -12,8 +12,8 @@ use Getopt::Long; # self_test_onload happens if install_mac isn't included, don't add it below my $conditional_errors = 1; my $security_checks = 1; -my $ems_check = 0; -my $drgb_no_trunc_dgst = 0; +my $ems_check = 1; +my $drgb_no_trunc_dgst = 1; my $activate = 1; my $mac_key; |