summaryrefslogtreecommitdiffstats
path: root/test/fips.cnf
diff options
context:
space:
mode:
Diffstat (limited to 'test/fips.cnf')
-rw-r--r--test/fips.cnf7
1 files changed, 7 insertions, 0 deletions
diff --git a/test/fips.cnf b/test/fips.cnf
index d6c3c6be14..fa131a8bf6 100644
--- a/test/fips.cnf
+++ b/test/fips.cnf
@@ -4,6 +4,13 @@ openssl_conf = openssl_init
[openssl_init]
providers = provider_sect
+alg_section = evp_properties
+
+[evp_properties]
+# Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g.
+# TEST-RAND). This also means that EVP_default_properties_is_fips_enabled()
+# returns the expected value
+default_properties = "fips=yes"
[provider_sect]
fips = fips_sect