From d1a770414acd34c774248ce8efbe202fd7a44041 Mon Sep 17 00:00:00 2001 From: Pauli Date: Fri, 30 Apr 2021 12:14:33 +1000 Subject: acvp-test: disable the ACVP testing code by default It's only useful for the FIPS lab and shouldn't be in production. Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/15092) --- Configure | 1 + INSTALL.md | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/Configure b/Configure index 7acbbc56b9..dc0b1924b7 100755 --- a/Configure +++ b/Configure @@ -513,6 +513,7 @@ my %deprecated_disablables = ( our %disabled = ( # "what" => "comment" "fips" => "default", + "acvp-tests" => "default", "asan" => "default", "buildtest-c++" => "default", "crypto-mdebug" => "default", diff --git a/INSTALL.md b/INSTALL.md index 9414556427..f89e1aed53 100644 --- a/INSTALL.md +++ b/INSTALL.md @@ -521,9 +521,9 @@ never be used in production environments. It will only work when used with gcc or clang and should be used in conjunction with the [no-shared](#no-shared) option. -### no-acvp-tests +### enable-acvp-tests -Do not build support for Automated Cryptographic Validation Protocol (ACVP) +Build support for Automated Cryptographic Validation Protocol (ACVP) tests. This is required for FIPS validation purposes. Certain ACVP tests require -- cgit v1.2.3