Commit 856650de authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

FIPS mode support for openssl utility: doesn't work properly yet due 

to missing DRBG support in libcrypto.
parent ab1415d2

apps/openssl.c

+16 −0
Original line number Diff line number Diff line
@@ -129,6 +129,9 @@ 
#include "progs.h"

#include "s_apps.h"

#include <openssl/err.h>

#ifdef OPENSSL_FIPS

#include <openssl/fips.h>

#endif



/* The LHASH callbacks ("hash" & "cmp") have been replaced by functions with the

 * base prototypes (we cast each variable inside the function to the required
@@ -310,6 +313,19 @@ int main(int Argc, char *ARGV[]) 
		CRYPTO_set_locking_callback(lock_dbg_cb);

		}



	if(getenv("OPENSSL_FIPS")) {

#ifdef OPENSSL_FIPS

		if (!FIPS_mode_set(1)) {

			ERR_load_crypto_strings();

			ERR_print_errors(BIO_new_fp(stderr,BIO_NOCLOSE));

			EXIT(1);

		}

#else

		fprintf(stderr, "FIPS mode not supported.\n");

		EXIT(1);

#endif

		}



	apps_startup();



	/* Lets load up our environment a little */