Home
last modified time | relevance | path

Searched refs:fips (Results 1 – 25 of 58) sorted by relevance

123

/freebsd-14.2/crypto/openssl/test/recipes/30-test_evp_data/
H A Devppkey_ecdsa.txt170 # Test that a nist curve with SHA3 is allowed in fips mode
185 # Test that a explicit curve is not allowed in fips mode
186 Availablein = fips
194 Availablein = fips
201 # Test that a non nist curve is not allowed in fips mode
202 Availablein = fips
209 # Test that SHA1 is not allowed in fips mode for signing
210 Availablein = fips
217 # Test that SHA1 is not allowed in fips mode for signing
218 Availablein = fips
[all …]
H A Devppkey_dsa.txt272 Availablein = fips
299 # Test sign with a 2048 bit SHA3 is allowed in fips mode
305 # Test verify with a 1024 bit key is allowed in fips mode
311 # Test verify with SHA1 is allowed in fips mode
326 # Test sign with a 1024 bit key is not allowed in fips mode
327 Availablein = fips
335 # Test sign with SHA1 is not allowed in fips mode
336 Availablein = fips
344 Availablein = fips
352 # Test sign with a 4096 bit key is not allowed in fips mode
[all …]
H A Devppkey_rsa_common.txt1333 # Verifying with SHA1 is permitted in fips mode for older applications
1339 # Verifying with a 1024 bit key is permitted in fips mode for older applications
1345 # Signing with SHA1 is not allowed in fips mode
1346 Availablein = fips
1354 # Signing with a 1024 bit key is not allowed in fips mode
1355 Availablein = fips
1362 # Verifying with a legacy digest in fips mode is not allowed
1363 Availablein = fips
1370 # Verifying with a key smaller than 1024 bits in fips mode is not allowed
1371 Availablein = fips
/freebsd-14.2/crypto/openssl/
H A DREADME-FIPS.md27 resp. `fips.dll` (on Windows). The FIPS provider does not get built and
29 the `enable-fips` option.
58 $ make install_fips # for `enable-fips` only
66 /usr/local/lib/ossl-modules/fips.so on Unix, and
67 C:\Program Files\OpenSSL\lib\ossl-modules\fips.dll on Windows.
103 $ ./Configure enable-fips
115 $ ./Configure enable-fips
125 $ cp ../openssl-3.0.0/providers/fips.so providers/.
134 -provider fips -providers
149 -provider fips -providers
[all …]
H A DFREEBSD-upgrade115 17) Test the legacy and fips providers as well: (here with "test" as the password)
122 # openssl fipsinstall -out /etc/ssl/fipsmodule.cnf -module /usr/lib/ossl-modules/fips.so
126 # echo test | openssl aes-256-cbc -provider fips -e -a -pbkdf2
/freebsd-14.2/crypto/openssl/doc/man1/
H A Dopenssl-fipsinstall.pod.in54 The default value of '1' will cause the fips module error state to be entered.
102 The default value is C<fips>.
206 fips module will be loaded and self tested BEFORE the fipsinstall application
210 when generating the fips configuration file.
214 Calculate the mac of a FIPS module F<fips.so> and run a FIPS self test
215 for the module, and save the F<fips.cnf> configuration file:
217 openssl fipsinstall -module ./fips.so -out fips.cnf -provider_name fips
219 Verify that the configuration file F<fips.cnf> contains the correct info:
221 openssl fipsinstall -module ./fips.so -in fips.cnf -provider_name fips -verify
225 openssl fipsinstall -module ./fips.so -out fips.cnf -provider_name fips \
[all …]
/freebsd-14.2/crypto/openssl/test/ssl-tests/
H A Dprotocol_version.pm105 my ($dtls, $fips) = @_;
106 if ($dtls && $fips) {
115 my $fips = shift;
126 if ($fips) {
140 if (no_tests($dtls, $fips)) {
223 my $fips = shift;
233 if ($fips) {
/freebsd-14.2/crypto/openssl/test/recipes/
H A D90-test_fipsload.t28 my $fips = bldtop_file('providers', platform->dso('fips'));
30 ok(run(test(['moduleloadtest', $fips, 'OSSL_provider_init'])),
31 "trying to load $fips in its own");
/freebsd-14.2/crypto/openssl/doc/man3/
H A DEVP_set_default_properties.pod31 EVP_default_properties_enable_fips() sets the 'fips=yes' to be a default property
32 if I<enable> is non zero, otherwise it clears 'fips' from the default property
33 query for the given I<libctx>. It merges the fips default property query with any
36 EVP_default_properties_is_fips_enabled() indicates if 'fips=yes' is a default
51 EVP_default_properties_is_fips_enabled() returns 1 if the 'fips=yes' default
/freebsd-14.2/crypto/openssl/providers/
H A Dbuild.info97 # diverse build.info files. libfips.a, fips.so and their sources aren't
100 IF[{- !$disabled{fips} -}]
101 SUBDIRS=fips
102 $FIPSGOAL=fips
106 MODULES{fips}=$FIPSGOAL
113 SOURCE[$FIPSGOAL]=fips.ld
114 GENERATE[fips.ld]=../util/providers.num
124 GENERATE[fips.rc]=../util/mkrc.pl fips
125 SOURCE[$FIPSGOAL]=fips.rc
H A Dfips.checksum1 01b31117f96429fe4c8efbf7f4f10ef32efa2b11c69851fd227e4194db116b6f providers/fips-sources.checksums
H A Ddecoders.inc30 "provider=" DECODER_PROVIDER ",fips=" #_fips ",input=" #_input, \
34 "provider=" DECODER_PROVIDER ",fips=" #_fips ",input=" #_input \
/freebsd-14.2/crypto/openssl/doc/man7/
H A Dfips_module.pod5 fips_module - OpenSSL fips module guide
88 fips = fips_sect
184 OSSL_PROVIDER *fips;
187 fips = OSSL_PROVIDER_load(NULL, "fips");
188 if (fips == NULL) {
194 OSSL_PROVIDER_unload(fips);
202 OSSL_PROVIDER_unload(fips);
257 EVP_set_default_properties(NULL, "fips=yes");
294 fips = fips_sect
301 default_properties = fips=yes
[all …]
H A Dproperty.pod58 Likewise, OpenSSL's FIPS provider defines I<provider=fips> and the legacy
64 For example, "fips=yes", "provider!=default" or "?iteration.count=3".
135 For example, a context property query that contains "fips=yes" would normally
136 result in implementations that have "fips=yes".
138 However, if the setting of the "fips" property is irrelevant to the
140 clause "-fips".
141 Note that the local property query could not use "fips=no" because that would
142 disallow any implementations with "fips=yes" rather than not caring about the
H A DEVP_MAC-KMAC.pod19 =item "KMAC-128", "provider=default" or "provider=fips"
21 =item "KMAC-256", "provider=default" or "provider=fips"
/freebsd-14.2/crypto/openssl/test/
H A Dendecode_test.c557 dump_der, fips ? 0 : FLAG_FAIL_IF_FIPS); in test_unprotected_via_DER()
579 dump_pem, fips ? 0 : FLAG_FAIL_IF_FIPS); in test_unprotected_via_PEM()
735 dump_der, fips ? 0 : FLAG_FAIL_IF_FIPS); in test_protected_via_DER()
758 dump_pem, fips ? 0 : FLAG_FAIL_IF_FIPS); in test_protected_via_PEM()
819 static int test_public_via_DER(const char *type, EVP_PKEY *key, int fips) in test_public_via_DER() argument
827 fips ? 0 : FLAG_FAIL_IF_FIPS); in test_public_via_DER()
841 static int test_public_via_PEM(const char *type, EVP_PKEY *key, int fips) in test_public_via_PEM() argument
849 fips ? 0 : FLAG_FAIL_IF_FIPS); in test_public_via_PEM()
894 #define IMPLEMENT_TEST_SUITE(KEYTYPE, KEYTYPEstr, fips) \ argument
905 return test_protected_via_DER(KEYTYPEstr, key_##KEYTYPE, fips); \
[all …]
H A Dfips.cnf16 default_properties = "fips=yes"
19 fips = fips_sect
H A Ddefault-and-fips.cnf13 fips = fips_sect
H A Dfips-and-base.cnf12 fips = fips_sect
H A Dfips-alt.cnf16 fips = fips_sect
/freebsd-14.2/crypto/openssl/Configurations/
H A Dunix-Makefile.tmpl593 $(RM) providers/fips*.new
1342 providers/fips.checksum.new: providers/fips.module.sources.new
1354 fips-checksums: providers/fips.checksum.new
1356 $(SRCDIR)/providers/fips.checksum: providers/fips.checksum.new
1357 cp -p providers/fips.module.sources.new $(SRCDIR)/providers/fips.module.sources
1358 cp -p providers/fips-sources.checksums.new $(SRCDIR)/providers/fips-sources.checksums
1359 cp -p providers/fips.checksum.new $(SRCDIR)/providers/fips.checksum
1361 update-fips-checksums: $(SRCDIR)/providers/fips.checksum
1363 diff-fips-checksums: fips-checksums
1364 diff -u $(SRCDIR)/providers/fips.module.sources providers/fips.module.sources.new
[all …]
H A Dwindows-makefile.tmpl66 && $unified_info{attributes}->{modules}->{$_}->{fips} }
120 && !$unified_info{attributes}->{modules}->{$_}->{fips} }
132 && $unified_info{attributes}->{modules}->{$_}->{fips} }
458 install: install_sw install_ssldirs install_docs {- $disabled{fips} ? "" : "install_fips" -}
460 uninstall: uninstall_docs uninstall_sw {- $disabled{fips} ? "" : "uninstall_fips" -}
502 {- output_off() if $disabled{fips}; "" -}
519 {- if ($disabled{fips}) { output_on(); } else { output_off(); } "" -}
521 @$(ECHO) "The 'install_fips' target requires the 'enable-fips' option"
524 @$(ECHO) "The 'uninstall_fips' target requires the 'enable-fips' option"
525 {- output_on() if !$disabled{fips}; "" -}
/freebsd-14.2/crypto/openssl/providers/fips/
H A Dbuild.info6 SOURCE[../fips]=fips_entry.c
/freebsd-14.2/contrib/sendmail/cf/feature/
H A Dfips3.m414 ifelse(defn(`_ARG_'), `', `/etc/mail/fips.ossl', `_ARG_'))dnl
/freebsd-14.2/crypto/openssl/doc/man5/
H A Dfips_config.pod32 whose name is identified by the B<fips> option in the B<providers>
44 A version number for the fips install process. Should be 1.

123