1e1051a39Sopenharmony_ciopenssl_conf = openssl_init
2e1051a39Sopenharmony_ci
3e1051a39Sopenharmony_ci.include fipsmodule.cnf
4e1051a39Sopenharmony_ci
5e1051a39Sopenharmony_ci[openssl_init]
6e1051a39Sopenharmony_ciproviders = provider_sect
7e1051a39Sopenharmony_cialg_section = evp_properties
8e1051a39Sopenharmony_ci
9e1051a39Sopenharmony_ci[evp_properties]
10e1051a39Sopenharmony_ci# Ensure FIPS non-approved algorithms in the FIPS module are suppressed (e.g.
11e1051a39Sopenharmony_ci# TEST-RAND). This also means that EVP_default_properties_is_fips_enabled()
12e1051a39Sopenharmony_ci# returns the expected value
13e1051a39Sopenharmony_cifips_mode = true
14e1051a39Sopenharmony_ci
15e1051a39Sopenharmony_ci[provider_sect]
16e1051a39Sopenharmony_cifips = fips_sect
17