192f3ab15Sopenharmony_ci//! FIPS 140-2 support. 292f3ab15Sopenharmony_ci//! 392f3ab15Sopenharmony_ci//! See [OpenSSL's documentation] for details. 492f3ab15Sopenharmony_ci//! 592f3ab15Sopenharmony_ci//! [OpenSSL's documentation]: https://www.openssl.org/docs/fips/UserGuide-2.0.pdf 692f3ab15Sopenharmony_ciuse crate::cvt; 792f3ab15Sopenharmony_ciuse crate::error::ErrorStack; 892f3ab15Sopenharmony_ciuse openssl_macros::corresponds; 992f3ab15Sopenharmony_ci 1092f3ab15Sopenharmony_ci/// Moves the library into or out of the FIPS 140-2 mode of operation. 1192f3ab15Sopenharmony_ci#[corresponds(FIPS_mode_set)] 1292f3ab15Sopenharmony_cipub fn enable(enabled: bool) -> Result<(), ErrorStack> { 1392f3ab15Sopenharmony_ci ffi::init(); 1492f3ab15Sopenharmony_ci unsafe { cvt(ffi::FIPS_mode_set(enabled as _)).map(|_| ()) } 1592f3ab15Sopenharmony_ci} 1692f3ab15Sopenharmony_ci 1792f3ab15Sopenharmony_ci/// Determines if the library is running in the FIPS 140-2 mode of operation. 1892f3ab15Sopenharmony_ci#[corresponds(FIPS_mode)] 1992f3ab15Sopenharmony_cipub fn enabled() -> bool { 2092f3ab15Sopenharmony_ci unsafe { ffi::FIPS_mode() != 0 } 2192f3ab15Sopenharmony_ci} 22