zzy/openssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

doc: document the -pedantic option to fipsinstall.

Browse Source 
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20752)
This commit is contained in:
Pauli 2023-04-17 15:39:24 +10:00
parent bc2a4225a4
commit d30fec6ff4
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
doc/man1/openssl-fipsinstall.pod.in
View File

@ -19,6 +19,7 @@ B<openssl fipsinstall>
[B<-macopt> I<nm>:I<v>]
[B<-noout>]
[B<-quiet>]
[B<-pedantic>]
[B<-no_conditional_errors>]
[B<-no_security_checks>]
[B<-ems_check>]
@ -158,6 +159,14 @@ The default digest is SHA-256.
Disable logging of the self tests.
=item B<-pedantic>
Configure the module so that it is strictly FIPS compliant rather
than being backwards compatible. This enables conditional errors,
security checks etc. Note that any previous configuration options will
be overwritten and any subsequent configuration options that violate
FIPS compliance will result in an error.
=item B<-no_conditional_errors>
Configure the module to not enter an error state if a conditional self test