Provide a function to query crypto backend for FIPS status

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Jakub Jelen
2019-03-21 17:04:46 +01:00
committed by Andreas Schneider
parent 67beaf363f
commit e446507352
3 changed files with 8 additions and 0 deletions

View File

@@ -31,6 +31,7 @@
#include <openssl/md5.h>
#include <openssl/hmac.h>
#include <openssl/evp.h>
#include <openssl/crypto.h>
typedef EVP_MD_CTX* SHACTX;
typedef EVP_MD_CTX* SHA256CTX;
@@ -102,6 +103,9 @@ typedef BN_CTX* bignum_CTX;
#define bignum_cmp(num1,num2) BN_cmp(num1,num2)
#define bignum_rshift1(dest, src) BN_rshift1(dest, src)
/* Returns true if the OpenSSL is operating in FIPS mode */
#define ssh_fips_mode() (FIPS_mode() != 0)
#endif /* HAVE_LIBCRYPTO */
#endif /* LIBCRYPTO_H_ */