diff options
author | Pauli <pauli@openssl.org> | 2023-04-17 15:39:24 +1000 |
---|---|---|
committer | Pauli <pauli@openssl.org> | 2023-04-20 09:22:25 +1000 |
commit | 4ba582fc5d1b878d00e36dff06e1bb103772aac3 (patch) | |
tree | caf2211e260c3a9444fe7add979b341aa5bdd224 | |
parent | c31dfcd455f76dae377da3daa6bcdbbfe0dbb5d8 (diff) | |
download | openssl-new-4ba582fc5d1b878d00e36dff06e1bb103772aac3.tar.gz |
doc: document the -pedantic option to fipsinstall.
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20752)
(cherry picked from commit d30fec6ff438f73f4e255b0b9c6af3ea57ec122a)
-rw-r--r-- | doc/man1/openssl-fipsinstall.pod.in | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/man1/openssl-fipsinstall.pod.in b/doc/man1/openssl-fipsinstall.pod.in index 94dd0eee7f..b1768b7f91 100644 --- a/doc/man1/openssl-fipsinstall.pod.in +++ b/doc/man1/openssl-fipsinstall.pod.in @@ -19,6 +19,7 @@ B<openssl fipsinstall> [B<-macopt> I<nm>:I<v>] [B<-noout>] [B<-quiet>] +[B<-pedantic>] [B<-no_conditional_errors>] [B<-no_security_checks>] [B<-ems_check>] @@ -158,6 +159,14 @@ The default digest is SHA-256. Disable logging of the self tests. +=item B<-pedantic> + +Configure the module so that it is strictly FIPS compliant rather +than being backwards compatible. This enables conditional errors, +security checks etc. Note that any previous configuration options will +be overwritten and any subsequent configuration options that violate +FIPS compliance will result in an error. + =item B<-no_conditional_errors> Configure the module to not enter an error state if a conditional self test |