my_openssl_fips.cc File Reference

#include "my_openssl_fips.h"
#include <assert.h>
#include <openssl/err.h>
#include <openssl/ec.h>

Functions
int	get_fips_mode ()
	Get fips mode from openssl library,. More...
static int	set_fips_mode_inner (int fips_mode)
	Sets fips mode. More...
bool	set_fips_mode (const int fips_mode, char err_string[OPENSSL_ERROR_LENGTH])
	Turns FIPs mode on or off. More...
int	test_ssl_fips_mode (char err_string[OPENSSL_ERROR_LENGTH])
	Toggle FIPS mode, to see whether it is available with the current SSL library. More...
void	fips_deinit ()
void	fips_init ()

Function Documentation

fips_deinit()

void fips_deinit

(

)

fips_init()

void fips_init

(

)

get_fips_mode()

int get_fips_mode

(

)

Get fips mode from openssl library,.

Returns

openssl current fips mode

set_fips_mode()

bool set_fips_mode	(	const int	fips_mode,
		char	err_string[OPENSSL_ERROR_LENGTH]
	)

Turns FIPs mode on or off.

Parameters

[in]	fips_mode	0 for fips mode off, non-zero for fips mode ON
[out]	err_string	If fips mode set fails, err_string will have detail failure reason.

Returns

openssl set fips mode errors

Return values

true	for error
false	for success

set_fips_mode_inner()

static int set_fips_mode_inner ( int  fips_mode )

static

Sets fips mode.

On error the error is in the openssl error stack

Return values

0	failure
non-0	success

test_ssl_fips_mode()

int test_ssl_fips_mode

(

char

err_string[OPENSSL_ERROR_LENGTH]

)

Toggle FIPS mode, to see whether it is available with the current SSL library.

Return values

0	FIPS is not supported.
non-zero	FIPS is supported.