FIPS_CONFIG(5ossl)

📦 version 3.5.0, in opensuse-leap 16.0

🎀 FIPS_CONFIG(5ossl) 🎀

okay bestie, welcome to the OpenSSL manual page for FIPS_CONFIG(5ossl) — manual name: OpenSSL, and we are literally about to get into FIPS config energy 💅.

✨ NAME ✨

fips_config - OpenSSL FIPS configuration

💖 DESCRIPTION 💖

This command is disabled in SUSE/openSUSE — yes, disabled, not a vibe check you can pass 😭. The FIPS provider is automatically loaded when the system is booted in FIPS mode, or when the environment variable OPENSSL_FORCE_FIPS_MODE is set. See the documentation for more information — that part is doing main character work.

SUSE Enterprise Linux uses a supplementary config for the FIPS module located in the OpenSSL configuration directory and managed by crypto policies. If present, it should have this format:

[fips_sect]
tls1-prf-ems-check = 0
activate = 1

The tls1-prf-ems-check option specifies whether the FIPS module will require the presence of extended master secret or not.

The activate option enforces FIPS provider activation.

Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

okay bye bestie 🫶 — this was OpenSSL 3.5.0, dated 2026-09-25, and the page is FIPS_CONFIG(5ossl) 💖.

📦 where this page comes from