diff options
| author | Pauli <pauli@openssl.org> | 2023-04-17 15:39:24 +1000 |
|---|---|---|
| committer | Pauli <pauli@openssl.org> | 2023-04-20 09:21:51 +1000 |
| commit | d30fec6ff438f73f4e255b0b9c6af3ea57ec122a (patch) | |
| tree | 27642413fa850683b266ce26bc4fab305f739476 /doc | |
| parent | bc2a4225a4a03f70bb0154a72c2889aa80c1b0f6 (diff) | |
| download | openssl-new-d30fec6ff438f73f4e255b0b9c6af3ea57ec122a.tar.gz | |
doc: document the -pedantic option to fipsinstall.
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20752)
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/man1/openssl-fipsinstall.pod.in | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/doc/man1/openssl-fipsinstall.pod.in b/doc/man1/openssl-fipsinstall.pod.in index e3ceeb481c..eab19385f0 100644 --- a/doc/man1/openssl-fipsinstall.pod.in +++ b/doc/man1/openssl-fipsinstall.pod.in @@ -19,6 +19,7 @@ B<openssl fipsinstall> [B<-macopt> I<nm>:I<v>] [B<-noout>] [B<-quiet>] +[B<-pedantic>] [B<-no_conditional_errors>] [B<-no_security_checks>] [B<-ems_check>] @@ -158,6 +159,14 @@ The default digest is SHA-256. Disable logging of the self tests. +=item B<-pedantic> + +Configure the module so that it is strictly FIPS compliant rather +than being backwards compatible. This enables conditional errors, +security checks etc. Note that any previous configuration options will +be overwritten and any subsequent configuration options that violate +FIPS compliance will result in an error. + =item B<-no_conditional_errors> Configure the module to not enter an error state if a conditional self test |