[gnutls-help] make check errors in system running FIPS mode

jonetsu jonetsu at teksavvy.com
Tue Sep 22 15:51:33 CEST 2015



> From: "Nikos Mavrogiannopoulos" <nmav at gnutls.org> 
> Date: 09/22/15 02:24 

> In FIPS140-2 mode the library must have integrity tests, and if these
> are not present it will fail to load. You may use the environment
> variable GNUTLS_SKIP_FIPS_INTEGRITY_CHECKS (set to 1), to skip these
> tests.


Thanks. OTOH, the interest is to have the test succeed.  I have looked into the INSTALL file and the user guide but did not find anything about running integrity tests, howto setup for them, etc.  In fips-test.c there is a mention:


fprintf(stderr,
"Please note that if in FIPS140 mode, you need to assure the library's integrity prior to running this test\n");


How are these integrity tests run ?  Is there documentation about them ?


Thanks.








More information about the Gnutls-help mailing list