[openssl/openssl] f2e41a: fips: Bring back FIPS_mode() as a define

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: f2e41a24f60087b72d4576da9234876329726801
      https://github.com/openssl/openssl/commit/f2e41a24f60087b72d4576da9234876329726801
  Author: Dimitri John Ledkov <[email protected]>
  Date:   2026-06-18 (Thu, 18 Jun 2026)

  Changed paths:
    M CHANGES.md
    M doc/man3/EVP_set_default_properties.pod
    M doc/man7/fips_module.pod
    M doc/man7/ossl-guide-migration.pod
    M include/openssl/evp.h
    M test/defltfips_test.c
    M util/other.syms

  Log Message:
  -----------
  fips: Bring back FIPS_mode() as a define

Old OpenSSL had a FIPS_mode() function. AWS-LC-FIPS and BoringSSL-FIPS
still have the FIPS_mode() API. RHEL-derived systems also still provide
FIPS_mode() as a define in up-to-date OpenSSL. And feedback from
multiple large commercial software vendors is that there is a lot of
code out there that still has FIPS_mode() sprinkled all over the place.

Add `FIPS_mode()` as a convenience define to
`EVP_default_properties_is_fips_enabled(NULL)` which is a short-hand
to check if `fips=yes` property is currently enabled on the default
library context.

It is a hint of intent, but not a proof. If you are looking to
validate whether the default configuration is using a validated module,
many additional checks are needed; please consult the security policy
of the module you are using. We heavily discourage using this macro.

Reviewed-by: Milan Broz <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Bob Beck <[email protected]>
Reviewed-by: Neil Horman <[email protected]>
MergeDate: Thu Jun 18 11:58:15 2026
(Merged from https://github.com/openssl/openssl/pull/30339)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/6a95dc-f2e41a%40github.com.