openssl/test/defltfips_test.c, branch dependabot/github_actions/actions/setup-python-7

fips: Bring back FIPS_mode() as a define

2026-06-18T11:58:10Z

Old OpenSSL had a FIPS_mode() function. AWS-LC-FIPS and BoringSSL-FIPS still have the FIPS_mode() API. RHEL-derived systems also still provide FIPS_mode() as a define in up-to-date OpenSSL. And feedback from multiple large commercial software vendors is that there is a lot of code out there that still has FIPS_mode() sprinkled all over the place. Add `FIPS_mode()` as a convenience define to `EVP_default_properties_is_fips_enabled(NULL)` which is a short-hand to check if `fips=yes` property is currently enabled on the default library context. It is a hint of intent, but not a proof. If you are looking to validate whether the default configuration is using a validated module, many additional checks are needed; please consult the security policy of the module you are using. We heavily discourage using this macro. Reviewed-by: Milan Broz Reviewed-by: Tomas Mraz Reviewed-by: Bob Beck Reviewed-by: Neil Horman MergeDate: Thu Jun 18 11:58:15 2026 (Merged from https://github.com/openssl/openssl/pull/30339)

Update NEWS.md

2025-12-19T17:06:38Z

Co-authored-by: Matt Caswell Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/29385)

Introduce OPENSSL_ATEXIT_CLEANUP env. variable.

2025-12-19T17:01:59Z

libcrypto does not arm OPENSSL_cleanup() function as atexit(3) handler by default. If application/user wants libcrypto to install OPENSSL_cleanup() as atexit handler, then OPENSSL_ATEXIT_CLEANUP env. variable must be set. If platform's libc does not provide atexit(3), then OPENSSL_ATEXIT_CLEANUP has no effect. The OPENSSL_atexit() is wrapper of atexit(3) provided by libc now. Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/29385)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

Fix copyrights

2022-02-03T12:56:38Z

Add copyright to files that were missing it. Update license from OpenSSL to Apache as needed. Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/17606)

fix some code with obvious wrong coding style

2021-10-28T03:10:46Z

Reviewed-by: Tomas Mraz Reviewed-by: Richard Levitte Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/16918)

Add some testing for the case where the FIPS provider fails to load

2021-07-28T00:35:06Z

Ensure we get correct behaviour in the event that an attempt is made to load the fips provider but it fails to load. Reviewed-by: Tim Hudson Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/16168)

Rename also the OSSL_PROVIDER_name() function

2021-06-01T10:43:57Z

Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/15405)

Rename all getters to use get/get0 in name

2021-06-01T10:40:00Z

For functions that exist in 1.1.1 provide a simple aliases via #define. Fixes #15236 Functions with OSSL_DECODER_, OSSL_ENCODER_, OSSL_STORE_LOADER_, EVP_KEYEXCH_, EVP_KEM_, EVP_ASYM_CIPHER_, EVP_SIGNATURE_, EVP_KEYMGMT_, EVP_RAND_, EVP_MAC_, EVP_KDF_, EVP_PKEY_, EVP_MD_, and EVP_CIPHER_ prefixes are renamed. Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/15405)

Test that EVP_default_properties_is_fips_enabled() works early

2020-08-17T10:27:51Z

We check that EVP_default_properties_is_fips_enabled() is working even before other function calls have auto-loaded the config file. Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/12567)