From bb173f931ae85b464e901806f15dcc219dec6b73 Mon Sep 17 00:00:00 2001 From: Rod Vagg Date: Tue, 18 Oct 2016 16:35:22 +1100 Subject: crypto: fix openssl.cnf FIPS handling & testing * Add documentation for `--openssl-conf=file`. * Fix openssl.cnf loading and OpenSSL init ordering * Fix FIPS tests so `OPENSSL_CONF` is not longer usable but `--openssl-conf` is PR-URL: https://github.com/nodejs/node-private/pull/82 Reviewed-By: Shigeki Ohtsu Reviewed-By: Ben Noordhuis --- doc/node.1 | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'doc/node.1') diff --git a/doc/node.1 b/doc/node.1 index 43ec7c12b6..ec41a44c75 100644 --- a/doc/node.1 +++ b/doc/node.1 @@ -165,6 +165,12 @@ Enable FIPS-compliant crypto at startup. (Requires Node.js to be built with Force FIPS-compliant crypto on startup. (Cannot be disabled from script code.) (Same requirements as \fB\-\-enable\-fips\fR) +.TP +.BR \-\-openssl\-config =\fIfile\fR +Load an OpenSSL configuration file on startup. Among other uses, this can be +used to enable FIPS-compliant crypto if Node.js is built with +\fB./configure \-\-openssl\-fips\fR. + .TP .BR \-\-icu\-data\-dir =\fIfile\fR Specify ICU data load path. (overrides \fBNODE_ICU_DATA\fR) -- cgit v1.2.3