Lines Matching +full:enable +full:- +full:fips

1 // Flags: --expose-internals
17   'Error [ERR_CRYPTO_FIPS_FORCED]: Cannot set FIPS mode, it was forced with ' +
18   '--force-fips at startup.';
19 const FIPS_UNSUPPORTED_ERROR_STRING = 'fips mode not supported';
31   const fullArgs = args.concat(['-e', `console.log(${cmd})`]);
52       // Normal path where we expect either FIPS enabled or disabled.
61 // By default FIPS should be off in both FIPS and non-FIPS builds.
69 // --enable-fips should turn FIPS mode on
72   ['--enable-fips'],
77 // --force-fips should turn FIPS mode on
80   ['--force-fips'],
85 // If Node was configured using --shared-openssl fips support might be
86 // available depending on how OpenSSL was built. If fips support is
90 // Note that this case is different from when calling the fips setter as the
92 // to try to call the fips setter, to try to detect this situation, as
94 // ("Error: Cannot set FIPS mode in a non-FIPS build.").
96 // with --shared-openssl.
98   // OpenSSL config file should be able to turn on FIPS mode
101     [`--openssl-config=${CNF_FIPS_ON}`],
106   // OPENSSL_CONF should be able to turn on FIPS mode
114   // --openssl-config option should override OPENSSL_CONF
117     [`--openssl-config=${CNF_FIPS_ON}`],
125   [`--openssl-config=${CNF_FIPS_OFF}`],
130 // --enable-fips should take precedence over OpenSSL config file
133   ['--enable-fips', `--openssl-config=${CNF_FIPS_OFF}`],
138 // OPENSSL_CONF should _not_ make a difference to --enable-fips
141   ['--enable-fips'],
146 // --force-fips should take precedence over OpenSSL config file
149   ['--force-fips', `--openssl-config=${CNF_FIPS_OFF}`],
154 // Using OPENSSL_CONF should not make a difference to --force-fips
157   ['--force-fips'],
162 // setFipsCrypto should be able to turn FIPS mode on
171 // setFipsCrypto should be able to turn FIPS mode on and off
181 // setFipsCrypto takes precedence over OpenSSL config file, FIPS on
184   [`--openssl-config=${CNF_FIPS_OFF}`],
190 // setFipsCrypto takes precedence over OpenSSL config file, FIPS off
193   [`--openssl-config=${CNF_FIPS_ON}`],
199 // --enable-fips does not prevent use of setFipsCrypto API
202   ['--enable-fips'],
208 // --force-fips prevents use of setFipsCrypto API
211   ['--force-fips'],
216 // --force-fips makes setFipsCrypto enable a no-op (FIPS stays on)
219   ['--force-fips'],
225 // --force-fips and --enable-fips order does not matter
228   ['--force-fips', '--enable-fips'],
233 // --enable-fips and --force-fips order does not matter
236   ['--enable-fips', '--force-fips'],