canmove, Confirmed users
937
edits
FIPS Module Specification: Difference between revisions
Jump to navigation
Jump to search
→Approved Mode of Operation
| Line 102: | Line 102: | ||
where <code><i>directory</i></code> is the directory that contains the NSS databases. | where <code><i>directory</i></code> is the directory that contains the NSS databases. | ||
The setting is permanent for the NSS module and all subsequent invocations of NSS functions using that | The setting is permanent for the NSS module and all subsequent invocations of NSS functions using that NSS database directory will be in FIPS mode. The module can be taken out of FIPS mode by substituting <code>false</code> for <code>true</code> in the command above. The state of the module can be checked with: | ||
modutil -chkfips true -dbdir <i>directory</i> | modutil -chkfips true -dbdir <i>directory</i> | ||
where <code><i>directory</i></code> is the directory that contains the NSS databases, or with a call to [http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/pk11wrap/pk11util.c.dep.html#PK11_IsFIPS PK11_IsFIPS()]. | where <code><i>directory</i></code> is the directory that contains the NSS databases, or with a call to [http://www.mozilla.org/projects/security/pki/nss/fips/nss-source/mozilla/security/nss/lib/pk11wrap/pk11util.c.dep.html#PK11_IsFIPS PK11_IsFIPS()]. | ||