Skip to content

Commit 2387579

Browse files
committed
added FIPS warning for Apple native cert validation
1 parent dd12e5a commit 2387579

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

src/ssl.c

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8576,6 +8576,12 @@ int wolfSSL_CTX_load_system_CA_certs(WOLFSSL_CTX* ctx)
85768576
ctx->doAppleNativeCertValidationFlag = 1;
85778577
ret = WOLFSSL_SUCCESS;
85788578
loaded = 1;
8579+
8580+
#if FIPS_VERSION_GE(2,0) /* Gate back to cert 3389 FIPS modules */
8581+
#warning "Cryptographic operations may occur outside the FIPS module boundary" \
8582+
"Please review FIPS claims for cryptography on this Apple device"
8583+
#endif /* FIPS_VERSION_GE(2,0) */
8584+
85798585
#else
85808586
/* HAVE_SECURITY_SECXXX_H macros are set by autotools or CMake when searching
85818587
* system for the required SDK headers. If building with user_settings.h, you

0 commit comments

Comments
 (0)