Robert Relyea wrote: > The call PK11_IsFIPS() returns true if softoken is in FIPS mode. The > dance to programatically is to call SECMOD_DeleteInternalModule(), > which toggles the module between FIPS and non-FIPS modes.
Thanks. I will try it. When are the self-tests run, from an application perspective ? I presume they are when FIPS mode is put in effect using modutils. Would that be the only time they are run ? For instance, would they be called before returning from PK11_IsFIPS() ? Is there a way to force-run those self-tests from an application ? > Firefox has a button to flip to FIPS mode. I should have mentioned that the application is in C and is by no way related to Firefox. Comments much appreciated, cheers. -- View this message in context: http://mozilla.6506.n7.nabble.com/Using-NSS-in-FIPS-mode-tp350446p350498.html Sent from the Mozilla - Cryptography mailing list archive at Nabble.com. -- dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto