From 238757988015b3b60333296f001c86c605a4a15e Mon Sep 17 00:00:00 2001 From: Brett Date: Fri, 20 Oct 2023 11:48:50 -0600 Subject: [PATCH] added FIPS warning for Apple native cert validation --- src/ssl.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/src/ssl.c b/src/ssl.c index 6d0ef95dd..26a58a321 100644 --- a/src/ssl.c +++ b/src/ssl.c @@ -8576,6 +8576,12 @@ int wolfSSL_CTX_load_system_CA_certs(WOLFSSL_CTX* ctx) ctx->doAppleNativeCertValidationFlag = 1; ret = WOLFSSL_SUCCESS; loaded = 1; + +#if FIPS_VERSION_GE(2,0) /* Gate back to cert 3389 FIPS modules */ +#warning "Cryptographic operations may occur outside the FIPS module boundary" \ + "Please review FIPS claims for cryptography on this Apple device" +#endif /* FIPS_VERSION_GE(2,0) */ + #else /* HAVE_SECURITY_SECXXX_H macros are set by autotools or CMake when searching * system for the required SDK headers. If building with user_settings.h, you