acvp-test: disable the ACVP testing code by default

It's only useful for the FIPS lab and shouldn't be in production.

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/15092)

diff --git a/Configure b/Configure
index 7acbbc56b948d6a57e887a00ee1209f4dd762d8b..dc0b1924b76d8b534618fd65ad761c54f76ac2f5 100755 (executable)
--- a/Configure
+++ b/Configure
@@ -513,6 +513,7 @@ my %deprecated_disablables = (
 
 our %disabled = ( # "what"         => "comment"
                   "fips"                => "default",
+                  "acvp-tests"          => "default",
                   "asan"                => "default",
                   "buildtest-c++"       => "default",
                   "crypto-mdebug"       => "default",

diff --git a/INSTALL.md b/INSTALL.md
index 9414556427b209284df627053485c501151baf20..f89e1aed53d25934ecfce70b5c1584f96984a360 100644 (file)
--- a/INSTALL.md
+++ b/INSTALL.md
@@ -521,9 +521,9 @@ never be used in production environments.  It will only work when used with
 gcc or clang and should be used in conjunction with the [no-shared](#no-shared)
 option.
 
-### no-acvp-tests
+### enable-acvp-tests
 
-Do not build support for Automated Cryptographic Validation Protocol (ACVP)
+Build support for Automated Cryptographic Validation Protocol (ACVP)
 tests.
 
 This is required for FIPS validation purposes. Certain ACVP tests require