How to force 'CKM_RSA_PKCS_OAEP' mechanism in "openssl cms -encrypt / openssl cms -decrypt" commands ?

Solution Verified - Updated 2024-09-04T09:10:38+00:00 -

Issue

With FIPS-140-3, is it possible to configure the OpenSSL library in such way that we can force the use of CKM_RSA_PKCS_OAEP mechanism when using the "openssl cms -encrypt / openssl cms -decrypt" commands?

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Here are the common uses of Markdown.

Code blocks

~~~
Code surrounded in tildes is easier to read
~~~

Links/URLs

[Red Hat Customer Portal](https://access.redhat.com)