File 0380-crypto-Disable-fips-if-cryptolib-1.0.1-and... of Package erlang

Overview Repositories Revisions Requests Users Attributes Meta

File 0380-crypto-Disable-fips-if-cryptolib-1.0.1-and-it-is-con.patch of Package erlang

From d2607b9e614ac217bff9bec7e5d9649d7c69b2cd Mon Sep 17 00:00:00 2001
From: Hans Nilsson <hans@erlang.org>
Date: Tue, 11 May 2021 13:48:02 +0200
Subject: [PATCH] crypto: Disable fips if cryptolib < 1.0.1 and it is
 configured with --enable-fips

FIPS is not supported by OpenSSL for other versions than 1.0.1 and 1.0.2
---
 lib/crypto/c_src/openssl_config.h | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/lib/crypto/c_src/openssl_config.h b/lib/crypto/c_src/openssl_config.h
index 5b153f04d7..41b8da40a0 100644
--- a/lib/crypto/c_src/openssl_config.h
+++ b/lib/crypto/c_src/openssl_config.h
@@ -413,6 +413,15 @@ do {                                                    \
 #  define PRINTF_ERR2(FMT,A1,A2)
 #endif
 
+#if defined(FIPS_SUPPORT) \
+    && OPENSSL_VERSION_NUMBER  < PACKED_OPENSSL_VERSION_PLAIN(1,0,1)
+/* FIPS is not supported for versions < 1.0.1.  If FIPS_SUPPORT is enabled
+   there are some warnings/errors for thoose
+*/
+# undef FIPS_SUPPORT
+#endif
+
+
 #ifdef FIPS_SUPPORT
 /* In FIPS mode non-FIPS algorithms are disabled and return badarg. */
 #define CHECK_NO_FIPS_MODE() { if (FIPS_mode()) return atom_notsup; }
-- 
2.26.2

Places

File 0380-crypto-Disable-fips-if-cryptolib-1.0.1-and-it-is-con.patch of Package erlang

Places