summaryrefslogtreecommitdiff
path: root/lib/crypto
diff options
context:
space:
mode:
authorHans Nilsson <hans@erlang.org>2021-10-12 17:18:16 +0200
committerHans Nilsson <hans@erlang.org>2021-10-18 07:52:35 +0200
commitddbb889297a2bcd5df6dbdca7ca3f17f6b9bd4f2 (patch)
tree38a31566f2ec990f447fec8662c4abf4dbbb1ef9 /lib/crypto
parent1f35c7bf1a4a25f01e5b88c4679733d55a2c569f (diff)
downloaderlang-ddbb889297a2bcd5df6dbdca7ca3f17f6b9bd4f2.tar.gz
crypto: Disable FIPS mode if OpenSSL 3.0 cryptolib
OpenSSL 3.0 will support FIPS mode later. This commit is just to disable the FIPS mode for 3.0 until the final support is available.
Diffstat (limited to 'lib/crypto')
-rw-r--r--lib/crypto/c_src/openssl_config.h5
1 files changed, 5 insertions, 0 deletions
diff --git a/lib/crypto/c_src/openssl_config.h b/lib/crypto/c_src/openssl_config.h
index 2f68526de7..63238105f7 100644
--- a/lib/crypto/c_src/openssl_config.h
+++ b/lib/crypto/c_src/openssl_config.h
@@ -438,6 +438,11 @@ do { \
#endif
+/* This is not the final FIPS adaptation for 3.0, just making it compilable */
+#if OPENSSL_VERSION_NUMBER >= PACKED_OPENSSL_VERSION_PLAIN(3,0,0)
+# undef FIPS_SUPPORT
+#endif
+
#if defined(FIPS_SUPPORT)
# define FIPS_MODE() (FIPS_mode() ? 1 : 0)
#else