Commit 2461396f authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

For now disable RSAX ENGINE for FIPS builds: it sets a non-FIPS RSA 

method which stops FIPS mode working.
parent 81a071df

Configure

+6 −0
Original line number Diff line number Diff line
@@ -961,6 +961,12 @@ if ($fips && $fipslibdir eq "") 
	$fipslibdir = $fipsdir . "/lib/";

	}



# RSAX ENGINE sets default non-FIPS RSA method.

if ($fips)

	{

	$disabled{"rsax"} = "forced";

	}



# SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH

if (defined($disabled{"md5"}) || defined($disabled{"sha"})

    || (defined($disabled{"rsa"})