File bind-bsc1181495-disable-md5-when-in-fips-mode.patch of Package bind.29689

Index: bind-9.9.9-P1/lib/dns/hmac_link.c
===================================================================
--- bind-9.9.9-P1.orig/lib/dns/hmac_link.c
+++ bind-9.9.9-P1/lib/dns/hmac_link.c
@@ -337,6 +337,14 @@ dst__hmacmd5_init(dst_func_t **funcp) {
 	REQUIRE(funcp != NULL);
 	if (*funcp == NULL)
 		*funcp = &hmacmd5_functions;
+
+#ifdef HAVE_FIPS_MODE
+	int fips_mode = FIPS_mode();
+	if (fips_mode != 0) {
+		*funcp = NULL;
+	}
+#endif
+
 	return (ISC_R_SUCCESS);
 }
 
openSUSE Build Service is sponsored by