File 0380-crypto-Disable-fips-if-cryptolib-1.0.1-and-it-is-con.patch of Package erlang
From d2607b9e614ac217bff9bec7e5d9649d7c69b2cd Mon Sep 17 00:00:00 2001
From: Hans Nilsson <hans@erlang.org>
Date: Tue, 11 May 2021 13:48:02 +0200
Subject: [PATCH] crypto: Disable fips if cryptolib < 1.0.1 and it is
configured with --enable-fips
FIPS is not supported by OpenSSL for other versions than 1.0.1 and 1.0.2
---
lib/crypto/c_src/openssl_config.h | 9 +++++++++
1 file changed, 9 insertions(+)
diff --git a/lib/crypto/c_src/openssl_config.h b/lib/crypto/c_src/openssl_config.h
index 5b153f04d7..41b8da40a0 100644
--- a/lib/crypto/c_src/openssl_config.h
+++ b/lib/crypto/c_src/openssl_config.h
@@ -413,6 +413,15 @@ do { \
# define PRINTF_ERR2(FMT,A1,A2)
#endif
+#if defined(FIPS_SUPPORT) \
+ && OPENSSL_VERSION_NUMBER < PACKED_OPENSSL_VERSION_PLAIN(1,0,1)
+/* FIPS is not supported for versions < 1.0.1. If FIPS_SUPPORT is enabled
+ there are some warnings/errors for thoose
+*/
+# undef FIPS_SUPPORT
+#endif
+
+
#ifdef FIPS_SUPPORT
/* In FIPS mode non-FIPS algorithms are disabled and return badarg. */
#define CHECK_NO_FIPS_MODE() { if (FIPS_mode()) return atom_notsup; }
--
2.26.2