File openssl-fips_disallow_ENGINE_loading.patch of Package openssl-1_1.14217

Index: openssl-1.1.0c/crypto/init.c
===================================================================
--- openssl-1.1.0c.orig/crypto/init.c	2016-12-08 17:36:03.170689184 +0100
+++ openssl-1.1.0c/crypto/init.c	2016-12-08 17:36:14.938873308 +0100
@@ -564,6 +564,9 @@ int OPENSSL_init_crypto(uint64_t opts, c
             && !RUN_ONCE(&engine_rdrand, ossl_init_engine_rdrand))
         return 0;
 # endif
+# ifdef OPENSSL_FIPS
+    if (!FIPS_mode())
+# endif
     if ((opts & OPENSSL_INIT_ENGINE_DYNAMIC)
             && !RUN_ONCE(&engine_dynamic, ossl_init_engine_dynamic))
         return 0;
openSUSE Build Service is sponsored by