Skip to content

crypto: don't assume FIPS is disabled by default - #46532

Closed
mhdawson wants to merge 2 commits into
nodejs:mainfrom
mhdawson:fix-force-fips
Closed

crypto: don't assume FIPS is disabled by default#46532
mhdawson wants to merge 2 commits into
nodejs:mainfrom
mhdawson:fix-force-fips

Conversation

@mhdawson

Copy link
Copy Markdown
Member

For binaries that use --shared-openssl FIPs may be enabled by default by the system. Allow --force-fips and --enable-fips to be specified in these cases.

Signed-off-by: Michael Dawson mdawson@devrus.com

For binaries that use --shared-openssl FIPs may be enabled
by default by the system. Allow --force-fips and --enable-fips
to be specified in these cases.
Signed-off-by: Michael Dawson <mdawson@devrus.com>
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

Review requested:

  • @nodejs/crypto

@nodejs-github-botnodejs-github-bot added c++ Issues and PRs that require attention from people who are familiar with C++. crypto Issues and PRs related to the crypto subsystem. needs-ci PRs that need a full CI run. labels Feb 6, 2023
@mhdawson

Copy link
Copy Markdown
MemberAuthor

One of our teams ran into this when using FIPS with Red Hat Enterprise Linux with FIPs enabled in the system.

Signed-off-by: Michael Dawson <mdawson@devrus.com>
@richardlaurichardlau added the commit-queue-squash Add this label to instruct the Commit Queue to squash all the PR commits into the first one. label Feb 6, 2023
@richardlaurichardlau added the request-ci Add this label to start a Jenkins CI on a PR. label Feb 7, 2023
@github-actionsgithub-actionsBot removed the request-ci Add this label to start a Jenkins CI on a PR. label Feb 7, 2023
@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

@nodejs-github-bot

Copy link
Copy Markdown
Collaborator

mhdawson added a commit that referenced this pull request Feb 17, 2023
For binaries that use --shared-openssl FIPs may be enabled
by default by the system. Allow --force-fips and --enable-fips
to be specified in these cases.
Signed-off-by: Michael Dawson <mdawson@devrus.com>
PR-URL: #46532
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
@mhdawson

Copy link
Copy Markdown
MemberAuthor

Landed in 18651ad

MylesBorins pushed a commit that referenced this pull request Feb 18, 2023
For binaries that use --shared-openssl FIPs may be enabled
by default by the system. Allow --force-fips and --enable-fips
to be specified in these cases.
Signed-off-by: Michael Dawson <mdawson@devrus.com>
PR-URL: #46532
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
@MylesBorinsMylesBorins mentioned this pull request Feb 19, 2023
MylesBorins pushed a commit that referenced this pull request Feb 20, 2023
For binaries that use --shared-openssl FIPs may be enabled
by default by the system. Allow --force-fips and --enable-fips
to be specified in these cases.
Signed-off-by: Michael Dawson <mdawson@devrus.com>
PR-URL: #46532
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
danielleadams pushed a commit that referenced this pull request Apr 11, 2023
For binaries that use --shared-openssl FIPs may be enabled
by default by the system. Allow --force-fips and --enable-fips
to be specified in these cases.
Signed-off-by: Michael Dawson <mdawson@devrus.com>
PR-URL: #46532
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

c++Issues and PRs that require attention from people who are familiar with C++.commit-queue-squashAdd this label to instruct the Commit Queue to squash all the PR commits into the first one.cryptoIssues and PRs related to the crypto subsystem.needs-ciPRs that need a full CI run.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants

@mhdawson@nodejs-github-bot@jasnell@cjihrig@tniessen@richardlau