From: Dr. Stephen Henson <steve@openssl.org>
Date: Thu, 13 Oct 2011 11:43:44 +0000 (+0000)
Subject: For now disable RSAX ENGINE for FIPS builds: it sets a non-FIPS RSA
X-Git-Tag: OpenSSL_1_0_1-beta1~122
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=2461396f69e931c42895b92ab68f840356bcfe4d;p=oweals%2Fopenssl.git

For now disable RSAX ENGINE for FIPS builds: it sets a non-FIPS RSA
method which stops FIPS mode working.
---

diff --git a/Configure b/Configure
index 297392daf6..1818113cbc 100755
--- a/Configure
+++ b/Configure
@@ -961,6 +961,12 @@ if ($fips && $fipslibdir eq "")
 	$fipslibdir = $fipsdir . "/lib/";
 	}
 
+# RSAX ENGINE sets default non-FIPS RSA method.
+if ($fips)
+	{
+	$disabled{"rsax"} = "forced";
+	}
+
 # SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
 if (defined($disabled{"md5"}) || defined($disabled{"sha"})
     || (defined($disabled{"rsa"})