From 2461396f69e931c42895b92ab68f840356bcfe4d Mon Sep 17 00:00:00 2001
From: "Dr. Stephen Henson" <steve@openssl.org>
Date: Thu, 13 Oct 2011 11:43:44 +0000
Subject: [PATCH] For now disable RSAX ENGINE for FIPS builds: it sets a
 non-FIPS RSA method which stops FIPS mode working.

---
 Configure | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/Configure b/Configure
index 297392daf6..1818113cbc 100755
--- a/Configure
+++ b/Configure
@@ -961,6 +961,12 @@ if ($fips && $fipslibdir eq "")
 	$fipslibdir = $fipsdir . "/lib/";
 	}
 
+# RSAX ENGINE sets default non-FIPS RSA method.
+if ($fips)
+	{
+	$disabled{"rsax"} = "forced";
+	}
+
 # SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
 if (defined($disabled{"md5"}) || defined($disabled{"sha"})
     || (defined($disabled{"rsa"})
-- 
2.25.1