]> git.ipfire.org Git - thirdparty/freeradius-server.git/commitdiff
change "fips=no" to "-fips" v3.0.x
authorAlan T. DeKok <aland@freeradius.org>
Mon, 11 Aug 2025 14:47:34 +0000 (10:47 -0400)
committerAlan T. DeKok <aland@freeradius.org>
Mon, 11 Aug 2025 14:54:29 +0000 (10:54 -0400)
based on discussions with the OpenSSL developers in

https://github.com/FreeRADIUS/freeradius-server/issues/5631

and

https://docs.openssl.org/3.5/man7/property/#global-and-local

src/main/tls.c

index 5975e2a7ddb5d0b28a58be2b56c2ed05c7905f35..233978ebcd7a84f43c994d4c297c762e9e43ab8a 100644 (file)
@@ -3623,7 +3623,7 @@ int tls_global_init(TLS_UNUSED bool spawn_flag, TLS_UNUSED bool check)
        CONF_modules_load_file(NULL, NULL, 0);
 
 #if OPENSSL_VERSION_NUMBER >= 0x30000000L
-       EVP_set_default_properties(NULL, "fips=no");
+       EVP_set_default_properties(NULL, "-fips");
 #endif
 
        /*