]> git.ipfire.org Git - thirdparty/freeradius-server.git/commit
projects / thirdparty / freeradius-server.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cd83c09) | patch
add --enable-fips-workaround flag to configure
authorAlan T. DeKok <aland@freeradius.org>
Fri, 20 May 2022 15:38:25 +0000 (11:38 -0400)
committerAlan T. DeKok <aland@freeradius.org>
Fri, 20 May 2022 19:21:35 +0000 (15:21 -0400)
commit947d5d6bd2674a60f7320f0b721e4723243c2285
tree6defe8d0e92916e6bd88dbfb88f3306b5f0b3ad3tree | snapshot
parentcd83c095ff6b2d11085a027b4ea6046d51e88f05commit | diff
add --enable-fips-workaround flag to configure

which means that we use our internal MD4 / MD5 functions always,
as OpenSSL requires much magic to re-enable them in FIPS mode.

It's easier to just our internal implementations, instead of
butchering the stable v3 release.

The downside is that if you do a default build and then enable
FIPS in OpenSSL, the server will simply not work.  It has to be
re-build with the --enable-fips flag.
configure diff | blob | blame | history
configure.ac diff | blob | blame | history
src/include/md4.h diff | blob | blame | history
src/include/md5.h diff | blob | blame | history
Mirror of https://github.com/FreeRADIUS/freeradius-server.git