-
Type: Bug
-
Resolution: Fixed
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
We currently perform an openssl check in implementing the X_FIPS_mode and X_FIPS_mode_set functions.
These version checks are incorrect and introduce an erroneous error condition on platforms that do have a FIPS-enabled OpenSSL present but are less recent than version 1.0.0 but greater than 0.9.7 - FIPS support was introduced in version 0.9.7 of OpenSSL (e.g. our SUSE 11 distro reports OpenSSL 0.9.8j-fips 07 Jan 2009).