Skip to content

Commit

Permalink
daemon:connect: don't use FIPS_mode_set with OpenSSL 3 (#3)
Browse files Browse the repository at this point in the history
This function has been removed in OpenSSL 3, replaced by
EVP_default_properties_enable_fips. See
https://www.openssl.org/docs/man3.0/man7/migration_guide.html

Co-authored-by: ureyNZB <urey.by@gmail.com>
  • Loading branch information
ureyNZB and ureyDev authored Aug 22, 2023
1 parent 5e26d52 commit f982d89
Showing 1 changed file with 4 additions and 0 deletions.
4 changes: 4 additions & 0 deletions daemon/connect/TlsSocket.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -189,7 +189,11 @@ void TlsSocket::Final()

#ifdef HAVE_OPENSSL
#ifndef LIBRESSL_VERSION_NUMBER
#if OPENSSL_VERSION_NUMBER < 0x30000000L
FIPS_mode_set(0);
#else
EVP_default_properties_enable_fips(NULL, 0);
#endif
#endif
#ifdef NEED_CRYPTO_LOCKING
CRYPTO_set_locking_callback(nullptr);
Expand Down

0 comments on commit f982d89

Please sign in to comment.