Skip to content
This repository has been archived by the owner on Apr 14, 2021. It is now read-only.

[CompactIndex] Disable when openssl is in fips mode #5222

Merged
merged 2 commits into from
Dec 15, 2016
Merged

Conversation

segiddins
Copy link
Member

Should close #4989

@segiddins
Copy link
Member Author

Of course, Ruby < 2 doesn't have that constant

@segiddins segiddins mentioned this pull request Dec 7, 2016
require "openssl"
return false if defined?(OpenSSL::OPENSSL_FIPS) && OpenSSL::OPENSSL_FIPS
rescue LoadError
nil

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do you want to return false in both cases for consistency?

@trevor-vaughan
Copy link

@segiddins Validated that this change works properly on a system with FIPS enabled.

As stated in #4989, it is a LOT slower when resolving dependencies but it does work correctly which should meet the requirements of anyone in a FIPS restricted environment.

@breisig
Copy link

breisig commented Dec 14, 2016

@segiddins Any update of getting this merged?

@segiddins
Copy link
Member Author

@indirect r?

@indirect
Copy link
Member

@bundlerbot r+

@bundlerbot
Copy link
Collaborator

📌 Commit 8075f8c has been approved by indirect

@bundlerbot
Copy link
Collaborator

⌛ Testing commit 8075f8c with merge 869bf08...

bundlerbot added a commit that referenced this pull request Dec 15, 2016
[CompactIndex] Disable when openssl is in fips mode

Should close #4989
@bundlerbot
Copy link
Collaborator

☀️ Test successful - status-travis
Approved by: indirect
Pushing 869bf08 to master...

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

FIPS compatibility
5 participants