Michael Smith has submitted this change and it was merged. ( 
http://gerrit.cloudera.org:8080/24110 )

Change subject: IMPALA-14807: Fix squeasel MD5 issue in OpenSSL 3.0
......................................................................

IMPALA-14807: Fix squeasel MD5 issue in OpenSSL 3.0

OpenSSL 3.0 deprecates low-level hashing APIs such as MD5_Init() and
SHA1_Init(). Building in FIPS-compliant environments would fail.

This change replaces both MD5 and SHA1 implementations in squeasel.c
with the EVP digest interface using EVP APIs. This ensures the
compatibility with OpenSSL 3.0 to support FIPS 140-3.

Also, because the new EVP_MD_CTX_new() and EVP_MD_CTX_free() were
introduced in OpenSSL 1.1.0, this patch adds macros to map these
calls to old EVP_MD_CTX_create() and EVP_MD_CTX_destroy() on older
OpenSSL versions.

Tests:
Passed exhaustive build.
Tests the old interface also working in RHEL 7 with OpenSSL 1.0.2.

Change-Id: I806394633eaa73d973c27988fd303004487ddb4a
Reviewed-on: http://gerrit.cloudera.org:8080/24110
Reviewed-by: Joe McDonnell <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
Reviewed-by: Michael Smith <[email protected]>
---
M be/src/thirdparty/squeasel/squeasel.c
1 file changed, 80 insertions(+), 18 deletions(-)

Approvals:
  Joe McDonnell: Looks good to me, but someone else must approve
  Impala Public Jenkins: Verified
  Michael Smith: Looks good to me, approved

--
To view, visit http://gerrit.cloudera.org:8080/24110
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: Impala-ASF
Gerrit-Branch: master
Gerrit-MessageType: merged
Gerrit-Change-Id: I806394633eaa73d973c27988fd303004487ddb4a
Gerrit-Change-Number: 24110
Gerrit-PatchSet: 5
Gerrit-Owner: Yida Wu <[email protected]>
Gerrit-Reviewer: Impala Public Jenkins <[email protected]>
Gerrit-Reviewer: Joe McDonnell <[email protected]>
Gerrit-Reviewer: Michael Smith <[email protected]>
Gerrit-Reviewer: Yida Wu <[email protected]>

Reply via email to