Alexey Serbin has uploaded this change for review. ( 
http://gerrit.cloudera.org:8080/20059


Change subject: Fix OpenSSL3 FIPS_mode() issue on RHEL9.1
......................................................................

Fix OpenSSL3 FIPS_mode() issue on RHEL9.1

The function FIPS_mode() has been removed in OpenSSL3. Commit
c24629083e520614af50d0c4242e3d30f55689b6 addressed this issue, however a
build failure came up on RHEL9.1. webserver-test.cc fails to build on
RHEL9.1, with OpenSSL version 3.0.1. According to the OpenSSL
repository, FIPS_mode() has been removed with version 3.0.0 [1]. However
on RHEL9.1 OpenSSL contains a fips.h compatibility header, which maps
the new function to the old FIPS_mode function:
 #define FIPS_mode() EVP_default_properties_is_fips_enabled(NULL).
This means that the workaround in webserver-test.cc won't work as
FIPS_mode() is already defined in the compatibility header. This patch
refactors occurences of FIPS_mode() to
EVP_default_properties_is_fips_enabled(NULL) where OpenSSL version is
greater or equal to 3.

[1] https://github.com/openssl/openssl/\
commit/31b069ecea2c567de22b3874c8e71cc37c921ec9

Change-Id: Ib0728846afb07ee937fbe7d99f0057bd8197dd9a
Reviewed-on: http://gerrit.cloudera.org:8080/19951
Tested-by: Kudu Jenkins
Reviewed-by: Ashwani Raina <ara...@cloudera.com>
Reviewed-by: Attila Bukor <abu...@apache.org>
(cherry picked from commit acac73ecda83ec2390b5990cc132ca6968bfefdf)
---
M src/kudu/server/webserver-test.cc
M src/kudu/server/webserver.cc
M src/kudu/util/openssl_util.cc
M src/kudu/util/openssl_util.h
4 files changed, 24 insertions(+), 12 deletions(-)



  git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/59/20059/1
--
To view, visit http://gerrit.cloudera.org:8080/20059
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings

Gerrit-Project: kudu
Gerrit-Branch: branch-1.17.x
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ib0728846afb07ee937fbe7d99f0057bd8197dd9a
Gerrit-Change-Number: 20059
Gerrit-PatchSet: 1
Gerrit-Owner: Alexey Serbin <ale...@apache.org>
Gerrit-Reviewer: Marton Greber <greber...@gmail.com>

Reply via email to