https://bz.apache.org/bugzilla/show_bug.cgi?id=59163

            Bug ID: 59163
           Summary: TC Native 1.2.0 & later does not compile with
                    openssl-fips
           Product: Tomcat Native
           Version: 1.2.4
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Library
          Assignee: [email protected]
          Reporter: [email protected]

Compiling against openssl-fips (1.0.2g + fips-2.0.12), tomcat-native 1.2.0 and
later fails with undeclared symbol errors, e.g., 
src/sslcontext.c fails at line 1148 with SSL_TLSEXT_ERR_ALERT_FATAL undeclared,
and at line 1210 with SSL_TLSEXT_ERR_OK undeclared.  src/sslutils.c fails,
e.g., at line 618 with SSL_TLSEXT_ERR_OK undefined.

This is apparently because TLSEXT is disabled in openssl in FIPS mode.
TC-native does not check HAVE_TLSEXT in the above-referenced source code.

Compilation is using gcc 4.8.5 on Linux CentOS 7.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to