https://issues.apache.org/bugzilla/show_bug.cgi?id=54468

--- Comment #2 from Christopher Schultz <ch...@christopherschultz.net> ---
In ssl_network.c:154, I'm not sure you wanted this:

    sizeof(ctx->context_id)

The sizeof will likely return the word size on the machine instead of the
maximum number of characters ctx->context_id can contain.

I think the proper diff for that file is this:

-                                   MD5_DIGEST_LENGTH);
+                                   SHA_DIGEST_LENGTH);

Without this patch, what is the behavior? Does OpenSSL explode when you try to
put it into FIPS mode? With this patch, does everything seem to work?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to