https://issues.apache.org/bugzilla/show_bug.cgi?id=56027

--- Comment #5 from Christopher Schultz <ch...@christopherschultz.net> ---
(In reply to Rob Sanders from comment #4)
> Proposed fix - in TCN src/ssl.c fipsModeSet() routine, call FIPS_mode()
> before calling FIPS_mode_set() to see if we're already in fips mode.  If so,
> just return 1, otherwise attempt to set to FIPS mode.

See my comment above for the behavior I'd like to see, which is incompatible
with this proposal.

> There is no way that
> I know of to get an intelligent message back through the JNI without other
> changes, so if a status messages of "Already in FIPS mode" would be
> desirable the FIPS_mode() routine will need to be exposed through JNI and
> checked from the AprLifecycleListener code before calling fipsModeSet.

This was my plan.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to