Joe McDonnell has uploaded this change for review. ( http://gerrit.cloudera.org:8080/20072
Change subject: IMPALA-12211: Adapt FIPS detection to handle OpenSSL 3 ...................................................................... IMPALA-12211: Adapt FIPS detection to handle OpenSSL 3 Various pieces of our code detect FIPS and enable/disable code and tests accordingly (e.g. old hashing algorithms like MD5 are not allowed). The detection logic currently uses FIPS_mode(), but FIPS_mode() was removed in OpenSSL 3. The OpenSSL 3 equivalent is EVP_default_properties_is_fips_enabled(). This adds a new IsFIPSMode() function in util/openssl-util.h that uses OPENSSL_VERSION_NUMBER to dispatch to either FIPS_mode() or EVP_default_properties_is_fips_enabled(). This also pulls in the Kudu changes to handle this for KRPC. The original upstream Kudu commits were: c24629083e : Follow-up on OpenSSL 3 FIPS_mode removal acac73ecda : Fix OpenSSL3 FIPS_mode() issue on RHEL9.1 Testing: - Built on Ubuntu 22 / Redhat 9 with OpenSSL 3 Change-Id: I78571c8086bea06bf7b355cfe86a16f190cde067 --- M be/src/exprs/expr-test.cc M be/src/exprs/mask-functions-ir.cc M be/src/exprs/utility-functions-ir.cc M be/src/kudu/util/openssl_util.cc M be/src/kudu/util/openssl_util.h M be/src/util/openssl-util.h M be/src/util/webserver-test.cc M be/src/util/webserver.cc 8 files changed, 37 insertions(+), 21 deletions(-) git pull ssh://gerrit.cloudera.org:29418/Impala-ASF refs/changes/72/20072/1 -- To view, visit http://gerrit.cloudera.org:8080/20072 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: newchange Gerrit-Change-Id: I78571c8086bea06bf7b355cfe86a16f190cde067 Gerrit-Change-Number: 20072 Gerrit-PatchSet: 1 Gerrit-Owner: Joe McDonnell <[email protected]>
