Joe McDonnell has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/20072 )
Change subject: IMPALA-12211: Adapt FIPS detection to handle OpenSSL 3 ...................................................................... IMPALA-12211: Adapt FIPS detection to handle OpenSSL 3 Various pieces of our code detect FIPS and enable/disable code and tests accordingly (e.g. old hashing algorithms like MD5 are not allowed). The detection logic currently uses FIPS_mode(), but FIPS_mode() was removed in OpenSSL 3. The OpenSSL 3 equivalent is EVP_default_properties_is_fips_enabled(). This adds a new IsFIPSMode() function in util/openssl-util.h that uses OPENSSL_VERSION_NUMBER to dispatch to either FIPS_mode() or EVP_default_properties_is_fips_enabled(). This also pulls in the Kudu changes to handle this for KRPC. The original upstream Kudu commits were: c24629083e : Follow-up on OpenSSL 3 FIPS_mode removal acac73ecda : Fix OpenSSL3 FIPS_mode() issue on RHEL9.1 Testing: - Built on Ubuntu 22 / Redhat 9 with OpenSSL 3 Change-Id: I78571c8086bea06bf7b355cfe86a16f190cde067 Reviewed-on: http://gerrit.cloudera.org:8080/20072 Reviewed-by: Michael Smith <[email protected]> Tested-by: Impala Public Jenkins <[email protected]> Reviewed-by: Wenzhe Zhou <[email protected]> --- M be/src/exprs/expr-test.cc M be/src/exprs/mask-functions-ir.cc M be/src/exprs/utility-functions-ir.cc M be/src/kudu/util/openssl_util.cc M be/src/kudu/util/openssl_util.h M be/src/util/openssl-util.h M be/src/util/webserver-test.cc M be/src/util/webserver.cc 8 files changed, 37 insertions(+), 21 deletions(-) Approvals: Michael Smith: Looks good to me, approved Impala Public Jenkins: Verified Wenzhe Zhou: Looks good to me, approved -- To view, visit http://gerrit.cloudera.org:8080/20072 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: Impala-ASF Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: I78571c8086bea06bf7b355cfe86a16f190cde067 Gerrit-Change-Number: 20072 Gerrit-PatchSet: 2 Gerrit-Owner: Joe McDonnell <[email protected]> Gerrit-Reviewer: Impala Public Jenkins <[email protected]> Gerrit-Reviewer: Joe McDonnell <[email protected]> Gerrit-Reviewer: Michael Smith <[email protected]> Gerrit-Reviewer: Wenzhe Zhou <[email protected]>
