Hello Kudu Jenkins,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/19951
to look at the new patch set (#2).
Change subject: Fix OpenSSL3 FIPS_mode() issue on RHEL9.1
......................................................................
Fix OpenSSL3 FIPS_mode() issue on RHEL9.1
webserver-test.cc fails to build on RHEL9.1, with OpenSSL version 3.0.1.
According to the OpenSSL repository, FIPS_mode() has been removed with
version 3.0.0 [1].
However on RHEL9.1 OpenSSL contains a fips.h which maps the new function
to the old FIPS_mode function:
# define FIPS_mode() EVP_default_properties_is_fips_enabled(NULL).
Not sure about any graceful solution to this issue. Bumped the OpenSSL
verision in the if statement to 3.0.1 in webserver-test.
Warning: a distro running upstream OpenSSL {3.0.0, 3.0.1} will fail to
build because of this patch. (as FIPS_mode won't be defined)
Did a couple tests on major 'modern' distros:
SLES15 -> the default OpenSSL version is still 1.1.1,
Ubuntu22 -> the default is OpenSSL 3.0.2 which works as expected,
RHEL9.1 -> with this patch, it works.
There are still runtime issues with OpenSSL3, which I'm planning to
address in future patches.
[1] https://github.com/openssl/openssl/\
commit/31b069ecea2c567de22b3874c8e71cc37c921ec9
Change-Id: Ib0728846afb07ee937fbe7d99f0057bd8197dd9a
---
M src/kudu/server/webserver-test.cc
1 file changed, 5 insertions(+), 1 deletion(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/51/19951/2
--
To view, visit http://gerrit.cloudera.org:8080/19951
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: Ib0728846afb07ee937fbe7d99f0057bd8197dd9a
Gerrit-Change-Number: 19951
Gerrit-PatchSet: 2
Gerrit-Owner: Marton Greber <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
