Skip to content

Commit

Permalink
MDEV-14567: CRYPTO_set_mem_functions fails in FIPS mode
Browse files Browse the repository at this point in the history
If the CRYPTO_set_mem_functions fails just return success
from check_openssl_compatibility. The only case where
CRYPTO_set_mem_functions fails is the allow_customize==0 (aka FIPS
mode). The check_openssl_compatibility isn't able to complete unless
this function returns success.

ref: https://github.com/openssl/openssl/blob/OpenSSL_1_1_0g/crypto/mem.c#L34
  • Loading branch information
grooverdan authored and vuvova committed Feb 7, 2018
1 parent 10590dd commit d743b61
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion mysys_ssl/openssl.c
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ int check_openssl_compatibility()
EVP_MD_CTX *md5_ctx;

if (!CRYPTO_set_mem_functions(coc_malloc, NULL, NULL))
return 1;
return 0;

testing= 1;
alloc_size= alloc_count= 0;
Expand Down

0 comments on commit d743b61

Please sign in to comment.