diff options
| author | Daniel Bevenius <daniel.bevenius@gmail.com> | 2021-04-26 06:52:16 +0300 |
|---|---|---|
| committer | Michael Dawson <mdawson@devrus.com> | 2021-05-14 23:15:19 +0300 |
| commit | 0d7644fddaba7979b08805c6c8fff4ab0677a72e (patch) | |
| tree | db7ef4623300d31036a7e7bad3bbe71bc401a08b /configure.py | |
| parent | 35b445d089682aa08f18e383cbc7acc9e5ac956d (diff) | |
build,src,test,doc: enable FIPS for OpenSSL 3.0
This commit enables FIPS when Node.js is dynamically linking against
quictls/openssl-3.0.
BUILDING.md has been updated with instructions to configure and build
quictls/openssl 3.0.0-alpha-15 and includes a couple of work-arounds
which I believe are fixed in alpha-16 and can be removed when alpha-16
is available. The information might be a little too detailed/verbose
but I thought it would be helpful to at least initially include all the
steps.
PR-URL: https://github.com/nodejs/node/pull/38633
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Michael Dawson <midawson@redhat.com>
Diffstat (limited to 'configure.py')
| -rwxr-xr-x | configure.py | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/configure.py b/configure.py index 9ec7da8924b..895a0869cbc 100755 --- a/configure.py +++ b/configure.py @@ -1456,6 +1456,12 @@ def configure_openssl(o): if options.openssl_fips or options.openssl_fips == '': error('FIPS is not supported in this version of Node.js') + if options.openssl_is_fips and not options.shared_openssl: + error('--openssl-is-fips is only available with --shared-openssl') + + if options.openssl_is_fips: + o['defines'] += ['OPENSSL_FIPS'] + if options.shared_openssl: variables['openssl_quic'] = b(getsharedopensslhasquic.get_has_quic(options.__dict__['shared_openssl_includes'])) |