diff options
author | Daniel Bevenius <daniel.bevenius@gmail.com> | 2019-01-09 13:54:08 +0300 |
---|---|---|
committer | Daniel Bevenius <daniel.bevenius@gmail.com> | 2019-01-17 07:25:36 +0300 |
commit | 7e7266a80325fb10616f3a4cf885fb40b49c9352 (patch) | |
tree | 842a17dba3421b3251c90cb67bbc95f6363a7d5a /node.gypi | |
parent | b7bbd871afb7e0bc02b92ebdbd785371439e5295 (diff) |
build: introduce --openssl-is-fips flag
This commit introduces a new configuration flag named
--openssl-is-fips which is intended to be used when linking against
an OpenSSL library that is FIPS compatible.
The motivation for this is that Red Hat Enterprise Linux 8 (RHEL8)
comes with OpenSSL 1.1.1 and includes FIPS support, and we would
like to be able to dynamically link against this version and also have
FIPS features enabled in node, like would be done when statically
linking and using the --openssl-fips flag.
The suggestion here is to introduce a new flag:
$ ./configure --help
...
--openssl-is-fips specifies that the shared OpenSSL version is FIPS
compatible
This flag could be used in combination with the shared-openssl flag:
$ ./configure --shared-openssl ---openssl-is-fips
This will enable FIPS support in node and the runtime flags will be
availalbe to enable FIPS (--enable-fips, --force-fips).
PR-URL: https://github.com/nodejs/node/pull/25412
Reviewed-By: Sam Roberts <vieuxtech@gmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Diffstat (limited to 'node.gypi')
-rw-r--r-- | node.gypi | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/node.gypi b/node.gypi index f6787e5ad8f..d4b3c9c8d7d 100644 --- a/node.gypi +++ b/node.gypi @@ -315,7 +315,7 @@ [ 'node_use_openssl=="true"', { 'defines': [ 'HAVE_OPENSSL=1' ], 'conditions': [ - ['openssl_fips != ""', { + ['openssl_fips != "" or openssl_is_fips=="true"', { 'defines': [ 'NODE_FIPS_MODE' ], }], [ 'node_shared_openssl=="false"', { |