diff options
| author | Vít Ondruch <vondruch@redhat.com> | 2020-08-25 15:04:54 +0300 |
|---|---|---|
| committer | Michael Dawson <mdawson@devrus.com> | 2021-02-26 02:12:58 +0300 |
| commit | f392ac0bbe3f3757872b9c7cdc785928034b62e9 (patch) | |
| tree | 39bf31adb1c4d24b74f717e7e0272bbccc18ac5a /src/node_options.cc | |
| parent | 148bc33347266a0293d52859cbf9580ade9b6cbe (diff) | |
crypto: make FIPS related options always awailable
There is no reason to hide FIPS functionality behind build flags.
OpenSSL always provide the information about FIPS availability via
`FIPS_mode()` function.
This makes the user experience more consistent, because the OpenSSL
library is always queried and the `crypto.getFips()` always returns
OpenSSL settings.
Fixes #34903
PR-URL: https://github.com/nodejs/node/pull/36341
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Michael Dawson <midawson@redhat.com>
Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
Diffstat (limited to 'src/node_options.cc')
| -rw-r--r-- | src/node_options.cc | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/src/node_options.cc b/src/node_options.cc index d292231218f..76beb2225ce 100644 --- a/src/node_options.cc +++ b/src/node_options.cc @@ -766,7 +766,6 @@ PerProcessOptionsParser::PerProcessOptionsParser( &PerProcessOptions::ssl_openssl_cert_store); Implies("--use-openssl-ca", "[ssl_openssl_cert_store]"); ImpliesNot("--use-bundled-ca", "[ssl_openssl_cert_store]"); -#if NODE_FIPS_MODE AddOption("--enable-fips", "enable FIPS crypto at startup", &PerProcessOptions::enable_fips_crypto, @@ -775,7 +774,6 @@ PerProcessOptionsParser::PerProcessOptionsParser( "force FIPS crypto (cannot be disabled)", &PerProcessOptions::force_fips_crypto, kAllowedInEnvironment); -#endif AddOption("--secure-heap", "total size of the OpenSSL secure heap", &PerProcessOptions::secure_heap, |