You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@couchdb.apache.org by va...@apache.org on 2023/02/23 20:54:12 UTC

[couchdb-ci] 01/01: Add --enable-fips Erlang configure option

This is an automated email from the ASF dual-hosted git repository.

vatamane pushed a commit to branch allow-users-to-enable-fips-mode
in repository https://gitbox.apache.org/repos/asf/couchdb-ci.git

commit 1023d2aebd4d7cc0b2b030b9c4d56c9c32329757
Author: Nick Vatamaniuc <va...@gmail.com>
AuthorDate: Thu Feb 23 15:43:00 2023 -0500

    Add --enable-fips Erlang configure option
    
    This doesn't, by itself enable FIPS mode, but allow Erlang enable it.
    
    Not having this config setting means users won't be able to enable, even if their crypto library supports.
    
    https://www.erlang.org/doc/apps/crypto/fips.html
    
    After this `crypto:info_fips().` should start returning `not_enabled` as
    opposed `not_supported` is it does currently.
---
 bin/source-erlang.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/source-erlang.sh b/bin/source-erlang.sh
index 42f5acb..f664d66 100755
--- a/bin/source-erlang.sh
+++ b/bin/source-erlang.sh
@@ -80,7 +80,7 @@ fi
   --without-debugger --without-observer --without-et  --without-cosEvent \
   --without-cosEventDomain --without-cosFileTransfer \
   --without-cosNotification --without-cosProperty --without-cosTime \
-  --without-cosTransactions --without-orber ${DISABLE_JIT}
+  --without-cosTransactions --without-orber --enable-fips ${DISABLE_JIT}
 
 make -j $(nproc)
 make install