You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@couchdb.apache.org by va...@apache.org on 2023/02/23 20:54:11 UTC
[couchdb-ci] branch allow-users-to-enable-fips-mode created (now 1023d2a)
This is an automated email from the ASF dual-hosted git repository.
vatamane pushed a change to branch allow-users-to-enable-fips-mode
in repository https://gitbox.apache.org/repos/asf/couchdb-ci.git
at 1023d2a Add --enable-fips Erlang configure option
This branch includes the following new commits:
new 1023d2a Add --enable-fips Erlang configure option
The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
[couchdb-ci] 01/01: Add --enable-fips Erlang configure option
Posted by va...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
vatamane pushed a commit to branch allow-users-to-enable-fips-mode
in repository https://gitbox.apache.org/repos/asf/couchdb-ci.git
commit 1023d2aebd4d7cc0b2b030b9c4d56c9c32329757
Author: Nick Vatamaniuc <va...@gmail.com>
AuthorDate: Thu Feb 23 15:43:00 2023 -0500
Add --enable-fips Erlang configure option
This doesn't, by itself enable FIPS mode, but allow Erlang enable it.
Not having this config setting means users won't be able to enable, even if their crypto library supports.
https://www.erlang.org/doc/apps/crypto/fips.html
After this `crypto:info_fips().` should start returning `not_enabled` as
opposed `not_supported` is it does currently.
---
bin/source-erlang.sh | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/bin/source-erlang.sh b/bin/source-erlang.sh
index 42f5acb..f664d66 100755
--- a/bin/source-erlang.sh
+++ b/bin/source-erlang.sh
@@ -80,7 +80,7 @@ fi
--without-debugger --without-observer --without-et --without-cosEvent \
--without-cosEventDomain --without-cosFileTransfer \
--without-cosNotification --without-cosProperty --without-cosTime \
- --without-cosTransactions --without-orber ${DISABLE_JIT}
+ --without-cosTransactions --without-orber --enable-fips ${DISABLE_JIT}
make -j $(nproc)
make install