Browse Source

MDEV-14567: CRYPTO_set_mem_functions fails in FIPS mode

If the CRYPTO_set_mem_functions fails just return success
from check_openssl_compatibility. The only case where
CRYPTO_set_mem_functions fails is the allow_customize==0 (aka FIPS
mode). The check_openssl_compatibility isn't able to complete unless
this function returns success.

ref: https://github.com/openssl/openssl/blob/OpenSSL_1_1_0g/crypto/mem.c#L34
pull/598/head
Daniel Black 8 years ago
committed by Sergei Golubchik
parent
commit
d743b61f89
  1. 2
      mysys_ssl/openssl.c

2
mysys_ssl/openssl.c

@ -51,7 +51,7 @@ int check_openssl_compatibility()
EVP_MD_CTX *md5_ctx;
if (!CRYPTO_set_mem_functions(coc_malloc, NULL, NULL))
return 1;
return 0;
testing= 1;
alloc_size= alloc_count= 0;

Loading…
Cancel
Save