From c1629c4ccdb12c3bc2573f102ef95051ff51110d Mon Sep 17 00:00:00 2001 From: David Benoit Date: Thu, 5 Sep 2024 10:54:47 -0400 Subject: [PATCH] Only load openssl if fips == "1" This commit avoids loading openssl whenever GOLANG_FIPS is not 1. Previously only an unset variable would cause the library load to be skipped, but users may also expect to be able to set eg. GOLANG_FIPS=0 in environments without openssl. --- patches/018-fix-std-crypto.patch | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/patches/018-fix-std-crypto.patch b/patches/018-fix-std-crypto.patch index e31c666c89..cf7595c21f 100644 --- a/patches/018-fix-std-crypto.patch +++ b/patches/018-fix-std-crypto.patch @@ -17,7 +17,7 @@ index 3d3a9a36ee..b7a65a1f6e 100644 + fips = "1" + } + -+ if fips == "" { ++ if fips != "1" { + return + } +