For now disable RSAX ENGINE for FIPS builds: it sets a non-FIPS RSA

method which stops FIPS mode working.

1 files changed, 6 insertions, 0 deletions

diff --git a/Configure b/Configure
index 297392daf6..1818113cbc 100755
--- a/Configure
+++ b/Configure
@@ -961,6 +961,12 @@ if ($fips && $fipslibdir eq "")
 	$fipslibdir = $fipsdir . "/lib/";
 	}
 
+# RSAX ENGINE sets default non-FIPS RSA method.
+if ($fips)
+	{
+	$disabled{"rsax"} = "forced";
+	}
+
 # SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
 if (defined($disabled{"md5"}) || defined($disabled{"sha"})
     || (defined($disabled{"rsa"})