control: reassign -1 freeradius 3.2.7+dfsg-1 control: affects -1 = src:openssl control: tags -1 patch upstream fixed-upstream control: forwarded -1 https://github.com/FreeRADIUS/freeradius-server/issues/5631
On 2025-08-16 21:54:55 [+0200], To [email protected] wrote: > The freeradius' debci breaks with 3.5.2. Upstream report has been filled, > this is just to keep track on the Debian side. This is a freeradius bug and has been fixed freeradius upstream. Please find attached commit 59e262f1134fe ("change "fips=no" to "-fips"") from the freeradius tree. Sebastian
>From 59e262f1134fef8d53d15ae963885a08c9ea8315 Mon Sep 17 00:00:00 2001 From: "Alan T. DeKok" <[email protected]> Date: Mon, 11 Aug 2025 10:47:34 -0400 Subject: [PATCH] change "fips=no" to "-fips" based on discussions with the OpenSSL developers in https://github.com/FreeRADIUS/freeradius-server/issues/5631 and https://docs.openssl.org/3.5/man7/property/#global-and-local --- src/main/tls.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/main/tls.c b/src/main/tls.c index c921ca75077ed..ba267983b1487 100644 --- a/src/main/tls.c +++ b/src/main/tls.c @@ -3661,7 +3661,7 @@ int tls_global_init(TLS_UNUSED bool spawn_flag, TLS_UNUSED bool check) CONF_modules_load_file(NULL, NULL, 0); #if OPENSSL_VERSION_NUMBER >= 0x30000000L - EVP_set_default_properties(NULL, "fips=no"); + EVP_set_default_properties(NULL, "-fips"); #endif /* -- 2.50.1
