Commit f15ec18f912 for nodejs
commit f15ec18f91243e2fd269d8db981f5ce4460c9069
Author: Filip Skokan <panva.ip@gmail.com>
Date: Wed Nov 11 12:55:37 2026 +0100
tools: restore FIPS testing with default OpenSSL
OpenSSL 4.1 falls back to SHA-256 for the md5 command when MD5 is
unavailable. Select MD5 explicitly through dgst to avoid a false
failure in the negative install check.
Use the default shared OpenSSL version for FIPS again instead of
pinning it to 3.5.
Signed-off-by: Filip Skokan <panva.ip@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/67248
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
diff --git a/tools/nix/openssl-fips.nix b/tools/nix/openssl-fips.nix
index e9aa1d9ef21..90e367d1bce 100644
--- a/tools/nix/openssl-fips.nix
+++ b/tools/nix/openssl-fips.nix
@@ -1,5 +1,5 @@
{
- openssl ? (import ./openssl-matrix.nix { }).openssl_3_5,
+ openssl ? (import ./openssl-matrix.nix { }).openssl,
}:
openssl.overrideAttrs (oldAttrs: {
@@ -48,7 +48,7 @@ openssl.overrideAttrs (oldAttrs: {
openssl mac \
-digest SHA256 -macopt key:key HMAC </dev/null >/dev/null
- openssl md5 </dev/null >/dev/null 2>&1 \
+ openssl dgst -md5 </dev/null >/dev/null 2>&1 \
&& echo "MD5 unexpectedly available with FIPS properties enabled" >&2 \
&& exit 1