Re: Allow tests to pass in OpenSSL FIPS mode

On 05.10.23 22:04, Tom Lane wrote:
> On the way to testing this, I discovered that we have a usability
> regression with recent OpenSSL releases. The Fedora 35 installation
> I used to use for testing FIPS-mode behavior would produce errors like

> +ERROR: could not compute MD5 hash: disabled for FIPS

> In the shiny new Fedora 38 installation I just set up for the
> same purpose, I'm seeing

> +ERROR: could not compute MD5 hash: unsupported

This makes sense, because the older OpenSSL works basically like

if (FIPS_mode()) {
specific_error();
}

while the new one has all crypto methods in modules, and if you load the
fips module, then some crypto methods just don't exist.