For now disable RSAX ENGINE for FIPS builds: it sets a non-FIPS RSA

method which stops FIPS mode working.

diff --git a/Configure b/Configure
index 297392daf64a5421d0e61a90e69096bf007ed357..1818113cbc64a53af85dcd7ea79d4dd2fdedb432 100755 (executable)
--- a/Configure
+++ b/Configure
@@ -961,6 +961,12 @@ if ($fips && $fipslibdir eq "")
        $fipslibdir = $fipsdir . "/lib/";
        }
 
+# RSAX ENGINE sets default non-FIPS RSA method.
+if ($fips)
+       {
+       $disabled{"rsax"} = "forced";
+       }
+
 # SSL 3.0 and TLS requires MD5 and SHA and either RSA or DSA+DH
 if (defined($disabled{"md5"}) || defined($disabled{"sha"})
     || (defined($disabled{"rsa"})