Configure: disable fips mode by default
authorDr. Matthias St. Pierre <matthias.st.pierre@ncp-e.com>
Sun, 25 Apr 2021 23:04:26 +0000 (01:04 +0200)
committerDr. Matthias St. Pierre <matthias.st.pierre@ncp-e.com>
Thu, 29 Apr 2021 09:26:58 +0000 (11:26 +0200)
Building the fips provider in addition to the default provider
effectively doubles the build time. Since many users will not
need fips support, it is now disabled by default.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/13684)

Configure

index a449496..83c9a6f 100755 (executable)
--- a/Configure
+++ b/Configure
@@ -512,6 +512,7 @@ my %deprecated_disablables = (
 # All of the following are disabled by default:
 
 our %disabled = ( # "what"         => "comment"
+                  "fips"                => "default",
                   "asan"                => "default",
                   "buildtest-c++"       => "default",
                   "crypto-mdebug"       => "default",