From 1de960fe55528e297e6aa2f635fe92f3427c4f29 Mon Sep 17 00:00:00 2001 From: John McCrae Date: Fri, 17 May 2024 11:23:29 -0700 Subject: [PATCH] Patching openssl.cnf to add fips section when needed Signed-off-by: John McCrae --- config/software/openssl.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/config/software/openssl.rb b/config/software/openssl.rb index 123587834..0206d9104 100644 --- a/config/software/openssl.rb +++ b/config/software/openssl.rb @@ -285,6 +285,7 @@ project.overrides[:openssl] && ChefUtils::VersionString.new(project.overrides[:openssl][:version]).satisfies?(">= 3.0") + openssl_gem_version = project.overrides.dig(:ruby, :openssl_gem) || "3.0.0" # use the same version as ruby 3.1.2 version has as default, so that the chef gemfile inclusion of the # same openssl gem version is redundant for ruby 3.1[.2] projects command "curl https://rubygems.org/downloads/openssl-#{openssl_gem_version}.gem --output openssl-#{openssl_gem_version}.gem"