comment out default_sect activate

Signed-off-by: Thomas Powell <[email protected]>

config/software/openssl.rb

@@ -220,6 +220,24 @@
  # Updating the openssl.cnf file to enable the fips provider
  command "sed -i -e 's|# .include fipsmodule.cnf|.include #{fips_cnf_file}|g' #{install_dir}/embedded/ssl/openssl.cnf"
  command "sed -i -e 's|# fips = fips_sect|fips = fips_sect|g' #{install_dir}/embedded/ssl/openssl.cnf"
+ contents=File.read("#{install_dir}/embedded/ssl/openssl.cnf")
+ new_file=[]
+ comment_next = false
+ contents.each_line do |line|
+ if comment_next
+ line.gsub!(/^/, "#")
+ comment_next = false
+ end
+ new_file << line
+ if line.include?('[default_sect]')
+ comment_next = true
+ end
+ end
+ File.open("#{install_dir}/embedded/ssl/openssl.cnf", "wt") do |f|
+ new_file.each do |line|
+ f.puts line
+ end
+ end
  # command "sed -i -e 's|default = default_sect|#default = default_sect|g' #{install_dir}/embedded/ssl/openssl.cnf" # this might be unnecessary
  command "#{windows? ? 'Perl.exe' : ''} ./util/wrap.pl -fips #{install_dir}/embedded/bin/openssl list -provider-path providers -provider fips -providers"
  end