why cURL is allowed to use crypto's disallowed during FIPS mode?
Issue
cURL application while "working" in FIPS mode. It seems that the disallowed hashes continue to work while in FIPS mode. For example: because the MD5 algorithm is disallowed in FIPS mode, the following command runs even though it should ideally return an error:
curl --cipher rsa_rc4_128_md5 https://example.com
Environment
- Red Hat Enterprise Linux
- 5.x
- 6.x
- 7.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
