why cURL is allowed to use crypto's disallowed during FIPS mode?
Issue
cURL application while "working" in FIPS mode. It seems that the disallowed hashes continue to work while in FIPS mode. For example: because the MD5 algorithm is disallowed in FIPS mode, the following command runs even though it should ideally return an error:
curl --cipher rsa_rc4_128_md5 https://example.com
Environment
- Red Hat Enterprise Linux
- 5.x
- 6.x
- 7.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Close
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.