Skip to content

Commit e9bfa56

Browse files
authored
Merge pull request #1678 from anthotse/issue1661
Update openssl installation change in Dockerfile
2 parents eaaa167 + 9dcbdea commit e9bfa56

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

Dockerfile

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -63,6 +63,10 @@ COPY --from=rpm-provider /tmp/rpms/* /tmp/download/
6363
# cd, ls, cat, vim, tcpdump, are for debugging
6464
RUN clean_install amazon-efs-utils true && \
6565
clean_install crypto-policies true && \
66+
# Remove existing OpenSSL packages and install version 3.0.8 packages. Newer OpenSSL version
67+
# have an updated method of enabling fips, which we do not support yet.
68+
remove_package "openssl openssl-libs openssl-fips-provider-latest" && \
69+
clean_install "openssl-3.0.8 openssl-libs-3.0.8 openssl-fips-provider-certified-3.0.8" true && \
6670
install_binary \
6771
/usr/bin/cat \
6872
/usr/bin/cd \
@@ -75,7 +79,6 @@ RUN clean_install amazon-efs-utils true && \
7579
/usr/bin/mount \
7680
/usr/bin/umount \
7781
/sbin/mount.nfs4 \
78-
/usr/bin/openssl \
7982
/usr/bin/sed \
8083
/usr/bin/stat \
8184
/usr/bin/stunnel \

0 commit comments

Comments
 (0)