31 May
2019
31 May
'19
5:49 p.m.
Which makes FIPS mode sort of useless. All it does is ensure that you don't *accidentally* use MD5.
Kind of, it's more like OpenSSL says it's in FIPS mode, and we use our own internal implementation of MD5.
Those changes might be portable back to v3. But it wouldn't be trivial.
It's not. -Arran