https://issues.apache.org/bugzilla/show_bug.cgi?id=54468
--- Comment #2 from Christopher Schultz <ch...@christopherschultz.net> --- In ssl_network.c:154, I'm not sure you wanted this: sizeof(ctx->context_id) The sizeof will likely return the word size on the machine instead of the maximum number of characters ctx->context_id can contain. I think the proper diff for that file is this: - MD5_DIGEST_LENGTH); + SHA_DIGEST_LENGTH); Without this patch, what is the behavior? Does OpenSSL explode when you try to put it into FIPS mode? With this patch, does everything seem to work? -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org