FIPS mode does not work on RHEL-9 since the selftests fail. OpenSSL 1.1
in FIPS mode will not be supported on RHEL-9, so disable it. Apply
a minimal patch that keeps the library in the same state otherwise to
avoid problems with binary compatibility.
Resolves: rhbz#2013669
Signed-off-by: Clemens Lang <cllang@redhat.com>
Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable
when parsing certificates.
Resolves: rhbz#2063148
Signed-off-by: Clemens Lang <cllang@redhat.com>