LOG-3933: partial fix to OpenSSL in fips mode

[jcantrill]

Description

This PR:

• adds patch to partially fix openssl 3.0 / RHEL9 on FIPS enabled cluster

Links

• https://issues.redhat.com/browse/LOG-3933

[openshift-ci-robot]

@jcantrill: This pull request references LOG-3933 which is a valid jira issue.

In response to this:

Description

This PR:

• adds patch to partially fix openssl on FIPS enabled cluster

Links

• https://issues.redhat.com/browse/LOG-3933

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[openshift-ci-robot]

@jcantrill: This pull request references LOG-3933 which is a valid jira issue.

In response to this:

Description

This PR:

• adds patch to partially fix openssl 3.0 / RHEL9 on FIPS enabled cluster

Links

• https://issues.redhat.com/browse/LOG-3933

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[jcantrill]

/hold

[junaruga]

Hi, just keep in mind, that there are some other issues in the Ruby OpenSSL bindings on the FIPS mode. I am working on it.
ruby/openssl#603 (comment)

[alanconway]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: alanconway, jcantrill

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [alanconway,jcantrill]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[jcantrill]

closing as this will be resolved once ubi9.4 lands with availability of latest ruby 3.1

[junaruga]

I think you may also be able to resolve your issue just by using openssl gem version 3.2.0 including some fixes for the FIPS instead of the openssl gem version 3.1.0 and fluentd/openssl.source0001.patch used in this PR.