Need an Openssl initialization call for Openssl 1.1.x and above. about haproxy

[chipitsine]

I wonder what is FIPS support status on HAProxy side. is it considered as first class citizen or ...

[wtarreau]

I'm of those who consider that it's the most possibly insecure type of deployment since most of the time you lose your certification if you apply the slightest patch, hence fixes cannot be deployed in FIPS environments... But some people do need them due to prehistoric administration rules and cannot work around them at all. So if there's anything we can do at a very low cost (i.e. no impact for others) I think that's fine. However I don't expect any particular CI effort on this.

[madhanrajrm]

@wlallemand so can we have this fix committed ? Because it is very simple change to just invoke an initialisation call. I have tested all TLS functionalities i could see things work fine.