{"action":"created","issue":{"url":"https://api.github.com/repos/nodejs/node/issues/3819","labels_url":"https://api.github.com/repos/nodejs/node/issues/3819/labels{/name}","comments_url":"https://api.github.com/repos/nodejs/node/issues/3819/comments","events_url":"https://api.github.com/repos/nodejs/node/issues/3819/events","html_url":"https://github.com/nodejs/node/issues/3819","id":116864087,"number":3819,"title":"Node 4.2: Unable to run Node in non-FIPS mode if compiled with FIPS support","user":{"login":"lordjabez","id":5554910,"avatar_url":"https://avatars.githubusercontent.com/u/5554910?v=3","gravatar_id":"","url":"https://api.github.com/users/lordjabez","html_url":"https://github.com/lordjabez","followers_url":"https://api.github.com/users/lordjabez/followers","following_url":"https://api.github.com/users/lordjabez/following{/other_user}","gists_url":"https://api.github.com/users/lordjabez/gists{/gist_id}","starred_url":"https://api.github.com/users/lordjabez/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lordjabez/subscriptions","organizations_url":"https://api.github.com/users/lordjabez/orgs","repos_url":"https://api.github.com/users/lordjabez/repos","events_url":"https://api.github.com/users/lordjabez/events{/privacy}","received_events_url":"https://api.github.com/users/lordjabez/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-11-13T22:14:57Z","updated_at":"2015-11-13T22:16:27Z","closed_at":null,"body":"As currently implemented, when Node is compiled with FIPS support (`./configure fips`), there is no way to disable engaging FIPS mode during execution. This means that several functions that rely on non-FIPS approved algorithms (e.g. md5 hashing) will fail, as will any code that depends on them (most obviously, `npm`).\r\n\r\nWhat seems needed to me is a way to explicitly enable or disable FIPS operation each time node is invoked. The way this is done with the openssl CLI is via the OPENSSL_FIPS environment variable.\r\n\r\nIt is straightforward to add a similar capability to Node. A pull request with a suggested implementation is forthcoming."},"comment":{"url":"https://api.github.com/repos/nodejs/node/issues/comments/156574398","html_url":"https://github.com/nodejs/node/issues/3819#issuecomment-156574398","issue_url":"https://api.github.com/repos/nodejs/node/issues/3819","id":156574398,"user":{"login":"jasnell","id":439929,"avatar_url":"https://avatars.githubusercontent.com/u/439929?v=3","gravatar_id":"","url":"https://api.github.com/users/jasnell","html_url":"https://github.com/jasnell","followers_url":"https://api.github.com/users/jasnell/followers","following_url":"https://api.github.com/users/jasnell/following{/other_user}","gists_url":"https://api.github.com/users/jasnell/gists{/gist_id}","starred_url":"https://api.github.com/users/jasnell/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jasnell/subscriptions","organizations_url":"https://api.github.com/users/jasnell/orgs","repos_url":"https://api.github.com/users/jasnell/repos","events_url":"https://api.github.com/users/jasnell/events{/privacy}","received_events_url":"https://api.github.com/users/jasnell/received_events","type":"User","site_admin":false},"created_at":"2015-11-13T22:16:27Z","updated_at":"2015-11-13T22:16:27Z","body":"/cc @mhdawson "}}