This restores the functionality provided in 9ed8887c95b1a892b988c3dd30f1f5e7e48e0b56 and 4a535c4ac4d871a13798340b32f838f6fd346ddd, but was then removed in the 9.2 -> 9.3 rebase process, as I mentioned in the FIPS bug thread. In my preliminary testing, this patch allows our FIPS servers to talk to each other happily, so long as both sides of the conversation use DisableMTAES=yes. We (ServiceNow) will do some more testing on this as we can, but I'm submitting this upstream for the greater benefit, and hopefully to get some more-qualified-than-my-own eyes on this :)
This restores the functionality provided in 9ed8887c95b1a892b988c3dd30f1f5e7e48e0b56 and 4a535c4ac4d871a13798340b32f838f6fd346ddd, but was then removed in the 9.2 -> 9.3 rebase process, as I mentioned in the FIPS bug thread. In my preliminary testing, this patch allows our FIPS servers to talk to each other happily, so long as both sides of the conversation use
DisableMTAES=yes
. We (ServiceNow) will do some more testing on this as we can, but I'm submitting this upstream for the greater benefit, and hopefully to get some more-qualified-than-my-own eyes on this :)