Merge pull request #45 from OpenVoxProject/fips

Some notes to make it clear what OpenSSL is being used

Author: nmburgan

configs/projects/_shared-agent-components.rb

@@ -21,9 +21,9 @@
   proj.component 'libyaml'
 end
 
-if proj.openssl_version =~ /^3\./
+if proj.openssl_version =~ /^3\./ # All Ruby 3 builds will use OpenSSL 3, including FIPS
   proj.component "openssl-#{proj.openssl_version}"
-elsif platform.name =~ /^redhatfips-.*/
+elsif platform.name =~ /^redhatfips-.*/ # This is only Ruby 2 builds
   proj.component "openssl-1.1.1-fips"
 else
   proj.component "openssl-fips-2.0.16" if platform.name =~ /windowsfips-/ && proj.openssl_version =~ /1.0.2/

configs/projects/_shared-agent-settings.rb

@@ -147,9 +147,10 @@
 # Load default compiler settings
 instance_eval File.read('configs/projects/_shared-compiler-settings.rb')
 
+# Always use OpenSSL 3, even on FIPS, when we're building for Ruby 3
 if ruby_version_x == "3"
   proj.setting(:openssl_version, '3.0')
-elsif platform.name =~ /^redhatfips-/
+elsif platform.name =~ /^redhatfips-/ # This is only Ruby 2 builds
   proj.setting(:openssl_version, '1.1.1-fips')
 elsif platform.name =~ /^windowsfips-/
   proj.setting(:openssl_version, '1.0.2')