From 3e85b572f33740694817aee67f721cdc048f224a Mon Sep 17 00:00:00 2001
From: Chris Conlon <chris@wolfssl.com>
Date: Thu, 23 Oct 2025 12:46:59 -0600
Subject: [PATCH] define HAVE_CTS for --enable-jni build, used by JCE
 AES/CTS/NoPadding mode

---
 configure.ac | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/configure.ac b/configure.ac
index 00e583e25..0a087c782 100644
--- a/configure.ac
+++ b/configure.ac
@@ -7572,6 +7572,9 @@ then
     AM_CFLAGS="$AM_CFLAGS -DWOLFSSL_ALWAYS_KEEP_SNI"
     AM_CFLAGS="$AM_CFLAGS -DWOLFSSL_TLS13_MIDDLEBOX_COMPAT"
 
+    # Enable openssl compat layer AES-CTS to maintain FIPS compatibility
+    AM_CFLAGS="$AM_CFLAGS -DHAVE_CTS"
+
     # Enable prereqs if not already enabled
     if test "x$ENABLED_DTLS" = "xno"
     then