Sync from SUSE:SLFO:Main gnutls revision fd9267dc71bcb0d2bf242bde6c5a6847
This commit is contained in:
parent
7700a6dcb2
commit
df45cf341d
BIN
gnutls-3.8.3.tar.xz
(Stored with Git LFS)
BIN
gnutls-3.8.3.tar.xz
(Stored with Git LFS)
Binary file not shown.
Binary file not shown.
BIN
gnutls-3.8.8.tar.xz
(Stored with Git LFS)
Normal file
BIN
gnutls-3.8.8.tar.xz
(Stored with Git LFS)
Normal file
Binary file not shown.
BIN
gnutls-3.8.8.tar.xz.sig
Normal file
BIN
gnutls-3.8.8.tar.xz.sig
Normal file
Binary file not shown.
@ -1,418 +0,0 @@
|
||||
From 1c4701ffc342259fc5965d5a0de90d87f780e3e5 Mon Sep 17 00:00:00 2001
|
||||
From: Daiki Ueno <ueno@gnu.org>
|
||||
Date: Fri, 12 Jan 2024 17:56:58 +0900
|
||||
Subject: [PATCH] nettle: avoid normalization of mpz_t in deterministic ECDSA
|
||||
|
||||
This removes function calls that potentially leak bit-length of a
|
||||
private key used to calculate a nonce in deterministic ECDSA. Namely:
|
||||
|
||||
- _gnutls_dsa_compute_k has been rewritten to work on always
|
||||
zero-padded mp_limb_t arrays instead of mpz_t
|
||||
- rnd_mpz_func has been replaced with rnd_datum_func, which is backed
|
||||
by a byte array instead of an mpz_t value
|
||||
|
||||
Signed-off-by: Daiki Ueno <ueno@gnu.org>
|
||||
---
|
||||
lib/nettle/int/dsa-compute-k.c | 70 +++++++++++++++++++++----------
|
||||
lib/nettle/int/dsa-compute-k.h | 23 +++++++++-
|
||||
lib/nettle/int/ecdsa-compute-k.c | 28 +++----------
|
||||
lib/nettle/int/ecdsa-compute-k.h | 4 +-
|
||||
lib/nettle/pk.c | 65 +++++++++++++++++++++-------
|
||||
tests/sign-verify-deterministic.c | 2 +-
|
||||
6 files changed, 127 insertions(+), 65 deletions(-)
|
||||
|
||||
diff --git a/lib/nettle/int/dsa-compute-k.c b/lib/nettle/int/dsa-compute-k.c
|
||||
index 8ff5739c2b..2fcb2bb80e 100644
|
||||
--- a/lib/nettle/int/dsa-compute-k.c
|
||||
+++ b/lib/nettle/int/dsa-compute-k.c
|
||||
@@ -31,19 +31,30 @@
|
||||
#include "mpn-base256.h"
|
||||
#include <string.h>
|
||||
|
||||
-#define BITS_TO_LIMBS(bits) (((bits) + GMP_NUMB_BITS - 1) / GMP_NUMB_BITS)
|
||||
+/* For mini-gmp */
|
||||
+#ifndef GMP_LIMB_BITS
|
||||
+#define GMP_LIMB_BITS GMP_NUMB_BITS
|
||||
+#endif
|
||||
|
||||
-/* The maximum size of q, chosen from the fact that we support
|
||||
- * 521-bit elliptic curve generator and 512-bit DSA subgroup at
|
||||
- * maximum. */
|
||||
-#define MAX_Q_BITS 521
|
||||
-#define MAX_Q_SIZE ((MAX_Q_BITS + 7) / 8)
|
||||
-#define MAX_Q_LIMBS BITS_TO_LIMBS(MAX_Q_BITS)
|
||||
+static inline int is_zero_limb(mp_limb_t x)
|
||||
+{
|
||||
+ x |= (x << 1);
|
||||
+ return ((x >> 1) - 1) >> (GMP_LIMB_BITS - 1);
|
||||
+}
|
||||
+
|
||||
+static int sec_zero_p(const mp_limb_t *ap, mp_size_t n)
|
||||
+{
|
||||
+ volatile mp_limb_t w;
|
||||
+ mp_size_t i;
|
||||
|
||||
-#define MAX_HASH_BITS (MAX_HASH_SIZE * 8)
|
||||
-#define MAX_HASH_LIMBS BITS_TO_LIMBS(MAX_HASH_BITS)
|
||||
+ for (i = 0, w = 0; i < n; i++)
|
||||
+ w |= ap[i];
|
||||
|
||||
-int _gnutls_dsa_compute_k(mpz_t k, const mpz_t q, const mpz_t x,
|
||||
+ return is_zero_limb(w);
|
||||
+}
|
||||
+
|
||||
+int _gnutls_dsa_compute_k(mp_limb_t *h, const mp_limb_t *q, const mp_limb_t *x,
|
||||
+ mp_size_t qn, mp_bitcnt_t q_bits,
|
||||
gnutls_mac_algorithm_t mac, const uint8_t *digest,
|
||||
size_t length)
|
||||
{
|
||||
@@ -51,9 +62,6 @@ int _gnutls_dsa_compute_k(mpz_t k, const mpz_t q, const mpz_t x,
|
||||
uint8_t K[MAX_HASH_SIZE];
|
||||
uint8_t xp[MAX_Q_SIZE];
|
||||
uint8_t tp[MAX_Q_SIZE];
|
||||
- mp_limb_t h[MAX(MAX_Q_LIMBS, MAX_HASH_LIMBS)];
|
||||
- mp_bitcnt_t q_bits = mpz_sizeinbase(q, 2);
|
||||
- mp_size_t qn = mpz_size(q);
|
||||
mp_bitcnt_t h_bits = length * 8;
|
||||
mp_size_t hn = BITS_TO_LIMBS(h_bits);
|
||||
size_t nbytes = (q_bits + 7) / 8;
|
||||
@@ -62,6 +70,7 @@ int _gnutls_dsa_compute_k(mpz_t k, const mpz_t q, const mpz_t x,
|
||||
mp_limb_t cy;
|
||||
gnutls_hmac_hd_t hd;
|
||||
int ret = 0;
|
||||
+ mp_limb_t scratch[MAX_Q_LIMBS];
|
||||
|
||||
if (unlikely(q_bits > MAX_Q_BITS))
|
||||
return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);
|
||||
@@ -69,7 +78,7 @@ int _gnutls_dsa_compute_k(mpz_t k, const mpz_t q, const mpz_t x,
|
||||
return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);
|
||||
|
||||
/* int2octets(x) */
|
||||
- mpn_get_base256(xp, nbytes, mpz_limbs_read(x), qn);
|
||||
+ mpn_get_base256(xp, nbytes, x, qn);
|
||||
|
||||
/* bits2octets(h) */
|
||||
mpn_set_base256(h, hn, digest, length);
|
||||
@@ -93,12 +102,12 @@ int _gnutls_dsa_compute_k(mpz_t k, const mpz_t q, const mpz_t x,
|
||||
mpn_rshift(h, h, hn, shift % GMP_NUMB_BITS);
|
||||
}
|
||||
|
||||
- cy = mpn_sub_n(h, h, mpz_limbs_read(q), qn);
|
||||
+ cy = mpn_sub_n(h, h, q, qn);
|
||||
/* Fall back to addmul_1, if nettle is linked with mini-gmp. */
|
||||
#ifdef mpn_cnd_add_n
|
||||
- mpn_cnd_add_n(cy, h, h, mpz_limbs_read(q), qn);
|
||||
+ mpn_cnd_add_n(cy, h, h, q, qn);
|
||||
#else
|
||||
- mpn_addmul_1(h, mpz_limbs_read(q), qn, cy != 0);
|
||||
+ mpn_addmul_1(h, q, qn, cy != 0);
|
||||
#endif
|
||||
mpn_get_base256(tp, nbytes, h, qn);
|
||||
|
||||
@@ -174,12 +183,8 @@ int _gnutls_dsa_compute_k(mpz_t k, const mpz_t q, const mpz_t x,
|
||||
if (tlen * 8 > q_bits)
|
||||
mpn_rshift(h, h, qn, tlen * 8 - q_bits);
|
||||
/* Check if k is in [1,q-1] */
|
||||
- if (!mpn_zero_p(h, qn) &&
|
||||
- mpn_cmp(h, mpz_limbs_read(q), qn) < 0) {
|
||||
- mpn_copyi(mpz_limbs_write(k, qn), h, qn);
|
||||
- mpz_limbs_finish(k, qn);
|
||||
+ if (!sec_zero_p(h, qn) && mpn_sub_n(scratch, h, q, qn))
|
||||
break;
|
||||
- }
|
||||
|
||||
ret = gnutls_hmac_init(&hd, mac, K, length);
|
||||
if (ret < 0)
|
||||
@@ -203,3 +208,24 @@ out:
|
||||
|
||||
return ret;
|
||||
}
|
||||
+
|
||||
+/* cancel-out dsa_sign's addition of 1 to random data */
|
||||
+void _gnutls_dsa_compute_k_finish(uint8_t *k, size_t nbytes, mp_limb_t *h,
|
||||
+ mp_size_t n)
|
||||
+{
|
||||
+ /* Fall back to sub_1, if nettle is linked with mini-gmp. */
|
||||
+#ifdef mpn_sec_sub_1
|
||||
+ mp_limb_t t[MAX_Q_LIMBS];
|
||||
+
|
||||
+ mpn_sec_sub_1(h, h, n, 1, t);
|
||||
+#else
|
||||
+ mpn_sub_1(h, h, n, 1);
|
||||
+#endif
|
||||
+ mpn_get_base256(k, nbytes, h, n);
|
||||
+}
|
||||
+
|
||||
+void _gnutls_ecdsa_compute_k_finish(uint8_t *k, size_t nbytes, mp_limb_t *h,
|
||||
+ mp_size_t n)
|
||||
+{
|
||||
+ mpn_get_base256(k, nbytes, h, n);
|
||||
+}
|
||||
diff --git a/lib/nettle/int/dsa-compute-k.h b/lib/nettle/int/dsa-compute-k.h
|
||||
index 49d243acb4..2f0667a01e 100644
|
||||
--- a/lib/nettle/int/dsa-compute-k.h
|
||||
+++ b/lib/nettle/int/dsa-compute-k.h
|
||||
@@ -26,8 +26,29 @@
|
||||
#include <gnutls/gnutls.h>
|
||||
#include <nettle/bignum.h> /* includes gmp.h */
|
||||
|
||||
-int _gnutls_dsa_compute_k(mpz_t k, const mpz_t q, const mpz_t x,
|
||||
+#define BITS_TO_LIMBS(bits) (((bits) + GMP_NUMB_BITS - 1) / GMP_NUMB_BITS)
|
||||
+
|
||||
+/* The maximum size of q, chosen from the fact that we support
|
||||
+ * 521-bit elliptic curve generator and 512-bit DSA subgroup at
|
||||
+ * maximum. */
|
||||
+#define MAX_Q_BITS 521
|
||||
+#define MAX_Q_SIZE ((MAX_Q_BITS + 7) / 8)
|
||||
+#define MAX_Q_LIMBS BITS_TO_LIMBS(MAX_Q_BITS)
|
||||
+
|
||||
+#define MAX_HASH_BITS (MAX_HASH_SIZE * 8)
|
||||
+#define MAX_HASH_LIMBS BITS_TO_LIMBS(MAX_HASH_BITS)
|
||||
+
|
||||
+#define DSA_COMPUTE_K_ITCH MAX(MAX_Q_LIMBS, MAX_HASH_LIMBS)
|
||||
+
|
||||
+int _gnutls_dsa_compute_k(mp_limb_t *h, const mp_limb_t *q, const mp_limb_t *x,
|
||||
+ mp_size_t qn, mp_bitcnt_t q_bits,
|
||||
gnutls_mac_algorithm_t mac, const uint8_t *digest,
|
||||
size_t length);
|
||||
|
||||
+void _gnutls_dsa_compute_k_finish(uint8_t *k, size_t nbytes, mp_limb_t *h,
|
||||
+ mp_size_t n);
|
||||
+
|
||||
+void _gnutls_ecdsa_compute_k_finish(uint8_t *k, size_t nbytes, mp_limb_t *h,
|
||||
+ mp_size_t n);
|
||||
+
|
||||
#endif /* GNUTLS_LIB_NETTLE_INT_DSA_COMPUTE_K_H */
|
||||
diff --git a/lib/nettle/int/ecdsa-compute-k.c b/lib/nettle/int/ecdsa-compute-k.c
|
||||
index 3b7f886160..4e25235c40 100644
|
||||
--- a/lib/nettle/int/ecdsa-compute-k.c
|
||||
+++ b/lib/nettle/int/ecdsa-compute-k.c
|
||||
@@ -29,38 +29,38 @@
|
||||
#include "dsa-compute-k.h"
|
||||
#include "gnutls_int.h"
|
||||
|
||||
-static inline int _gnutls_ecc_curve_to_dsa_q(mpz_t *q, gnutls_ecc_curve_t curve)
|
||||
+int _gnutls_ecc_curve_to_dsa_q(mpz_t q, gnutls_ecc_curve_t curve)
|
||||
{
|
||||
switch (curve) {
|
||||
#ifdef ENABLE_NON_SUITEB_CURVES
|
||||
case GNUTLS_ECC_CURVE_SECP192R1:
|
||||
- mpz_init_set_str(*q,
|
||||
+ mpz_init_set_str(q,
|
||||
"FFFFFFFFFFFFFFFFFFFFFFFF99DEF836"
|
||||
"146BC9B1B4D22831",
|
||||
16);
|
||||
return 0;
|
||||
case GNUTLS_ECC_CURVE_SECP224R1:
|
||||
- mpz_init_set_str(*q,
|
||||
+ mpz_init_set_str(q,
|
||||
"FFFFFFFFFFFFFFFFFFFFFFFFFFFF16A2"
|
||||
"E0B8F03E13DD29455C5C2A3D",
|
||||
16);
|
||||
return 0;
|
||||
#endif
|
||||
case GNUTLS_ECC_CURVE_SECP256R1:
|
||||
- mpz_init_set_str(*q,
|
||||
+ mpz_init_set_str(q,
|
||||
"FFFFFFFF00000000FFFFFFFFFFFFFFFF"
|
||||
"BCE6FAADA7179E84F3B9CAC2FC632551",
|
||||
16);
|
||||
return 0;
|
||||
case GNUTLS_ECC_CURVE_SECP384R1:
|
||||
- mpz_init_set_str(*q,
|
||||
+ mpz_init_set_str(q,
|
||||
"FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF"
|
||||
"FFFFFFFFFFFFFFFFC7634D81F4372DDF"
|
||||
"581A0DB248B0A77AECEC196ACCC52973",
|
||||
16);
|
||||
return 0;
|
||||
case GNUTLS_ECC_CURVE_SECP521R1:
|
||||
- mpz_init_set_str(*q,
|
||||
+ mpz_init_set_str(q,
|
||||
"1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF"
|
||||
"FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF"
|
||||
"FFA51868783BF2F966B7FCC0148F709A"
|
||||
@@ -73,19 +73,3 @@ static inline int _gnutls_ecc_curve_to_dsa_q(mpz_t *q, gnutls_ecc_curve_t curve)
|
||||
GNUTLS_E_UNSUPPORTED_SIGNATURE_ALGORITHM);
|
||||
}
|
||||
}
|
||||
-
|
||||
-int _gnutls_ecdsa_compute_k(mpz_t k, gnutls_ecc_curve_t curve, const mpz_t x,
|
||||
- gnutls_mac_algorithm_t mac, const uint8_t *digest,
|
||||
- size_t length)
|
||||
-{
|
||||
- mpz_t q;
|
||||
- int ret;
|
||||
-
|
||||
- ret = _gnutls_ecc_curve_to_dsa_q(&q, curve);
|
||||
- if (ret < 0)
|
||||
- return gnutls_assert_val(ret);
|
||||
-
|
||||
- ret = _gnutls_dsa_compute_k(k, q, x, mac, digest, length);
|
||||
- mpz_clear(q);
|
||||
- return ret;
|
||||
-}
|
||||
diff --git a/lib/nettle/int/ecdsa-compute-k.h b/lib/nettle/int/ecdsa-compute-k.h
|
||||
index be8beddb5d..207685763f 100644
|
||||
--- a/lib/nettle/int/ecdsa-compute-k.h
|
||||
+++ b/lib/nettle/int/ecdsa-compute-k.h
|
||||
@@ -26,8 +26,6 @@
|
||||
#include <gnutls/gnutls.h>
|
||||
#include <nettle/bignum.h> /* includes gmp.h */
|
||||
|
||||
-int _gnutls_ecdsa_compute_k(mpz_t k, gnutls_ecc_curve_t curve, const mpz_t x,
|
||||
- gnutls_mac_algorithm_t mac, const uint8_t *digest,
|
||||
- size_t length);
|
||||
+int _gnutls_ecc_curve_to_dsa_q(mpz_t q, gnutls_ecc_curve_t curve);
|
||||
|
||||
#endif /* GNUTLS_LIB_NETTLE_INT_ECDSA_COMPUTE_K_H */
|
||||
diff --git a/lib/nettle/pk.c b/lib/nettle/pk.c
|
||||
index 305548f4d1..dd6b9936a8 100644
|
||||
--- a/lib/nettle/pk.c
|
||||
+++ b/lib/nettle/pk.c
|
||||
@@ -103,10 +103,16 @@ static void rnd_nonce_func(void *_ctx, size_t length, uint8_t *data)
|
||||
}
|
||||
}
|
||||
|
||||
-static void rnd_mpz_func(void *_ctx, size_t length, uint8_t *data)
|
||||
+static void rnd_datum_func(void *ctx, size_t length, uint8_t *data)
|
||||
{
|
||||
- mpz_t *k = _ctx;
|
||||
- nettle_mpz_get_str_256(length, data, *k);
|
||||
+ gnutls_datum_t *d = ctx;
|
||||
+
|
||||
+ if (length > d->size) {
|
||||
+ memset(data, 0, length - d->size);
|
||||
+ memcpy(data + (length - d->size), d->data, d->size);
|
||||
+ } else {
|
||||
+ memcpy(data, d->data, length);
|
||||
+ }
|
||||
}
|
||||
|
||||
static void rnd_nonce_func_fallback(void *_ctx, size_t length, uint8_t *data)
|
||||
@@ -1403,7 +1409,10 @@ static int _wrap_nettle_pk_sign(gnutls_pk_algorithm_t algo,
|
||||
struct dsa_signature sig;
|
||||
int curve_id = pk_params->curve;
|
||||
const struct ecc_curve *curve;
|
||||
- mpz_t k;
|
||||
+ mpz_t q;
|
||||
+ /* 521-bit elliptic curve generator at maximum */
|
||||
+ uint8_t buf[(521 + 7) / 8];
|
||||
+ gnutls_datum_t k = { NULL, 0 };
|
||||
void *random_ctx;
|
||||
nettle_random_func *random_func;
|
||||
|
||||
@@ -1447,17 +1456,32 @@ static int _wrap_nettle_pk_sign(gnutls_pk_algorithm_t algo,
|
||||
not_approved = true;
|
||||
}
|
||||
|
||||
- mpz_init(k);
|
||||
+ mpz_init(q);
|
||||
+
|
||||
if (_gnutls_get_lib_state() == LIB_STATE_SELFTEST ||
|
||||
(sign_params->flags & GNUTLS_PK_FLAG_REPRODUCIBLE)) {
|
||||
- ret = _gnutls_ecdsa_compute_k(
|
||||
- k, curve_id, pk_params->params[ECC_K],
|
||||
+ mp_limb_t h[DSA_COMPUTE_K_ITCH];
|
||||
+
|
||||
+ ret = _gnutls_ecc_curve_to_dsa_q(q, curve_id);
|
||||
+ if (ret < 0)
|
||||
+ goto ecdsa_cleanup;
|
||||
+
|
||||
+ ret = _gnutls_dsa_compute_k(
|
||||
+ h, mpz_limbs_read(q), priv.p,
|
||||
+ ecc_size(priv.ecc), ecc_bit_size(priv.ecc),
|
||||
DIG_TO_MAC(sign_params->dsa_dig), vdata->data,
|
||||
vdata->size);
|
||||
if (ret < 0)
|
||||
goto ecdsa_cleanup;
|
||||
+
|
||||
+ k.data = buf;
|
||||
+ k.size = (ecc_bit_size(priv.ecc) + 7) / 8;
|
||||
+
|
||||
+ _gnutls_ecdsa_compute_k_finish(k.data, k.size, h,
|
||||
+ ecc_size(priv.ecc));
|
||||
+
|
||||
random_ctx = &k;
|
||||
- random_func = rnd_mpz_func;
|
||||
+ random_func = rnd_datum_func;
|
||||
} else {
|
||||
random_ctx = NULL;
|
||||
random_func = rnd_nonce_func;
|
||||
@@ -1476,7 +1500,7 @@ static int _wrap_nettle_pk_sign(gnutls_pk_algorithm_t algo,
|
||||
ecdsa_cleanup:
|
||||
dsa_signature_clear(&sig);
|
||||
ecc_scalar_zclear(&priv);
|
||||
- mpz_clear(k);
|
||||
+ mpz_clear(q);
|
||||
|
||||
if (ret < 0) {
|
||||
gnutls_assert();
|
||||
@@ -1488,7 +1512,9 @@ static int _wrap_nettle_pk_sign(gnutls_pk_algorithm_t algo,
|
||||
struct dsa_params pub;
|
||||
bigint_t priv;
|
||||
struct dsa_signature sig;
|
||||
- mpz_t k;
|
||||
+ /* 512-bit DSA subgroup at maximum */
|
||||
+ uint8_t buf[(512 + 7) / 8];
|
||||
+ gnutls_datum_t k = { NULL, 0 };
|
||||
void *random_ctx;
|
||||
nettle_random_func *random_func;
|
||||
|
||||
@@ -1515,19 +1541,27 @@ static int _wrap_nettle_pk_sign(gnutls_pk_algorithm_t algo,
|
||||
hash_len = vdata->size;
|
||||
}
|
||||
|
||||
- mpz_init(k);
|
||||
if (_gnutls_get_lib_state() == LIB_STATE_SELFTEST ||
|
||||
(sign_params->flags & GNUTLS_PK_FLAG_REPRODUCIBLE)) {
|
||||
+ mp_limb_t h[DSA_COMPUTE_K_ITCH];
|
||||
+
|
||||
ret = _gnutls_dsa_compute_k(
|
||||
- k, pub.q, TOMPZ(priv),
|
||||
+ h, mpz_limbs_read(pub.q),
|
||||
+ mpz_limbs_read(TOMPZ(priv)), mpz_size(pub.q),
|
||||
+ mpz_sizeinbase(pub.q, 2),
|
||||
DIG_TO_MAC(sign_params->dsa_dig), vdata->data,
|
||||
vdata->size);
|
||||
if (ret < 0)
|
||||
goto dsa_fail;
|
||||
- /* cancel-out dsa_sign's addition of 1 to random data */
|
||||
- mpz_sub_ui(k, k, 1);
|
||||
+
|
||||
+ k.data = buf;
|
||||
+ k.size = (mpz_sizeinbase(pub.q, 2) + 7) / 8;
|
||||
+
|
||||
+ _gnutls_dsa_compute_k_finish(k.data, k.size, h,
|
||||
+ mpz_size(pub.q));
|
||||
+
|
||||
random_ctx = &k;
|
||||
- random_func = rnd_mpz_func;
|
||||
+ random_func = rnd_datum_func;
|
||||
} else {
|
||||
random_ctx = NULL;
|
||||
random_func = rnd_nonce_func;
|
||||
@@ -1544,7 +1578,6 @@ static int _wrap_nettle_pk_sign(gnutls_pk_algorithm_t algo,
|
||||
|
||||
dsa_fail:
|
||||
dsa_signature_clear(&sig);
|
||||
- mpz_clear(k);
|
||||
|
||||
if (ret < 0) {
|
||||
gnutls_assert();
|
||||
diff --git a/tests/sign-verify-deterministic.c b/tests/sign-verify-deterministic.c
|
||||
index 6969b57a11..bdd5a49c7d 100644
|
||||
--- a/tests/sign-verify-deterministic.c
|
||||
+++ b/tests/sign-verify-deterministic.c
|
||||
@@ -198,7 +198,7 @@ void doit(void)
|
||||
&tests[i].msg, &signature);
|
||||
if (ret < 0)
|
||||
testfail("gnutls_pubkey_verify_data2\n");
|
||||
- success(" - pass");
|
||||
+ success(" - pass\n");
|
||||
|
||||
next:
|
||||
gnutls_free(signature.data);
|
||||
--
|
||||
GitLab
|
||||
|
@ -1,410 +0,0 @@
|
||||
From e369e67a62f44561d417cb233acc566cc696d82d Mon Sep 17 00:00:00 2001
|
||||
From: Daiki Ueno <ueno@gnu.org>
|
||||
Date: Mon, 29 Jan 2024 13:52:46 +0900
|
||||
Subject: [PATCH] gnutls_x509_trust_list_verify_crt2: remove length limit of
|
||||
input
|
||||
|
||||
Previously, if cert_list_size exceeded DEFAULT_MAX_VERIFY_DEPTH, the
|
||||
chain verification logic crashed with assertion failure. This patch
|
||||
removes the restriction while keeping the maximum number of
|
||||
retrieved certificates being DEFAULT_MAX_VERIFY_DEPTH.
|
||||
|
||||
Signed-off-by: Daiki Ueno <ueno@gnu.org>
|
||||
---
|
||||
lib/gnutls_int.h | 5 +-
|
||||
lib/x509/common.c | 10 +-
|
||||
lib/x509/verify-high.c | 51 ++++++----
|
||||
tests/test-chains.h | 211 ++++++++++++++++++++++++++++++++++++++++-
|
||||
4 files changed, 258 insertions(+), 19 deletions(-)
|
||||
|
||||
diff --git a/lib/gnutls_int.h b/lib/gnutls_int.h
|
||||
index d8561ebe3a..8cf9a87157 100644
|
||||
--- a/lib/gnutls_int.h
|
||||
+++ b/lib/gnutls_int.h
|
||||
@@ -232,7 +232,10 @@ typedef enum record_send_state_t {
|
||||
|
||||
#define MAX_PK_PARAM_SIZE 2048
|
||||
|
||||
-/* defaults for verification functions
|
||||
+/* Defaults for verification functions.
|
||||
+ *
|
||||
+ * update many_icas in tests/test-chains.h when increasing
|
||||
+ * DEFAULT_MAX_VERIFY_DEPTH.
|
||||
*/
|
||||
#define DEFAULT_MAX_VERIFY_DEPTH 16
|
||||
#define DEFAULT_MAX_VERIFY_BITS (MAX_PK_PARAM_SIZE * 8)
|
||||
diff --git a/lib/x509/common.c b/lib/x509/common.c
|
||||
index 2cc83c9155..705aa868bc 100644
|
||||
--- a/lib/x509/common.c
|
||||
+++ b/lib/x509/common.c
|
||||
@@ -1725,7 +1725,15 @@ unsigned int _gnutls_sort_clist(gnutls_x509_crt_t *clist,
|
||||
bool insorted[DEFAULT_MAX_VERIFY_DEPTH]; /* non zero if clist[i] used in sorted list */
|
||||
gnutls_x509_crt_t sorted[DEFAULT_MAX_VERIFY_DEPTH];
|
||||
|
||||
- assert(clist_size <= DEFAULT_MAX_VERIFY_DEPTH);
|
||||
+ /* Limit the number of certificates in the chain, to avoid DoS
|
||||
+ * because of the O(n^2) sorting below. FIXME: Switch to a
|
||||
+ * topological sort algorithm which should be linear to the
|
||||
+ * number of certificates and subject-issuer relationships.
|
||||
+ */
|
||||
+ if (clist_size > DEFAULT_MAX_VERIFY_DEPTH) {
|
||||
+ _gnutls_debug_log("too many certificates; skipping sorting\n");
|
||||
+ return 1;
|
||||
+ }
|
||||
|
||||
for (i = 0; i < DEFAULT_MAX_VERIFY_DEPTH; i++) {
|
||||
issuer[i] = -1;
|
||||
diff --git a/lib/x509/verify-high.c b/lib/x509/verify-high.c
|
||||
index 4e7361eb63..aacc24a7d8 100644
|
||||
--- a/lib/x509/verify-high.c
|
||||
+++ b/lib/x509/verify-high.c
|
||||
@@ -25,7 +25,7 @@
|
||||
#include "errors.h"
|
||||
#include <libtasn1.h>
|
||||
#include "global.h"
|
||||
-#include "num.h" /* MAX */
|
||||
+#include "num.h" /* MIN */
|
||||
#include "tls-sig.h"
|
||||
#include "str.h"
|
||||
#include "datum.h"
|
||||
@@ -1361,7 +1361,8 @@ int gnutls_x509_trust_list_verify_crt2(
|
||||
int ret = 0;
|
||||
unsigned int i;
|
||||
size_t hash;
|
||||
- gnutls_x509_crt_t sorted[DEFAULT_MAX_VERIFY_DEPTH];
|
||||
+ gnutls_x509_crt_t *cert_list_copy = NULL;
|
||||
+ unsigned int cert_list_max_size = 0;
|
||||
gnutls_x509_crt_t retrieved[DEFAULT_MAX_VERIFY_DEPTH];
|
||||
unsigned int retrieved_size = 0;
|
||||
const char *hostname = NULL, *purpose = NULL, *email = NULL;
|
||||
@@ -1421,16 +1422,28 @@ int gnutls_x509_trust_list_verify_crt2(
|
||||
}
|
||||
}
|
||||
|
||||
- memcpy(sorted, cert_list, cert_list_size * sizeof(gnutls_x509_crt_t));
|
||||
- cert_list = sorted;
|
||||
+ /* Allocate extra for retrieved certificates. */
|
||||
+ if (!INT_ADD_OK(cert_list_size, DEFAULT_MAX_VERIFY_DEPTH,
|
||||
+ &cert_list_max_size))
|
||||
+ return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);
|
||||
+
|
||||
+ cert_list_copy = _gnutls_reallocarray(NULL, cert_list_max_size,
|
||||
+ sizeof(gnutls_x509_crt_t));
|
||||
+ if (!cert_list_copy)
|
||||
+ return gnutls_assert_val(GNUTLS_E_MEMORY_ERROR);
|
||||
+
|
||||
+ memcpy(cert_list_copy, cert_list,
|
||||
+ cert_list_size * sizeof(gnutls_x509_crt_t));
|
||||
+ cert_list = cert_list_copy;
|
||||
|
||||
records = gl_list_nx_create_empty(GL_LINKEDHASH_LIST, cert_eq,
|
||||
cert_hashcode, NULL, false);
|
||||
- if (records == NULL)
|
||||
- return gnutls_assert_val(GNUTLS_E_MEMORY_ERROR);
|
||||
+ if (records == NULL) {
|
||||
+ ret = gnutls_assert_val(GNUTLS_E_MEMORY_ERROR);
|
||||
+ goto cleanup;
|
||||
+ }
|
||||
|
||||
- for (i = 0; i < cert_list_size &&
|
||||
- cert_list_size <= DEFAULT_MAX_VERIFY_DEPTH;) {
|
||||
+ for (i = 0; i < cert_list_size;) {
|
||||
unsigned int sorted_size = 1;
|
||||
unsigned int j, k;
|
||||
gnutls_x509_crt_t issuer;
|
||||
@@ -1442,8 +1455,7 @@ int gnutls_x509_trust_list_verify_crt2(
|
||||
|
||||
assert(sorted_size > 0);
|
||||
|
||||
- /* Remove duplicates. Start with index 1, as the first element
|
||||
- * may be re-checked after issuer retrieval. */
|
||||
+ /* Remove duplicates. */
|
||||
for (j = 0; j < sorted_size; j++) {
|
||||
if (gl_list_search(records, cert_list[i + j])) {
|
||||
if (i + j < cert_list_size - 1) {
|
||||
@@ -1495,13 +1507,15 @@ int gnutls_x509_trust_list_verify_crt2(
|
||||
|
||||
ret = retrieve_issuers(
|
||||
list, cert_list[i - 1], &retrieved[retrieved_size],
|
||||
- DEFAULT_MAX_VERIFY_DEPTH -
|
||||
- MAX(retrieved_size, cert_list_size));
|
||||
+ MIN(DEFAULT_MAX_VERIFY_DEPTH - retrieved_size,
|
||||
+ cert_list_max_size - cert_list_size));
|
||||
if (ret < 0) {
|
||||
break;
|
||||
} else if (ret > 0) {
|
||||
assert((unsigned int)ret <=
|
||||
- DEFAULT_MAX_VERIFY_DEPTH - cert_list_size);
|
||||
+ DEFAULT_MAX_VERIFY_DEPTH - retrieved_size);
|
||||
+ assert((unsigned int)ret <=
|
||||
+ cert_list_max_size - cert_list_size);
|
||||
memmove(&cert_list[i + ret], &cert_list[i],
|
||||
(cert_list_size - i) *
|
||||
sizeof(gnutls_x509_crt_t));
|
||||
@@ -1517,8 +1531,10 @@ int gnutls_x509_trust_list_verify_crt2(
|
||||
}
|
||||
|
||||
cert_list_size = shorten_clist(list, cert_list, cert_list_size);
|
||||
- if (cert_list_size <= 0)
|
||||
- return gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);
|
||||
+ if (cert_list_size <= 0) {
|
||||
+ ret = gnutls_assert_val(GNUTLS_E_INTERNAL_ERROR);
|
||||
+ goto cleanup;
|
||||
+ }
|
||||
|
||||
hash = hash_pjw_bare(cert_list[cert_list_size - 1]->raw_issuer_dn.data,
|
||||
cert_list[cert_list_size - 1]->raw_issuer_dn.size);
|
||||
@@ -1661,10 +1677,13 @@ int gnutls_x509_trust_list_verify_crt2(
|
||||
}
|
||||
|
||||
cleanup:
|
||||
+ gnutls_free(cert_list_copy);
|
||||
for (i = 0; i < retrieved_size; i++) {
|
||||
gnutls_x509_crt_deinit(retrieved[i]);
|
||||
}
|
||||
- gl_list_free(records);
|
||||
+ if (records) {
|
||||
+ gl_list_free(records);
|
||||
+ }
|
||||
return ret;
|
||||
}
|
||||
|
||||
diff --git a/tests/test-chains.h b/tests/test-chains.h
|
||||
index 3e559fecd5..a7fe1cdecc 100644
|
||||
--- a/tests/test-chains.h
|
||||
+++ b/tests/test-chains.h
|
||||
@@ -23,7 +23,7 @@
|
||||
#ifndef GNUTLS_TESTS_TEST_CHAINS_H
|
||||
#define GNUTLS_TESTS_TEST_CHAINS_H
|
||||
|
||||
-#define MAX_CHAIN 10
|
||||
+#define MAX_CHAIN 17
|
||||
|
||||
static const char *chain_with_no_subject_id_in_ca_ok[] = {
|
||||
"-----BEGIN CERTIFICATE-----\n"
|
||||
@@ -4383,6 +4383,213 @@ static const char *cross_signed_ca[] = {
|
||||
NULL
|
||||
};
|
||||
|
||||
+/* This assumes DEFAULT_MAX_VERIFY_DEPTH to be 16 */
|
||||
+static const char *many_icas[] = {
|
||||
+ /* Server */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBqzCCAV2gAwIBAgIUIK3+SD3GmqJlRLZ/ESyhTzkSDL8wBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowNzEbMBkGA1UEChMSR251VExTIHRlc3Qgc2VydmVyMRgwFgYD\n"
|
||||
+ "VQQDEw90ZXN0LmdudXRscy5vcmcwKjAFBgMrZXADIQAWGjx45NIJiKFsNBxxRRjm\n"
|
||||
+ "NxUT5KYK7xXr5HPVywwgLaOBkjCBjzAMBgNVHRMBAf8EAjAAMBoGA1UdEQQTMBGC\n"
|
||||
+ "D3Rlc3QuZ251dGxzLm9yZzATBgNVHSUEDDAKBggrBgEFBQcDATAOBgNVHQ8BAf8E\n"
|
||||
+ "BAMCB4AwHQYDVR0OBBYEFKgNAQWZPx76/vXqQOdIi5mTftsaMB8GA1UdIwQYMBaA\n"
|
||||
+ "FDaPsY6WAGuRtrhYJE6Gk/bg5qbdMAUGAytlcANBAMIDh8aGcIIFDTUrzfV7tnkX\n"
|
||||
+ "hHrxyFKBH/cApf6xcJQTfDXm23po627Ibp+WgLaWMY08Fn9Y2V6Ev8ADfqXNbQ8=\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA16 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUSnE0PKdm/dsnZSWBh5Ct4pS6DcwwBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAxq9SI8vp0QH1dDBBuZW+t+bLLROppQbjSQ4O1BEonDOjYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBQ2j7GOlgBrkba4\n"
|
||||
+ "WCROhpP24Oam3TAfBgNVHSMEGDAWgBRvdUKX0aw3nfUIdvivXGSfRO7zyjAFBgMr\n"
|
||||
+ "ZXADQQBsI2Hc7X5hXoHTvk01qMc5a1I27QHAFRARJnvIQ15wxNS2LVLzGk+AUmwr\n"
|
||||
+ "sOhBKAcVfS55uWtYdjoWQ80h238H\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA15 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUQk4XkgQVImnp6OPZas7ctwgBza4wBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAs3yVKLJd3sKbNVmj6Bxy2j1x025rksyQpZZWnCx5a+CjYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBRvdUKX0aw3nfUI\n"
|
||||
+ "dvivXGSfRO7zyjAfBgNVHSMEGDAWgBRhGfUXYPh4YQsdtTWYUozLphGgfzAFBgMr\n"
|
||||
+ "ZXADQQBXTtm56x6/pHXdW8dTvZLc/8RufNQrMlc23TCgX0apUnrZdTsNAb7OE4Uu\n"
|
||||
+ "9PBuxK+CC9NL/BL2hXsKvAT+NWME\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA14 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUKfwz7UUYRvYlvqwmnLJlTOS9o1AwBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAXbUetQ08t+F4+IcKL++HpeclqTxXZ7cG4mwqvHmTUEWjYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBRhGfUXYPh4YQsd\n"
|
||||
+ "tTWYUozLphGgfzAfBgNVHSMEGDAWgBQYRQqO+V1kefF7QvNnFU1fX5H9+jAFBgMr\n"
|
||||
+ "ZXADQQAiSHNMTLPFP3oa6q13Dj8jSxF9trQDJGM1ArWffFcPZUt2U4/ODHdcMTHx\n"
|
||||
+ "kGwhIj+ghBlu6ykgu6J2wewCUooC\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA13 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUUKOs59gyCPAZzoC7zMZQSh6AnQgwBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAmvqhj5GYqsXIpsr1BXBfD+2mTP/m/TEpKIYSZHM62dijYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBQYRQqO+V1kefF7\n"
|
||||
+ "QvNnFU1fX5H9+jAfBgNVHSMEGDAWgBQ27HzvP5hl2xR+LOzRcPfmY5ndXjAFBgMr\n"
|
||||
+ "ZXADQQBrB3NkrYC7EQ74qgeesVOE71rW012dPOOKPAV0laR+JLEgsv9sfus+AdBF\n"
|
||||
+ "WBNwR3KeYBTi/MFDuecxBHU2m5gD\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA12 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUUQooGfH21+sR7/pSgCWm13gg2H4wBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAK2of/B4wMpk6k/KdugC5dMS+jo2fseUM7/PvXkE6HASjYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBQ27HzvP5hl2xR+\n"
|
||||
+ "LOzRcPfmY5ndXjAfBgNVHSMEGDAWgBSJDHU0Mj1Xr0e8ErCnRK24w7XwTTAFBgMr\n"
|
||||
+ "ZXADQQDY8d2bAZpj7oGhdl2dBsCE48jEWj49da0PbgN12koAj3gf4hjMPd8G7p5z\n"
|
||||
+ "8RsURAwQmCkE8ShvdNw/Qr2tDL0E\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA11 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUW9Dw0hU2pfjXhb5Stip+mk9SndIwBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAn5ISjLVV6RBWsnxDWHDicpye7SjFwGOTwzF01/psiJ2jYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBSJDHU0Mj1Xr0e8\n"
|
||||
+ "ErCnRK24w7XwTTAfBgNVHSMEGDAWgBSR9UU27RI0XohiEgHDxNo/9HP4djAFBgMr\n"
|
||||
+ "ZXADQQCfQg6MDHk71vhyrEo4/5PcLb2Li5F/FKURyux7snv2TbkSdInloAqca9UR\n"
|
||||
+ "DtqHSLCNLXCNdSPr5QwIt5p29rsE\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA10 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUR4uTedG8e6MibKViQ3eX7QzXG1swBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAnslX04kSVOL5LAf1e+Ze3ggNnDJcEAxLDk8I/IhyjTyjYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBSR9UU27RI0Xohi\n"
|
||||
+ "EgHDxNo/9HP4djAfBgNVHSMEGDAWgBRC7US5gJYnvd5F7EN+C4anMgd2NzAFBgMr\n"
|
||||
+ "ZXADQQDo+jHt07Tvz3T5Lbz6apBrSln8xKYfJk2W1wP85XAnf7sZT9apM1bS4EyD\n"
|
||||
+ "Kckw+KG+9x7myOZz6AXJgZB5OGAO\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA9 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUSIIIRjrNpE+kEPkiJMOqaNAazvQwBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAZKy7p1Gn4W/reRxKJN99+QkHt2q9aELktCKe5PqrX5ejYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBRC7US5gJYnvd5F\n"
|
||||
+ "7EN+C4anMgd2NzAfBgNVHSMEGDAWgBSOhR7Ornis2x8g0J+bvTTwMnW60zAFBgMr\n"
|
||||
+ "ZXADQQA0MEcC4FgKZEAfalVpApU2to0G158MVz/WTNcSc7fnl8ifJ/g56dVHL1jr\n"
|
||||
+ "REvC/S28dn/CGAlbVXUAgxnHAbgE\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA8 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUGGFSgD95vOTSj7iFxfXA5vq6vsYwBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAg3W/bTdW0fR32NeZEVMXICpa30d7rSdddLOYDvqqUO+jYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBSOhR7Ornis2x8g\n"
|
||||
+ "0J+bvTTwMnW60zAfBgNVHSMEGDAWgBT3zK8Hbn9aVTAOOFY6RSxJ2o5x2jAFBgMr\n"
|
||||
+ "ZXADQQBl4gnzE463iMFg57gPvjHdVzA39sJBpiu0kUGfRcLnoRI/VOaLcx7WnJ9+\n"
|
||||
+ "c3KxPZBec76EdIoQDkTmI6m2FIAM\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA7 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUGktMGXhNuaMhKyAlecymmLD+/GIwBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEA/Z1oc76hOQ0Hi+2hePaGIntnMIDqBlb7RDMjRpYONP2jYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBT3zK8Hbn9aVTAO\n"
|
||||
+ "OFY6RSxJ2o5x2jAfBgNVHSMEGDAWgBSPae3JUN3jP0NgUJqDV3eYxcaM3DAFBgMr\n"
|
||||
+ "ZXADQQBMkwKaUZlvG/hax8rv3nnDv8kJOr6KVHBnxSx3hZ+8HIBT7GFm1+YDeYOB\n"
|
||||
+ "jhNg66kyeFPGXXBCe+mvNQFFjCEE\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA6 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUKn3gz5lAUpKqWlHKLKYDbOJ4rygwBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAZ/eD4eTe91ddvHusm7YlLPxU4ByGFc6suAmlP1CxXkWjYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBSPae3JUN3jP0Ng\n"
|
||||
+ "UJqDV3eYxcaM3DAfBgNVHSMEGDAWgBT9f/qSI/jhxvGI7aMtkpraDcjBnjAFBgMr\n"
|
||||
+ "ZXADQQAMRnkmRhnLGdmJaY8B42gfyaAsqCMyds/Tw4OHYy+N48XuAxRjKkhf3szC\n"
|
||||
+ "0lY71oU043mNP1yx/dzAuCTrVSgI\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA5 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUEgEYbBXXEyGv3vOq10JQv1SBiUUwBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAs2xEDPw8RVal53nX9GVwUd1blq1wjtVFC8S1V7up7MWjYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBT9f/qSI/jhxvGI\n"
|
||||
+ "7aMtkpraDcjBnjAfBgNVHSMEGDAWgBRBVkLu9BmCKz7HNI8md4vPpoE/7jAFBgMr\n"
|
||||
+ "ZXADQQCCufAyLijtzzmeCuO3K50rBSbGvB3FQfep7g6kVsQKM3bw/olWK5/Ji0dD\n"
|
||||
+ "ubJ0cFl1FmfAda7aVxLBtJOvO6MI\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA4 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIULj8GkaHw+92HuOTnXnXlxCy3VrEwBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAiedxh4dvtwDellMAHc/pZH0MAOXobRenTUgF1yj5l12jYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBRBVkLu9BmCKz7H\n"
|
||||
+ "NI8md4vPpoE/7jAfBgNVHSMEGDAWgBSDtNRgQ36KwW/ASaMyr6WeDt0STDAFBgMr\n"
|
||||
+ "ZXADQQDL8U2ckzur7CktdrVUNvfLhVCOz33d/62F28vQFHUa8h/4h+Mi1MMbXOKT\n"
|
||||
+ "1bL2TvpFpU7Fx/vcIPXDielVqr4C\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA3 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUQXl74TDDw6MQRMbQUSPa6Qrvba8wBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEA7l0jQ0f4fJRw7Qja/Hz2qn8y91SI7CokxhSf+FT+9M6jYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBSDtNRgQ36KwW/A\n"
|
||||
+ "SaMyr6WeDt0STDAfBgNVHSMEGDAWgBQ2inEK4KH6ATftmybxKE1dZUzOozAFBgMr\n"
|
||||
+ "ZXADQQCnP7Oqx1epGnFnO7TrTJwcUukXDEYsINve2GeUsi8HEIeKKlMcLZ2Cnaj7\n"
|
||||
+ "5v9NGuWh3QJpmmSGpEemiv8dJc4A\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA2 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBYTCCAROgAwIBAgIUP7Nmof8H2F1LyDkjqlYIUpGdXE8wBQYDK2VwMB0xGzAZ\n"
|
||||
+ "BgNVBAMMEkdudVRMUyB0ZXN0IElDQSAkaTAgFw0yNDAzMTIyMjUzMzlaGA85OTk5\n"
|
||||
+ "MTIzMTIzNTk1OVowHTEbMBkGA1UEAwwSR251VExTIHRlc3QgSUNBICRpMCowBQYD\n"
|
||||
+ "K2VwAyEAkW9Rod3CXAnha6nlaHkDbCOegq94lgmjqclA9sOIt3yjYzBhMA8GA1Ud\n"
|
||||
+ "EwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBQ2inEK4KH6ATft\n"
|
||||
+ "mybxKE1dZUzOozAfBgNVHSMEGDAWgBRPq/CQlK/zuXkjZvTCibu+vejD+jAFBgMr\n"
|
||||
+ "ZXADQQBU+A+uF0yrtO/yv9cRUdCoL3Y1NKM35INg8BQDnkv724cW9zk1x0q9Fuou\n"
|
||||
+ "zvfSVb8S3vT8fF5ZDOxarQs6ZH0C\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ /* ICA1 */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBXTCCAQ+gAwIBAgIUfUWP+AQHpdFTRKTf21mMzjaJsp0wBQYDK2VwMBkxFzAV\n"
|
||||
+ "BgNVBAMTDkdudVRMUyB0ZXN0IENBMCAXDTI0MDMxMjIyNTMzOVoYDzk5OTkxMjMx\n"
|
||||
+ "MjM1OTU5WjAdMRswGQYDVQQDDBJHbnVUTFMgdGVzdCBJQ0EgJGkwKjAFBgMrZXAD\n"
|
||||
+ "IQAVmfBAvLbT+pTD24pQrr6S0jEIFIV/qOv93yYvAUzpzKNjMGEwDwYDVR0TAQH/\n"
|
||||
+ "BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAgQwHQYDVR0OBBYEFE+r8JCUr/O5eSNm9MKJ\n"
|
||||
+ "u7696MP6MB8GA1UdIwQYMBaAFAFpt5wrFsqCtHc4PpluPDvwcxQLMAUGAytlcANB\n"
|
||||
+ "AC6+XZnthjlUD0TbBKRF3qT5if3Pp29Bgvutw8859unzUZW8FkHg5KeDBj9ncgJc\n"
|
||||
+ "O2tFnNH2hV6LDPJzU0rtLQc=\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ NULL
|
||||
+};
|
||||
+
|
||||
+static const char *many_icas_ca[] = {
|
||||
+ /* CA (self-signed) */
|
||||
+ "-----BEGIN CERTIFICATE-----\n"
|
||||
+ "MIIBNzCB6qADAgECAhRjaokcQwcrtW8tjuVFz3A33F8POjAFBgMrZXAwGTEXMBUG\n"
|
||||
+ "A1UEAxMOR251VExTIHRlc3QgQ0EwIBcNMjQwMzEyMjI1MzM5WhgPOTk5OTEyMzEy\n"
|
||||
+ "MzU5NTlaMBkxFzAVBgNVBAMTDkdudVRMUyB0ZXN0IENBMCowBQYDK2VwAyEAvoxP\n"
|
||||
+ "TNdbWktxA8qQNNH+25Cx9rzP+DxLGeI/7ODwrQGjQjBAMA8GA1UdEwEB/wQFMAMB\n"
|
||||
+ "Af8wDgYDVR0PAQH/BAQDAgIEMB0GA1UdDgQWBBQBabecKxbKgrR3OD6Zbjw78HMU\n"
|
||||
+ "CzAFBgMrZXADQQCP5IUD74M7WrUx20uqzrzuj+s2jnBVmLQfWf/Ucetx+oTRFeq4\n"
|
||||
+ "xZB/adWhycSeJUAB1zKqYUV9hgT8FWHbnHII\n"
|
||||
+ "-----END CERTIFICATE-----\n",
|
||||
+ NULL
|
||||
+};
|
||||
+
|
||||
#if defined __clang__ || __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 5)
|
||||
#pragma GCC diagnostic push
|
||||
#pragma GCC diagnostic ignored "-Wunused-variable"
|
||||
@@ -4696,6 +4903,8 @@ static struct {
|
||||
1620118136, 1 },
|
||||
{ "cross signed - ok", cross_signed, cross_signed_ca, 0, 0, 0,
|
||||
1704955300 },
|
||||
+ { "many intermediates - ok", many_icas, many_icas_ca, 0, 0, 0,
|
||||
+ 1710284400 },
|
||||
{ NULL, NULL, NULL, 0, 0 }
|
||||
};
|
||||
|
||||
--
|
||||
GitLab
|
||||
|
@ -1,8 +1,8 @@
|
||||
Index: gnutls-3.8.3/configure.ac
|
||||
Index: gnutls-3.8.8/configure.ac
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/configure.ac
|
||||
+++ gnutls-3.8.3/configure.ac
|
||||
@@ -623,19 +623,19 @@ LT_INIT([disable-static,win32-dll,shared
|
||||
--- gnutls-3.8.8.orig/configure.ac
|
||||
+++ gnutls-3.8.8/configure.ac
|
||||
@@ -624,19 +624,19 @@ LT_INIT([disable-static,win32-dll,shared
|
||||
AC_LIB_HAVE_LINKFLAGS(dl,, [#include <dlfcn.h>], [dladdr (0, 0);])
|
||||
|
||||
AC_ARG_ENABLE(fips140-mode,
|
||||
@ -25,10 +25,10 @@ Index: gnutls-3.8.3/configure.ac
|
||||
|
||||
AC_ARG_WITH(fips140-module-name, AS_HELP_STRING([--with-fips140-module-name],
|
||||
[specify the FIPS140 module name]),
|
||||
Index: gnutls-3.8.3/doc/cha-gtls-app.texi
|
||||
Index: gnutls-3.8.8/doc/cha-gtls-app.texi
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/doc/cha-gtls-app.texi
|
||||
+++ gnutls-3.8.3/doc/cha-gtls-app.texi
|
||||
--- gnutls-3.8.8.orig/doc/cha-gtls-app.texi
|
||||
+++ gnutls-3.8.8/doc/cha-gtls-app.texi
|
||||
@@ -222,7 +222,7 @@ CPU. The currently available options are
|
||||
@end itemize
|
||||
|
||||
@ -38,10 +38,10 @@ Index: gnutls-3.8.3/doc/cha-gtls-app.texi
|
||||
if set to one it will force the FIPS mode enablement.
|
||||
|
||||
@end multitable
|
||||
Index: gnutls-3.8.3/doc/cha-internals.texi
|
||||
Index: gnutls-3.8.8/doc/cha-internals.texi
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/doc/cha-internals.texi
|
||||
+++ gnutls-3.8.3/doc/cha-internals.texi
|
||||
--- gnutls-3.8.8.orig/doc/cha-internals.texi
|
||||
+++ gnutls-3.8.8/doc/cha-internals.texi
|
||||
@@ -14,7 +14,7 @@ happens inside the black box.
|
||||
* TLS Hello Extension Handling::
|
||||
* Cryptographic Backend::
|
||||
@ -162,11 +162,11 @@ Index: gnutls-3.8.3/doc/cha-internals.texi
|
||||
operation. It can be attached to the current execution thread with
|
||||
@funcref{gnutls_fips140_push_context} and its internal state will be
|
||||
updated until it is detached with
|
||||
Index: gnutls-3.8.3/doc/enums.texi
|
||||
Index: gnutls-3.8.8/doc/enums.texi
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/doc/enums.texi
|
||||
+++ gnutls-3.8.3/doc/enums.texi
|
||||
@@ -1188,7 +1188,7 @@ application traffic secret is installed
|
||||
--- gnutls-3.8.8.orig/doc/enums.texi
|
||||
+++ gnutls-3.8.8/doc/enums.texi
|
||||
@@ -1210,7 +1210,7 @@ application traffic secret is installed
|
||||
@c gnutls_fips_mode_t
|
||||
@table @code
|
||||
@item GNUTLS_@-FIPS140_@-DISABLED
|
||||
@ -175,7 +175,7 @@ Index: gnutls-3.8.3/doc/enums.texi
|
||||
@item GNUTLS_@-FIPS140_@-STRICT
|
||||
The default mode; all forbidden operations will cause an
|
||||
operation failure via error code.
|
||||
@@ -1196,8 +1196,8 @@ operation failure via error code.
|
||||
@@ -1218,8 +1218,8 @@ operation failure via error code.
|
||||
A transient state during library initialization. That state
|
||||
cannot be set or seen by applications.
|
||||
@item GNUTLS_@-FIPS140_@-LAX
|
||||
@ -186,10 +186,10 @@ Index: gnutls-3.8.3/doc/enums.texi
|
||||
application is aware of the followed security policy, and needs
|
||||
to utilize disallowed operations for other reasons (e.g., compatibility).
|
||||
@item GNUTLS_@-FIPS140_@-LOG
|
||||
Index: gnutls-3.8.3/doc/functions/gnutls_fips140_set_mode
|
||||
Index: gnutls-3.8.8/doc/functions/gnutls_fips140_set_mode
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/doc/functions/gnutls_fips140_set_mode
|
||||
+++ gnutls-3.8.3/doc/functions/gnutls_fips140_set_mode
|
||||
--- gnutls-3.8.8.orig/doc/functions/gnutls_fips140_set_mode
|
||||
+++ gnutls-3.8.8/doc/functions/gnutls_fips140_set_mode
|
||||
@@ -3,7 +3,7 @@
|
||||
|
||||
|
||||
@ -215,11 +215,11 @@ Index: gnutls-3.8.3/doc/functions/gnutls_fips140_set_mode
|
||||
values for @code{mode} or to @code{GNUTLS_FIPS140_SELFTESTS} mode, the library
|
||||
switches to @code{GNUTLS_FIPS140_STRICT} mode.
|
||||
|
||||
Index: gnutls-3.8.3/doc/gnutls.html
|
||||
Index: gnutls-3.8.8/doc/gnutls.html
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/doc/gnutls.html
|
||||
+++ gnutls-3.8.3/doc/gnutls.html
|
||||
@@ -484,7 +484,7 @@ Documentation License”.
|
||||
--- gnutls-3.8.8.orig/doc/gnutls.html
|
||||
+++ gnutls-3.8.8/doc/gnutls.html
|
||||
@@ -485,7 +485,7 @@ Documentation License”.
|
||||
<li><a id="toc-TLS-Extension-Handling" href="#TLS-Hello-Extension-Handling">11.4 TLS Extension Handling</a></li>
|
||||
<li><a id="toc-Cryptographic-Backend-1" href="#Cryptographic-Backend">11.5 Cryptographic Backend</a></li>
|
||||
<li><a id="toc-Random-Number-Generators" href="#Random-Number-Generators_002dinternals">11.6 Random Number Generators</a></li>
|
||||
@ -228,7 +228,7 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
</ul></li>
|
||||
<li><a id="toc-Upgrading-from-previous-versions-1" href="#Upgrading-from-previous-versions">Appendix A Upgrading from previous versions</a></li>
|
||||
<li><a id="toc-Support-1" href="#Support">Appendix B Support</a>
|
||||
@@ -9035,7 +9035,7 @@ CPU. The currently available options are
|
||||
@@ -9028,7 +9028,7 @@ CPU. The currently available options are
|
||||
</li><li>0x200000: Enable VIA PHE
|
||||
</li><li>0x400000: Enable VIA PHE SHA512
|
||||
</li></ul></td></tr>
|
||||
@ -237,7 +237,7 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
if set to one it will force the FIPS mode enablement.</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
@@ -18446,7 +18446,7 @@ None:
|
||||
@@ -18452,7 +18452,7 @@ None:
|
||||
--inline-commands-prefix=str Change the default delimiter for inline commands
|
||||
--provider=file Specify the PKCS #11 provider library
|
||||
- file must pre-exist
|
||||
@ -246,7 +246,7 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
--list-config Reports the configuration of the library
|
||||
--logfile=str Redirect informational messages to a specific file
|
||||
--keymatexport=str Label used for exporting keying material
|
||||
@@ -19468,7 +19468,7 @@ happens inside the black box.
|
||||
@@ -19472,7 +19472,7 @@ happens inside the black box.
|
||||
<li><a href="#TLS-Hello-Extension-Handling" accesskey="4">TLS Extension Handling</a></li>
|
||||
<li><a href="#Cryptographic-Backend" accesskey="5">Cryptographic Backend</a></li>
|
||||
<li><a href="#Random-Number-Generators_002dinternals" accesskey="6">Random Number Generators</a></li>
|
||||
@ -262,7 +262,7 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
-Next: <a href="#FIPS140_002d2-mode" accesskey="n" rel="next">FIPS140-2 mode</a>, Previous: <a href="#Cryptographic-Backend" accesskey="p" rel="prev">Cryptographic Backend</a>, Up: <a href="#Internal-architecture-of-GnuTLS" accesskey="u" rel="up">Internal Architecture of GnuTLS</a> [<a href="#SEC_Contents" title="Table of contents" rel="contents">Contents</a>][<a href="#Function-and-Data-Index" title="Index" rel="index">Index</a>]</p>
|
||||
+Next: <a href="#FIPS140_002d2-mode" accesskey="n" rel="next">FIPS140-3 mode</a>, Previous: <a href="#Cryptographic-Backend" accesskey="p" rel="prev">Cryptographic Backend</a>, Up: <a href="#Internal-architecture-of-GnuTLS" accesskey="u" rel="up">Internal Architecture of GnuTLS</a> [<a href="#SEC_Contents" title="Table of contents" rel="contents">Contents</a>][<a href="#Function-and-Data-Index" title="Index" rel="index">Index</a>]</p>
|
||||
</div>
|
||||
<h3 class="section" id="Random-Number-Generators">11.6 Random Number Generators</h3>
|
||||
<h3 class="section" id="Random-Number-Generators"><span>11.6 Random Number Generators<a class="copiable-link" href="#Random-Number-Generators"> ¶</a></span></h3>
|
||||
|
||||
@@ -20005,7 +20005,7 @@ Next: <a href="#FIPS140_002d2-mode" acce
|
||||
|
||||
@ -271,14 +271,14 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
-FIPS140-2 and the system is in FIPS140-2 mode.
|
||||
+FIPS140-3 and the system is in FIPS140-3 mode.
|
||||
</p>
|
||||
<h4 class="subheading" id="The-default-generator-_002d-inner-workings">The default generator - inner workings</h4>
|
||||
<h4 class="subheading" id="The-default-generator-_002d-inner-workings"><span>The default generator - inner workings<a class="copiable-link" href="#The-default-generator-_002d-inner-workings"> ¶</a></span></h4>
|
||||
|
||||
@@ -20142,22 +20142,22 @@ on the above paragraph, all levels are i
|
||||
<p>
|
||||
Previous: <a href="#Random-Number-Generators_002dinternals" accesskey="p" rel="prev">Random Number Generators</a>, Up: <a href="#Internal-architecture-of-GnuTLS" accesskey="u" rel="up">Internal Architecture of GnuTLS</a> [<a href="#SEC_Contents" title="Table of contents" rel="contents">Contents</a>][<a href="#Function-and-Data-Index" title="Index" rel="index">Index</a>]</p>
|
||||
</div>
|
||||
-<h3 class="section" id="FIPS140_002d2-mode-1">11.7 FIPS140-2 mode</h3>
|
||||
+<h3 class="section" id="FIPS140_002d2-mode-1">11.7 FIPS140-3 mode</h3>
|
||||
-<h3 class="section" id="FIPS140_002d2-mode-1"><span>11.7 FIPS140-2 mode<a class="copiable-link" href="#FIPS140_002d2-mode-1"> ¶</a></span></h3>
|
||||
+<h3 class="section" id="FIPS140_002d2-mode-1"><span>11.7 FIPS140-3 mode<a class="copiable-link" href="#FIPS140_002d2-mode-1"> ¶</a></span></h3>
|
||||
|
||||
-<p>GnuTLS can operate in a special mode for FIPS140-2. That mode of operation
|
||||
-is for the conformance to NIST’s FIPS140-2 publication, which consists of policies
|
||||
@ -335,8 +335,8 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
+<p>On runtime an application can verify whether the library is in FIPS140-3
|
||||
mode using the <a class="ref" href="#gnutls_005ffips140_005fmode_005fenabled">gnutls_fips140_mode_enabled</a> function.
|
||||
</p>
|
||||
-<h4 class="subheading" id="Relaxing-FIPS140_002d2-requirements">Relaxing FIPS140-2 requirements</h4>
|
||||
+<h4 class="subheading" id="Relaxing-FIPS140_002d2-requirements">Relaxing FIPS140-3 requirements</h4>
|
||||
-<h4 class="subheading" id="Relaxing-FIPS140_002d2-requirements"><span>Relaxing FIPS140-2 requirements<a class="copiable-link" href="#Relaxing-FIPS140_002d2-requirements"> ¶</a></span></h4>
|
||||
+<h4 class="subheading" id="Relaxing-FIPS140_002d2-requirements"><span>Relaxing FIPS140-3 requirements<a class="copiable-link" href="#Relaxing-FIPS140_002d2-requirements"> ¶</a></span></h4>
|
||||
|
||||
<p>The library by default operates in a strict enforcing mode, ensuring that
|
||||
-all constraints imposed by the FIPS140-2 specification are enforced. However
|
||||
@ -364,8 +364,8 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
application is aware of the followed security policy, and needs
|
||||
to utilize disallowed operations for other reasons (e.g., compatibility).
|
||||
</p></dd>
|
||||
@@ -20227,7 +20227,7 @@ to a message to the audit callback funct
|
||||
|
||||
@@ -20226,7 +20226,7 @@ to a message to the audit callback funct
|
||||
</dl>
|
||||
<div class="caption"><p><strong class="strong">Figure 11.5: </strong>The <code class="code">gnutls_fips_mode_t</code> enumeration.</p></div></div>
|
||||
<p>The intention of this API is to be used by applications which may run in
|
||||
-FIPS140-2 mode, while they utilize few algorithms not in the allowed set,
|
||||
@ -373,7 +373,7 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
e.g., for non-security related purposes. In these cases applications should
|
||||
wrap the non-compliant code within blocks like the following.
|
||||
</p>
|
||||
@@ -20256,9 +20256,9 @@ if (gnutls_fips140_mode_enabled())
|
||||
@@ -20255,9 +20255,9 @@ if (gnutls_fips140_mode_enabled())
|
||||
<p>The reason of the <code class="code">GNUTLS_FIPS140_SET_MODE_THREAD</code> flag in the
|
||||
previous calls is to localize the change in the mode. Note also, that
|
||||
such a block has no effect when the library is not operating
|
||||
@ -385,7 +385,7 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
</p><div class="example">
|
||||
<pre class="example-preformatted">gnutls_fips140_set_mode(GNUTLS_FIPS140_LAX, 0);
|
||||
</pre></div>
|
||||
@@ -20281,7 +20281,7 @@ performed within a given context.
|
||||
@@ -20280,7 +20280,7 @@ performed within a given context.
|
||||
<dt><code class="code"><var class="var">int</var> <a class="ref" href="#gnutls_005ffips140_005fpop_005fcontext">gnutls_fips140_pop_context</a> ( <var class="var">void</var>)</code></dt>
|
||||
</dl>
|
||||
|
||||
@ -394,7 +394,7 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
operation. It can be attached to the current execution thread with
|
||||
<a class="ref" href="#gnutls_005ffips140_005fpush_005fcontext">gnutls_fips140_push_context</a> and its internal state will be
|
||||
updated until it is detached with
|
||||
@@ -20654,8 +20654,8 @@ Previous: <a href="#Contributing" access
|
||||
@@ -20653,8 +20653,8 @@ Previous: <a href="#Contributing" access
|
||||
to an auditor that the crypto component follows some best practices, such
|
||||
as unit testing and reliance on well known crypto primitives.
|
||||
</p>
|
||||
@ -405,16 +405,16 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
</p>
|
||||
<hr>
|
||||
</div>
|
||||
@@ -24569,7 +24569,7 @@ unusable. This function is not thread-s
|
||||
<h4 class="subheading" id="gnutls_005ffips140_005fset_005fmode-1">gnutls_fips140_set_mode</h4>
|
||||
@@ -24575,7 +24575,7 @@ unusable. This function is not thread-s
|
||||
<h4 class="subheading" id="gnutls_005ffips140_005fset_005fmode-1"><span>gnutls_fips140_set_mode<a class="copiable-link" href="#gnutls_005ffips140_005fset_005fmode-1"> ¶</a></span></h4>
|
||||
<a class="anchor" id="gnutls_005ffips140_005fset_005fmode"></a><dl class="first-deftypefn first-deftypefun-alias-first-deftypefn">
|
||||
<dt class="deftypefn deftypefun-alias-deftypefn" id="index-gnutls_005ffips140_005fset_005fmode"><span class="category-def">Function: </span><span><code class="def-type">void</code> <strong class="def-name">gnutls_fips140_set_mode</strong> <code class="def-code-arguments">(gnutls_fips_mode_t <var class="var">mode</var>, unsigned <var class="var">flags</var>)</code><a class="copiable-link" href='#index-gnutls_005ffips140_005fset_005fmode'> ¶</a></span></dt>
|
||||
<dt class="deftypefn deftypefun-alias-deftypefn" id="index-gnutls_005ffips140_005fset_005fmode"><span class="category-def">Function: </span><span><code class="def-type">void</code> <strong class="def-name">gnutls_fips140_set_mode</strong> <code class="def-code-arguments">(gnutls_fips_mode_t <var class="var">mode</var>, unsigned <var class="var">flags</var>)</code><a class="copiable-link" href="#index-gnutls_005ffips140_005fset_005fmode"> ¶</a></span></dt>
|
||||
-<dd><p><var class="var">mode</var>: the FIPS140-2 mode to switch to
|
||||
+<dd><p><var class="var">mode</var>: the FIPS140-3 mode to switch to
|
||||
</p>
|
||||
<p><var class="var">flags</var>: should be zero or <code class="code">GNUTLS_FIPS140_SET_MODE_THREAD</code>
|
||||
</p>
|
||||
@@ -24578,13 +24578,13 @@ unusable. This function is not thread-s
|
||||
@@ -24584,13 +24584,13 @@ unusable. This function is not thread-s
|
||||
behavior with no flags after threads are created is undefined.
|
||||
</p>
|
||||
<p>When the flag <code class="code">GNUTLS_FIPS140_SET_MODE_THREAD</code> is specified
|
||||
@ -430,20 +430,20 @@ Index: gnutls-3.8.3/doc/gnutls.html
|
||||
values for <code class="code">mode</code> or to <code class="code">GNUTLS_FIPS140_SELFTESTS</code> mode, the library
|
||||
switches to <code class="code">GNUTLS_FIPS140_STRICT</code> mode.
|
||||
</p>
|
||||
@@ -46927,7 +46927,7 @@ Next: <a href="#Concept-Index" accesskey
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffingerprint"><code>gnutls_fingerprint</code></a>:</td><td> </td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fcontext_005fdeinit"><code>gnutls_fips140_context_deinit</code></a>:</td><td> </td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fcontext_005finit"><code>gnutls_fips140_context_init</code></a>:</td><td> </td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
-<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fget_005foperation_005fstate"><code>gnutls_fips140_get_operation_state</code></a>:</td><td> </td><td class="printindex-index-section"><a href="#FIPS140_002d2-mode">FIPS140-2 mode</a></td></tr>
|
||||
+<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fget_005foperation_005fstate"><code>gnutls_fips140_get_operation_state</code></a>:</td><td> </td><td class="printindex-index-section"><a href="#FIPS140_002d2-mode">FIPS140-3 mode</a></td></tr>
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fget_005foperation_005fstate-1"><code>gnutls_fips140_get_operation_state</code></a>:</td><td> </td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fmode_005fenabled"><code>gnutls_fips140_mode_enabled</code></a>:</td><td> </td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fpop_005fcontext"><code>gnutls_fips140_pop_context</code></a>:</td><td> </td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
Index: gnutls-3.8.3/doc/gnutls.info-3
|
||||
@@ -47011,7 +47011,7 @@ Next: <a href="#Concept-Index" accesskey
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffingerprint"><code>gnutls_fingerprint</code></a></td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fcontext_005fdeinit"><code>gnutls_fips140_context_deinit</code></a></td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fcontext_005finit"><code>gnutls_fips140_context_init</code></a></td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
-<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fget_005foperation_005fstate"><code>gnutls_fips140_get_operation_state</code></a></td><td class="printindex-index-section"><a href="#FIPS140_002d2-mode">FIPS140-2 mode</a></td></tr>
|
||||
+<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fget_005foperation_005fstate"><code>gnutls_fips140_get_operation_state</code></a></td><td class="printindex-index-section"><a href="#FIPS140_002d2-mode">FIPS140-3 mode</a></td></tr>
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fget_005foperation_005fstate-1"><code>gnutls_fips140_get_operation_state</code></a></td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fmode_005fenabled"><code>gnutls_fips140_mode_enabled</code></a></td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
<tr><td></td><td class="printindex-index-entry"><a href="#index-gnutls_005ffips140_005fpop_005fcontext"><code>gnutls_fips140_pop_context</code></a></td><td class="printindex-index-section"><a href="#Core-TLS-API">Core TLS API</a></td></tr>
|
||||
Index: gnutls-3.8.8/doc/gnutls.info-3
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/doc/gnutls.info-3
|
||||
+++ gnutls-3.8.3/doc/gnutls.info-3
|
||||
@@ -2247,7 +2247,7 @@ to ‘more’. Both will exit with a st
|
||||
--- gnutls-3.8.8.orig/doc/gnutls.info-3
|
||||
+++ gnutls-3.8.8/doc/gnutls.info-3
|
||||
@@ -2108,7 +2108,7 @@ to ‘more’. Both will exit with a st
|
||||
--inline-commands-prefix=str Change the default delimiter for inline commands
|
||||
--provider=file Specify the PKCS #11 provider library
|
||||
- file must pre-exist
|
||||
@ -452,7 +452,7 @@ Index: gnutls-3.8.3/doc/gnutls.info-3
|
||||
--list-config Reports the configuration of the library
|
||||
--logfile=str Redirect informational messages to a specific file
|
||||
--keymatexport=str Label used for exporting keying material
|
||||
@@ -3400,7 +3400,7 @@ to know what happens inside the black bo
|
||||
@@ -3261,7 +3261,7 @@ to know what happens inside the black bo
|
||||
* TLS Hello Extension Handling::
|
||||
* Cryptographic Backend::
|
||||
* Random Number Generators-internals::
|
||||
@ -461,7 +461,7 @@ Index: gnutls-3.8.3/doc/gnutls.info-3
|
||||
|
||||
|
||||
File: gnutls.info, Node: The TLS Protocol, Next: TLS Handshake Protocol, Up: Internal architecture of GnuTLS
|
||||
@@ -3932,7 +3932,7 @@ and abstract key types::.
|
||||
@@ -3789,7 +3789,7 @@ and abstract key types::.
|
||||
kernel implementation of ‘/dev/crypto’.
|
||||
|
||||
|
||||
@ -470,7 +470,7 @@ Index: gnutls-3.8.3/doc/gnutls.info-3
|
||||
|
||||
11.6 Random Number Generators
|
||||
=============================
|
||||
@@ -3942,7 +3942,7 @@ About the generators
|
||||
@@ -3799,7 +3799,7 @@ About the generators
|
||||
|
||||
GnuTLS provides two random generators. The default, and the AES-DRBG
|
||||
random generator which is only used when the library is compiled with
|
||||
@ -479,7 +479,7 @@ Index: gnutls-3.8.3/doc/gnutls.info-3
|
||||
|
||||
The default generator - inner workings
|
||||
--------------------------------------
|
||||
@@ -4174,7 +4174,7 @@ in *note Figure 11.5: gnutls_fips_mode_t
|
||||
@@ -4030,7 +4030,7 @@ in *note Figure 11.5: gnutls_fips_mode_t
|
||||
Figure 11.5: The ‘gnutls_fips_mode_t’ enumeration.
|
||||
|
||||
The intention of this API is to be used by applications which may run in
|
||||
@ -488,7 +488,7 @@ Index: gnutls-3.8.3/doc/gnutls.info-3
|
||||
set, e.g., for non-security related purposes. In these cases
|
||||
applications should wrap the non-compliant code within blocks like the
|
||||
following.
|
||||
@@ -4198,10 +4198,10 @@ are macros to simplify the following seq
|
||||
@@ -4054,10 +4054,10 @@ are macros to simplify the following seq
|
||||
|
||||
The reason of the ‘GNUTLS_FIPS140_SET_MODE_THREAD’ flag in the previous
|
||||
calls is to localize the change in the mode. Note also, that such a
|
||||
@ -501,7 +501,7 @@ Index: gnutls-3.8.3/doc/gnutls.info-3
|
||||
gnutls_fips140_set_mode(GNUTLS_FIPS140_LAX, 0);
|
||||
|
||||
Service indicator
|
||||
@@ -4683,8 +4683,8 @@ There are certifications from national o
|
||||
@@ -4539,8 +4539,8 @@ There are certifications from national o
|
||||
practices, such as unit testing and reliance on well known crypto
|
||||
primitives.
|
||||
|
||||
@ -512,7 +512,7 @@ Index: gnutls-3.8.3/doc/gnutls.info-3
|
||||
|
||||
|
||||
File: gnutls.info, Node: Error codes, Next: Supported ciphersuites, Prev: Support, Up: Top
|
||||
@@ -9151,7 +9151,7 @@ gnutls_fips140_set_mode
|
||||
@@ -9015,7 +9015,7 @@ gnutls_fips140_set_mode
|
||||
|
||||
-- Function: void gnutls_fips140_set_mode (gnutls_fips_mode_t MODE,
|
||||
unsigned FLAGS)
|
||||
@ -521,10 +521,10 @@ Index: gnutls-3.8.3/doc/gnutls.info-3
|
||||
|
||||
FLAGS: should be zero or ‘GNUTLS_FIPS140_SET_MODE_THREAD’
|
||||
|
||||
Index: gnutls-3.8.3/doc/invoke-gnutls-cli.texi
|
||||
Index: gnutls-3.8.8/doc/invoke-gnutls-cli.texi
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/doc/invoke-gnutls-cli.texi
|
||||
+++ gnutls-3.8.3/doc/invoke-gnutls-cli.texi
|
||||
--- gnutls-3.8.8.orig/doc/invoke-gnutls-cli.texi
|
||||
+++ gnutls-3.8.8/doc/invoke-gnutls-cli.texi
|
||||
@@ -102,7 +102,7 @@ None:
|
||||
--inline-commands-prefix=str Change the default delimiter for inline commands
|
||||
--provider=file Specify the PKCS #11 provider library
|
||||
@ -534,10 +534,10 @@ Index: gnutls-3.8.3/doc/invoke-gnutls-cli.texi
|
||||
--list-config Reports the configuration of the library
|
||||
--logfile=str Redirect informational messages to a specific file
|
||||
--keymatexport=str Label used for exporting keying material
|
||||
Index: gnutls-3.8.3/doc/manpages/gnutls-cli.1
|
||||
Index: gnutls-3.8.8/doc/manpages/gnutls-cli.1
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/doc/manpages/gnutls-cli.1
|
||||
+++ gnutls-3.8.3/doc/manpages/gnutls-cli.1
|
||||
--- gnutls-3.8.8.orig/doc/manpages/gnutls-cli.1
|
||||
+++ gnutls-3.8.8/doc/manpages/gnutls-cli.1
|
||||
@@ -398,7 +398,7 @@ Specify the PKCS #11 provider library.
|
||||
This will override the default options in /etc/gnutls/pkcs11.conf
|
||||
.TP
|
||||
@ -547,11 +547,11 @@ Index: gnutls-3.8.3/doc/manpages/gnutls-cli.1
|
||||
.sp
|
||||
.TP
|
||||
.NOP \f\*[B-Font]\-\-list\-config\f[]
|
||||
Index: gnutls-3.8.3/doc/reference/html/gnutls-gnutls.html
|
||||
Index: gnutls-3.8.8/doc/reference/html/gnutls-gnutls.html
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/doc/reference/html/gnutls-gnutls.html
|
||||
+++ gnutls-3.8.3/doc/reference/html/gnutls-gnutls.html
|
||||
@@ -20866,12 +20866,12 @@ gnutls_fips140_set_mode (<em class="para
|
||||
--- gnutls-3.8.8.orig/doc/reference/html/gnutls-gnutls.html
|
||||
+++ gnutls-3.8.8/doc/reference/html/gnutls-gnutls.html
|
||||
@@ -20874,12 +20874,12 @@ gnutls_fips140_set_mode (<em class="para
|
||||
(globally), and should be called prior to creating any threads. Its
|
||||
behavior with no flags after threads are created is undefined.</p>
|
||||
<p>When the flag <a class="link" href="gnutls-gnutls.html#GNUTLS-FIPS140-SET-MODE-THREAD:CAPS" title="GNUTLS_FIPS140_SET_MODE_THREAD"><code class="literal">GNUTLS_FIPS140_SET_MODE_THREAD</code></a> is specified
|
||||
@ -566,7 +566,7 @@ Index: gnutls-3.8.3/doc/reference/html/gnutls-gnutls.html
|
||||
values for <em class="parameter"><code>mode</code></em>
|
||||
or to <a class="link" href="gnutls-gnutls.html#GNUTLS-FIPS140-SELFTESTS:CAPS"><code class="literal">GNUTLS_FIPS140_SELFTESTS</code></a> mode, the library
|
||||
switches to <a class="link" href="gnutls-gnutls.html#GNUTLS-FIPS140-STRICT:CAPS"><code class="literal">GNUTLS_FIPS140_STRICT</code></a> mode.</p>
|
||||
@@ -20886,7 +20886,7 @@ switches to <a class="link" href="gnutls
|
||||
@@ -20894,7 +20894,7 @@ switches to <a class="link" href="gnutls
|
||||
<tbody>
|
||||
<tr>
|
||||
<td class="parameter_name"><p>mode</p></td>
|
||||
@ -575,7 +575,7 @@ Index: gnutls-3.8.3/doc/reference/html/gnutls-gnutls.html
|
||||
<td class="parameter_annotations"> </td>
|
||||
</tr>
|
||||
<tr>
|
||||
@@ -25904,7 +25904,7 @@ encryption</p>
|
||||
@@ -25969,7 +25969,7 @@ encryption</p>
|
||||
<hr>
|
||||
<div class="refsect2">
|
||||
<a name="gnutls-fips-mode-t"></a><h3>enum gnutls_fips_mode_t</h3>
|
||||
@ -584,7 +584,7 @@ Index: gnutls-3.8.3/doc/reference/html/gnutls-gnutls.html
|
||||
<div class="refsect3">
|
||||
<a name="gnutls-fips-mode-t.members"></a><h4>Members</h4>
|
||||
<div class="informaltable"><table class="informaltable" width="100%" border="0">
|
||||
@@ -25917,7 +25917,7 @@ encryption</p>
|
||||
@@ -25982,7 +25982,7 @@ encryption</p>
|
||||
<tr>
|
||||
<td class="enum_member_name"><p><a name="GNUTLS-FIPS140-DISABLED:CAPS"></a>GNUTLS_FIPS140_DISABLED</p></td>
|
||||
<td class="enum_member_description">
|
||||
@ -593,7 +593,7 @@ Index: gnutls-3.8.3/doc/reference/html/gnutls-gnutls.html
|
||||
</td>
|
||||
<td class="enum_member_annotations"> </td>
|
||||
</tr>
|
||||
@@ -25940,8 +25940,8 @@ operation failure via error code.</p>
|
||||
@@ -26005,8 +26005,8 @@ operation failure via error code.</p>
|
||||
<tr>
|
||||
<td class="enum_member_name"><p><a name="GNUTLS-FIPS140-LAX:CAPS"></a>GNUTLS_FIPS140_LAX</p></td>
|
||||
<td class="enum_member_description">
|
||||
@ -604,17 +604,17 @@ Index: gnutls-3.8.3/doc/reference/html/gnutls-gnutls.html
|
||||
application is aware of the followed security policy, and needs
|
||||
to utilize disallowed operations for other reasons (e.g., compatibility).</p>
|
||||
</td>
|
||||
@@ -27575,4 +27575,4 @@ This is used by <a class="link" href="gn
|
||||
@@ -27646,4 +27646,4 @@ This is used by <a class="link" href="gn
|
||||
<div class="footer">
|
||||
<hr>Generated by GTK-Doc V1.33.1</div>
|
||||
<hr>Generated by GTK-Doc V1.34.0</div>
|
||||
</body>
|
||||
-</html>
|
||||
\ No newline at end of file
|
||||
+</html>
|
||||
Index: gnutls-3.8.3/lib/fips.c
|
||||
Index: gnutls-3.8.8/lib/fips.c
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/lib/fips.c
|
||||
+++ gnutls-3.8.3/lib/fips.c
|
||||
--- gnutls-3.8.8.orig/lib/fips.c
|
||||
+++ gnutls-3.8.8/lib/fips.c
|
||||
@@ -121,7 +121,7 @@ unsigned _gnutls_fips_mode_enabled(void)
|
||||
}
|
||||
|
||||
@ -633,7 +633,7 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
ret = GNUTLS_FIPS140_SELFTESTS;
|
||||
goto exit;
|
||||
}
|
||||
@@ -694,7 +694,7 @@ unsigned gnutls_fips140_mode_enabled(voi
|
||||
@@ -740,7 +740,7 @@ unsigned gnutls_fips140_mode_enabled(voi
|
||||
|
||||
/**
|
||||
* gnutls_fips140_set_mode:
|
||||
@ -642,7 +642,7 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
* @flags: should be zero or %GNUTLS_FIPS140_SET_MODE_THREAD
|
||||
*
|
||||
* That function is not thread-safe when changing the mode with no flags
|
||||
@@ -702,13 +702,13 @@ unsigned gnutls_fips140_mode_enabled(voi
|
||||
@@ -748,13 +748,13 @@ unsigned gnutls_fips140_mode_enabled(voi
|
||||
* behavior with no flags after threads are created is undefined.
|
||||
*
|
||||
* When the flag %GNUTLS_FIPS140_SET_MODE_THREAD is specified
|
||||
@ -658,7 +658,7 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
* values for @mode or to %GNUTLS_FIPS140_SELFTESTS mode, the library
|
||||
* switches to %GNUTLS_FIPS140_STRICT mode.
|
||||
*
|
||||
@@ -720,10 +720,10 @@ void gnutls_fips140_set_mode(gnutls_fips
|
||||
@@ -766,10 +766,10 @@ void gnutls_fips140_set_mode(gnutls_fips
|
||||
gnutls_fips_mode_t prev = _gnutls_fips_mode_enabled();
|
||||
if (prev == GNUTLS_FIPS140_DISABLED ||
|
||||
prev == GNUTLS_FIPS140_SELFTESTS) {
|
||||
@ -671,7 +671,7 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
return;
|
||||
}
|
||||
|
||||
@@ -736,7 +736,7 @@ void gnutls_fips140_set_mode(gnutls_fips
|
||||
@@ -782,7 +782,7 @@ void gnutls_fips140_set_mode(gnutls_fips
|
||||
case GNUTLS_FIPS140_SELFTESTS:
|
||||
_gnutls_audit_log(
|
||||
NULL,
|
||||
@ -680,7 +680,7 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
mode = GNUTLS_FIPS140_STRICT;
|
||||
break;
|
||||
default:
|
||||
@@ -912,7 +912,7 @@ void _gnutls_switch_fips_state(gnutls_fi
|
||||
@@ -958,7 +958,7 @@ void _gnutls_switch_fips_state(gnutls_fi
|
||||
}
|
||||
|
||||
if (!_tfips_context) {
|
||||
@ -689,7 +689,7 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
return;
|
||||
}
|
||||
|
||||
@@ -926,7 +926,7 @@ void _gnutls_switch_fips_state(gnutls_fi
|
||||
@@ -972,7 +972,7 @@ void _gnutls_switch_fips_state(gnutls_fi
|
||||
if (mode != GNUTLS_FIPS140_LAX) {
|
||||
_gnutls_audit_log(
|
||||
NULL,
|
||||
@ -698,7 +698,7 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
operation_state_to_string(state));
|
||||
}
|
||||
_tfips_context->state = state;
|
||||
@@ -937,7 +937,7 @@ void _gnutls_switch_fips_state(gnutls_fi
|
||||
@@ -983,7 +983,7 @@ void _gnutls_switch_fips_state(gnutls_fi
|
||||
if (mode != GNUTLS_FIPS140_LAX) {
|
||||
_gnutls_audit_log(
|
||||
NULL,
|
||||
@ -707,7 +707,7 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
operation_state_to_string(state));
|
||||
}
|
||||
_tfips_context->state = state;
|
||||
@@ -949,7 +949,7 @@ void _gnutls_switch_fips_state(gnutls_fi
|
||||
@@ -995,7 +995,7 @@ void _gnutls_switch_fips_state(gnutls_fi
|
||||
if (mode != GNUTLS_FIPS140_LAX) {
|
||||
_gnutls_audit_log(
|
||||
NULL,
|
||||
@ -716,7 +716,7 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
operation_state_to_string(
|
||||
_tfips_context->state),
|
||||
operation_state_to_string(state));
|
||||
@@ -1011,7 +1011,7 @@ int gnutls_fips140_run_self_tests(void)
|
||||
@@ -1057,7 +1057,7 @@ int gnutls_fips140_run_self_tests(void)
|
||||
ret < 0) {
|
||||
_gnutls_switch_lib_state(LIB_STATE_ERROR);
|
||||
_gnutls_audit_log(NULL,
|
||||
@ -725,7 +725,7 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
} else {
|
||||
/* Restore the previous library state */
|
||||
_gnutls_switch_lib_state(prev_lib_state);
|
||||
@@ -1023,7 +1023,7 @@ int gnutls_fips140_run_self_tests(void)
|
||||
@@ -1069,7 +1069,7 @@ int gnutls_fips140_run_self_tests(void)
|
||||
if (gnutls_fips140_pop_context() < 0) {
|
||||
_gnutls_switch_lib_state(LIB_STATE_ERROR);
|
||||
_gnutls_audit_log(
|
||||
@ -734,11 +734,11 @@ Index: gnutls-3.8.3/lib/fips.c
|
||||
}
|
||||
gnutls_fips140_context_deinit(fips_context);
|
||||
}
|
||||
Index: gnutls-3.8.3/lib/fips.h
|
||||
Index: gnutls-3.8.8/lib/fips.h
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/lib/fips.h
|
||||
+++ gnutls-3.8.3/lib/fips.h
|
||||
@@ -160,7 +160,7 @@ is_cipher_algo_allowed_in_fips(gnutls_ci
|
||||
--- gnutls-3.8.8.orig/lib/fips.h
|
||||
+++ gnutls-3.8.8/lib/fips.h
|
||||
@@ -163,7 +163,7 @@ is_cipher_algo_allowed_in_fips(gnutls_ci
|
||||
}
|
||||
|
||||
#ifdef ENABLE_FIPS140
|
||||
@ -747,7 +747,7 @@ Index: gnutls-3.8.3/lib/fips.h
|
||||
* and return an error if necessary or ignore */
|
||||
#define FIPS_RULE(condition, ret_error, ...) \
|
||||
{ \
|
||||
@@ -170,10 +170,10 @@ is_cipher_algo_allowed_in_fips(gnutls_ci
|
||||
@@ -173,10 +173,10 @@ is_cipher_algo_allowed_in_fips(gnutls_ci
|
||||
if (_mode == GNUTLS_FIPS140_LOG) { \
|
||||
_gnutls_audit_log( \
|
||||
NULL, \
|
||||
@ -760,7 +760,7 @@ Index: gnutls-3.8.3/lib/fips.h
|
||||
return ret_error; \
|
||||
} \
|
||||
} \
|
||||
@@ -188,7 +188,7 @@ inline static bool is_mac_algo_allowed(g
|
||||
@@ -191,7 +191,7 @@ inline static bool is_mac_algo_allowed(g
|
||||
switch (mode) {
|
||||
case GNUTLS_FIPS140_LOG:
|
||||
_gnutls_audit_log(NULL,
|
||||
@ -769,7 +769,7 @@ Index: gnutls-3.8.3/lib/fips.h
|
||||
gnutls_mac_get_name(algo));
|
||||
FALLTHROUGH;
|
||||
case GNUTLS_FIPS140_DISABLED:
|
||||
@@ -210,7 +210,7 @@ inline static bool is_cipher_algo_allowe
|
||||
@@ -213,7 +213,7 @@ inline static bool is_cipher_algo_allowe
|
||||
switch (mode) {
|
||||
case GNUTLS_FIPS140_LOG:
|
||||
_gnutls_audit_log(NULL,
|
||||
@ -778,11 +778,11 @@ Index: gnutls-3.8.3/lib/fips.h
|
||||
gnutls_cipher_get_name(algo));
|
||||
FALLTHROUGH;
|
||||
case GNUTLS_FIPS140_DISABLED:
|
||||
Index: gnutls-3.8.3/lib/global.c
|
||||
Index: gnutls-3.8.8/lib/global.c
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/lib/global.c
|
||||
+++ gnutls-3.8.3/lib/global.c
|
||||
@@ -337,12 +337,12 @@ static int _gnutls_global_init(unsigned
|
||||
--- gnutls-3.8.8.orig/lib/global.c
|
||||
+++ gnutls-3.8.8/lib/global.c
|
||||
@@ -339,12 +339,12 @@ static int _gnutls_global_init(unsigned
|
||||
|
||||
#ifdef ENABLE_FIPS140
|
||||
res = _gnutls_fips_mode_enabled();
|
||||
@ -797,7 +797,7 @@ Index: gnutls-3.8.3/lib/global.c
|
||||
_gnutls_priority_update_fips();
|
||||
|
||||
/* first round of self checks, these are done on the
|
||||
@@ -352,7 +352,7 @@ static int _gnutls_global_init(unsigned
|
||||
@@ -354,7 +354,7 @@ static int _gnutls_global_init(unsigned
|
||||
if (ret < 0) {
|
||||
_gnutls_switch_lib_state(LIB_STATE_ERROR);
|
||||
_gnutls_audit_log(
|
||||
@ -806,7 +806,7 @@ Index: gnutls-3.8.3/lib/global.c
|
||||
if (res != 2) {
|
||||
gnutls_assert();
|
||||
goto out;
|
||||
@@ -375,7 +375,7 @@ static int _gnutls_global_init(unsigned
|
||||
@@ -377,7 +377,7 @@ static int _gnutls_global_init(unsigned
|
||||
if (ret < 0) {
|
||||
_gnutls_switch_lib_state(LIB_STATE_ERROR);
|
||||
_gnutls_audit_log(
|
||||
@ -815,11 +815,11 @@ Index: gnutls-3.8.3/lib/global.c
|
||||
if (res != 2) {
|
||||
gnutls_assert();
|
||||
goto out;
|
||||
Index: gnutls-3.8.3/lib/includes/gnutls/gnutls.h.in
|
||||
Index: gnutls-3.8.8/lib/includes/gnutls/gnutls.h.in
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/lib/includes/gnutls/gnutls.h.in
|
||||
+++ gnutls-3.8.3/lib/includes/gnutls/gnutls.h.in
|
||||
@@ -3199,16 +3199,16 @@ typedef int (*gnutls_alert_read_func)(gn
|
||||
--- gnutls-3.8.8.orig/lib/includes/gnutls/gnutls.h.in
|
||||
+++ gnutls-3.8.8/lib/includes/gnutls/gnutls.h.in
|
||||
@@ -3216,16 +3216,16 @@ typedef int (*gnutls_alert_read_func)(gn
|
||||
void gnutls_alert_set_read_function(gnutls_session_t session,
|
||||
gnutls_alert_read_func func);
|
||||
|
||||
@ -840,7 +840,7 @@ Index: gnutls-3.8.3/lib/includes/gnutls/gnutls.h.in
|
||||
* application is aware of the followed security policy, and needs
|
||||
* to utilize disallowed operations for other reasons (e.g., compatibility).
|
||||
* @GNUTLS_FIPS140_LOG: Similarly to %GNUTLS_FIPS140_LAX, it allows forbidden operations; any use of them results
|
||||
@@ -3216,7 +3216,7 @@ unsigned gnutls_fips140_mode_enabled(voi
|
||||
@@ -3233,7 +3233,7 @@ unsigned gnutls_fips140_mode_enabled(voi
|
||||
* @GNUTLS_FIPS140_SELFTESTS: A transient state during library initialization. That state
|
||||
* cannot be set or seen by applications.
|
||||
*
|
||||
@ -849,10 +849,10 @@ Index: gnutls-3.8.3/lib/includes/gnutls/gnutls.h.in
|
||||
*/
|
||||
typedef enum gnutls_fips_mode_t {
|
||||
GNUTLS_FIPS140_DISABLED = 0,
|
||||
Index: gnutls-3.8.3/src/cli.c
|
||||
Index: gnutls-3.8.8/src/cli.c
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/src/cli.c
|
||||
+++ gnutls-3.8.3/src/cli.c
|
||||
--- gnutls-3.8.8.orig/src/cli.c
|
||||
+++ gnutls-3.8.8/src/cli.c
|
||||
@@ -1635,10 +1635,10 @@ static void cmd_parser(int argc, char **
|
||||
|
||||
if (HAVE_OPT(FIPS140_MODE)) {
|
||||
@ -866,11 +866,11 @@ Index: gnutls-3.8.3/src/cli.c
|
||||
exit(1);
|
||||
}
|
||||
|
||||
Index: gnutls-3.8.3/src/gnutls-cli-options.c
|
||||
Index: gnutls-3.8.8/src/gnutls-cli-options.c
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/src/gnutls-cli-options.c
|
||||
+++ gnutls-3.8.3/src/gnutls-cli-options.c
|
||||
@@ -810,7 +810,7 @@ usage (FILE *out, int status)
|
||||
--- gnutls-3.8.8.orig/src/gnutls-cli-options.c
|
||||
+++ gnutls-3.8.8/src/gnutls-cli-options.c
|
||||
@@ -843,7 +843,7 @@ usage (FILE *out, int status)
|
||||
" --inline-commands-prefix=str Change the default delimiter for inline commands\n"
|
||||
" --provider=file Specify the PKCS #11 provider library\n"
|
||||
" - file must pre-exist\n"
|
||||
@ -879,10 +879,10 @@ Index: gnutls-3.8.3/src/gnutls-cli-options.c
|
||||
" --list-config Reports the configuration of the library\n"
|
||||
" --logfile=str Redirect informational messages to a specific file\n"
|
||||
" --keymatexport=str Label used for exporting keying material\n"
|
||||
Index: gnutls-3.8.3/tests/cert-tests/gost.sh
|
||||
Index: gnutls-3.8.8/tests/cert-tests/gost.sh
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/tests/cert-tests/gost.sh
|
||||
+++ gnutls-3.8.3/tests/cert-tests/gost.sh
|
||||
--- gnutls-3.8.8.orig/tests/cert-tests/gost.sh
|
||||
+++ gnutls-3.8.8/tests/cert-tests/gost.sh
|
||||
@@ -38,7 +38,7 @@ if ! test -x "${CERTTOOL}"; then
|
||||
fi
|
||||
|
||||
@ -892,10 +892,10 @@ Index: gnutls-3.8.3/tests/cert-tests/gost.sh
|
||||
exit 77
|
||||
fi
|
||||
|
||||
Index: gnutls-3.8.3/tests/cert-tests/pkcs12-corner-cases.sh
|
||||
Index: gnutls-3.8.8/tests/cert-tests/pkcs12-corner-cases.sh
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/tests/cert-tests/pkcs12-corner-cases.sh
|
||||
+++ gnutls-3.8.3/tests/cert-tests/pkcs12-corner-cases.sh
|
||||
--- gnutls-3.8.8.orig/tests/cert-tests/pkcs12-corner-cases.sh
|
||||
+++ gnutls-3.8.8/tests/cert-tests/pkcs12-corner-cases.sh
|
||||
@@ -28,7 +28,7 @@ if ! test -x "${CERTTOOL}"; then
|
||||
fi
|
||||
|
||||
@ -905,10 +905,10 @@ Index: gnutls-3.8.3/tests/cert-tests/pkcs12-corner-cases.sh
|
||||
exit 77
|
||||
fi
|
||||
|
||||
Index: gnutls-3.8.3/tests/cert-tests/pkcs12-encode.sh
|
||||
Index: gnutls-3.8.8/tests/cert-tests/pkcs12-encode.sh
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/tests/cert-tests/pkcs12-encode.sh
|
||||
+++ gnutls-3.8.3/tests/cert-tests/pkcs12-encode.sh
|
||||
--- gnutls-3.8.8.orig/tests/cert-tests/pkcs12-encode.sh
|
||||
+++ gnutls-3.8.8/tests/cert-tests/pkcs12-encode.sh
|
||||
@@ -28,7 +28,7 @@ if ! test -x "${CERTTOOL}"; then
|
||||
fi
|
||||
|
||||
@ -918,10 +918,10 @@ Index: gnutls-3.8.3/tests/cert-tests/pkcs12-encode.sh
|
||||
exit 77
|
||||
fi
|
||||
|
||||
Index: gnutls-3.8.3/tests/cert-tests/pkcs12-gost.sh
|
||||
Index: gnutls-3.8.8/tests/cert-tests/pkcs12-gost.sh
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/tests/cert-tests/pkcs12-gost.sh
|
||||
+++ gnutls-3.8.3/tests/cert-tests/pkcs12-gost.sh
|
||||
--- gnutls-3.8.8.orig/tests/cert-tests/pkcs12-gost.sh
|
||||
+++ gnutls-3.8.8/tests/cert-tests/pkcs12-gost.sh
|
||||
@@ -29,7 +29,7 @@ if ! test -x "${CERTTOOL}"; then
|
||||
fi
|
||||
|
||||
@ -931,10 +931,10 @@ Index: gnutls-3.8.3/tests/cert-tests/pkcs12-gost.sh
|
||||
exit 77
|
||||
fi
|
||||
|
||||
Index: gnutls-3.8.3/tests/cert-tests/pkcs12.sh
|
||||
Index: gnutls-3.8.8/tests/cert-tests/pkcs12.sh
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/tests/cert-tests/pkcs12.sh
|
||||
+++ gnutls-3.8.3/tests/cert-tests/pkcs12.sh
|
||||
--- gnutls-3.8.8.orig/tests/cert-tests/pkcs12.sh
|
||||
+++ gnutls-3.8.8/tests/cert-tests/pkcs12.sh
|
||||
@@ -28,7 +28,7 @@ if ! test -x "${CERTTOOL}"; then
|
||||
fi
|
||||
|
||||
@ -944,10 +944,10 @@ Index: gnutls-3.8.3/tests/cert-tests/pkcs12.sh
|
||||
exit 77
|
||||
fi
|
||||
|
||||
Index: gnutls-3.8.3/tests/cert-tests/pkcs8-decode.sh
|
||||
Index: gnutls-3.8.8/tests/cert-tests/pkcs8-decode.sh
|
||||
===================================================================
|
||||
--- gnutls-3.8.3.orig/tests/cert-tests/pkcs8-decode.sh
|
||||
+++ gnutls-3.8.3/tests/cert-tests/pkcs8-decode.sh
|
||||
--- gnutls-3.8. |