Pedro Monreal Gonzalez
7d40b4ffcc
- Verify only the libgnutls library HMAC [bsc#1199881]
* Do not use the brp-50-generate-fips-hmac script as this
is now calculated with the internal fipshmac tool.
* Add gnutls-verify-library-HMAC.patch
- Disable flaky test that fails in s390x architecture:
* Add gnutls-disable-flaky-test-dtls-resume.patch
- Consolidate the FIPS hmac files [bsc#1203245]
* Use the gnutls fipshmac tool instead of the brp-check-suse
and rename it to reflect on the library version.
- Add a gnutls.rpmlintrc file to remove a hidden-file-or-dir false
positive for the FIPS hmac calculation.
OBS-URL: https://build.opensuse.org/request/show/1034572
OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=80
22 lines
705 B
Diff
22 lines
705 B
Diff
Index: gnutls-3.7.8/lib/fips.c
|
|
===================================================================
|
|
--- gnutls-3.7.8.orig/lib/fips.c
|
|
+++ gnutls-3.7.8/lib/fips.c
|
|
@@ -402,6 +402,8 @@ static int check_binary_integrity(void)
|
|
ret = check_lib_hmac(&file.gnutls, GNUTLS_LIBRARY_NAME, "gnutls_global_init");
|
|
if (ret < 0)
|
|
return ret;
|
|
+ /* Check only the binary integrity of the libgnutls library */
|
|
+#if 0
|
|
ret = check_lib_hmac(&file.nettle, NETTLE_LIBRARY_NAME, "nettle_aes_set_encrypt_key");
|
|
if (ret < 0)
|
|
return ret;
|
|
@@ -411,6 +413,7 @@ static int check_binary_integrity(void)
|
|
ret = check_lib_hmac(&file.gmp, GMP_LIBRARY_NAME, "__gmpz_init");
|
|
if (ret < 0)
|
|
return ret;
|
|
+#endif
|
|
|
|
return 0;
|
|
}
|