- Verify only the libgnutls library HMAC [bsc#1199881] * Do not use the brp-50-generate-fips-hmac script as this is now calculated with the internal fipshmac tool. * Add gnutls-verify-library-HMAC.patch - Disable flaky test that fails in s390x architecture: * Add gnutls-disable-flaky-test-dtls-resume.patch - Consolidate the FIPS hmac files [bsc#1203245] * Use the gnutls fipshmac tool instead of the brp-check-suse and rename it to reflect on the library version. - Add a gnutls.rpmlintrc file to remove a hidden-file-or-dir false positive for the FIPS hmac calculation. OBS-URL: https://build.opensuse.org/request/show/1034572 OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=80
22 lines
705 B
Diff
22 lines
705 B
Diff
Index: gnutls-3.7.8/lib/fips.c
|
|
===================================================================
|
|
--- gnutls-3.7.8.orig/lib/fips.c
|
|
+++ gnutls-3.7.8/lib/fips.c
|
|
@@ -402,6 +402,8 @@ static int check_binary_integrity(void)
|
|
ret = check_lib_hmac(&file.gnutls, GNUTLS_LIBRARY_NAME, "gnutls_global_init");
|
|
if (ret < 0)
|
|
return ret;
|
|
+ /* Check only the binary integrity of the libgnutls library */
|
|
+#if 0
|
|
ret = check_lib_hmac(&file.nettle, NETTLE_LIBRARY_NAME, "nettle_aes_set_encrypt_key");
|
|
if (ret < 0)
|
|
return ret;
|
|
@@ -411,6 +413,7 @@ static int check_binary_integrity(void)
|
|
ret = check_lib_hmac(&file.gmp, GMP_LIBRARY_NAME, "__gmpz_init");
|
|
if (ret < 0)
|
|
return ret;
|
|
+#endif
|
|
|
|
return 0;
|
|
}
|