forked from pool/gnutls
Pedro Monreal Gonzalez
f914173517
- The FIPS hmac is now calculated with an internal tool since
commit a86c8e87189e23920ae622da5e572cb4e1a6e0ed and it has
been renamed to .gnutls.hmac. [bsc#1199881, bsc#1203245]
* Remove the fipscheck build dependency
* Check only the calculated hmac for libgnutls.so.30 since the
calculated hmacs for libnettle.so.8, libhogweed.so.6 and
libgmp.so.10 in .gnutls.hmac are incorrect.
* Add gnutls-FIPS-hmac-check-only-libgnutls.patch
* Remove gnutls-FIPS-Run-CFB8-without-offset.patch
- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
* Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch
OBS-URL: https://build.opensuse.org/request/show/1011039
OBS-URL: https://build.opensuse.org/package/show/security:tls/gnutls?expand=0&rev=78
21 lines
640 B
Diff
21 lines
640 B
Diff
Index: gnutls-3.7.8/lib/fips.c
|
|
===================================================================
|
|
--- gnutls-3.7.8.orig/lib/fips.c
|
|
+++ gnutls-3.7.8/lib/fips.c
|
|
@@ -402,6 +402,7 @@ static int check_binary_integrity(void)
|
|
ret = check_lib_hmac(&file.gnutls, GNUTLS_LIBRARY_NAME, "gnutls_global_init");
|
|
if (ret < 0)
|
|
return ret;
|
|
+#if 0
|
|
ret = check_lib_hmac(&file.nettle, NETTLE_LIBRARY_NAME, "nettle_aes_set_encrypt_key");
|
|
if (ret < 0)
|
|
return ret;
|
|
@@ -411,6 +412,7 @@ static int check_binary_integrity(void)
|
|
ret = check_lib_hmac(&file.gmp, GMP_LIBRARY_NAME, "__gmpz_init");
|
|
if (ret < 0)
|
|
return ret;
|
|
+#endif
|
|
|
|
return 0;
|
|
}
|