Page MenuHomeFreeBSD

libcrypto: fix the FIPS provider on amd64
ClosedPublic

Authored by khorben on Sep 4 2023, 6:28 PM.
Tags
None
Referenced Files
F144463327: D41720.id127604.diff
Sun, Feb 8, 2:07 PM
F144434377: D41720.id127395.diff
Sun, Feb 8, 10:26 AM
Unknown Object (File)
Sat, Feb 7, 8:39 PM
Unknown Object (File)
Sat, Jan 31, 10:47 AM
Unknown Object (File)
Tue, Jan 20, 7:09 AM
Unknown Object (File)
Jan 2 2026, 8:20 AM
Unknown Object (File)
Dec 20 2025, 10:52 AM
Unknown Object (File)
Dec 13 2025, 12:17 AM
Subscribers

Details

Summary

This corrects the list of source files required for the FIPS provider,
as tested on a amd64 host. This still requires testing on the other
architectures.

Test Plan
# openssl fipsinstall -out /etc/ssl/fipsmodule.cnf -module /usr/lib/ossl-modules/fips.so
# vi /etc/ssl/openssl.cnf
[enable the FIPS module]
# echo test | openssl aes-256-cbc -provider fips -a -pbkdf2
enter AES-256-CBC encryption password:
Verifying - enter AES-256-CBC encryption password:
U2FsdGVkX199k8PlM+6jTPK4AARYYVR3BXF+a1bCLCk=

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

khorben created this revision.
secure/lib/libcrypto/modules/fips/Makefile
45

This needs aes-586.S now I think

Also build aes-586.S for i386.

This revision was not accepted when it landed; it landed in state Needs Review.Sep 21 2023, 3:38 PM
This revision was automatically updated to reflect the committed changes.