Page MenuHomeFreeBSD

libcrypto: fix the FIPS provider on amd64
ClosedPublic

Authored by khorben_defora.org on Sep 4 2023, 6:28 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Sep 27, 5:36 AM
Unknown Object (File)
Thu, Sep 26, 5:27 PM
Unknown Object (File)
Tue, Sep 24, 9:45 AM
Unknown Object (File)
Tue, Sep 24, 4:19 AM
Unknown Object (File)
Tue, Sep 24, 3:30 AM
Unknown Object (File)
Tue, Sep 24, 3:29 AM
Unknown Object (File)
Sun, Sep 22, 5:14 PM
Unknown Object (File)
Sun, Sep 22, 1:00 PM
Subscribers

Details

Summary

This corrects the list of source files required for the FIPS provider,
as tested on a amd64 host. This still requires testing on the other
architectures.

Test Plan
# openssl fipsinstall -out /etc/ssl/fipsmodule.cnf -module /usr/lib/ossl-modules/fips.so
# vi /etc/ssl/openssl.cnf
[enable the FIPS module]
# echo test | openssl aes-256-cbc -provider fips -a -pbkdf2
enter AES-256-CBC encryption password:
Verifying - enter AES-256-CBC encryption password:
U2FsdGVkX199k8PlM+6jTPK4AARYYVR3BXF+a1bCLCk=

Diff Detail

Repository
rG FreeBSD src repository
Lint
No Lint Coverage
Unit
No Test Coverage
Build Status
Buildable 53427
Build 50318: arc lint + arc unit