opencryptoki / openssl-ibmca

OpenSSL engine and provider for libica.
Apache License 2.0
7 stars 15 forks source link

Enable EVP_MD_FLAG_FIPS flag for SHA-*. #5

Closed pvital closed 7 years ago

pvital commented 7 years ago

When running system in FIPS mode (libica >=3.0.0 can be configured with the --enable-fips option to have built-in FIPS 140-2), the OpenSSL/ibmca/libica stack crashes (SIGSEGV) in OpenSSL's RNG (which uses SHA-1).

This patch enables the EVP_MD_FLAG_FIPS flag for SHA1, SHA256, SHA512 EVP_MD structure.

This fixes the GitHub issue #4

Signed-off-by: Paulo Vital pvital@linux.vnet.ibm.com