smuellerDD / libkcapi

Linux Kernel Crypto API User Space Interface Library
http://www.chronox.de/libkcapi
Other
173 stars 72 forks source link

ci: add test case to verify installed binaries complete self-check successfully #174

Closed xnox closed 1 year ago

xnox commented 1 year ago

Ensure that install-exec-hook produces correct .hmac files, and that one can execute sha512hmac and fipshmac binaries with a forced FIPS self-check.

This functionality regressed when moving binaries from /usr/bin to /usr/libexec/libkcapi location, and switching from hardlinks to symbolic links.

xnox commented 1 year ago

observe that freshly installed build, when executing:

KCAPI_HASHER_FORCE_FIPS=1 /usr/libexec/libkcapi/fipshmac /bin/true

fails in the workflows.

smuellerDD commented 1 year ago

Applied, thanks