swtpm: Modify custom profile when FIPS is enabled on host

stefanberger / swtpm

Libtpms-based TPM emulator with socket, character device, and Linux CUSE interface.

Other

564 stars 136 forks source link

swtpm: Modify custom profile when FIPS is enabled on host #891

Open stefanberger opened 3 weeks ago

stefanberger commented 3 weeks ago

When FIPS is enabled on the host and the 'custom' profile is chosen then remove all (currently) known algorithms disabled by FIPS so that FIPS does not need to be disabled in the OpenSSL instance. Also set or adjust minimum key sizes for EC and RSA keys.