ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

FIPS tests changes for RHEL

Browse Source 
Include MD5 feature detection in featuretest tool and use it in some
places. When RHEL distribution or Fedora ELN is in FIPS mode, then MD5
algorithm is unavailable completely and even hmac-md5 algorithm usage
will always fail. Work that around by checking MD5 works and if not,
skipping its usage.

Those changes were dragged as downstream patch bind-9.11-fips-tests.patch
in Fedora and RHEL.
This commit is contained in:
Petr Menšík
2018-08-02 23:46:45 +02:00
committed by Mark Andrews
parent 4787adfd33
commit 6ad794a8cd
9 changed files with 103 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
bin/tests/system/nsupdate/setup.sh
View File

@@ -73,7 +73,11 @@ EOF
$TSIGKEYGEN ddns-key.example.nil > ns1/ddns.key
$TSIGKEYGEN -a hmac-md5 md5-key > ns1/md5.key
if $FEATURETEST --md5; then
$TSIGKEYGEN -a hmac-md5 md5-key > ns1/md5.key
else
echo -n > ns1/md5.key
fi
$TSIGKEYGEN -a hmac-sha1 sha1-key > ns1/sha1.key
$TSIGKEYGEN -a hmac-sha224 sha224-key > ns1/sha224.key
$TSIGKEYGEN -a hmac-sha256 sha256-key > ns1/sha256.key