rpms / krb5

Clone
Source Code
GIT

ec957f5 Do not block KRB5KDF and MD4/5 in FIPS mode

Authored and Committed by jrische a year ago
raw patch tree parent
2 files changed. 171 lines added. 1 lines removed.
0016-downstream-Allow-KRB5KDF-MD5-and-MD4-in-FIPS-mode.patch
file added
+165
krb5.spec
file modified
+6 -1 
    Do not block KRB5KDF and MD4/5 in FIPS mode
    
    Bypass OpenSSL's restrictions to use KRB5KDF in FIPS mode in case at
    least one of AES SHA-1 HMAC encryption types are used.
    
    Use OpenSSL 3.0 library context to access MD4 and MD5 lazily from
    legacy provider if RADIUS is being used or RC4 encryption type is
    enabled, without affecting global context.
    
    Such exceptions should not be allowed by the default FIPS crypto
    policy.
    
    Signed-off-by: Julien Rische <jrische@redhat.com>
file added
+165
file modified
+6 -1
Powered by Pagure 5.13.3
Documentation • File an Issue • About this Instance • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.