Blame SOURCES/gnutls-3.7.6-drbg-reseed.patch
|
 |
e79d4b |
From 3035e884b3abc68bcebff5adec5bd8819bbc6d7b Mon Sep 17 00:00:00 2001
|
|
|
e79d4b |
From: rpm-build <rpm-build>
|
|
|
e79d4b |
Date: Fri, 5 Aug 2022 16:16:42 +0900
|
|
|
e79d4b |
Subject: [PATCH] gnutls-3.7.6-drbg-reseed.patch
|
|
|
e79d4b |
|
|
|
e79d4b |
Signed-off-by: rpm-build <rpm-build>
|
|
|
e79d4b |
---
|
|
|
e79d4b |
lib/nettle/sysrng-linux.c | 10 +++++++++-
|
|
|
e79d4b |
1 file changed, 9 insertions(+), 1 deletion(-)
|
|
|
e79d4b |
|
|
|
e79d4b |
diff --git a/lib/nettle/sysrng-linux.c b/lib/nettle/sysrng-linux.c
|
|
|
e79d4b |
index 6b3971c..dae9061 100644
|
|
|
e79d4b |
--- a/lib/nettle/sysrng-linux.c
|
|
|
e79d4b |
+++ b/lib/nettle/sysrng-linux.c
|
|
|
e79d4b |
@@ -31,6 +31,9 @@
|
|
|
e79d4b |
# include <num.h>
|
|
|
e79d4b |
# include <errno.h>
|
|
|
e79d4b |
# include <rnd-common.h>
|
|
|
e79d4b |
+# include "fips.h"
|
|
|
e79d4b |
+#else
|
|
|
e79d4b |
+# define _gnutls_fips_mode_enabled() 0
|
|
|
e79d4b |
#endif
|
|
|
e79d4b |
|
|
|
e79d4b |
#include <sys/types.h>
|
|
|
e79d4b |
@@ -103,7 +106,12 @@ static int force_getrandom(void *buf, size_t buflen, unsigned int flags)
|
|
|
e79d4b |
static int _rnd_get_system_entropy_getrandom(void* _rnd, size_t size)
|
|
|
e79d4b |
{
|
|
|
e79d4b |
int ret;
|
|
|
e79d4b |
- ret = force_getrandom(_rnd, size, 0);
|
|
|
e79d4b |
+ unsigned int flags = 0;
|
|
|
e79d4b |
+
|
|
|
e79d4b |
+ if (_gnutls_fips_mode_enabled()) {
|
|
|
e79d4b |
+ flags |= 2/*GRND_RANDOM*/;
|
|
|
e79d4b |
+ }
|
|
|
e79d4b |
+ ret = force_getrandom(_rnd, size, flags);
|
|
|
e79d4b |
if (ret == -1) {
|
|
|
e79d4b |
int e = errno;
|
|
|
e79d4b |
gnutls_assert();
|
|
|
e79d4b |
--
|
|
|
e79d4b |
2.37.1
|
|
|
e79d4b |
|