Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

support FIPS 140-2 compliant digest calls #1887

Merged
merged 1 commit into from
Jun 3, 2017
Merged

support FIPS 140-2 compliant digest calls #1887

merged 1 commit into from
Jun 3, 2017

Conversation

arlimus
Copy link
Contributor

@arlimus arlimus commented Jun 3, 2017

Calling the digest library directly unfortunately causes issues in FIPS 140-2 mode:

sha512.c(81): OpenSSL internal error, assertion failed:
Low level API call to digest SHA512 forbidden in FIPS mode!

Switching to OpenSSL as the caller resolve these issues

@arlimus arlimus added the Type: Enhancement Improves an existing feature label Jun 3, 2017
@arlimus arlimus added this to the InSpec 2.0 milestone Jun 3, 2017
@arlimus arlimus requested a review from adamleff June 3, 2017 00:15
Calling the `digest` library directly unfortunately causes issues in FIPS 140-2 mode:

    sha512.c(81): OpenSSL internal error, assertion failed: Low level API call to digest SHA512 forbidden in FIPS mode!

Switching to `OpenSSL` as the caller resolve these issues

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
@arlimus
Copy link
Contributor Author

arlimus commented Jun 3, 2017

Raised internally at https://chefio.atlassian.net/browse/CMP-182

Copy link
Contributor

@chris-rock chris-rock left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you @arlimus

@chris-rock chris-rock merged commit 75728f7 into master Jun 3, 2017
@chris-rock chris-rock deleted the dr/fips branch June 3, 2017 14:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Enhancement Improves an existing feature
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants