Skip to content

Conversation

@sipasing
Copy link
Contributor

go binary (tested with v1.21.7 on Oracle Linux) seems to be missing vendored openssl patches.

$ go tool nm $(which go) | grep -i openssl-fips
$ 

The above command returns nothing. Derek suggested that https://go-review.googlesource.com/c/go/+/454836 might be the reason for this.

I wanted to try a smaller change-set and so i think setting toolenv to empty string should work. I tried a make.bash and it worked and linkage is fine post that.

fixes #186

First time submitting a PR here, so please let me know if any changes are required.

@sipasing
Copy link
Contributor Author

@derekparker thanks for all the help in root causing this. Merging this in would make things much easier since we can use the downstream RH as-is.
Can you help us figure out if this solution is acceptable or some change is required.

Copy link
Contributor

@derekparker derekparker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

I'm happy to merge this and then remove the downstream patch we carry.

Ping @dbenoit17 for a second +1 before merging.

@sipasing sipasing force-pushed the fix-linkage-issue branch from c396c5d to 0cea428 Compare May 17, 2024 20:37
@sipasing sipasing force-pushed the fix-linkage-issue branch 4 times, most recently from e3a9331 to 21e885e Compare May 18, 2024 00:10
@sipasing sipasing force-pushed the fix-linkage-issue branch from 21e885e to 3c3531f Compare May 18, 2024 00:21
Copy link
Contributor

@derekparker derekparker left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Collaborator

@dbenoit17 dbenoit17 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@derekparker derekparker merged commit fc28f64 into golang-fips:main May 20, 2024
@sipasing
Copy link
Contributor Author

@dbenoit17 @derekparker There seems to some sort of race condition in PR merges since we have two files with same names now in the main branch

patches/015-fix-linkage.patch
patches/015-add-hash-sign-verify.patch

@sipasing sipasing mentioned this pull request May 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

golang binary missing vendored openssl fips patches.

3 participants