Skip to content

Fix some issues related to using FIPs kernel module and userland configurations#159

Merged
LinuxJedi merged 7 commits intowolfSSL:masterfrom
night1rider:fips-update-config
Mar 4, 2026
Merged

Fix some issues related to using FIPs kernel module and userland configurations#159
LinuxJedi merged 7 commits intowolfSSL:masterfrom
night1rider:fips-update-config

Conversation

@night1rider
Copy link
Copy Markdown
Contributor

No description provided.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the Yocto layer’s wolfSSL FIPS recipes to improve Linux kernel module FIPS hash handling (including an “auto” mode build path) and align some userland/kernel build configuration options.

Changes:

  • Adjust wolfSSL FIPS (userland + linuxkm) configure flags (smallstack / SP math options).
  • Add an auto-mode do_compile() path for the linuxkm FIPS recipe to compute/embed the module’s FIPS hash via a dedicated make target.
  • Introduce a Yocto-series-selected include for linuxkm module signing, with a scarthgap “modern” implementation, and document linuxkm hash settings in the sample config.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 5 comments.

Show a summary per file
File Description
recipes-wolfssl/wolfssl/wolfssl-linuxkm-fips.bb Adds linuxkm do_compile() logic for auto FIPS hash embedding; updates configure flags.
recipes-wolfssl/wolfssl/wolfssl-fips.bb Updates userland FIPS configure flags.
inc/wolfssl-linuxkm/wolfssl-linuxkm-sign-module.inc Adds Yocto-series-based include selection for signing behavior.
inc/wolfssl-linuxkm/scarthgap/wolfssl-linuxkm-sign-module-modern.inc Adds scarthgap “modern” compile/install logic for signed kernel module output.
conf/wolfssl-fips.conf.sample Documents linuxkm-specific FIPS hash mode and hash variable.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

Comment thread recipes-wolfssl/wolfssl/wolfssl-linuxkm-fips.bb
Comment thread recipes-wolfssl/wolfssl/wolfssl-linuxkm-fips.bb
Comment thread inc/wolfssl-linuxkm/wolfssl-linuxkm-sign-module.inc
@LinuxJedi LinuxJedi merged commit f1ef384 into wolfSSL:master Mar 4, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants