From 08009e73fc76813173ac924f48f1a76995e22ea1 Mon Sep 17 00:00:00 2001 From: Hayden Roche Date: Fri, 30 Sep 2022 08:04:31 -0700 Subject: [PATCH] Add RSA PSS salt defines to engine builds if not FIPS v2. WOLFSSL_PSS_LONG_SALT and WOLFSSL_PSS_SALT_LEN_DISCOVER are supported in our latest FIPS module (v5). These should be defined for engine builds as long as the FIPS version isn't v2. --- configure.ac | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/configure.ac b/configure.ac index ab9572e5b..afbd89b73 100644 --- a/configure.ac +++ b/configure.ac @@ -253,6 +253,10 @@ AS_CASE([$ENABLED_WOLFENGINE], ENABLED_WOLFENGINE="yes" ENABLED_FIPS="v2" ], + [fips-v5],[ + ENABLED_WOLFENGINE="yes" + ENABLED_FIPS="v5" + ], [fips-ready],[ ENABLED_WOLFENGINE="yes" ENABLED_FIPS="ready" @@ -7817,7 +7821,7 @@ then AM_CFLAGS="$AM_CFLAGS -DNO_OLD_MD5_NAME" fi -if test "$ENABLED_WOLFENGINE" = "yes" && test "$ENABLED_FIPS" = "no" +if test "$ENABLED_WOLFENGINE" = "yes" && test "$ENABLED_FIPS" != "v2" then AM_CFLAGS="$AM_CFLAGS -DWOLFSSL_PSS_LONG_SALT" AM_CFLAGS="$AM_CFLAGS -DWOLFSSL_PSS_SALT_LEN_DISCOVER"