feedc0de/wolfssl
1
0
Fork 0
forked from wolfSSL/wolfssl
Code Pull Requests Activity

FIPS Revalidation

Browse Source 
1. Enable SHA-224 by default if building for FIPSv2.
This commit is contained in:
John Safranek
2018-02-05 17:25:23 -08:00
parent fe8d46da95
commit aa968eac98
1 changed files with 11 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
configure.ac
View File

@@ -2043,8 +2043,9 @@ then
AM_CFLAGS="$AM_CFLAGS -DHAVE_FIPS" AM_CFLAGS="$AM_CFLAGS -DHAVE_FIPS"
# Add the FIPS flag. # Add the FIPS flag.
AS_IF([test "x$FIPS_VERSION" = "xv2"], AS_IF([test "x$FIPS_VERSION" = "xv2"],
[AM_CFLAGS="$AM_CFLAGS -DHAVE_FIPS_VERSION=2 -DWOLFSSL_KEY_GEN" [AM_CFLAGS="$AM_CFLAGS -DHAVE_FIPS_VERSION=2 -DWOLFSSL_KEY_GEN -DWOLFSSL_SHA224"
ENABLED_KEYGEN="yes" ENABLED_KEYGEN="yes"
ENABLED_SHA224="yes"
AS_IF([test "x$ENABLED_AESCCM" != "xyes"], AS_IF([test "x$ENABLED_AESCCM" != "xyes"],
[ENABLED_AESCCM="yes" [ENABLED_AESCCM="yes"
AM_CFLAGS="$AM_CFLAGS -DHAVE_AESCCM"]) AM_CFLAGS="$AM_CFLAGS -DHAVE_AESCCM"])
@@ -2090,7 +2091,7 @@ AM_CONDITIONAL([BUILD_SELFTEST], [test "x$ENABLED_SELFTEST" = "xyes"])
SHA224_DEFAULT=no SHA224_DEFAULT=no
if test "$host_cpu" = "x86_64" || test "$host_cpu" = "aarch64" if test "$host_cpu" = "x86_64" || test "$host_cpu" = "aarch64"
then then
if test "x$ENABLED_FIPS" = "xno" if test "x$ENABLED_FIPS" = "xno" || test "x$FIPS_VERSION" = "xv2"
then then
SHA224_DEFAULT=yes SHA224_DEFAULT=yes
fi fi