rpms/openssl
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix mistake in the FIPS RSA keygen causing key generation failures.

Browse Source
This commit is contained in:
Tomas Mraz 2018-04-05 16:44:48 +02:00
parent 08db5cbcb9
commit 5d5075d4c9
1 changed files with 16 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
openssl-1.1.0-fips.patch
View File

@ -11009,7 +11009,7 @@ diff -up openssl-1.1.0h/crypto/rsa/rsa_gen.c.fips openssl-1.1.0h/crypto/rsa/rsa_
+ goto err; + goto err;
+ if (r > 0) + if (r > 0)
+ break; + break;
+ } + } else {
+ error = ERR_peek_last_error(); + error = ERR_peek_last_error();
+ if (ERR_GET_LIB(error) == ERR_LIB_BN + if (ERR_GET_LIB(error) == ERR_LIB_BN
+ && ERR_GET_REASON(error) == BN_R_NO_INVERSE) { + && ERR_GET_REASON(error) == BN_R_NO_INVERSE) {
@ -11018,7 +11018,7 @@ diff -up openssl-1.1.0h/crypto/rsa/rsa_gen.c.fips openssl-1.1.0h/crypto/rsa/rsa_
+ } else { + } else {
+ goto err; + goto err;
+ } + }
+ + }
+ if (!BN_GENCB_call(cb, 2, n++)) + if (!BN_GENCB_call(cb, 2, n++))
+ goto err; + goto err;
+ } + }
@ -11060,7 +11060,7 @@ diff -up openssl-1.1.0h/crypto/rsa/rsa_gen.c.fips openssl-1.1.0h/crypto/rsa/rsa_
+ goto err; + goto err;
+ if (r > 0) + if (r > 0)
+ break; + break;
+ } + } else {
+ error = ERR_peek_last_error(); + error = ERR_peek_last_error();
+ if (ERR_GET_LIB(error) == ERR_LIB_BN + if (ERR_GET_LIB(error) == ERR_LIB_BN
+ && ERR_GET_REASON(error) == BN_R_NO_INVERSE) { + && ERR_GET_REASON(error) == BN_R_NO_INVERSE) {
@ -11069,7 +11069,7 @@ diff -up openssl-1.1.0h/crypto/rsa/rsa_gen.c.fips openssl-1.1.0h/crypto/rsa/rsa_
+ } else { + } else {
+ goto err; + goto err;
+ } + }
+ + }
+ if (!BN_GENCB_call(cb, 2, n++)) + if (!BN_GENCB_call(cb, 2, n++))
+ goto err; + goto err;
+ } + }