Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 591327 Details for
Bug 829088
nss-softokn sha224 self-test fails in fips mode
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
minimalist bug reproducer
nsslowhasher.c (text/plain), 1.55 KB, created by
Elio Maldonado Batiz
on 2012-06-13 02:20:03 UTC
(
hide
)
Description:
minimalist bug reproducer
Filename:
MIME Type:
Creator:
Elio Maldonado Batiz
Created:
2012-06-13 02:20:03 UTC
Size:
1.55 KB
patch
obsolete
>/* > * Simplest reproducer for when NSS fails on sytem FIPS mode > * > * gcc -g nsslowhasher.c -o nsslowhasher \ > * `pkg-config --cflags --libs nss` `pkg-config --cflags --libs nss-softokn` > * > *************************************************************** > * WARNING: Procced with caution. > ********************************************** > * A: Prepare > * $ echo 1 > /tmp/fips_on > * $ echo 0 > /tmp/fips_off > * > * start in the directory where you have this app > * Now become root and stay root. Otherwise, you may not be able to login > * and will have to restart > * > * A. Without the fix > * Turn fips on: > * 1. # mount --bind /tmp/fips_on /proc/sys/crypto/fips_enabled > * 2. # cat /proc/sys/crypto/fips_enabled > * -- should display 1 > * 3. Otional su ${your_regular_user} > * 4. ./nsslowhasher > * You will see NSSLOW_Init failed > * > * Turn fips off > * 2. # mount --bind /tmp/fips_off /proc/sys/crypto/fips_enabled > * 3. # cat /proc/sys/crypto/fips_enabled > * should display 0 > * 4. su ${your_regular user} > * 5. ./nsslowhasher > * No error message > */ > >#include <stdio.h> >#include <string.h> > >#include <nspr.h> >#include <prtypes.h> > >#include <hasht.h> >#include "nsslowhash.h" >/* #include "/usr/include/nss3/nsslowhash.h" */ >#include <secport.h> >#include <nss.h> > > >int main(int argc, const char *argv[]) >{ > int status = 0; > NSSLOWInitContext *initCtx; > > /* Triggers the self-tests when in FIPS mode */ > initCtx = NSSLOW_Init(); > if (initCtx == NULL) { > fprintf(stderr, "NSSLOW_Init failed\n"); > return 1; > } > > NSSLOW_Shutdown(initCtx); > > return 0; >}
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 829088
:
590229
| 591327 |
591352
|
591641