Attachment 591327 Details for Bug 829088 – minimalist bug reproducer

minimalist bug reproducer

nsslowhasher.c (text/plain), 1.55 KB, created by Elio Maldonado Batiz on 2012-06-13 02:20:03 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Elio Maldonado Batiz

Created: 2012-06-13 02:20:03 UTC

Size: 1.55 KB

patch

obsolete

>/*
> * Simplest reproducer for when NSS fails on sytem FIPS mode
> *
> * gcc -g nsslowhasher.c -o nsslowhasher \
> *  `pkg-config --cflags --libs nss` `pkg-config --cflags --libs nss-softokn`
> *
> ***************************************************************
> * WARNING: Procced with caution.
> **********************************************
> * A: Prepare
> * $ echo 1 > /tmp/fips_on
> * $ echo 0 > /tmp/fips_off
> *
> * start in the directory where you have this app 
> * Now become root and stay root. Otherwise, you may not be able to login
> * and will have to restart
> *
> * A. Without the fix
> * Turn fips on:
> * 1. # mount --bind /tmp/fips_on /proc/sys/crypto/fips_enabled
> * 2. # cat /proc/sys/crypto/fips_enabled 
> *    -- should display 1
> * 3. Otional su ${your_regular_user}
> * 4. ./nsslowhasher
> *   You will see NSSLOW_Init failed
> * 
> * Turn fips off
> * 2. # mount --bind /tmp/fips_off /proc/sys/crypto/fips_enabled
> * 3. # cat /proc/sys/crypto/fips_enabled
> *    should display 0
> * 4. su ${your_regular user}
> * 5. ./nsslowhasher
> *   No error message
> */
>
>#include <stdio.h>
>#include <string.h>
>
>#include <nspr.h>
>#include <prtypes.h>
>
>#include <hasht.h>
>#include "nsslowhash.h"
>/* #include "/usr/include/nss3/nsslowhash.h" */
>#include <secport.h>
>#include <nss.h>
>
>
>int main(int argc, const char *argv[])
>{
>    int status = 0;
>    NSSLOWInitContext *initCtx;
>
>    /* Triggers the self-tests when in FIPS mode */
>    initCtx = NSSLOW_Init();
>    if (initCtx == NULL) {
>	fprintf(stderr, "NSSLOW_Init failed\n");
>	return 1;
>    }
>
>    NSSLOW_Shutdown(initCtx);
>
>    return 0;
>}

Actions: View

Attachments on bug 829088: 590229 | 591327 | 591352 | 591641