Bug 1847532

Summary:	Re-enable libreswn to use NSS KDF
Product:	Red Hat Enterprise Linux 8	Reporter:	Paul Wouters <pwouters>
Component:	libreswan	Assignee:	Paul Wouters <pwouters>
Status:	CLOSED ERRATA	QA Contact:	Ondrej Moriš <omoris>
Severity:	high	Docs Contact:
Priority:	high
Version:	8.3	CC:	dueno, lvrabec, omoris, pvlasin, pvrabec, thozza
Target Milestone:	rc	Keywords:	Regression, Triaged
Target Release:	8.0	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	libreswan-3.32-6.el8	Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-11-04 03:18:00 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1809637
Bug Blocks:

Description Paul Wouters 2020-06-16 14:57:48 UTC

the libreswan build is waiting on an updated NSS package that has the IKEv1 Quick Mode KDF code. The libreswan code can either use NSS for all or for none of the NSS KDFs, so it had to temporarily disable the USE_NSS_PRF= option.

This is a hard requirement for FIPS, so that libreswan does not require FIPS validation

Comment 18 errata-xmlrpc 2020-11-04 03:18:00 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (libreswan bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2020:4722