Red Hat Bugzilla – Bug 1262803
No FIPS hmac file for /lib/sse2/fipscheck/libgmp.so.10
Last modified: 2016-04-18 06:27:32 EDT
Description of problem:
gmp installs a .hmac file for /usr/lib/fipscheck/libgmp.so.10 but not for the library in /lib/sse2/fipscheck/libgmp.so.10. That means that in platforms where the /lib/sse2 library is used we cannot run the FIPS validation routine.
cat <<_EOF_ >c.c
Steps to Reproduce:
1. gcc -m32 -lgnutls c.c
Error in GnuTLS initialization: Error while performing self checks.
Where is the correct place to store the second hash? Libraries have the same name, only path is different.
It should be stored in /usr/lib/sse2/fipscheck/
This bug has been closed as CURRENTRELEASE due to delivery of the fix in a z-stream. As the component is not on ACL, the fix is currently included in y-stream as well.
For more information please see the zstream process documentation:
* https://engineering.redhat.com/trac/ZStream/attachment/wiki/WikiStart/Z-Stream_process_update_4.odp .