Project

Profile

Help

Task #3640

closed

Story #3637: As a user, I can run pulp in a FIPS-enabled environment

Confirm that m2crypto works in a FIPS enabled environment

Added by daviddavis almost 6 years ago. Updated almost 5 years ago.

Status:
CLOSED - COMPLETE
Priority:
Normal
Category:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Sprint 38
Quarter:

Description

  • Run m2crypto tests in a FIPS environment
  • Look through code to find incompatibilities
Actions #1

Updated by daviddavis almost 6 years ago

  • Sprint set to Sprint 36
Actions #2

Updated by rchan almost 6 years ago

  • Sprint changed from Sprint 36 to Sprint 37
Actions #3

Updated by dkliban@redhat.com almost 6 years ago

  • Status changed from NEW to ASSIGNED

I tried running the tests on the 0.21.1 tag of m2crypto[0] but got an error about incompatibility with openssl version.

When running the tests for the master branch I got an error in one of the tests. I chatted about it with @mcepl in #m2crypto on freenode and he said that it's a bug in the test. The test has a list of 'fips ciphers'[1] and that list is wrong. He said a patch is welcome to fix the test.

Also, 0.21.1 is a very old version of m2crypto - about 7 years old.

[0] https://gitlab.com/m2crypto/m2crypto
[1] https://gitlab.com/m2crypto/m2crypto/blob/master/tests/test_bio.py#L55

Actions #4

Updated by dalley almost 6 years ago

  • Assignee set to dkliban@redhat.com
Actions #5

Updated by rchan almost 6 years ago

  • Sprint changed from Sprint 37 to Sprint 38
Actions #6

Updated by daviddavis almost 6 years ago

  • Status changed from ASSIGNED to CLOSED - COMPLETE

Testing seems to confirm that m2crypto works without any need to patch.

Actions #7

Updated by bmbouter almost 5 years ago

  • Tags Pulp 2 added

Also available in: Atom PDF