upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-02-12 07:13:50 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

- disable RSAMD5 if in FIPS mode (for openssl and for libnss).

Browse source 
git-svn-id: file:///svn/unbound/trunk@2702 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
Wouter Wijngaards 2012-06-25 15:13:44 +00:00
parent 98b6f90637
commit 87ded67cb6
2 changed files with 4 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
doc/Changelog
View file

@ -1,5 +1,5 @@
25 June 2012: Wouter
- disable RSAMD5 if in FIPS mode (when compiled with openssl).
- disable RSAMD5 if in FIPS mode (for openssl and for libnss).
22 June 2012: Wouter
- implement DS records, NSEC3 and ECDSA for compile with libnss.

4
validator/val_secalgo.c
View file

@ -615,11 +615,13 @@ dnskey_algo_id_is_supported(int id)
{
/* uses libNSS */
switch(id) {
case LDNS_RSAMD5:
/* disable MD5 support if FIPS mode is enabled in libnss */
return !PK11_IsFIPS();
case LDNS_DSA:
case LDNS_DSA_NSEC3:
case LDNS_RSASHA1:
case LDNS_RSASHA1_NSEC3:
case LDNS_RSAMD5:
#ifdef USE_SHA2
case LDNS_RSASHA256:
#endif