Sign the test string in the pairwise check instead of empty data.

Author: Marcus Meissner <meissner@suse.de>
This commit is contained in:
Tomas Mraz 2014-07-04 17:08:44 +02:00
parent 6466466115
commit c66230af31
2 changed files with 2 additions and 2 deletions

View File

@ -241,7 +241,7 @@ diff -up openssl-1.0.1e/crypto/ec/ec_key.c.fips-ec openssl-1.0.1e/crypto/ec/ec_k
+ +
+ EVP_PKEY_set1_EC_KEY(pk, key); + EVP_PKEY_set1_EC_KEY(pk, key);
+ +
+ if (fips_pkey_signature_test(pk, tbs, 0, NULL, 0, NULL, 0, NULL)) + if (fips_pkey_signature_test(pk, tbs, -1, NULL, 0, NULL, 0, NULL))
+ ret = 1; + ret = 1;
+ +
+ err: + err:

View File

@ -983,7 +983,7 @@ diff -up openssl-1.0.1g/crypto/dsa/dsa_key.c.fips openssl-1.0.1g/crypto/dsa/dsa_
+ +
+ EVP_PKEY_set1_DSA(pk, dsa); + EVP_PKEY_set1_DSA(pk, dsa);
+ +
+ if (fips_pkey_signature_test(pk, tbs, 0, NULL, 0, NULL, 0, NULL)) + if (fips_pkey_signature_test(pk, tbs, -1, NULL, 0, NULL, 0, NULL))
+ ret = 1; + ret = 1;
+ +
+ err: + err: