rpms/freeradius
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix segfault when trying to access MD4 and MD5 in a FIPS system

Browse Source 
This updates the OpenSSL 3.0 backport patch to current 3.0.x branch
state, which includes fixes for accessing MD4 and MD5 algorithms when
the system is in FIPS mode.

Resolves: #2083699
Signed-off-by: Antonio Torres <antorres@redhat.com>
This commit is contained in:
Antonio Torres 2022-05-24 13:00:27 +02:00
parent d1def95634
commit d83b583a42
No known key found for this signature in database
GPG Key ID: 359FAF777296F653
2 changed files with 1233 additions and 477 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1702
freeradius-Backport-OpenSSL3-fixes.patch
View File

File diff suppressed because it is too large Load Diff

8
freeradius.spec
View File

@ -1,7 +1,7 @@
Summary: High-performance and highly configurable free RADIUS server Summary: High-performance and highly configurable free RADIUS server
Name: freeradius Name: freeradius
Version: 3.0.21 Version: 3.0.21
Release: 30%{?dist} Release: 31%{?dist}
License: GPLv2+ and LGPLv2+ License: GPLv2+ and LGPLv2+
URL: http://www.freeradius.org/ URL: http://www.freeradius.org/
@ -237,6 +237,7 @@ export PY3_INC_DIR="$(python3 -c 'import sysconfig; print(sysconfig.get_config_v
--libdir=%{_libdir}/freeradius \ --libdir=%{_libdir}/freeradius \
--enable-reproducible-builds \ --enable-reproducible-builds \
--disable-openssl-version-check \ --disable-openssl-version-check \
--enable-fips-workaround \
--with-openssl \ --with-openssl \
--with-udpfromto \ --with-udpfromto \
--with-threads \ --with-threads \
@ -858,6 +859,11 @@ exit 0
%attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/rest %attr(640,root,radiusd) %config(noreplace) /etc/raddb/mods-available/rest
%changelog %changelog
* Tue May 24 2022 Antonio Torres <antorres@redhat.com> - 3.0.21-31
- Update OpenSSL 3.0 support backport to current v3.0.x branch state
- Add "--enable-fips-workaround" to build options
Related: rhbz#2083699
* Tue May 10 2022 Antonio Torres <antorres@redhat.com> - 3.0.21-30 * Tue May 10 2022 Antonio Torres <antorres@redhat.com> - 3.0.21-30
- Add openssl-perl dependency - Add openssl-perl dependency
Related: rhbz#2078816 Related: rhbz#2078816