69 lines
2.0 KiB
Diff
69 lines
2.0 KiB
Diff
From b93796b1890b35a0922bfba9cd08e8a1a5f956cf Mon Sep 17 00:00:00 2001
|
|
From: Alexander Scheel <ascheel@redhat.com>
|
|
Date: Fri, 28 Sep 2018 09:54:46 -0400
|
|
Subject: [PATCH 1/2] Replace HMAC-MD5 implementation with OpenSSL's
|
|
|
|
If OpenSSL EVP is not found, fallback to internal implementation of
|
|
HMAC-MD5.
|
|
|
|
Signed-off-by: Alexander Scheel <ascheel@redhat.com>
|
|
---
|
|
src/lib/hmacmd5.c | 34 +++++++++++++++++++++++++++++++++-
|
|
1 file changed, 33 insertions(+), 1 deletion(-)
|
|
|
|
diff --git a/src/lib/hmacmd5.c b/src/lib/hmacmd5.c
|
|
index 2c662ff368..1cca00fa2a 100644
|
|
--- a/src/lib/hmacmd5.c
|
|
+++ b/src/lib/hmacmd5.c
|
|
@@ -27,10 +27,41 @@
|
|
|
|
RCSID("$Id: 2c662ff368e46556edd2cfdf408bd0fca0ab5f18 $")
|
|
|
|
+#ifdef HAVE_OPENSSL_EVP_H
|
|
+#include <openssl/hmac.h>
|
|
+#include <openssl/evp.h>
|
|
+#endif
|
|
+
|
|
#include <freeradius-devel/libradius.h>
|
|
#include <freeradius-devel/md5.h>
|
|
|
|
-/** Calculate HMAC using MD5
|
|
+#ifdef HAVE_OPENSSL_EVP_H
|
|
+/** Calculate HMAC using OpenSSL's MD5 implementation
|
|
+ *
|
|
+ * @param digest Caller digest to be filled in.
|
|
+ * @param text Pointer to data stream.
|
|
+ * @param text_len length of data stream.
|
|
+ * @param key Pointer to authentication key.
|
|
+ * @param key_len Length of authentication key.
|
|
+ *
|
|
+ */
|
|
+void fr_hmac_md5(uint8_t digest[MD5_DIGEST_LENGTH], uint8_t const *text, size_t text_len,
|
|
+ uint8_t const *key, size_t key_len)
|
|
+{
|
|
+ HMAC_CTX *ctx = HMAC_CTX_new();
|
|
+
|
|
+#ifdef EVP_MD_CTX_FLAG_NON_FIPS_ALLOW
|
|
+ /* Since MD5 is not allowed by FIPS, explicitly allow it. */
|
|
+ HMAC_CTX_set_flags(ctx, EVP_MD_CTX_FLAG_NON_FIPS_ALLOW);
|
|
+#endif /* EVP_MD_CTX_FLAG_NON_FIPS_ALLOW */
|
|
+
|
|
+ HMAC_Init_ex(ctx, key, key_len, EVP_md5(), NULL);
|
|
+ HMAC_Update(ctx, text, text_len);
|
|
+ HMAC_Final(ctx, digest, NULL);
|
|
+ HMAC_CTX_free(ctx);
|
|
+}
|
|
+#else
|
|
+/** Calculate HMAC using internal MD5 implementation
|
|
*
|
|
* @param digest Caller digest to be filled in.
|
|
* @param text Pointer to data stream.
|
|
@@ -101,6 +132,7 @@
|
|
* hash */
|
|
fr_md5_final(digest, &context); /* finish up 2nd pass */
|
|
}
|
|
+#endif /* HAVE_OPENSSL_EVP_H */
|
|
|
|
/*
|
|
Test Vectors (Trailing '\0' of a character string not included in test):
|