diff --git a/libica-4.4.0-fixes.patch b/libica-4.4.0-fixes.patch new file mode 100644 index 0000000..02df08b --- /dev/null +++ b/libica-4.4.0-fixes.patch @@ -0,0 +1,33 @@ +From ff35d0226e72251ae495913aeb758bd141a3db19 Mon Sep 17 00:00:00 2001 +From: Joerg Schmidbauer +Date: Wed, 18 Dec 2024 17:09:33 +0100 +Subject: [PATCH] Fix bug in condition logic + +This bug causes an incorrect indication of the availability of algos +in fips mode. + +Fixes: https://github.com/opencryptoki/libica/commit/a9288f578b402851d41da579a78e3cbd9d1bab98 + +Signed-off-by: Joerg Schmidbauer +--- + src/s390_crypto.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/src/s390_crypto.c b/src/s390_crypto.c +index 58e082a..e05c7e7 100644 +--- a/src/s390_crypto.c ++++ b/src/s390_crypto.c +@@ -709,8 +709,8 @@ int s390_get_functionlist(libica_func_list_element *pmech_list, + * approved. + * - We are in an error state. + * */ +- if (((fips & ICA_FIPS_MODE) && !fips_approved(pmech_list[x].mech_mode_id && +- !fips_override(pmech_list[x].mech_mode_id))) ++ if (((fips & ICA_FIPS_MODE) && !fips_approved(pmech_list[x].mech_mode_id) && ++ !fips_override(pmech_list[x].mech_mode_id)) + || fips >> 1) { + pmech_list[x].flags = 0; + pmech_list[x].property = 0; +-- +2.47.1 + diff --git a/libica.spec b/libica.spec index e0ad2a0..2611036 100644 --- a/libica.spec +++ b/libica.spec @@ -2,7 +2,7 @@ Summary: Library for accessing ICA hardware crypto on IBM z Systems Name: libica -Version: 4.3.1 +Version: 4.4.0 Release: 1%{?dist} License: CPL URL: https://github.com/opencryptoki/ @@ -11,6 +11,8 @@ Source0: https://github.com/opencryptoki/%{name}/archive/v%{version}/%{name}-%{v # https://bugzilla.redhat.com/show_bug.cgi?id=1630582 # https://github.com/opencryptoki/libica/pull/24 Patch0: %{name}-4.0.0-annotate.patch +# post GA fixes +Patch1: %{name}-4.4.0-fixes.patch BuildRequires: gcc BuildRequires: openssl-devel BuildRequires: openssl @@ -107,6 +109,10 @@ fi %changelog +* Mon Jan 06 2025 Dan Horák - 4.4.0-1 +- updated to 4.4.0 (RHEL-50087) +- Resolves: RHEL-50087 + * Thu Nov 07 2024 Dan Horák - 4.3.1-1 - updated to 4.3.1 (RHEL-50087) - Resolves: RHEL-50087 diff --git a/sources b/sources index b01be2d..02d6841 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (libica-4.3.1.tar.gz) = 3298b188bb29a98a436de0f15b669a56d00edb6418b8b4f370598569702815dac50ebb6ef5bafefe00dbc31067aa5b43bbb27d2e7a2ef82900b1f357b1acfc69 +SHA512 (libica-4.4.0.tar.gz) = b9b4d676cf35b507673cc71fdc7bf5a3a90bbb2a02a368d484821bcbbf507b5ba40b9ae4979927f64b0cd4ddc8464a6375b312f56e2ad58b73dda093cdc18618