rpms/openssl
8
1
Fork 1
Code Issues Pull Requests Releases Activity

Fix mistake in the FIPS RSA keygen causing key generation failures.

Browse Source
This commit is contained in:
Tomas Mraz 2018-04-05 16:44:48 +02:00
parent 08db5cbcb9
commit 5d5075d4c9
1 changed files with 16 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

32
openssl-1.1.0-fips.patch
View File

@ -11009,16 +11009,16 @@ diff -up openssl-1.1.0h/crypto/rsa/rsa_gen.c.fips openssl-1.1.0h/crypto/rsa/rsa_
+ goto err; + goto err;
+ if (r > 0) + if (r > 0)
+ break; + break;
+ }
+ error = ERR_peek_last_error();
+ if (ERR_GET_LIB(error) == ERR_LIB_BN
+ && ERR_GET_REASON(error) == BN_R_NO_INVERSE) {
+ /* GCD != 1 */
+ ERR_pop_to_mark();
+ } else { + } else {
+ goto err; + error = ERR_peek_last_error();
+ if (ERR_GET_LIB(error) == ERR_LIB_BN
+ && ERR_GET_REASON(error) == BN_R_NO_INVERSE) {
+ /* GCD != 1 */
+ ERR_pop_to_mark();
+ } else {
+ goto err;
+ }
+ } + }
+
+ if (!BN_GENCB_call(cb, 2, n++)) + if (!BN_GENCB_call(cb, 2, n++))
+ goto err; + goto err;
+ } + }
@ -11060,16 +11060,16 @@ diff -up openssl-1.1.0h/crypto/rsa/rsa_gen.c.fips openssl-1.1.0h/crypto/rsa/rsa_
+ goto err; + goto err;
+ if (r > 0) + if (r > 0)
+ break; + break;
+ }
+ error = ERR_peek_last_error();
+ if (ERR_GET_LIB(error) == ERR_LIB_BN
+ && ERR_GET_REASON(error) == BN_R_NO_INVERSE) {
+ /* GCD != 1 */
+ ERR_pop_to_mark();
+ } else { + } else {
+ goto err; + error = ERR_peek_last_error();
+ if (ERR_GET_LIB(error) == ERR_LIB_BN
+ && ERR_GET_REASON(error) == BN_R_NO_INVERSE) {
+ /* GCD != 1 */
+ ERR_pop_to_mark();
+ } else {
+ goto err;
+ }
+ } + }
+
+ if (!BN_GENCB_call(cb, 2, n++)) + if (!BN_GENCB_call(cb, 2, n++))
+ goto err; + goto err;
+ } + }