Compare commits
2 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
| c3ec9701b3 | |||
| 13133b2168 |
@ -1,29 +0,0 @@
|
|||||||
diff --git a/crt/s2n/crypto/s2n_fips.c b/crt/s2n/crypto/s2n_fips.c
|
|
||||||
index 13f9f77c0..b8af2e36e 100644
|
|
||||||
--- a/crt/s2n/crypto/s2n_fips.c
|
|
||||||
+++ b/crt/s2n/crypto/s2n_fips.c
|
|
||||||
@@ -57,15 +57,15 @@ int s2n_fips_init(void)
|
|
||||||
{
|
|
||||||
s2n_fips_mode_enabled = s2n_libcrypto_is_fips();
|
|
||||||
|
|
||||||
- /* When using Openssl, ONLY 3.0 currently supports FIPS.
|
|
||||||
- * openssl-1.0.2-fips is no longer supported.
|
|
||||||
- * openssl >= 3.5 will likely have a FIPS 140-3 certificate instead of a
|
|
||||||
- * FIPS 140-2 certificate, which will require additional review in order
|
|
||||||
- * to properly integrate.
|
|
||||||
- */
|
|
||||||
-#if defined(OPENSSL_FIPS) || S2N_OPENSSL_VERSION_AT_LEAST(3, 5, 0)
|
|
||||||
- POSIX_ENSURE(!s2n_fips_mode_enabled, S2N_ERR_FIPS_MODE_UNSUPPORTED);
|
|
||||||
-#endif
|
|
||||||
+// /* When using Openssl, ONLY 3.0 currently supports FIPS.
|
|
||||||
+// * openssl-1.0.2-fips is no longer supported.
|
|
||||||
+// * openssl >= 3.5 will likely have a FIPS 140-3 certificate instead of a
|
|
||||||
+// * FIPS 140-2 certificate, which will require additional review in order
|
|
||||||
+// * to properly integrate.
|
|
||||||
+// */
|
|
||||||
+// #if defined(OPENSSL_FIPS) || S2N_OPENSSL_VERSION_AT_LEAST(3, 5, 0)
|
|
||||||
+// POSIX_ENSURE(!s2n_fips_mode_enabled, S2N_ERR_FIPS_MODE_UNSUPPORTED);
|
|
||||||
+// #endif
|
|
||||||
|
|
||||||
return S2N_SUCCESS;
|
|
||||||
}
|
|
||||||
@ -4,7 +4,7 @@ Python bindings for the AWS Common Runtime}
|
|||||||
|
|
||||||
Name: python-awscrt
|
Name: python-awscrt
|
||||||
Version: 0.27.2
|
Version: 0.27.2
|
||||||
Release: 2%{?dist}
|
Release: 1%{?dist}
|
||||||
|
|
||||||
Summary: Python bindings for the AWS Common Runtime
|
Summary: Python bindings for the AWS Common Runtime
|
||||||
# All files are licensed under Apache-2.0, except:
|
# All files are licensed under Apache-2.0, except:
|
||||||
@ -24,8 +24,6 @@ Patch1: skip-SHA1-in-test_crypto.patch
|
|||||||
Patch2: der-c.patch
|
Patch2: der-c.patch
|
||||||
# websockets test fail fix
|
# websockets test fail fix
|
||||||
Patch3: websockets.patch
|
Patch3: websockets.patch
|
||||||
# Remove FIPS version check to build with OpenSSL 3.x
|
|
||||||
Patch4: s2n-remove-fips-version-check.patch
|
|
||||||
|
|
||||||
BuildRequires: python%{python3_pkgversion}-devel
|
BuildRequires: python%{python3_pkgversion}-devel
|
||||||
|
|
||||||
@ -55,9 +53,8 @@ Summary: %{summary}
|
|||||||
# relax version requirements
|
# relax version requirements
|
||||||
sed -i -e 's/setuptools>=75\.3\.1/setuptools/' -e 's/wheel>=0\.45\.1/wheel/' pyproject.toml
|
sed -i -e 's/setuptools>=75\.3\.1/setuptools/' -e 's/wheel>=0\.45\.1/wheel/' pyproject.toml
|
||||||
|
|
||||||
# Remove websocket test for now
|
# stay compatible with websockets<13
|
||||||
# TODO: fix the test properly
|
sed -i 's/websockets\.asyncio\.server/websockets.server/' test/test_websocket.py
|
||||||
rm -f test/test_websocket.py
|
|
||||||
|
|
||||||
# fix for osci.rpmdeplint test - package builds with the name 'unknown'
|
# fix for osci.rpmdeplint test - package builds with the name 'unknown'
|
||||||
sed -i '/setuptools\.setup(/a\ name="awscrt",' setup.py
|
sed -i '/setuptools\.setup(/a\ name="awscrt",' setup.py
|
||||||
@ -86,10 +83,6 @@ PYTHONPATH="%{buildroot}%{python3_sitearch}:%{buildroot}%{python3_sitelib}" %{py
|
|||||||
|
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
* Wed Nov 26 2025 Kseniia Nivnia <knivnia@redhat.com> - 0.27.2-2
|
|
||||||
- Add patch fixing FIPS mode crash in awscli2
|
|
||||||
Resolves: RHEL-131280
|
|
||||||
|
|
||||||
* Fri Sep 05 2025 Kseniia Nivnia <knivnia@redhat.com> - 0.27.2-1
|
* Fri Sep 05 2025 Kseniia Nivnia <knivnia@redhat.com> - 0.27.2-1
|
||||||
- Update to 0.27.2
|
- Update to 0.27.2
|
||||||
Resolves: RHEL-113230
|
Resolves: RHEL-113230
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user