File gnutls-FIPS-p192-disabled.patch of Package gnutls.36178
Index: gnutls-3.8.3/lib/nettle/pk.c
===================================================================
--- gnutls-3.8.3.orig/lib/nettle/pk.c
+++ gnutls-3.8.3/lib/nettle/pk.c
@@ -1622,6 +1622,11 @@ static int _wrap_nettle_pk_verify(gnutls
goto cleanup;
}
+ /* P-192 is not supported in FIPS 140-3 */
+ if (curve_id == GNUTLS_ECC_CURVE_SECP192R1) {
+ not_approved = true;
+ }
+
ret = _gnutls_decode_ber_rs(signature, &tmp[0], &tmp[1]);
if (ret < 0) {
gnutls_assert();