File gnutls-FIPS-gnutls_hash_fast-SLI.patch of Package gnutls.36178
Index: gnutls-3.8.3/lib/crypto-api.c
===================================================================
--- gnutls-3.8.3.orig/lib/crypto-api.c
+++ gnutls-3.8.3/lib/crypto-api.c
@@ -969,7 +969,9 @@ int gnutls_hash_fast(gnutls_digest_algor
_gnutls_switch_fips_state(GNUTLS_FIPS140_OP_ERROR);
} else if (not_approved) {
_gnutls_switch_fips_state(GNUTLS_FIPS140_OP_NOT_APPROVED);
- }
+ } else {
+ _gnutls_switch_fips_state(GNUTLS_FIPS140_OP_APPROVED);
+ }
return ret;
}
Index: gnutls-3.8.3/tests/fips-test.c
===================================================================
--- gnutls-3.8.3.orig/tests/fips-test.c
+++ gnutls-3.8.3/tests/fips-test.c
@@ -677,7 +677,7 @@ void doit(void)
}
hashed_data.data = hash;
hashed_data.size = 32;
- FIPS_POP_CONTEXT(INITIAL);
+ FIPS_POP_CONTEXT(APPROVED);
/* Create a signature with ECDSA and SHA256 (2-pass API); not-approved */
FIPS_PUSH_CONTEXT();
@@ -738,7 +738,7 @@ void doit(void)
}
hashed_data.data = hash;
hashed_data.size = 20;
- FIPS_POP_CONTEXT(INITIAL);
+ FIPS_POP_CONTEXT(APPROVED);
/* Create a signature with ECDSA and SHA1 (2-pass API); not-approved */
FIPS_PUSH_CONTEXT();