File libgcrypt-FIPS-SLI-Do-not-run-RSA-encryption-selftest-by-default.patch of Package libgcrypt.38414

From 4e7941587c95fc3ae5fb5686346855395ef6754b Mon Sep 17 00:00:00 2001
From: Jakub Jelen <jjelen@redhat.com>
Date: Thu, 6 Oct 2022 09:30:24 +0200
Subject: [PATCH 0731/1000] cipher: Do not run RSA encryption selftest by
 default

* cipher/rsa.c (selftests_rsa): Skip encryption selftest as this
  operation is not claimed as part of the certification.

Index: libgcrypt-1.10.3/cipher/rsa.c
===================================================================
--- libgcrypt-1.10.3.orig/cipher/rsa.c
+++ libgcrypt-1.10.3/cipher/rsa.c
@@ -2191,10 +2191,13 @@ selftests_rsa (selftest_report_func_t re
   if (errtxt)
     goto failed;
 
-  what = "encrypt";
-  errtxt = selftest_encr_2048 (pkey, skey);
-  if (errtxt)
-    goto failed;
+  if (extended)
+    {
+      what = "encrypt";
+      errtxt = selftest_encr_2048 (pkey, skey);
+      if (errtxt)
+        goto failed;
+    }
 
   sexp_release (pkey);
   sexp_release (skey);
openSUSE Build Service is sponsored by