[Swan-commit] Changes to ref refs/heads/master
Paul Wouters
paul at vault.libreswan.fi
Wed May 6 00:29:24 EEST 2015
New commits:
commit 8139796badf01f3ef378257da13eb7ebc43b7799
Author: Paul Wouters <pwouters at redhat.com>
Date: Tue May 5 17:27:31 2015 -0400
pluto: don't run test vectors when in hobbled FIPS mode
we are in fips mode when fips=1 and /etc/system-fips exists. When
/etc/system-fips does not exist (dracut-fips removed) then we
are not in fips mode. But NSS disagrees and does not let us run
our test vector code because it uses functions not available in
fips mode.
So for now do not run test vectors when either of the two conditions
is true.
More information about the Swan-commit
mailing list