[Swan] RSA key length or ID matching issue in 3.25 FIPS mode

[Matt Hilt]

I have been playing around with this a little more. I updated my kernel (and many other OS packages, including NSS) and that seems to have removed the key size warning and left only the "DigSig: failed to find our RSA key” warning.

Old package versions:
Kernel: 3.10.0-862.el7
nss-3.34.0-4.el7

New package versions:
Kernel: 3.10.0-957.1.3.el7
nss-3.36.0-7.el7_5


Notice: This e-mail is intended solely for use of the individual or entity to which it is addressed and may contain information that is proprietary, privileged and/or exempt from disclosure under applicable law. If the reader is not the intended recipient or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. This communication may also contain data subject to U.S. export laws. If so, data subject to the International Traffic in Arms Regulation cannot be disseminated, distributed, transferred, or copied, whether incorporated or in its original form, to foreign nationals residing in the U.S. or abroad, absent the express prior approval of the U.S. Department of State. Data subject to the Export Administration Act may not be disseminated, distributed, transferred or copied contrary to U. S. Department of Commerce regulations. If you have received this communication in error, please notify the sender by reply e-mail and destroy the e-mail message and any physical copies made of the communication. Thank you.
JQRSZXPY78973
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20181219/6e2cf313/attachment.html>