Bug ID | 1209053 |
---|---|
Summary | openssl 3 should fail on certain hash algorithms on FIPS |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Security |
Assignee | security-team@suse.de |
Reporter | jalausuch@suse.com |
QA Contact | qa-bugs@suse.de |
Found By | --- |
Blocker | --- |
Some of the hashes shouldn't work with FIPS mode. > echo Hello > /tmp/hello.txt > openssl dgst -sha1 /tmp/hello.txt; echo qmtBZ-$?- > SHA1(/tmp/hello.txt)= 1d229271928d3f9e2bb0375bd6ce5db6c6d348d9 This is expected to work: This is expected to fail: > openssl dgst -md4 /tmp/hello.txt 2>&1 || true > Error setting digest > 4097C442C07F0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:373:Global default library context, Algorithm (MD4 : 84), Properties () > 4097C442C07F0000:error:03000086:digital envelope routines:evp_md_init_internal:initialization error:crypto/evp/digest.c:254: BUT this is expected to fail too (and it works): > openssl dgst -md5 /tmp/hello.txt > MD5(/tmp/hello.txt)= 09f7e02f1290be211da707a266f153b3 Environment: TW 20230307 package: openssl 3.0.8-1.1