https://bugzilla.suse.com/show_bug.cgi?id=1189283 Marcus Meissner <meissner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner@suse.com -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1189283 https://bugzilla.suse.com/show_bug.cgi?id=1189283#c2 --- Comment #2 from Fabian Vogt <fvogt@suse.com> --- (In reply to Marcus Meissner from comment #1)

actually worse, the new libkcapi needs features not yet in our kernel.

we probably need to delcine

It got submitted again - what's the state now? Should we enable AF_ALG in kernel-obs-build (I'll ping on my pending PR) and/or add a patch to libkcapi to not print error messages to stderr by default? I filed https://github.com/smuellerDD/libkcapi/issues/138 upstream. -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1189283 https://bugzilla.suse.com/show_bug.cgi?id=1189283#c4 --- Comment #4 from Fabian Vogt <fvogt@suse.com> --- af_alg and algif_hash are not enough, it prints an error message for various algorithms... [ 42s] libkcapi - Error: AF_ALG: bind failed (errno: -2) [ 42s] libkcapi - Error: Netlink error: cannot open netlink socket [ 42s] libkcapi - Error: NETLINK_CRYPTO: cannot obtain cipher information for hmac(sha1) (is required crypto_user.c patch missing? see documentation) [ 42s] libkcapi - Error: NETLINK_CRYPTO: cannot obtain cipher information for hmac(sha256) (is required crypto_user.c patch missing? see documentation) [ 42s] libkcapi - Error: NETLINK_CRYPTO: cannot obtain cipher information for hmac(sha384) (is required crypto_user.c patch missing? see documentation) [ 42s] libkcapi - Error: NETLINK_CRYPTO: cannot obtain cipher information for hmac(sha512) (is required crypto_user.c patch missing? see documentation) [ 42s] libkcapi - Error: NETLINK_CRYPTO: cannot obtain cipher information for sha1 (is required crypto_user.c patch missing? see documentation) [ 42s] libkcapi - Error: NETLINK_CRYPTO: cannot obtain cipher information for sha256 (is required crypto_user.c patch missing? see documentation) [ 42s] libkcapi - Error: NETLINK_CRYPTO: cannot obtain cipher information for sha384 (is required crypto_user.c patch missing? see documentation) [ 42s] libkcapi - Error: NETLINK_CRYPTO: cannot obtain cipher information for sha512 (is required crypto_user.c patch missing? see documentation) What's required exactly depends on the library user I suppose. So we'd basically have to include all algorithms and their arch-specific optimized implementations... The easiest way is to include and load all $moduledir/kernel/crypto/* modules, maintaining a manual list can be annoying. -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1189283 https://bugzilla.suse.com/show_bug.cgi?id=1189283#c7 Fabian Vogt <fvogt@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsrain@suse.com Flags|needinfo?(fvogt@suse.com) |needinfo?(jsrain@suse.com) --- Comment #7 from Fabian Vogt <fvogt@suse.com> --- (In reply to Jiri Slaby from comment #6)

Can you post a tested patch, please?

What for? So far I only have a known non working patch. -- You are receiving this mail because: You are on the CC list for the bug.