Hello,
It seems that the cipher suites are not supported anyway.
The code usually reaches some kind of error or abort.
If I recall correctly, there might be one or two cipher suite ID exceptions
to the above statement. The patch adds a debug message in case
the fips mode is detected and tries to fail early without reaching
abort().
The lan auth.c calls MD5_Init from openssl.
http://www.openssl.org/docs/fips/fipsnotes.html
The change is there mostly to add user friendly non-crash end
rather then fips compliant code.
----- Original Message -----
From: "Zdenek Styblik" <***@gmail.com>
To: "Ales Ledvinka" <***@redhat.com>
Cc: "ipmitool-devel" <ipmitool-***@lists.sourceforge.net>
Sent: Saturday, August 17, 2013 2:50:08 PM
Subject: Re: [Ipmitool-devel] fips patches
Post by Ales LedvinkaHello,
Patches
https://sourceforge.net/p/ipmitool/patches/76/
https://sourceforge.net/p/ipmitool/patches/77/
add a tiny bit of FIPS friendliness. Less crashes and few hints.
Hi,
it would be great if there was any info, any info at all. I also
believe your patch is wrong/missing something ... like couple more
#ifdef-s.
Thanks,
Z.
Post by Ales Ledvinka------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
Ipmitool-devel mailing list
https://lists.sourceforge.net/lists/listinfo/ipmitool-devel