diff options
| author | Daiki Ueno <dueno@redhat.com> | 2020-05-18 12:25:42 +0200 |
|---|---|---|
| committer | Daiki Ueno <ueno@gnu.org> | 2020-05-20 07:00:13 +0200 |
| commit | 27c29e341656252c9e52bdb581d9c36c16035fc4 (patch) | |
| tree | 572d2d22ceb23cdc4e25129aaad4c7d366a9f204 /libdane/gnutls-dane.pc.in | |
| parent | a9f907be146be0df2cc756c19543ec1d10ccdef9 (diff) | |
| download | gnutls-27c29e341656252c9e52bdb581d9c36c16035fc4.tar.gz | |
fips: make FIPS140-2 mode enablement logic simpler
Previously, to enable the FIPS140-2 mode, both /etc/system-fips and
the fips=1 kernel command line need to be set. While this was
designed to be consistent, the convention is not well followed by the
other crypto libraries and the former tends to be ignored. This
aligns the behavior to the latter, i.e. if fips=1 is set, the library
enables the FIPS140-2 mode regardless of the existence of
/etc/system-fips.
Suggested by Alexander Sosedkin.
Signed-off-by: Daiki Ueno <dueno@redhat.com>
Diffstat (limited to 'libdane/gnutls-dane.pc.in')
0 files changed, 0 insertions, 0 deletions