fips: Mark gcry_pk_encrypt/decrypt function non-approved.

* src/fips.c (_gcry_fips_indicator_function): Add
gcry_pk_encrypt/decrypt as non-approved.

--

Cherry-pick master commit of:
	05cb8355d3e66f15425ad85ae2203882e80f4792

Signed-off-by: Jakub Jelen <jjelen@redhat.com>

1 files changed, 3 insertions, 1 deletions

diff --git a/src/fips.c b/src/fips.c
index 5dc709dc..5bbf00a8 100644
--- a/src/fips.c
+++ b/src/fips.c
@@ -447,7 +447,9 @@ _gcry_fips_indicator_function (va_list arg_ptr)
   const char *function = va_arg (arg_ptr, const char *);
 
   if (strcmp (function, "gcry_pk_sign") == 0 ||
-      strcmp (function, "gcry_pk_verify") == 0)
+      strcmp (function, "gcry_pk_verify") == 0 ||
+      strcmp (function, "gcry_pk_encrypt") == 0 ||
+      strcmp (function, "gcry_pk_decrypt") == 0)
     return GPG_ERR_NOT_SUPPORTED;
 
   return GPG_ERR_NO_ERROR;