diff options
| author | Jakub Jelen <jjelen@redhat.com> | 2021-09-17 15:03:57 +0200 |
|---|---|---|
| committer | Werner Koch <wk@gnupg.org> | 2021-09-20 08:32:25 +0200 |
| commit | 3f4dd47ba74e0a9f18feba1809eeddff8790707e (patch) | |
| tree | 1cf12a0335311635de85df031ba0e65d4a82d8d6 /src/g10lib.h | |
| parent | edbc1dd10bc3e1fcc0e355fe1a9c4c8769f51daf (diff) | |
| download | libgcrypt-3f4dd47ba74e0a9f18feba1809eeddff8790707e.tar.gz | |
Remove the forced fips mode
* cipher/rsa.c (generate_fips): Drop reference to enforced fips mode and
use normal FIPS mode check
* doc/gcrypt.texi: Drop references to enforced FIPS mode
* src/fips.c (enforced_fips_mode): Removed
(_gcry_initialize_fips_mode): Remove reading of the FIPS_FORCE_FILE
to enforce FIPS mode
(_gcry_enforced_fips_mode): Remove
(_gcry_set_enforced_fips_mode): Remove
* src/g10lib.h (_gcry_enforced_fips_mode): Remove declaration
(_gcry_set_enforced_fips_mode): Remova declaration
* src/global.c (print_config): Remove the forced fips flag
(_gcry_vcontrol): Deprecate GCRYCTL_SET_ENFORCED_FIPS_FLAG
(get_no_secure_memory): Ignore the option in FIPS mode
--
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
(_gcry_vcontrol): Simply ignore GCRYCTL_SET_ENFORCED_FIPS_FLAG.
Signed-off-by: Werner Koch <wk@gnupg.org>
GnuPG-bug-id: 5244
Diffstat (limited to 'src/g10lib.h')
| -rw-r--r-- | src/g10lib.h | 4 |
1 files changed, 0 insertions, 4 deletions
diff --git a/src/g10lib.h b/src/g10lib.h index 74de3653..0f827074 100644 --- a/src/g10lib.h +++ b/src/g10lib.h @@ -435,10 +435,6 @@ void _gcry_initialize_fips_mode (int force); existing. */ #define fips_mode() (!_gcry_no_fips_mode_required) -int _gcry_enforced_fips_mode (void); - -void _gcry_set_enforced_fips_mode (void); - void _gcry_fips_signal_error (const char *srcfile, int srcline, |