Skip to content

Commit

Permalink
change enable flag to CONFIG_FIPS_WARNING=y
Browse files Browse the repository at this point in the history
  • Loading branch information
JacobBarthelmeh committed Apr 6, 2023
1 parent 13fe2fc commit 71d1cf8
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 5 deletions.
2 changes: 1 addition & 1 deletion hostap-patches/README
Original file line number Diff line number Diff line change
Expand Up @@ -7,4 +7,4 @@ can be applied using `patch -p1 < /path/to/patch`.
Sets the HMAC key by accessing the HMAC struct directly for key sizes less than the approved FIPS HMAC key sizes. This works around the key size restriction but should be disclosed if used because it is not compliant with the FIPS HMAC key requirements.

###Support-FIPS_WARNING-MSCHAP.patch
Adds in MD5 and DES support with CONFIG_FIPS=warning. This allows for MSCHAP and CHAP modes. Each call to an algorithm outside the FIPS boundary triggers a warning message printed out. If used it should be disclosed that the MSCHAP(v2) / CHAP modes are using algorithms outside of the FIPS boundary.
Adds in MD5 and DES support with CONFIG_FIPS_WARNING=y. This allows for MSCHAP and CHAP modes. Each call to an algorithm outside the FIPS boundary triggers a warning message printed out. If used it should be disclosed that the MSCHAP(v2) / CHAP modes are using algorithms outside of the FIPS boundary.
8 changes: 4 additions & 4 deletions hostap-patches/Support-FIPS_WARNING-MSCHAP.patch
Original file line number Diff line number Diff line change
Expand Up @@ -143,14 +143,14 @@ index 769f824..0571eb8 100644
def check_ext_key_id_capa(dev):
res = dev.get_driver_status_field('capa.flags')
diff --git a/wpa_supplicant/Makefile b/wpa_supplicant/Makefile
index 57620fe..f8ffdf7 100644
index 57620fe..bf62050 100644
--- a/wpa_supplicant/Makefile
+++ b/wpa_supplicant/Makefile
@@ -543,6 +543,10 @@ ifndef CONFIG_FIPS
MS_FUNCS=y
CHAP=y
endif
+ifeq ($(CONFIG_FIPS), warning)
+ifdef CONFIG_FIPS_WARNING
+MS_FUNCS=y
+CHAP=y
+endif
Expand All @@ -161,7 +161,7 @@ index 57620fe..f8ffdf7 100644
ifndef CONFIG_FIPS
CFLAGS += -DCONFIG_DES
endif
+ifeq ($(CONFIG_FIPS), warning)
+ifdef CONFIG_FIPS_WARNING
+CFLAGS += -DCONFIG_DES
+endif
ifdef CONFIG_INTERNAL_DES
Expand All @@ -171,7 +171,7 @@ index 57620fe..f8ffdf7 100644

ifdef CONFIG_FIPS
CFLAGS += -DCONFIG_FIPS
+ifeq ($(CONFIG_FIPS), warning)
+ifdef CONFIG_FIPS_WARNING
+CFLAGS += -DCONFIG_FIPS_WARNING
+endif
ifneq ($(CONFIG_TLS), openssl)
Expand Down

0 comments on commit 71d1cf8

Please sign in to comment.