]> git.ipfire.org Git - thirdparty/bind9.git/commit
unify fips handling to isc_crypto and make the toggle one way
authorAydın Mercan <aydin@isc.org>
Mon, 16 Dec 2024 12:31:15 +0000 (15:31 +0300)
committerAydın Mercan <aydin@isc.org>
Thu, 27 Feb 2025 14:37:43 +0000 (17:37 +0300)
commitf4ab4f07e366b70e69c43c2e1b03cf5dac4993e4
tree80b0b2938ce4adf2c96e44a38c395a169ff2704e
parentce47cb3ab6224016f8afa3d35467e6df5d15c57a
unify fips handling to isc_crypto and make the toggle one way

Since algorithm fetching is handled purely in libisc, FIPS mode toggling
can be purely done in within the library instead of provider fetching in
the binary for OpenSSL >=3.0.

Disabling FIPS mode isn't a realistic requirement and isn't done
anywhere in the codebase. Make the FIPS mode toggle enable-only to
reflect the situation.
21 files changed:
bin/delv/delv.c
bin/dig/dig.c
bin/dnssec/Makefile.am
bin/dnssec/dnssec-keygen.c
bin/dnssec/dnssec-ksr.c
bin/dnssec/dnssec-signzone.c
bin/named/main.c
bin/named/server.c
bin/tests/system/feature-test.c
lib/dns/dst_api.c
lib/dns/opensslecdsa_link.c
lib/isc/Makefile.am
lib/isc/crypto.c
lib/isc/fips.c [deleted file]
lib/isc/include/isc/crypto.h
lib/isc/include/isc/fips.h [deleted file]
lib/isc/tls.c
lib/isccfg/kaspconf.c
tests/dns/dst_test.c
tests/isc/hmac_test.c
tests/isc/md_test.c