From: Tobias Brunner <tobias@strongswan.org>
Date: Tue, 26 Nov 2024 09:19:33 +0000 (+0100)
Subject: wolfssl: Call wc_SetSeed_Cb() as required for FIPS-mode
X-Git-Tag: 6.0.2dr1~3^2~6
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7bfd81d78ae41a8e036c930c42b722d9c43e7e37;p=thirdparty%2Fstrongswan.git

wolfssl: Call wc_SetSeed_Cb() as required for FIPS-mode
---

diff --git a/src/libstrongswan/plugins/wolfssl/wolfssl_plugin.c b/src/libstrongswan/plugins/wolfssl/wolfssl_plugin.c
index 49f172aa44..2c30ba92e0 100644
--- a/src/libstrongswan/plugins/wolfssl/wolfssl_plugin.c
+++ b/src/libstrongswan/plugins/wolfssl/wolfssl_plugin.c
@@ -547,6 +547,11 @@ plugin_t *wolfssl_plugin_create()
 
 	fips_mode = lib->settings->get_bool(lib->settings,
 								"%s.plugins.wolfssl.fips_mode", FALSE, lib->ns);
+
+#ifdef WC_RNG_SEED_CB
+	wc_SetSeed_Cb(wc_GenerateSeed);
+#endif
+
 #ifdef HAVE_FIPS
 	if (fips_mode)
 	{