From: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
Date: Sun, 4 May 2025 19:55:49 +0000 (+0200)
Subject: gh-133042: disable HACL* HMAC on Emscripten (#133064)
X-Git-Tag: v3.14.0b1~75
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=7b96701cccce2797f88527d6a980dbcfdb0af851;p=thirdparty%2FPython%2Fcpython.git

gh-133042: disable HACL* HMAC on Emscripten (#133064)
---

diff --git a/configure b/configure
index 397f867df34d..65a493af2a31 100755
--- a/configure
+++ b/configure
@@ -32811,7 +32811,7 @@ printf %s "checking for stdlib extension module _hmac... " >&6; }
         if test "$py_cv_module__hmac" != "n/a"
 then :
 
-    if true
+    if test "$ac_sys_system" != "Emscripten"
 then :
   if true
 then :
diff --git a/configure.ac b/configure.ac
index 76042522ae1e..d53ba20579f6 100644
--- a/configure.ac
+++ b/configure.ac
@@ -8051,7 +8051,10 @@ PY_HACL_CREATE_MODULE([BLAKE2], [_blake2], [test "$with_builtin_blake2" = yes])
 dnl HMAC builtin library does not need OpenSSL for now. In the future
 dnl we might want to rely on OpenSSL EVP/NID interface or implement
 dnl our own for algorithm resolution.
-PY_HACL_CREATE_MODULE([HMAC], [_hmac], [])
+dnl
+dnl For Emscripten, we disable HACL* HMAC as it is tricky to make it work.
+dnl See https://github.com/python/cpython/issues/133042.
+PY_HACL_CREATE_MODULE([HMAC], [_hmac], [test "$ac_sys_system" != "Emscripten"])
 ### end(cryptographic primitives)
 
 PY_STDLIB_MOD([_ctypes],