[Bug 2056593] Re: [FFE] FIPS compatibility patches

2024-03-28 Thread Launchpad Bug Tracker
This bug was fixed in the package openssl - 3.0.13-0ubuntu2 --- openssl (3.0.13-0ubuntu2) noble; urgency=medium [ Tobias Heider ] * Add fips-mode detection and adjust defaults when running in fips mode (LP: #2056593): -

[Bug 2056593] Re: [FFE] FIPS compatibility patches

2024-03-18 Thread Adrien Nader
** Changed in: openssl (Ubuntu) Status: Triaged => Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2056593 Title: [FFE] FIPS compatibility patches To manage notifications about

[Bug 2056593] Re: [FFE] FIPS compatibility patches

2024-03-15 Thread Graham Inggs
FFe granted. ** Changed in: openssl (Ubuntu) Status: New => Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2056593 Title: [FFE] FIPS compatibility patches To manage notifications

[Bug 2056593] Re: [FFE] FIPS compatibility patches

2024-03-15 Thread Adrien Nader
** Description changed: We have an open MR with a handful of FIPS compatibilty changes we wore hoping to get into 24.04. The main purpose of the changes is to detect whether the kernel is running in FIPS mode and adjust the behavior of the library accordingly by loading the correct

[Bug 2056593] Re: [FFE] FIPS compatibility patches

2024-03-15 Thread Adrien Nader
I did some additional tests too in a noble container. With/without the env var to set the file location, including with the file missing, with/without the env var to force FIPS mode, and using values 0, 1, 42, -42, a. By the way, note that access to these environment variables uses

[Bug 2056593] Re: [FFE] FIPS compatibility patches

2024-03-13 Thread Tobias Heider
Adding a few more details as requested by Adrien. I used lxd to run the autopkgtest, in particular: # Build lxd image /usr/bin/autopkgtest-build-lxd ubuntu-daily:noble # Run autopkgtest -s --apt-pocket=proposed ./openssl_3.0.13-1ubuntu2.dsc -- lxd autopkgtest/ubuntu/noble/amd64 It is

[Bug 2056593] Re: [FFE] FIPS compatibility patches

2024-03-13 Thread Tobias Heider
As promised, here are some more details on how I tested: - been running autopkgtest locally and made sure they pass (log attached) - installed it on my local development machine to see if anything breaks - tested the upgrade in a lxd container, made sure openssl speed works and does the right

[Bug 2056593] Re: [FFE] FIPS compatibility patches

2024-03-08 Thread Tobias Heider
** Attachment added: "apt install log from fresh noble lxd container" https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/2056593/+attachment/5754146/+files/openssl_3.0.13-1ubuntu2_install.log -- You received this bug notification because you are a member of Ubuntu Bugs, which is