From: Vladis Dronov <[email protected]> Revert "Merge branch 'ec_fips' into 'os-build'"
We need to revert the merge request !1150 and make CONFIG_CRYPTO_ECDH and CONFIG_CRYPTO_ECDSA back to =m. Current =y setting prevents a kernel booting in FIPS mode. This blocks some processes, see bz1915290#c23. This is an upstream issue and we need this revert until a proposed upstream solution is fully tested. Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1947240 Link: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1150 Signed-off-by: Vladis Dronov <[email protected]> diff --git a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH @@ -1 +1 @@ -CONFIG_CRYPTO_ECDH=y +CONFIG_CRYPTO_ECDH=m diff --git a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA @@ -1 +1 @@ -CONFIG_CRYPTO_ECDSA=y +CONFIG_CRYPTO_ECDSA=m -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189 _______________________________________________ kernel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
