[Bug 1944403] Re: FIPS cannot be enabled on non usrmerged 20.04 systems

2021-09-21 Thread Dimitri John Ledkov
if we can't fix fips version of libgcrypt in focal, we must add a maintainer script somewhere else to copy the hmac from /lib to /usr/lib. I.e. a fixup in ua tool or ubuntu-fips package. ** Also affects: libgcrypt (Ubuntu) Importance: Undecided Status: New ** Changed in: libgcrypt

[Bug 1944403] Re: FIPS cannot be enabled on non usrmerged 20.04 systems

2021-09-21 Thread Dimitri John Ledkov
an .hmac for a matching soname, should be shipped in the same location as recorded for a given deb in the dpkg database. In bionic, # dpkg -L libgcrypt20 | grep so.20.2.1 /lib/x86_64-linux-gnu/libgcrypt.so.20.2.1 Thus bionic gcrypt hmac file should be under /lib In focal, # dpkg -L libgcrypt20