New commits:
commit 8139796badf01f3ef378257da13eb7ebc43b7799
Author: Paul Wouters <[email protected]>
Date:   Tue May 5 17:27:31 2015 -0400

    pluto: don't run test vectors when in hobbled FIPS mode
    
    we are in fips mode when fips=1 and /etc/system-fips exists. When
    /etc/system-fips does not exist (dracut-fips removed) then we
    are not in fips mode. But NSS disagrees and does not let us run
    our test vector code because it uses functions not available in
    fips mode.
    
    So for now do not run test vectors when either of the two conditions
    is true.

_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit

Reply via email to