Project

General

Profile

Actions
Copy link

Bug #39456

closed

rgw: crypto: HMAC ctors cannot safely assert in (e.g.) FIPS mode

Added by Matt Benjamin almost 5 years ago. Updated almost 5 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Matt Benjamin
Target version:
-
% Done:

0%

Source:
Tags:
Backport:
nautilus
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
27765
Crash signature (v1):
Crash signature (v2):

Description

Strategy to assert in constructors calling external crypto code--especially HMAC--can lead to an inappropriate abend/crash, for example, if the environment is RHEL FIPS and a stored key is too small per policy.

Matt

Related issues 1 (0 open — 1 closed)

Copied to rgw - Backport #39676: nautilus: rgw: crypto: HMAC ctors cannot safely assert in (e.g.) FIPS modeResolvedPrashant DActions
Actions
Copy link
 #1

Updated by Matt Benjamin almost 5 years ago

  • Pull request ID set to 27765
Actions
Copy link
 #2

Updated by Matt Benjamin almost 5 years ago

  • Status changed from In Progress to 7
Actions
Copy link
 #3

Updated by Casey Bodley almost 5 years ago

  • Status changed from 7 to Pending Backport
Actions
Copy link
 #4

Updated by Nathan Cutler almost 5 years ago

  • Copied to Backport #39676: nautilus: rgw: crypto: HMAC ctors cannot safely assert in (e.g.) FIPS mode added
Actions
Copy link
 #5

Updated by Nathan Cutler almost 5 years ago

  • Status changed from Pending Backport to Resolved
Actions
Copy link

Also available in: Atom PDF