On 05/09/2013 04:38 PM, Baoquan He wrote:
> FIPS can work well in 1st kernel, but failed in kdump kernel. the
> libssl.so.10 and related hmac file are needed. Now add it and it
> works.
This patch looks good to me.
Explain a bit about why do we need this extra libssl.so.10:
libcrypto.so dlopens libssl.so.10 only in FIPS mode, so ldd does now
show the dependency automaticlly.
>
> Signed-off-by: Baoquan He <bhe@xxxxxxxxxx>
> ---
> modules.d/01fips/module-setup.sh | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/modules.d/01fips/module-setup.sh b/modules.d/01fips/module-setup.sh
> index a7f5be8..6013318 100755
> --- a/modules.d/01fips/module-setup.sh
> +++ b/modules.d/01fips/module-setup.sh
> @@ -38,7 +38,7 @@ install() {
>
> inst_libdir_file libsoftokn3.so libsoftokn3.so \
> libsoftokn3.chk libfreebl3.so libfreebl3.chk \
> - libssl.so 'hmaccalc/sha512hmac.hmac'
> + libssl.so 'hmaccalc/sha512hmac.hmac' libssl.so.10
>
> dracut_install -o prelink
> }
>
--
Thanks
Dave
--
To unsubscribe from this list: send the line "unsubscribe initramfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
