mirror of
https://github.com/openssl/openssl.git
synced 2025-01-30 14:01:55 +08:00
Configure/Makefile: fix the -macopt
argument of the fipsinstall command
The FIPS hmac key is provided as a hexadezimal string, which needs to be be prefixed with `hexkey:`, not `key:`. Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13684)
This commit is contained in:
parent
f4585aeca9
commit
59cf286919
@ -544,7 +544,7 @@ install_fips: install_sw
|
||||
openssl fipsinstall -
|
||||
-module ossl_installroot:[MODULES{- $sover_dirname.$target{pointer_size} -}.'arch']$(FIPSMODULENAME) -
|
||||
-out ossl_installroot:[MODULES{- $sover_dirname.$target{pointer_size} -}.'arch']$(FIPSMODULENAME).cnf -
|
||||
-macopt "key:$(FIPSKEY)"
|
||||
-macopt "hexkey:$(FIPSKEY)"
|
||||
|
||||
uninstall_fips: uninstall_sw
|
||||
@ WRITE SYS$OUTPUT "*** Uninstalling FIPS module configuration"
|
||||
|
@ -590,7 +590,7 @@ install_fips: install_sw
|
||||
@$(ECHO) "fipsinstall $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME).cnf"
|
||||
@openssl fipsinstall -module $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME) \
|
||||
-out $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME).cnf \
|
||||
-macopt 'key:$(FIPSKEY)'
|
||||
-macopt 'hexkey:$(FIPSKEY)'
|
||||
|
||||
uninstall_fips: uninstall_sw
|
||||
@$(ECHO) "*** Uninstalling FIPS module configuration"
|
||||
|
@ -475,7 +475,7 @@ install_fips: install_sw
|
||||
@$(ECHO) "fipsinstall $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME).cnf"
|
||||
@openssl fipsinstall -module $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME) \
|
||||
-out $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME).cnf \
|
||||
-macopt "key:$(FIPSKEY)"
|
||||
-macopt "hexkey:$(FIPSKEY)"
|
||||
|
||||
uninstall_fips: uninstall_sw
|
||||
@$(ECHO) "*** Uninstalling FIPS module configuration"
|
||||
|
Loading…
Reference in New Issue
Block a user