DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

wolfSSL: Register a FIPS callback

Browse source 
Register a callback with wolfCrypt_SetCb_fips to inform the user of
errors in the wolfCrypt FIPS module.

Signed-off-by: Juliusz Sosinowicz <juliusz@wolfssl.com>
This commit is contained in:
Juliusz Sosinowicz 2022-04-29 16:18:00 +02:00 • committed by Jouni Malinen
parent b3333a9f4c
commit 9d5f8168fc
1 changed files with 24 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

25
src/crypto/tls_wolfssl.c
View file

@ -26,6 +26,10 @@
#include <wolfssl/wolfcrypt/aes.h> #include <wolfssl/wolfcrypt/aes.h>
#endif #endif
#ifdef CONFIG_FIPS
#include <wolfssl/wolfcrypt/fips_test.h>
#endif /* CONFIG_FIPS */
#if !defined(CONFIG_FIPS) && \ #if !defined(CONFIG_FIPS) && \
(defined(EAP_FAST) || defined(EAP_FAST_DYNAMIC) || \ (defined(EAP_FAST) || defined(EAP_FAST_DYNAMIC) || \
defined(EAP_SERVER_FAST)) defined(EAP_SERVER_FAST))
@ -192,6 +196,23 @@ static void remove_session_cb(WOLFSSL_CTX *ctx, WOLFSSL_SESSION *sess)
} }
#if defined(CONFIG_FIPS) && defined(HAVE_FIPS)
static void wcFipsCb(int ok, int err, const char *hash)
{
wpa_printf(MSG_INFO,
"wolfFIPS: wolfCrypt Fips error callback, ok = %d, err = %d",
ok, err);
wpa_printf(MSG_INFO, "wolfFIPS: message = %s", wc_GetErrorString(err));
wpa_printf(MSG_INFO, "wolfFIPS: hash = %s", hash);
if (err == IN_CORE_FIPS_E) {
wpa_printf(MSG_ERROR,
"wolfFIPS: In core integrity hash check failure, copy above hash");
wpa_printf(MSG_ERROR, "wolfFIPS: into verifyCore[] in fips_test.c and rebuild");
}
}
#endif /* CONFIG_FIPS && HAVE_FIPS */
#ifdef DEBUG_WOLFSSL #ifdef DEBUG_WOLFSSL
static void wolfSSL_logging_cb(const int log_level, static void wolfSSL_logging_cb(const int log_level,
const char * const log_message) const char * const log_message)
@ -222,7 +243,9 @@ void * tls_init(const struct tls_config *conf)
if (wolfSSL_Init() < 0) if (wolfSSL_Init() < 0)
return NULL; return NULL;
/* wolfSSL_Debugging_ON(); */ #if defined(CONFIG_FIPS) && defined(HAVE_FIPS)
wolfCrypt_SetCb_fips(wcFipsCb);
#endif /* CONFIG_FIPS && HAVE_FIPS */
} }
tls_ref_count++; tls_ref_count++;