From: Vladis Dronov vdronov@redhat.com
Revert "Merge branch 'ec_fips' into 'os-build'"
We need to revert the merge request !1150 and make CONFIG_CRYPTO_ECDH and CONFIG_CRYPTO_ECDSA back to =m. Current =y setting prevents a kernel booting in FIPS mode. This blocks some processes, see bz1915290#c23. This is an upstream issue and we need this revert until a proposed upstream solution is fully tested.
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1947240 Link: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1150 Signed-off-by: Vladis Dronov vdronov@redhat.com
diff --git a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDH @@ -1 +1 @@ -CONFIG_CRYPTO_ECDH=y +CONFIG_CRYPTO_ECDH=m diff --git a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA index blahblah..blahblah 100644 --- a/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA +++ b/redhat/configs/common/generic/CONFIG_CRYPTO_ECDSA @@ -1 +1 @@ -CONFIG_CRYPTO_ECDSA=y +CONFIG_CRYPTO_ECDSA=m
-- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189
From: Vladis Dronov on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189#note_6141478...
hello, @ptalbert, @jmflinuxtx, @simo5, @herbert.xu2, could you please have a look at this MR and probably merge it? We need this, i'm inclined to say - asap, as this blocks some processes (like testing and builds in FIPS mode).
From: Justin M. Forbes on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189#note_6142162...
Acked-by: Justin M. Forbes jforbes@fedoraproject.org (via approve button)
From: Vladis Dronov on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189#note_6142219...
thanks, Justin!
From: Herbert Xu on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189#note_6142227...
Acked-by: Herbert Xu herbert.xu@redhat.com
From: Justin M. Forbes on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189#note_6142269...
Acked-by: Justin M. Forbes jforbes@fedoraproject.org (via approve button)
From: Vladis Dronov on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189#note_6142276...
thanks, Herbert! i believe this can be merged now with 2 acks.
From: Vladis Dronov on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1189#note_6150174...
thanks, @ptalbert, most appreciated!
kernel@lists.fedoraproject.org
-
Herbert Xu (via Email Bridge) -
Justin M. Forbes (via Email Bridge)
-
Vladis Dronov (via Email Bridge)