[strongSwan] failure with ike using sha2

Luka Logar luka.logar at cifra.si
Sat Mar 28 16:27:05 CET 2015


Hi,

I have just found out, that recent openssl 1.0.2 commit 
929b0d70c19f60227f89fac63f22a21f21950823
breaks hmac when using openssl plugin for hmac functions (well, at least 
strongswan hmac & prf sha256  self
tests fail). If I remove the lines (in openssl crypto/hmac/hmac.c)

110  if(!ctx->key_init && key == NULL)
111     return 0;

and recompile all is well again.

Kind regards
Luka






More information about the Users mailing list