SSSD / sssd

#4032 p11_child::do_ocsp() function implementation is not FIPS140 compliant
Closed: Fixed by jhrozek. Opened by sbose.

Closed: Fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1718478

do_ocsp() function uses EVP_sha1() in security relevant application and thus it
falls under FIPS requirements.
SHA-1 is not approved for use in FIPS and adviced to be replaced with SHA-2 or
SHA-3 to make code FIPS compliant.

Metadata Update from @sbose:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1718478

Metadata Update from @sbose:
- Issue assigned to sbose

PR: https://github.com/SSSD/sssd/pull/837

Metadata Update from @sbose:
- Custom field patch adjusted to on

Commit ad9dd137 relates to this ticket

Commit a97ec73e relates to this ticket
  • master:
  • ad9dd137e2f8ad46cfb921fb7bf137fb3442692e
  • a97ec73e04b6347bb6aa9794f5ea9f4ca3424801
  • ba01db0dcd43ef1b2079d9cc209534d45a3e938d

Metadata Update from @jhrozek:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/5002

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.
Metadata
None
None
None
None
on
https://bugzilla.redhat.com/show_bug.cgi?id=1718478
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.