scram-sha-256 broken with FIPS and OpenSSL 1.0.2 (Switch SHA2 to use EVP for OpenSSL)

Edit

ID 2762

Title scram-sha-256 broken with FIPS and OpenSSL 1.0.2 (Switch SHA2 to use EVP for OpenSSL)

Topic Miscellaneous

Created 2020-10-14 03:32:04

Last modified 2020-12-04 02:26:40 (3 years, 11 months ago)

Latest email 2020-12-04 02:09:05 (3 years, 11 months ago)

Status

2021-01: Committed

2020-11: Moved to next CF

Target version 14

Authors Michael Paquier (michael-kun)

Reviewers Daniel Gustafsson (d_gustafsson)Become reviewer

Committer Michael Paquier (michael-kun)

Links CFbot results (CirrusCI) CFbot GitHub

Checkout latest CFbot patchset

Go to your local checkout of the PostgreSQL repository and run:

git remote add commitfest https://github.com/postgresql-cfbot/postgresql.git
git fetch commitfest cf/2762
git checkout commitfest/cf/2762

Emails

scram-sha-256 broken with FIPS and OpenSSL 1.0.2: First at 2020-09-24 02:53:14 by Michael Paquier <michael at paquier.xyz>
Latest at 2020-12-04 02:09:05 by Michael Paquier <michael at paquier.xyz>
Latest attachment (v8-0001-Switch-cryptohash_openssl.c-to-use-EVP.patch) at 2020-12-03 01:47:32 from Michael Paquier <michael at paquier.xyz>
    Attachment (v8-0001-Switch-cryptohash_openssl.c-to-use-EVP.patch) at 2020-12-03 01:47:32 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)
    Attachment (v7-0001-Switch-cryptohash_openssl.c-to-use-EVP.patch) at 2020-12-02 03:03:49 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)
    Attachment (v6-0001-Rework-SHA2-and-crypto-hash-APIs.patch) at 2020-12-01 05:38:26 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)
    Attachment (v5-0001-Rework-SHA2-and-crypto-hash-APIs.patch) at 2020-11-24 10:52:08 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)
    Attachment (v4-0001-Rework-SHA2-and-crypto-hash-APIs.patch) at 2020-11-13 03:14:29 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)
    Attachment (v3-0001-Rework-SHA2-APIs.patch) at 2020-11-05 06:41:23 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)
    Attachment (v2-0001-Rework-SHA2-APIs.patch) at 2020-10-15 06:56:21 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)
    Attachment (0001-Rework-SHA2-APIs.patch) at 2020-10-14 03:29:35 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)
    Attachment (sha2-evp-v1.patch) at 2020-09-24 02:53:14 from Michael Paquier <michael at paquier.xyz> (Patch: Yes)

History

When	Who	What
2020-12-04 02:26:40	Michael Paquier (michael-kun)	Closed in commitfest 2021-01 with status: Committed
2020-12-04 02:26:40	Michael Paquier (michael-kun)	Changed committer to michael-kun
2020-11-30 07:13:32	Michael Paquier (michael-kun)	Changed topic to Miscellaneous
2020-11-30 07:10:57	Michael Paquier (michael-kun)	Closed in commitfest 2020-11 with status: Moved to next CF
2020-11-19 13:07:48	Daniel Gustafsson (d_gustafsson)	Added d_gustafsson as reviewer
2020-10-14 03:32:44	Michael Paquier (michael-kun)	Changed name to scram-sha-256 broken with FIPS and OpenSSL 1.0.2 (Switch SHA2 to use EVP for OpenSSL)
2020-10-14 03:32:17	Michael Paquier (michael-kun)	Changed authors to Michael Paquier (michael-kun)
2020-10-14 03:32:17	Michael Paquier (michael-kun)	Changed targetversion to 14
2020-10-14 03:32:04	Michael Paquier (michael-kun)	Attached mail thread 20200924025314.GE7405@paquier.xyz
2020-10-14 03:32:04	Michael Paquier (michael-kun)	Created patch record

Edit