enable fips

Signed-off-by: Ze Gan <[email protected]>
sonic-net · Mar 19, 2024 · 35c8bca · 35c8bca
1 parent 0fec38d
commit 35c8bca
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/debian/config/wpasupplicant/linux b/debian/config/wpasupplicant/linux
@@ -603,3 +603,6 @@ CONFIG_OWE=y
 # This requires CONFIG_IEEE80211W=y to be enabled, too. (see
 # wpa_supplicant/README-DPP for details)
 CONFIG_DPP=y
+
+# CONFIG_FIPS=y
+CONFIG_OPENSSL_CMAC=y
diff --git a/src/crypto/crypto_openssl.c b/src/crypto/crypto_openssl.c
@@ -1218,6 +1218,7 @@ int crypto_get_random(void *buf, size_t len)
 int omac1_aes_vector(const u8 *key, size_t key_len, size_t num_elem,
 		     const u8 *addr[], const size_t *len, u8 *mac)
 {
+	wpa_printf(MSG_ERROR, "Openssl  CMAC: omac1_aes_vector");
 #if OPENSSL_VERSION_NUMBER >= 0x30000000L
 	EVP_MAC_CTX *ctx = NULL;
 	EVP_MAC *emac;