[Openswan dev] nss/nspr4 warning and PLUTO_SENDS_VENDORID vs HAVE_LIBNSS
D. Hugh Redelmeier
hugh at mimosa.com
Tue Jan 5 11:54:29 EST 2010
| From: Avesh Agarwal <avagarwa at redhat.com>
| It may not be a security issue but as I said above that md5 is not
| allowed in FIPS mode.
| Same as above, can we then change it to SHA1 or something else?
Seems unlikely: the convention of MD5 is required for interoperation I
imagine.
Perhaps the hash could be precomputed (at build time) and skirt the
silly restriction.
More information about the Dev
mailing list