sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-06 00:00:47 -04:00
Code Issues Projects Releases Wiki Activity

abort pluto if crypto self-test fails

Browse Source
This commit is contained in:
Andreas Steffen 2009-05-15 17:44:02 +02:00
parent 5eb61e3bca
commit d8cb1d1668
2 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
src/pluto/crypto.c
View File

@ -144,7 +144,10 @@ void init_crypto(void)
exit_log("mpz_init_set_str() failed in init_crypto()"); exit_log("mpz_init_set_str() failed in init_crypto()");
} }
#ifdef SELF_TEST #ifdef SELF_TEST
ike_alg_test(); if (!ike_alg_test())
{
exit_log("pluto cannot run due to failed crypto self-test");
}
#endif #endif
} }
@ -189,12 +192,9 @@ const struct oakley_group_desc *lookup_group(u_int16_t group)
return NULL; return NULL;
} }
/* Encryption Routines /**
* * Converts IKEv1 encryption algorithm name to crypter name
* Each uses and updates the state object's st_new_iv.
* This must already be initialized.
*/ */
encryption_algorithm_t oakley_to_encryption_algorithm(int alg) encryption_algorithm_t oakley_to_encryption_algorithm(int alg)
{ {
switch (alg) switch (alg)
@ -223,6 +223,9 @@ encryption_algorithm_t oakley_to_encryption_algorithm(int alg)
} }
} }
/**
* Converts IKEv1 hash algorithm name to hasher name
*/
hash_algorithm_t oakley_to_hash_algorithm(int alg) hash_algorithm_t oakley_to_hash_algorithm(int alg)
{ {
switch (alg) switch (alg)
@ -242,6 +245,9 @@ hash_algorithm_t oakley_to_hash_algorithm(int alg)
} }
} }
/**
* Converts IKEv1 hash algorithm name to IKEv2 prf name
*/
pseudo_random_function_t oakley_to_prf(int alg) pseudo_random_function_t oakley_to_prf(int alg)
{ {
switch (alg) switch (alg)

2
src/pluto/ike_alg.c
View File

@ -575,7 +575,7 @@ bool ike_alg_test(void)
bool all_results = TRUE; bool all_results = TRUE;
struct ike_alg *a; struct ike_alg *a;
plog("Testing registered IKE encryption algorithms:"); plog("Testing registered IKE crypto algorithms:");
for (a = ike_alg_base[IKE_ALG_ENCRYPT]; a != NULL; a = a->algo_next) for (a = ike_alg_base[IKE_ALG_ENCRYPT]; a != NULL; a = a->algo_next)
{ {