removed obsolete INTEGRITY_TEST and fips signer code
--enable-integrity-test now conditionally builds libchecksum
This commit is contained in:
@@ -40,11 +40,6 @@
|
||||
#include <credentials/keys/private_key.h>
|
||||
#include <utils/optionsfrom.h>
|
||||
|
||||
#ifdef INTEGRITY_TEST
|
||||
#include <fips/fips.h>
|
||||
#include <fips_signature.h>
|
||||
#endif /* INTEGRITY_TEST */
|
||||
|
||||
#define OPENAC_PATH IPSEC_CONFDIR "/openac"
|
||||
#define OPENAC_SERIAL IPSEC_CONFDIR "/openac/serial"
|
||||
|
||||
@@ -482,20 +477,6 @@ int main(int argc, char **argv)
|
||||
|
||||
DBG1("starting openac (strongSwan Version %s)", VERSION);
|
||||
|
||||
#ifdef INTEGRITY_TEST
|
||||
DBG1("integrity test of libstrongswan code");
|
||||
if (fips_verify_hmac_signature(hmac_key, hmac_signature))
|
||||
{
|
||||
DBG1(" integrity test passed");
|
||||
}
|
||||
else
|
||||
{
|
||||
DBG1(" integrity test failed");
|
||||
status = 3;
|
||||
goto end;
|
||||
}
|
||||
#endif /* INTEGRITY_TEST */
|
||||
|
||||
/* load the signer's RSA private key */
|
||||
if (keyfile != NULL)
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user