-
Story
-
Resolution: Unresolved
-
Major
-
None
-
None
-
dracut-105-3.el10
-
Important
-
rhel-sst-cs-bootloaders
-
ssg_core_services
-
26
-
5
-
Dev ack
-
False
-
-
None
-
None
-
Pass
-
RegressionOnly
-
None
[^crypto-15542.bundle]. You can `git clone crypto-15542.bundle` to check out a working copy.
Running ./src/ossl-config prints a linearized version of the default OpenSSL configuration file to stdout. This should be written to the filename printed by ./src/ossl-files --config.
Running ./src/ossl-files --engines --providers prints a list of all additional files to be copied to the initramfs on stdout, one per line. Note that this currently does not contain potential PKCS#11 modules loaded by PKCS#11 ENGINE or PKCS#11 provider, but for now I'd go with this and only add support for PKCS#11 modules should somebody ask for this later.
The code is tested and works. It still needs to be integrated into dracut, though. At the moment, https://github.com/dracut-ng/dracut-ng/blob/main/modules.d/01fips/module-setup.sh#L67 seems to be the only place where an openssl configuration is copied into the initramfs, and probably needs to be adjusted
- links to
-
RHBA-2024:140612 dracut bug fix and enhancement update