Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-76323

Integrate OpenSSL tool with Dracut for eDNS in RHEL use case

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Major Major
    • rhel-10.0
    • None
    • dracut
    • None
    • dracut-105-3.el10
    • Important
    • rhel-sst-cs-bootloaders
    • ssg_core_services
    • 26
    • 5
    • Dev ack
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None

      [^crypto-15542.bundle]. You can `git clone crypto-15542.bundle` to check out a working copy.

       

      Running ./src/ossl-config prints a linearized version of the default OpenSSL configuration file to stdout. This should be written to the filename printed by ./src/ossl-files --config.
      Running ./src/ossl-files --engines --providers prints a list of all additional files to be copied to the initramfs on stdout, one per line. Note that this currently does not contain potential PKCS#11 modules loaded by PKCS#11 ENGINE or PKCS#11 provider, but for now I'd go with this and only add support for PKCS#11 modules should somebody ask for this later.

      The code is tested and works. It still needs to be integrated into dracut, though. At the moment, https://github.com/dracut-ng/dracut-ng/blob/main/modules.d/01fips/module-setup.sh#L67 seems to be the only place where an openssl configuration is copied into the initramfs, and probably needs to be adjusted

              pvalena@redhat.com Pavel Valena
              ftrivino@redhat.com Francisco Trivino Garcia
              dracut maint mailing list dracut maint mailing list
              Frantisek Sumsal Frantisek Sumsal
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated: