diff options
| author |   Mathieu Tortuyaux <mtortuyaux@microsoft.com> | 2022-03-10 15:27:13 +0100 |
|---|---|---|
| committer |   Sam James <sam@gentoo.org> | 2022-03-21 23:44:41 +0000 |
| commit | 5ec57a0b4c6249bafb46fb7041430cc9b53e2372 (patch) | |
| tree | 50bfac4c48fe6605e8e4675973f79aea642ab858 /sys-fs | |
| parent | app-text/zathura-pdf-mupdf: add link to bug in patch (diff) | |
| download | gentoo-5ec57a0b4c6249bafb46fb7041430cc9b53e2372.tar.gz gentoo-5ec57a0b4c6249bafb46fb7041430cc9b53e2372.tar.bz2 gentoo-5ec57a0b4c6249bafb46fb7041430cc9b53e2372.zip | |
sys-fs/cryptsetup: add fips useflag
Closes: https://bugs.gentoo.org/834920
Package-Manager: Portage-3.0.30, Repoman-3.0.3
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
Closes: https://github.com/gentoo/gentoo/pull/24479
Signed-off-by: Sam James <sam@gentoo.org>
Diffstat (limited to 'sys-fs')
| -rw-r--r-- | sys-fs/cryptsetup/cryptsetup-2.4.3-r1.ebuild | 5 | ||||
| -rw-r--r-- | sys-fs/cryptsetup/metadata.xml | 1 |
2 files changed, 4 insertions, 2 deletions
diff --git a/sys-fs/cryptsetup/cryptsetup-2.4.3-r1.ebuild b/sys-fs/cryptsetup/cryptsetup-2.4.3-r1.ebuild index 8287adbcacaf..f2ac3491ef69 100644 --- a/sys-fs/cryptsetup/cryptsetup-2.4.3-r1.ebuild +++ b/sys-fs/cryptsetup/cryptsetup-2.4.3-r1.ebuild @@ -16,10 +16,10 @@ KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~mips ~ppc ~ppc64 ~riscv ~s390 ~ CRYPTO_BACKENDS="gcrypt kernel nettle +openssl" # we don't support nss since it doesn't allow cryptsetup to be built statically # and it's missing ripemd160 support so it can't provide full backward compatibility -IUSE="${CRYPTO_BACKENDS} +argon2 nls pwquality reencrypt ssh static static-libs test +udev urandom" +IUSE="${CRYPTO_BACKENDS} +argon2 fips nls pwquality reencrypt ssh static static-libs test +udev urandom" RESTRICT="!test? ( test )" REQUIRED_USE="^^ ( ${CRYPTO_BACKENDS//+/} ) - static? ( !gcrypt !ssh !udev )" # 496612, 832711 + static? ( !gcrypt !ssh !udev !fips )" # 496612, 832711 LIB_DEPEND=" dev-libs/json-c:=[static-libs(+)] @@ -91,6 +91,7 @@ src_configure() { $(use_enable !urandom dev-random) $(use_enable ssh ssh-token) $(usex argon2 '' '--with-luks2-pbkdf=pbkdf2') + $(use_enable fips) ) econf "${myeconfargs[@]}" } diff --git a/sys-fs/cryptsetup/metadata.xml b/sys-fs/cryptsetup/metadata.xml index 7ecc557fd2b4..5f7443faf40f 100644 --- a/sys-fs/cryptsetup/metadata.xml +++ b/sys-fs/cryptsetup/metadata.xml @@ -7,6 +7,7 @@ </maintainer> <use> <flag name="argon2">Enable password hashing algorithm from <pkg>app-crypt/argon2</pkg></flag> + <flag name="fips">Enable FIPS mode restrictions</flag> <flag name="gcrypt">Use <pkg>dev-libs/libgcrypt</pkg> crypto backend</flag> <flag name="kernel">Use kernel crypto backend (mainly for embedded systems)</flag> <flag name="nettle">Use <pkg>dev-libs/nettle</pkg> crypto backend</flag> |