instant-labs
/
instant-acme
mirror of https://github.com/instant-labs/instant-acme.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Prefer aws-lc-rs if fips is enabled

This commit is contained in:
Dirkjan Ochtman 2024-07-16 11:43:10 +02:00
parent f11b1d1364
commit da55daaca9
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/lib.rs
View File

@ -800,9 +800,9 @@ pub trait BytesBody {
} }
mod crypto { mod crypto {
#[cfg(all(feature = "aws-lc-rs", not(feature = "ring")))] #[cfg(all(feature = "aws-lc-rs", any(feature = "fips", not(feature = "ring"))))]
pub(crate) use aws_lc_rs as ring_like; pub(crate) use aws_lc_rs as ring_like;
#[cfg(feature = "ring")] #[cfg(all(feature = "ring", not(feature = "fips")))]
pub(crate) use ring as ring_like; pub(crate) use ring as ring_like;
pub(crate) use ring_like::digest::{digest, Digest, SHA256}; pub(crate) use ring_like::digest::{digest, Digest, SHA256};
@ -812,7 +812,7 @@ mod crypto {
pub(crate) use ring_like::signature::{KeyPair, Signature}; pub(crate) use ring_like::signature::{KeyPair, Signature};
pub(crate) use ring_like::{hmac, pkcs8}; pub(crate) use ring_like::{hmac, pkcs8};
#[cfg(all(feature = "aws-lc-rs", not(feature = "ring")))] #[cfg(all(feature = "aws-lc-rs", any(feature = "fips", not(feature = "ring"))))]
pub(crate) fn p256_key_pair_from_pkcs8( pub(crate) fn p256_key_pair_from_pkcs8(
pkcs8: &[u8], pkcs8: &[u8],
_: &SystemRandom, _: &SystemRandom,
@ -820,7 +820,7 @@ mod crypto {
EcdsaKeyPair::from_pkcs8(&ECDSA_P256_SHA256_FIXED_SIGNING, pkcs8) EcdsaKeyPair::from_pkcs8(&ECDSA_P256_SHA256_FIXED_SIGNING, pkcs8)
} }
#[cfg(feature = "ring")] #[cfg(all(feature = "ring", not(feature = "fips")))]
pub(crate) fn p256_key_pair_from_pkcs8( pub(crate) fn p256_key_pair_from_pkcs8(
pkcs8: &[u8], pkcs8: &[u8],
rng: &SystemRandom, rng: &SystemRandom,