Skip to content

Draft: Backport crypto changes to allow compiling x509 selftests as a module

Brian Masney requested to merge bmasney/centos-stream-9:x509-selftests into main

Upstream Status: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git

JIRA: https://issues.redhat.com/browse/RHEL-17426

Backport the following commits from upstream into cs9/main so that we can reenable FIPS at compile time in the automotive kernel:

0a596b0682a7ce37e26c36629816f105c6459d06 KEYS: Include linux/errno.h in linux/verification.h
0f5d4a0b995faa6537c4de79973817a4f8da206a crypto: certs: fix FIPS selftest dependency
04a93202ed7c3b451bf22d3ff4bcd379df27f299 certs: Break circular dependency when selftest is modular

The existing automotive targets that we will support will boot with 'fips=0 cryptomgr.notests' to disable FIPS and the associated tests at runtime without affecting our overall boot speed.

A separate merge request to cs9/main-automotive will be posted with the actual Kconfig changes.

Signed-off-by: Brian Masney bmasney@redhat.com

Merge request reports