Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/2194501/?format=api
{ "id": 2194501, "url": "http://patchwork.ozlabs.org/api/patches/2194501/?format=api", "web_url": "http://patchwork.ozlabs.org/project/hostap/patch/20260209080856.3369865-1-Chaitanya.mgit@gmail.com/", "project": { "id": 22, "url": "http://patchwork.ozlabs.org/api/projects/22/?format=api", "name": "HostAP Development", "link_name": "hostap", "list_id": "hostap.lists.infradead.org", "list_email": "hostap@lists.infradead.org", "web_url": "", "scm_url": "", "webscm_url": "", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20260209080856.3369865-1-Chaitanya.mgit@gmail.com>", "list_archive_url": null, "date": "2026-02-09T08:08:56", "name": "eap: disable IKEv2 MD5 when building with CONFIG_FIPS", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": false, "hash": "596d5d6d14a763ec8b627321e0a995231b5f1616", "submitter": { "id": 23866, "url": "http://patchwork.ozlabs.org/api/people/23866/?format=api", "name": "Chaitanya Tata", "email": "chaitanya.mgit@gmail.com" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/hostap/patch/20260209080856.3369865-1-Chaitanya.mgit@gmail.com/mbox/", "series": [ { "id": 491474, "url": "http://patchwork.ozlabs.org/api/series/491474/?format=api", "web_url": "http://patchwork.ozlabs.org/project/hostap/list/?series=491474", "date": "2026-02-09T08:08:56", "name": "eap: disable IKEv2 MD5 when building with CONFIG_FIPS", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/491474/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/2194501/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/2194501/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "\n <hostap-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n secure) header.d=lists.infradead.org header.i=@lists.infradead.org\n header.a=rsa-sha256 header.s=bombadil.20210309 header.b=xqIsbZdG;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20230601 header.b=ZPnsMIZ7;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=none (no SPF record) smtp.mailfrom=lists.infradead.org\n (client-ip=2607:7c80:54:3::133; helo=bombadil.infradead.org;\n envelope-from=hostap-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org;\n receiver=patchwork.ozlabs.org)" ], "Received": [ "from bombadil.infradead.org (bombadil.infradead.org\n [IPv6:2607:7c80:54:3::133])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4f8cmm5CSMz1xvc\n\tfor <incoming@patchwork.ozlabs.org>; Mon, 09 Feb 2026 19:09:44 +1100 (AEDT)", "from localhost ([::1] helo=bombadil.infradead.org)\n\tby bombadil.infradead.org with esmtp (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1vpMKT-0000000Ez6R-488s;\n\tMon, 09 Feb 2026 08:09:09 +0000", "from mail-pl1-x62d.google.com ([2607:f8b0:4864:20::62d])\n\tby bombadil.infradead.org with esmtps (Exim 4.98.2 #2 (Red Hat Linux))\n\tid 1vpMKR-0000000Ez5U-1XUO\n\tfor hostap@lists.infradead.org;\n\tMon, 09 Feb 2026 08:09:08 +0000", "by mail-pl1-x62d.google.com with SMTP id\n d9443c01a7336-2a929245b6aso23382805ad.0\n for <hostap@lists.infradead.org>;\n Mon, 09 Feb 2026 00:09:06 -0800 (PST)", "from tach01.nordicsemi.no ([49.205.248.152])\n by smtp.gmail.com with ESMTPSA id\n d9443c01a7336-2a9521f3b6asm101612935ad.77.2026.02.09.00.09.04\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Mon, 09 Feb 2026 00:09:05 -0800 (PST)" ], "DKIM-Signature": [ "v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;\n\td=lists.infradead.org; s=bombadil.20210309; h=Sender:\n\tContent-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post:\n\tList-Archive:List-Unsubscribe:List-Id:MIME-Version:Message-ID:Date:Subject:Cc\n\t:To:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From:\n\tResent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:\n\tList-Owner; bh=vJT7KY9u51W/Axc29IDZwcv5j8PASwV0J5R1Z/IDG54=; b=xqIsbZdG3oMy7y\n\tF9CVHEYjyKUujdtx8qJSrd3YyxUxtmcBozEF5KsnFu9C6LpazDfQRZsDdRMvnbV/0yIaaS1myvMJ5\n\tTH+uI0K4Ride7QEjF9Yw9F3Wjxl5O0o8kv5+otmBGQGBuYbrTjIixRBdpUeoEVIs8ycu+Tsa8joFY\n\tYWeM/HpOBcZIQ4JhR6PAHstzV6B48Ot1qfAeajokiDxs431mq1lrmKD6w4d8WM39V3Kah1kifUh+9\n\tbE/1grHdB+PYVdEm1awhm6ts1RdOtyS8ZRmydCHqdGaaMBJMCAdxExx8tEPgLn+t4qzMrRIixnSYk\n\td9qQijKjREZynA7BWg9Q==;", "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=gmail.com; s=20230601; t=1770624546; x=1771229346;\n darn=lists.infradead.org;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:from:to:cc:subject:date:message-id:reply-to;\n bh=BBRPLp1+57oeN/VOJeiU0SN3ubQV4rYg/+r4oRTYMbo=;\n b=ZPnsMIZ76SI35K/5r92JJWthHP8vMp4F5bRavOBwLZyLM8X5uqK/i9bvwFJap41Vx0\n hSbci2iTzQDRPGm6K+xR1DbshW9MS6iVPA5618UPBh2Xq5gb8aR3iP7C3a6LmnTBopgW\n B22UaQjvqpJGepA0DGytuN4iLWjC/VmoRmqrpwg3n3+UN+kQJwElcSQmdXUrsCkZT1M6\n bAup2uepdDDL6pIMZ07dGmvdR/BhotuX7JZ87Kfq4wP7l9l1uJa5x5pvnDqbnWu5CiQ4\n /eUxmCIQQ+wGAfrJ1sncU/9K/EpRUdgEjYBkrIm4IBO+3alAs/SfDaweLp9PcQknk9vo\n okLA==" ], "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20230601; t=1770624546; x=1771229346;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date\n :message-id:reply-to;\n bh=BBRPLp1+57oeN/VOJeiU0SN3ubQV4rYg/+r4oRTYMbo=;\n b=NJ8sDjvxmFo8N7cVCRxYg5WkT5VjLPAFDLP/Bcne0YMutx/dXVKwyJQSu+WbH6ykDD\n emA1SkJBTAd1rTJkk+PVjd9uEmtlsosDJS4zwDkPPoE1bwpBFdw3TMRm8tQDeS3ZpkvR\n xTLfB0vIB3mDo36ABqKoB45p/o/reYCqLSvzIeOkLB15KsSKY0hGELStQSgQBqGSZNy7\n SCbM/lr+Nz5DHO9mCbkOtkk3jXhsZsscNG8IXgRhuYoInrO9aSXVOvJ1PNL08ydKwZNs\n S0caDx5gyYoJMej81HFQriqbQef18YZsOVnhFLyOmAK9b/xZ7Wsj7vNofiGe6lVjsdbu\n tOfQ==", "X-Gm-Message-State": "AOJu0Yx6SiKtwulJsaIfFqYV4Q51bmFWz0WgiGUsv6mmWzXzss0rZ2gM\n\tsoTS2c2WZTlZDlGiSRKGCD87Dd+Th8GBW7qWrd8ncNGIQwXqgXg9U/59B2dPYw==", "X-Gm-Gg": "AZuq6aJ/AEBWa8Ij1wlu576Ted2Dp542s8vj5fq09x2OTjXpImgwH7Cv/Ni3yMyBhW9\n\tNeFOuLMaGCq5Kwvh463Lt7UaqJp1Iekixh+lOzQBOcRFj1/2lTwAuJBDwQoLWoHMdF6GiB/0wp4\n\tZLuyNlw6iWGg+ytmCZVMOB4Noo3yUQ5puWjYeiRyBwfMShEABX/2MKmEY2/56EN+uB2CobYIzRq\n\tMOzJcBI1dFyTUoZRfXLklL6okqgkiYXggj0uBxdlsoMlPicjXKt0OIbv7lFCm+QxnOOBHv8p/Y6\n\tuc6+1VthzEGlrVEhNr54vS8B5BKrZRsyHoIviMkY6ogQXG5qdnQkx0aEQT0eQUB2Zu0CcgwLX5I\n\tZgCs6DR/cn4NjMI/xXWq3Zskd7fjA7kF9qo0AN1hJFRrTc7zX7Cyyjo+3B/IgifO9WA+8CCULZ4\n\tnk4t4kQcuP+QvNRHe+4Zi9jx7yGiYU", "X-Received": "by 2002:a17:902:e80c:b0:2a9:638b:a4 with SMTP id\n d9443c01a7336-2a9638b0439mr63527535ad.6.1770624545806;\n Mon, 09 Feb 2026 00:09:05 -0800 (PST)", "From": "Chaitanya Tata <chaitanya.mgit@gmail.com>", "X-Google-Original-From": "Chaitanya Tata <Chaitanya.mgit@gmail.com>", "To": "hostap@lists.infradead.org", "Cc": "Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>", "Subject": "[PATCH] eap: disable IKEv2 MD5 when building with CONFIG_FIPS", "Date": "Mon, 9 Feb 2026 13:38:56 +0530", "Message-ID": "<20260209080856.3369865-1-Chaitanya.mgit@gmail.com>", "X-Mailer": "git-send-email 2.43.0", "MIME-Version": "1.0", "X-CRM114-Version": "20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 ", "X-CRM114-CacheID": "sfid-20260209_000907_451343_39B08B26 ", "X-CRM114-Status": "GOOD ( 10.46 )", "X-Spam-Score": "-2.1 (--)", "X-Spam-Report": "Spam detection software,\n running on the system \"bombadil.infradead.org\",\n has NOT identified this incoming email as spam. The original\n message has been attached to this so you can view it or label\n similar future email. If you have any questions, see\n the administrator of that system for details.\n Content preview: From: Chaitanya Tata RFC 4306 allows HMAC-MD5 for integrity\n and PRF,\n but MD5 is not FIPS-approved. Exclude AUTH_HMAC_MD5_96 and PRF_HMAC_MD5\n from the supported algorithm tables and switch branches when CONFIG_FIPS\n is set. [...]\n Content analysis details: (-2.1 points, 5.0 required)\n pts rule name description\n ---- ----------------------\n --------------------------------------------------\n -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at https://www.dnswl.org/, no\n trust\n [2607:f8b0:4864:20:0:0:0:62d listed in]\n [list.dnswl.org]\n 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record\n -0.0 SPF_PASS SPF: sender matches SPF record\n -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from\n author's\n domain\n -0.1 DKIM_VALID Message has at least one valid DKIM or DK\n signature\n 0.1 DKIM_SIGNED Message has a DKIM or DK signature,\n not necessarily valid\n -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from\n envelope-from domain\n -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%\n [score: 0.0000]\n 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail\n provider\n [chaitanya.mgit(at)gmail.com]", "X-BeenThere": "hostap@lists.infradead.org", "X-Mailman-Version": "2.1.34", "Precedence": "list", "List-Id": "<hostap.lists.infradead.org>", "List-Unsubscribe": "<http://lists.infradead.org/mailman/options/hostap>,\n <mailto:hostap-request@lists.infradead.org?subject=unsubscribe>", "List-Archive": "<http://lists.infradead.org/pipermail/hostap/>", "List-Post": "<mailto:hostap@lists.infradead.org>", "List-Help": "<mailto:hostap-request@lists.infradead.org?subject=help>", "List-Subscribe": "<http://lists.infradead.org/mailman/listinfo/hostap>,\n <mailto:hostap-request@lists.infradead.org?subject=subscribe>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Sender": "\"Hostap\" <hostap-bounces@lists.infradead.org>", "Errors-To": "hostap-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org" }, "content": "From: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>\n\nRFC 4306 allows HMAC-MD5 for integrity and PRF, but MD5 is not\nFIPS-approved. Exclude AUTH_HMAC_MD5_96 and PRF_HMAC_MD5 from the\nsupported algorithm tables and switch branches when CONFIG_FIPS is set.\nHMAC-SHA1 remains enabled.\n\nSigned-off-by: Chaitanya Tata <Chaitanya.Tata@nordicsemi.no>\n---\n src/eap_common/ikev2_common.c | 10 ++++++++++\n 1 file changed, 10 insertions(+)", "diff": "diff --git a/src/eap_common/ikev2_common.c b/src/eap_common/ikev2_common.c\nindex 2e75b4375..b37175c14 100644\n--- a/src/eap_common/ikev2_common.c\n+++ b/src/eap_common/ikev2_common.c\n@@ -10,7 +10,9 @@\n \n #include \"common.h\"\n #include \"crypto/crypto.h\"\n+#ifndef CONFIG_FIPS\n #include \"crypto/md5.h\"\n+#endif /* CONFIG_FIPS */\n #include \"crypto/sha1.h\"\n #include \"crypto/random.h\"\n #include \"ikev2_common.h\"\n@@ -18,7 +20,9 @@\n \n static const struct ikev2_integ_alg ikev2_integ_algs[] = {\n \t{ AUTH_HMAC_SHA1_96, 20, 12 },\n+#ifndef CONFIG_FIPS\n \t{ AUTH_HMAC_MD5_96, 16, 12 }\n+#endif /* CONFIG_FIPS */\n };\n \n #define NUM_INTEG_ALGS ARRAY_SIZE(ikev2_integ_algs)\n@@ -26,7 +30,9 @@ static const struct ikev2_integ_alg ikev2_integ_algs[] = {\n \n static const struct ikev2_prf_alg ikev2_prf_algs[] = {\n \t{ PRF_HMAC_SHA1, 20, 20 },\n+#ifndef CONFIG_FIPS\n \t{ PRF_HMAC_MD5, 16, 16 }\n+#endif /* CONFIG_FIPS */\n };\n \n #define NUM_PRF_ALGS ARRAY_SIZE(ikev2_prf_algs)\n@@ -67,6 +73,7 @@ int ikev2_integ_hash(int alg, const u8 *key, size_t key_len, const u8 *data,\n \t\t\treturn -1;\n \t\tos_memcpy(hash, tmphash, 12);\n \t\tbreak;\n+#ifndef CONFIG_FIPS\n \tcase AUTH_HMAC_MD5_96:\n \t\tif (key_len != 16)\n \t\t\treturn -1;\n@@ -74,6 +81,7 @@ int ikev2_integ_hash(int alg, const u8 *key, size_t key_len, const u8 *data,\n \t\t\treturn -1;\n \t\tos_memcpy(hash, tmphash, 12);\n \t\tbreak;\n+#endif /* CONFIG_FIPS */\n \tdefault:\n \t\treturn -1;\n \t}\n@@ -103,8 +111,10 @@ int ikev2_prf_hash(int alg, const u8 *key, size_t key_len,\n \tcase PRF_HMAC_SHA1:\n \t\treturn hmac_sha1_vector(key, key_len, num_elem, addr, len,\n \t\t\t\t\thash);\n+#ifndef CONFIG_FIPS\n \tcase PRF_HMAC_MD5:\n \t\treturn hmac_md5_vector(key, key_len, num_elem, addr, len, hash);\n+#endif /* CONFIG_FIPS */\n \tdefault:\n \t\treturn -1;\n \t}\n", "prefixes": [] }