The FIPS hmac key is provided as a hexadezimal string, which needs to
be be prefixed with `hexkey:`, not `key:`.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/13684)
openssl fipsinstall -
-module ossl_installroot:[MODULES{- $sover_dirname.$target{pointer_size} -}.'arch']$(FIPSMODULENAME) -
-out ossl_installroot:[MODULES{- $sover_dirname.$target{pointer_size} -}.'arch']$(FIPSMODULENAME).cnf -
- -macopt "key:$(FIPSKEY)"
+ -macopt "hexkey:$(FIPSKEY)"
uninstall_fips: uninstall_sw
@ WRITE SYS$OUTPUT "*** Uninstalling FIPS module configuration"
@$(ECHO) "fipsinstall $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME).cnf"
@openssl fipsinstall -module $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME) \
-out $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME).cnf \
- -macopt 'key:$(FIPSKEY)'
+ -macopt 'hexkey:$(FIPSKEY)'
uninstall_fips: uninstall_sw
@$(ECHO) "*** Uninstalling FIPS module configuration"
@$(ECHO) "fipsinstall $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME).cnf"
@openssl fipsinstall -module $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME) \
-out $(DESTDIR)$(MODULESDIR)/$(FIPSMODULENAME).cnf \
- -macopt "key:$(FIPSKEY)"
+ -macopt "hexkey:$(FIPSKEY)"
uninstall_fips: uninstall_sw
@$(ECHO) "*** Uninstalling FIPS module configuration"