https://progress.opensuse.org/https://progress.opensuse.org/themes/openSUSE/favicon/favicon.ico?15829177842022-04-25T06:31:56ZopenSUSE Project Management ToolopenQA Tests - action #100554: [sle][security][backlog][feature][ECO] SLE-21227 - QA: FIPS: implement the IPSEC KDF for strongswan in opensslhttps://progress.opensuse.org/issues/100554?journal_id=5132802022-04-25T06:31:56Zbchoubchou@suse.com
<ul><li><strong>Subject</strong> changed from <i>[sle][security][sle15sp4][feature][manual] SLE-21227 - QA: FIPS: implement the IPSEC KDF for strongswan in openssl</i> to <i>[sle][security][sle15sp4][feature][ECO] SLE-21227 - QA: FIPS: implement the IPSEC KDF for strongswan in openssl</i></li><li><strong>Status</strong> changed from <i>New</i> to <i>Blocked</i></li><li><strong>Estimated time</strong> set to <i>40.00 h</i></li></ul><p>This case will be released after SLE15 SP4 GMC. Set this poo as ECO.</p>
openQA Tests - action #100554: [sle][security][backlog][feature][ECO] SLE-21227 - QA: FIPS: implement the IPSEC KDF for strongswan in opensslhttps://progress.opensuse.org/issues/100554?journal_id=5170002022-05-09T02:01:23Zllzhaollzhao@suse.com
<ul><li><strong>Subject</strong> changed from <i>[sle][security][sle15sp4][feature][ECO] SLE-21227 - QA: FIPS: implement the IPSEC KDF for strongswan in openssl</i> to <i>[sle][security][backlog][feature][ECO] SLE-21227 - QA: FIPS: implement the IPSEC KDF for strongswan in openssl</i></li></ul> openQA Tests - action #100554: [sle][security][backlog][feature][ECO] SLE-21227 - QA: FIPS: implement the IPSEC KDF for strongswan in opensslhttps://progress.opensuse.org/issues/100554?journal_id=5279662022-06-13T01:42:19Zrfan1richard.fan@suse.com
<ul><li><strong>Assignee</strong> changed from <i>bchou</i> to <i>rcai</i></li></ul> openQA Tests - action #100554: [sle][security][backlog][feature][ECO] SLE-21227 - QA: FIPS: implement the IPSEC KDF for strongswan in opensslhttps://progress.opensuse.org/issues/100554?journal_id=5280562022-06-13T07:15:13Zrcai
<ul><li><strong>Status</strong> changed from <i>Blocked</i> to <i>In Progress</i></li></ul><p>The latest build 151.1 includes bug(1195919) fix as below:</p>
<p>rpm -q strongswan-5.8.2-150400.17.24.x86_64 --changelog | more<br>
Thu Mar 24 2022 <a href="mailto:meissner@suse.com">meissner@suse.com</a><br>
0001-Modularize-the-IKEv2-key-derivation-so-it-can-be-pro.patch:<br>
Outsource the IKE key deriviation to openssl for FIPS certification.<br>
(bsc#1195919)<br>
Completed strongswan related test as below:<br>
Test all passed.</p>
<p>x86_64 platform OpenQa automation test, please refer test result.<br>
<a href="https://openqa.suse.de/tests/8825402" class="external">https://openqa.suse.de/tests/8825402</a><br>
Function test for HKDF, already integrated into openqa.<br>
please refer test result:<br>
<a href="https://openqa.suse.de/tests/8825402#step/strongswan_server/30" class="external">https://openqa.suse.de/tests/8825402#step/strongswan_server/30</a><br>
More strongswan on different platforms, please refer page: <a href="https://confluence.suse.com/pages/viewpage.action?pageId=968033193#SLES15SP4SecurityFIPSRegressionTest(RCphase)-RCphaseTestRuns" class="external">https://confluence.suse.com/pages/viewpage.action?pageId=968033193#SLES15SP4SecurityFIPSRegressionTest(RCphase)-RCphaseTestRuns</a></p>
openQA Tests - action #100554: [sle][security][backlog][feature][ECO] SLE-21227 - QA: FIPS: implement the IPSEC KDF for strongswan in opensslhttps://progress.opensuse.org/issues/100554?journal_id=5280682022-06-13T07:18:39Zrcai
<ul></ul><p>Related POO: <a href="https://progress.opensuse.org/issues/111581?issue_count=16&issue_position=10&next_issue_id=88473&prev_issue_id=111225" class="external">https://progress.opensuse.org/issues/111581?issue_count=16&issue_position=10&next_issue_id=88473&prev_issue_id=111225</a></p>
openQA Tests - action #100554: [sle][security][backlog][feature][ECO] SLE-21227 - QA: FIPS: implement the IPSEC KDF for strongswan in opensslhttps://progress.opensuse.org/issues/100554?journal_id=5280712022-06-13T07:18:54Zrcai
<ul><li><strong>Status</strong> changed from <i>In Progress</i> to <i>Resolved</i></li><li><strong>% Done</strong> changed from <i>0</i> to <i>100</i></li></ul>