Don't use vpaes in fips builds and exclude from restricted tarball.

diff --git a/Configure b/Configure
index d8c93e93eded772c669d8df3c2c8937c57e0ed45..29068b0b500947008dd8b689b50eebb09b971741 100755 (executable)
--- a/Configure
+++ b/Configure
@@ -1552,6 +1552,7 @@ if ($aes_obj =~ /\.o$/)
        # module implements AES_ctr32_encrypt...
        $cflags.=" -DAES_CTR_ASM" if ($aes_obj =~ s/\s*aes_ctr\.o//);
        $aes_obj =~ s/\s*(vpaes|aesni)\-x86\.o// if ($no_sse2);
+       $aes_obj =~ s/\s*vpaes-\w*\.o// if ($fipscanisterinternal eq "y");
        $cflags.=" -DVPAES_ASM" if ($aes_obj =~ m/vpaes/);
        }
 else   {

diff --git a/util/fipsdist.pl b/util/fipsdist.pl
index 07a09ce93f6b57bb50d2e7f14e626709f4667552..b191fbe41e0b0d6abb85777c80ec0e2bb5790bc3 100644 (file)
--- a/util/fipsdist.pl
+++ b/util/fipsdist.pl
@@ -66,6 +66,7 @@ while (<STDIN>)
                next if -d "crypto/$1" && !exists $cdirs{$1};
                # Skip GF2m assembly language perl scripts
                next if $noec2m && /gf2m\.pl/;
+               next if /vpaes-\w*\.pl/;
                # Keep assembly language dir, Makefile or certain extensions
                if (!/\/asm\// && !/\/Makefile$/ && !/\.(in|pl|h|S)$/)
                        {