Skip to content

Signature of DB always valid if you build without OpenSSL and gcrypt #3

@wwahammy

Description

@wwahammy

This may not be an actual issue but I wanted to bring it up. In the event someone builds without OpenSSL and gcrypt, reglib_verify_db_signature always returns 1 (available at https://github.com/mcgrof/crda/blob/master/reglib.c#L203). In the event of DB corruption, regulatory rules could be totally invalid but the CRDA wouldn't know and would return them to the kernel anyway. I'm not sure if this is a big issue since, if you're building a new version of CRDA, you're probably comfortable taking your regulatory risks into your own hands. That said, it still strikes me as potentially dangerous for users to be able to unknowingly break regulatory requirements.

I don't know if this is feasible, or even necessary, but perhaps, the regdb could have a super basic unsigned hash as a protective measure in the event of someone rebuilding CRDA without gcrypt and OpenSSL and database corruption.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions