Merge pull request #2300 from ejohnstown/fips-hash

FIPS Hash

Makefile.am

@@ -134,6 +134,7 @@ EXTRA_DIST+= wolfssl-ntru.sln
 EXTRA_DIST+= wolfssl.sln
 EXTRA_DIST+= wolfssl64.sln
 EXTRA_DIST+= valgrind-error.sh
+EXTRA_DIST+= fips-hash.sh
 EXTRA_DIST+= gencertbuf.pl
 EXTRA_DIST+= README.md
 EXTRA_DIST+= README

SCRIPTS-LIST

@@ -6,6 +6,7 @@ pre-commit.sh - our pre commit hook, saves current state before running commit
 commit-tests.sh - our commit tests, must pass before a commit is accepted, use
                   -n (--no-verify) to disable
 
+fips-hash.sh - updates the verifyCore hash in fips_test.c
 
 fips-check.sh - checks if current wolfSSL version works against FIPS wolfCrypt
                 comment out last line to leave working directory

fips-hash.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+if test ! -x ./wolfcrypt/test/testwolfcrypt
+then
+    echo "fips-hash: wolfCrypt test missing"
+    exit 1
+fi
+
+if test ! -s ./wolfcrypt/src/fips_test.c
+then
+    echo "fips-hash: fips_test.c missing"
+    exit 1
+fi
+
+NEWHASH=$(./wolfcrypt/test/testwolfcrypt | sed -n 's/hash = \(.*\)/\1/p')
+if test -n "$NEWHASH"
+then
+    sed -i.bak "s/^\".*\";/\"${NEWHASH}\";/" wolfcrypt/src/fips_test.c
+fi
+