Commit Graph

67 Commits (a711ac2e4f345310a185d0d8d1fcb9a97ac79e3b)

Author SHA1 Message Date
Dmitry Belyavskiy a711ac2e4f Fix openssl curl error with LANG=tr_TR.utf8
2 years ago
Dmitry Belyavskiy 7a1c7b28bc FIPS provider doesn't block RSA encryption for key transport
3 years ago
Clemens Lang 93ff3f8fe5 Fix occasional internal error in TLS when DHE is used
3 years ago
Clemens Lang 153f593fa6 Fix SHA1 certs in LEGACY without openssl lib ctxt
3 years ago
Clemens Lang 4eb630f7d5 Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes
3 years ago
Dmitry Belyavskiy 03697fff80 CVE-2022-0778 fix
3 years ago
Clemens Lang bc7dfd9722 Fix RSA PSS padding with SHA-1 disabled
3 years ago
Clemens Lang 3c66c99bd5 Allow SHA1 in seclevel 2 if rh-allow-sha1-signatures = yes
3 years ago
Clemens Lang ede38fcb54 Prevent use of SHA1 with ECDSA
3 years ago
Dmitry Belyavskiy ea9f0a5726 OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
3 years ago
Peter Robinson 849a9965ee Support KBKDF (NIST SP800-108) with an R value of 8bits Resolves: rhbz#2027261
3 years ago
Clemens Lang 53f53fedec Allow SHA1 usage in MGF1 for RSASSA-PSS signatures
3 years ago
Dmitry Belyavskiy b33dfd3fc3 Spec bump
3 years ago
Clemens Lang 5a9ab1160e Allow SHA1 usage in HMAC in TLS
3 years ago
Dmitry Belyavskiy 53b85f538c OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
3 years ago
Clemens Lang 78fb78d307 Disable SHA1 signature creation and verification by default
3 years ago
Sahana Prasad 0a5c81da78 s_server: correctly handle 2^14 byte long records
3 years ago
Dmitry Belyavskiy 922b5301ea Adjust FIPS provider version
3 years ago
Dmitry Belyavskiy 8c3b745547 On the s390x, zeroize all the copies of TLS premaster secret
3 years ago
Dmitry Belyavskiy 92e721fa5d Rebuild
3 years ago
Dmitry Belyavskiy d237e7f301 Restoring fips=yes to SHA-1
3 years ago
Dmitry Belyavskiy 9df33eabbe KATS self-tests should run before HMAC verifcation
3 years ago
Sahana Prasad f5421022ee Adds enable-buildtest-c++ to the configure options.
3 years ago
Sahana Prasad 78a467efcc Rebase to upstream version 3.0.1
3 years ago
Dmitry Belyavskiy e63c4b68b2 Update spec file, remove fipsmodule.cnf
3 years ago
Dmitry Belyavskiy 225b6d37b9 openssl speed should run in FIPS mode
3 years ago
Dmitry Belyavskiy 4c1c00d6af Updated spec, some cleanup done
3 years ago
Dmitry Belyavskiy 9422ae52de Always activate default provider via config
3 years ago
Dmitry Belyavskiy 210c37e906 Disable fipsinstall application
3 years ago
Dmitry Belyavskiy 3ff0db7558 Embed correct HMAC into fips provider
3 years ago
Dmitry Belyavskiy 694c426faf Fix memory leak in s_client
3 years ago
Dmitry Belyavskiy b76c2316a3 KTLS and FIPS may interfere, so tests need to be tuned
3 years ago
Dmitry Belyavskiy 3edf474b5d Avoid double-free on error seeding the RNG.
3 years ago
Sahana Prasad 34d46544a5 Rebase to upstream version 3.0.0
3 years ago
Sahana Prasad 07de966235 - Removes the dual-abi build as it not required anymore. The mass rebuild
3 years ago
Dmitry Belyavskiy ddd1eb3708 Correctly processing CMS reading from /dev/stdin
3 years ago
Sahana Prasad 49de59749c Add instruction for loading legacy provider in openssl.cnf
3 years ago
Sahana Prasad 03899fca38 Adds support for IDEA encryption.
3 years ago
Sahana Prasad 0c6f4a599c - Fixes core dump in openssl req -modulus
3 years ago
Mohan Boddu 2862adca42 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
3 years ago
Dmitry Belyavskiy ecb6630fd3 When signature_algorithm extension is omitted, use more relevant alerts
3 years ago
Sahana Prasad fe7445d93d Rebase to upstream version beta2
3 years ago
Sahana Prasad 0b6afca185 - Prevents creation of duplicate cert entries in PKCS #12 files
3 years ago
Sahana Prasad e3d0ba4f1e NVR Bump to Update to OpenSSL 3.0 Beta1 version
3 years ago
Sahana Prasad 529b968a17 Update patch dual-abi.patch to add the #define macros in implementation
3 years ago
Sahana Prasad a3158ae4f7 Removes unused patch dual-abi.patch
3 years ago
Sahana Prasad d4e97b3110 Update to Beta1 version
3 years ago
Sahana Prasad 90bf702df6 - Fixes override of openssl_conf in openssl.cnf
3 years ago
Sahana Prasad 4f728a9f3f Fixes override of openssl_conf in openssl.cnf
3 years ago
Sahana Prasad 826e7990ea Adds FIPS mode compatibility patch
3 years ago