Branch: refs/heads/openssl-3.0 Home: https://github.com/openssl/openssl Commit: 05c8bd1f35d07f1877860e671bfde51faf4b3483 https://github.com/openssl/openssl/commit/05c8bd1f35d07f1877860e671bfde51faf4b3483 Author: Clemens Lang <cll...@redhat.com> Date: 2022-08-17 (Wed, 17 Aug 2022)
Changed paths: M apps/dhparam.c M test/recipes/20-test_dhparam.t Log Message: ----------- APPS: dhparam: Support setting properties The -provider and -propquery options did not work on dhparam. Fix this and add tests that check that operations that would usually fail with the FIPS provider work when run with | -provider default -propquery '?fips!=yes' See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously fixed the same problem in dsaparam and gendsa. See also the initial report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956. Signed-off-by: Clemens Lang <cll...@redhat.com> Reviewed-by: Tomas Mraz <to...@openssl.org> Reviewed-by: Dmitry Belyavskiy <beld...@gmail.com> (Merged from https://github.com/openssl/openssl/pull/18717) (cherry picked from commit ae3c30acac17271693e91dcae42c804cd96e8f93) Commit: 9bd968d42e77e2e7e00756cc7bef0817bf8322e1 https://github.com/openssl/openssl/commit/9bd968d42e77e2e7e00756cc7bef0817bf8322e1 Author: Clemens Lang <cll...@redhat.com> Date: 2022-08-17 (Wed, 17 Aug 2022) Changed paths: M apps/ecparam.c M test/recipes/15-test_ecparam.t Log Message: ----------- APPS: ecparam: Support setting properties The -provider and -propquery options did not work on ecparam. Fix this and add tests that check that operations that would usually fail with the FIPS provider work when run with | -provider default -propquery '?fips!=yes' See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously fixed the same problem in dsaparam and gendsa. See also the initial report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956. Signed-off-by: Clemens Lang <cll...@redhat.com> Reviewed-by: Tomas Mraz <to...@openssl.org> Reviewed-by: Dmitry Belyavskiy <beld...@gmail.com> (Merged from https://github.com/openssl/openssl/pull/18717) (cherry picked from commit 2b8f687d7627a4b15bba6a820825944185980376) Commit: be52cfec4974c47d8c5579928b774a43c9264883 https://github.com/openssl/openssl/commit/be52cfec4974c47d8c5579928b774a43c9264883 Author: Clemens Lang <cll...@redhat.com> Date: 2022-08-17 (Wed, 17 Aug 2022) Changed paths: M apps/pkeyparam.c M test/recipes/15-test_ecparam.t Log Message: ----------- APPS: pkeyparam: Support setting properties The -provider and -propquery options did not work on pkeyparam. Fix this and add tests that check that operations that would usually fail with the FIPS provider work when run with | -provider default -propquery '?fips!=yes' See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously fixed the same problem in dsaparam and gendsa. See also the initial report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956. Signed-off-by: Clemens Lang <cll...@redhat.com> Reviewed-by: Tomas Mraz <to...@openssl.org> Reviewed-by: Dmitry Belyavskiy <beld...@gmail.com> (Merged from https://github.com/openssl/openssl/pull/18717) (cherry picked from commit 0185538799803a1a98823f42ac2402ede04f56da) Commit: 9184cfcf661ad9338f652b0de4d5f38e7747381c https://github.com/openssl/openssl/commit/9184cfcf661ad9338f652b0de4d5f38e7747381c Author: Clemens Lang <cll...@redhat.com> Date: 2022-08-17 (Wed, 17 Aug 2022) Changed paths: M test/recipes/15-test_ec.t A test/testec-p112r1.pem Log Message: ----------- TEST: Check property query support of apps/pkey Property query support works correctly for apps/pkey, but there does not seem to be a test for it yet, so add one. See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously fixed a similar problem in dsaparam and gendsa. See also the initial report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956. Signed-off-by: Clemens Lang <cll...@redhat.com> Reviewed-by: Tomas Mraz <to...@openssl.org> Reviewed-by: Dmitry Belyavskiy <beld...@gmail.com> (Merged from https://github.com/openssl/openssl/pull/18717) (cherry picked from commit 33b9bb45a4d463052aef763cc7c64c91384d4249) Commit: 4fe6c2fdc80b11d6ec16c7a87ec46031d459e86b https://github.com/openssl/openssl/commit/4fe6c2fdc80b11d6ec16c7a87ec46031d459e86b Author: Clemens Lang <cll...@redhat.com> Date: 2022-08-17 (Wed, 17 Aug 2022) Changed paths: M apps/dgst.c M test/recipes/20-test_cli_fips.t Log Message: ----------- APPS: dgst: Support properties when signing The -provider and -propquery options did not work on dgst when using it for signing or signature verification (including HMACs). Fix this and add tests that check that operations that would usually fail with the FIPS provider work when run with | -provider default -propquery '?fips!=yes' Additionally, modify the behavior of dgst -list to also use the current library context and property query. This reduces the output below the headline "Supported digests" to a list of the digest algorithms that will actually work with the current configuration, which is closer to what users probably expect with this headline. See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously fixed the same problem in dsaparam and gendsa. See also the initial report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956. Signed-off-by: Clemens Lang <cll...@redhat.com> Reviewed-by: Tomas Mraz <to...@openssl.org> Reviewed-by: Dmitry Belyavskiy <beld...@gmail.com> (Merged from https://github.com/openssl/openssl/pull/18717) (cherry picked from commit 653a7706781ebbe8a6a4b84d29b39d001c395ffe) Commit: 8bb9fecf6341aad0a771bf585d9eea80ea6ac89d https://github.com/openssl/openssl/commit/8bb9fecf6341aad0a771bf585d9eea80ea6ac89d Author: Clemens Lang <cll...@redhat.com> Date: 2022-08-17 (Wed, 17 Aug 2022) Changed paths: M apps/genrsa.c M test/recipes/15-test_genrsa.t Log Message: ----------- APPS: genrsa: Support setting properties The -provider and -propquery options did not work on genrsa. Fix this and add a test that checks that operations that would usually fail with the FIPS provider work when run with | -provider default -propquery '?fips!=yes' See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously fixed the same problem in dsaparam and gendsa. See also the initial report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956. Signed-off-by: Clemens Lang <cll...@redhat.com> Reviewed-by: Tomas Mraz <to...@openssl.org> Reviewed-by: Dmitry Belyavskiy <beld...@gmail.com> (Merged from https://github.com/openssl/openssl/pull/18717) (cherry picked from commit b2ccfd81025fa115f1138123b9aa61657e779352) Compare: https://github.com/openssl/openssl/compare/d6e3a2c15929...8bb9fecf6341