Backport patches from upstream that replace the expired certificates
with newer ones.
(cherry picked from RHEL 8 openssl commit bcada907b752790fee9d918323db086141e2a05a)
Resolves: RHEL-5297
FIPS mode does not work on RHEL-9 since the selftests fail. OpenSSL 1.1
in FIPS mode will not be supported on RHEL-9, so disable it. Apply
a minimal patch that keeps the library in the same state otherwise to
avoid problems with binary compatibility.
Resolves: rhbz#2013669
Signed-off-by: Clemens Lang <cllang@redhat.com>
Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable
when parsing certificates.
Resolves: rhbz#2063148
Signed-off-by: Clemens Lang <cllang@redhat.com>