Commit Graph

8 Commits

Author SHA1 Message Date
Clemens Lang 76fcfbb963 Update expired certificates used in the testsuite
Backport patches from upstream that replace the expired certificates
with newer ones.

(cherry picked from RHEL 8 openssl commit bcada907b752790fee9d918323db086141e2a05a)

Resolves: RHEL-5297
2023-09-21 13:45:35 +02:00
Clemens Lang e3dbb5a483 Disable FIPS mode
FIPS mode does not work on RHEL-9 since the selftests fail. OpenSSL 1.1
in FIPS mode will not be supported on RHEL-9, so disable it. Apply
a minimal patch that keeps the library in the same state otherwise to
avoid problems with binary compatibility.

Resolves: rhbz#2013669
Signed-off-by: Clemens Lang <cllang@redhat.com>
2022-05-30 18:27:34 +02:00
Clemens Lang 7618fdaea8 Fix CVE-2022-0778: infinite loop in BN_mod_sqrt()
Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable
when parsing certificates.

Resolves: rhbz#2063148
Signed-off-by: Clemens Lang <cllang@redhat.com>
2022-05-30 16:46:01 +02:00
Sahana Prasad 300d2b5616 Updates the conf file to openssl11.cnf
Resolves: rhbz#1947584, rhbz#2003123
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2021-10-05 13:22:28 +02:00
Sahana Prasad 2d26967a35 - Removes support for building FIPS mode binaries for the
compat libraries
- Ships openssl11.cnf as the configuration file.
Resolves: rhbz#1993795
Related: rhbz#1947584
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2021-08-16 14:45:34 +00:00
Stanislav Zidek a77136b129 add gating configuration 2021-08-11 15:24:12 +02:00
Sahana Prasad 9056ace2a6 Adds compat-openssl11 files - this package provides openssl 1.1.1 libraries for backward compatibility
Resolves: rhbz#1947584
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2021-04-08 20:31:25 +02:00
Release Configuration Management 92b58b7946 New branch setup 2021-04-06 18:42:36 +00:00