eabdullin
ef76bdc634
Merge branch 'c10s' into a10s
2025-02-04 13:52:58 +03:00
Dmitry Belyavskiy
34e41ff200
Get rid of checking /etc/crypto-policies/back-ends/openssl.config
...
Resolves: RHEL-71132
2025-01-24 17:39:21 +01:00
Dmitry Belyavskiy
a4086ec177
Locally configured providers should not interfere with openssl build-time tests
...
Resolves: RHEL-76182
2025-01-24 17:36:21 +01:00
Dmitry Belyavskiy
e5573d1b8d
Ensure correct fips.so checksum calculation
...
Resolves: RHEL-73170
2025-01-24 17:36:21 +01:00
Dmitry Belyavskiy
9a7c320d2c
Print key exchange group for hybrid PQC
...
Resolves: RHEL-66163
2025-01-24 17:36:21 +01:00
Dmitry Belyavskiy
bdb28e8ff0
Fix pkcs12 command line segfault
...
Resolves: RHEL-70878
2025-01-24 17:36:14 +01:00
Dmitry Belyavskiy
5fae31daba
- Fix providers no_cache behavior
...
Resolves: RHEL-71903
2025-01-24 17:34:42 +01:00
fee9e80345
Merge branch 'c10s' into a10s
2024-12-06 16:37:58 +03:00
Troy Dawson
8b5d84e945
Bump release for October 2024 mass rebuild:
...
Resolves: RHEL-64018
2024-10-29 08:53:09 -07:00
994352a698
Merge branch 'c10s' into a10s
2024-10-21 11:59:34 +03:00
Dmitry Belyavskiy
936c0664b3
Ship dummy(empty) openssl/engine.h
...
Resolves: RHEL-58178
2024-10-17 17:11:29 +02:00
00066ba275
Merge branch 'c10s' into a10s
2024-09-09 11:55:14 +03:00
Dmitry Belyavskiy
edf5bf79a4
Fix CVE-2024-6119: Possible denial of service in X.509 name checks
...
Resolves: RHEL-55303
2024-09-04 11:47:44 +02:00
16d731ff99
Merge branch 'c10s' into a10s
2024-09-02 23:25:52 +03:00
Clemens Lang
f3cb03b52a
Fix CVE-2024-5535
...
The first patch caused a QUIC test to fail, so backport the entire
series, which looks reasonable and adds good additional safeguards and
checks.
Resolves: RHEL-45692
Signed-off-by: Clemens Lang <cllang@redhat.com>
2024-08-21 17:09:28 +02:00
Dmitry Belyavskiy
57fda30988
Resolve SAST package scan results
...
Resolves: RHEL-37561
2024-08-14 19:25:12 +02:00
Dmitry Belyavskiy
fdd1e62fc4
Speedup SSL_add_{file,dir}_cert_subjects_to_stack
...
Resolves: RHEL-54232
2024-08-14 13:03:42 +02:00
Dmitry Belyavskiy
83382cc2a0
Enable KTLS, temporary disable KTLS tests
...
Related: RHEL-47335
2024-08-14 13:03:42 +02:00
Dmitry Belyavskiy
e6422e7346
Fix typo in the patch numeration
...
Related: RHEL-41261
2024-08-14 13:03:42 +02:00
Dmitry Belyavskiy
656cb62647
Support key encapsulation/decapsulation in openssl pkeyutl command
...
Resolves: RHEL-54156
2024-08-14 11:43:38 +02:00
Dmitry Belyavskiy
8fc2d48423
Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
...
Related: RHEL-36659
2024-08-14 11:36:06 +02:00
Dmitry Belyavskiy
299b43d420
An interface to create PKCS #12 files in FIPS compliant way
...
Related: RHEL-36659
2024-08-09 13:27:18 +00:00
George Pantelakis
a44bf0f715
Fix the gating test names
2024-08-07 15:40:45 +02:00
Dmitry Belyavskiy
ce2e7dc60e
An interface to create PKCS #12 files in FIPS compliant way
...
Resolves: RHEL-36659
2024-08-07 10:57:04 +02:00
2954111db7
Merge branch 'c10s' into a10s
2024-07-26 15:45:51 +03:00
b9e5116278
- Redefine sslarch for x86_64_v2 arch
2024-07-26 15:43:42 +03:00
Dmitry Belyavskiy
7d3d9af0c8
SHA-1 signature shouldn't work in normal mode
...
Resolves: RHEL-36677
2024-07-10 11:43:37 +02:00
Dmitry Belyavskiy
09b4e34fcf
Disallow SHA1 at SECLEVEL2 in OpenSSL
...
Resolves: RHEL-39962
2024-07-10 10:50:30 +02:00
Dmitry Belyavskiy
6084652840
Do not install ENGINE headers, man pages, and define OPENSSL_NO_ENGINE
...
Resolves: RHEL-45704
2024-07-02 14:51:09 +02:00
George Pantelakis
68e0354892
configure basic gating on RHEL-10
2024-07-01 14:15:53 +00:00
Daiki Ueno
dfb3583fef
Replace HKDF backward compatibility patch with the official one
...
Related: RHEL-41261
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-07-01 09:36:26 +09:00
Troy Dawson
e82e52bbae
Bump release for June 2024 mass rebuild
2024-06-24 09:06:12 -07:00
Daiki Ueno
9eb261ba85
Add workaround for EVP_PKEY_CTX_add1_hkdf_info with older providers
...
Resolves: RHEL-41261
Signed-off-by: Daiki Ueno <dueno@redhat.com>
2024-06-15 10:04:02 +09:00
Dmitry Belyavskiy
1d9e9ba818
Build openssl with no-atexit
...
Resolves: RHEL-40408
2024-06-12 13:12:26 +02:00
Dmitry Belyavskiy
3ae0078fd9
Rebase to OpenSSL 3.2.2.
...
Related: RHEL-31762
2024-06-05 18:56:27 +02:00
Sahana Prasad
c948b4d252
Bump the version
...
Related: RHEL-31762
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2024-06-05 11:03:24 +02:00
Sahana Prasad
d508cbed93
Synchronize patches from c9s and Fedora
...
Resolves: RHEL-31762
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2024-06-05 09:32:43 +02:00
Sahana Prasad
96988f0060
temporarily disable ktls to unblock c10s builds
...
Resolves: RHEL-25259
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2024-02-13 13:13:42 +01:00
Sahana Prasad
4334bc837f
Fix version aliasing issue
...
https://github.com/openssl/openssl/issues/23534
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2024-02-09 21:17:11 +01:00
Sahana Prasad
f4c397c598
Rebase to new upstream release 3.2.1
...
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2024-02-08 13:42:51 +01:00
Fedora Release Engineering
2a7a4d9e50
Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
2024-01-25 11:30:17 +00:00
Fedora Release Engineering
3cb13195fa
Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
2024-01-21 11:22:20 +00:00
Dmitry Belyavskiy
84795a9247
We don't want to ship openssl-pkcs11 in RHEL10/Centos 10
2024-01-10 18:15:14 +01:00
Sahana Prasad
e331fc1326
Rebase to upstream version 3.1.4
...
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2023-10-26 12:29:21 +02:00
Dmitry Belyavskiy
5c67b5adc3
Slightly rearranged the patches we have
2023-08-31 17:23:53 +02:00
Dmitry Belyavskiy
e52367af47
Synchronize patches from CentOS stream
2023-08-22 16:39:12 +02:00
Dmitry Belyavskiy
c73a6ab930
migrated to SPDX license
2023-08-04 13:55:50 +02:00
Sahana Prasad
1eb7adc383
Adding changes to patch files from source-git sync
...
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2023-07-31 10:04:55 +02:00
Sahana Prasad
9409bc7044
Rebase to upstream release 3.1.1
...
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2023-07-28 15:26:00 +02:00
Dmitry Belyavskiy
2b0eda88de
Forbid custom EC more completely
...
Resolves: rhbz#2223953
2023-07-27 12:48:59 +02:00
