Utilities from the general purpose cryptography library with TLS implementation
Go to file
Dmitry Belyavskiy 3046144e8e In FIPS mode when neither FIPS provider nor FIPS provider configuration is
present, OpenSSL silently falls back to the default provider.

Resolves: RHEL-239862
2026-08-13 11:49:55 +02:00
.fmf Add interop rpm-tmt-tests 2023-05-24 15:41:56 +00:00
plans Fix for plan names to import 2025-07-04 13:40:25 +02:00
.gitignore Rebase to 3.5.7 2026-06-12 13:01:11 +02:00
0001-RH-Aarch64-and-ppc64le-use-lib64.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0002-Add-a-separate-config-file-to-use-for-rpm-installs.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0003-RH-Do-not-install-html-docs.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0004-RH-apps-ca-fix-md-option-help-text.patch-DROP.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0005-RH-Disable-signature-verification-with-bad-digests-R.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0006-RH-Add-support-for-PROFILE-SYSTEM-system-default-cip.patch Rebase to 3.5.7 2026-06-12 13:01:11 +02:00
0007-RH-Add-FIPS_mode-compatibility-macro.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0008-RH-Add-Kernel-FIPS-mode-flag-support-FIXSTYLE.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0009-RH-Drop-weak-curve-definitions-RENAMED-SQUASHED.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0010-RH-Disable-explicit-ec-curves.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0011-RH-skipped-tests-EC-curves.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0012-RH-skip-quic-pairwise.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0013-RH-version-aliasing.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0014-RH-Export-two-symbols-for-OPENSSL_str-n-casecmp.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0015-RH-TMP-KTLS-test-skip.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0016-RH-Allow-disabling-of-SHA1-signatures.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0017-FIPS-Red-Hat-s-FIPS-module-name-and-version.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0018-FIPS-disable-fipsinstall.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0019-FIPS-Force-fips-provider-on.patch In FIPS mode when neither FIPS provider nor FIPS provider configuration is 2026-08-13 11:49:55 +02:00
0020-FIPS-INTEG-CHECK-Embed-hmac-in-fips.so-NOTE.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0021-FIPS-INTEG-CHECK-Add-script-to-hmac-ify-fips.so.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0022-FIPS-INTEG-CHECK-Execute-KATS-before-HMAC-REVIEW.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0023-FIPS-RSA-encrypt-limits-REVIEW.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0024-FIPS-RSA-PCTs.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0025-FIPS-RSA-encapsulate-limits.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0026-FIPS-RSA-Disallow-SHAKE-in-OAEP-and-PSS.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0027-FIPS-RSA-size-mode-restrictions.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0028-FIPS-RSA-Mark-x931-as-not-approved-by-default.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0029-FIPS-RSA-Remove-X9.31-padding-signatures-tests.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0030-FIPS-RSA-NEEDS-REWORK-FIPS-Use-OAEP-in-KATs-support-.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0031-FIPS-Deny-SHA-1-signature-verification.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0032-FIPS-RAND-FIPS-140-3-DRBG-NEEDS-REVIEW.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0033-FIPS-RAND-Forbid-truncated-hashes-SHA-3.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0034-FIPS-PBKDF2-Set-minimum-password-length.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0035-FIPS-DH-PCT.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0036-FIPS-DH-Disable-FIPS-186-4-type-parameters.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0037-FIPS-TLS-Enforce-EMS-in-TLS-1.2-NOTE.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0038-FIPS-CMS-Set-default-padding-to-OAEP.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0039-FIPS-PKCS12-PBMAC1-defaults.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0040-FIPS-Fix-encoder-decoder-negative-test.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0041-FIPS-EC-DH-DSA-PCTs.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0042-FIPS-EC-disable-weak-curves.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0043-FIPS-NO-DSA-Support.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0044-FIPS-NO-DES-support.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0045-FIPS-NO-Kmac.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0046-FIPS-Fix-some-tests-due-to-our-versioning-change.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0047-Current-Rebase-status.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0048-FIPS-KDF-key-lenght-errors.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0049-FIPS-fix-disallowed-digests-tests.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0050-Make-openssl-speed-run-in-FIPS-mode.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0051-Backport-upstream-27483-for-PKCS11-needs.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0052-Red-Hat-9-FIPS-indicator-defines.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0053-Allow-hybrid-MLKEM-in-FIPS-mode.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0054-Temporarily-disable-SLH-DSA-FIPS-self-tests.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0055-Add-a-define-to-disable-symver-attributes.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0056-Add-targets-to-skip-build-of-non-installable-program.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0057-Disable-RSA-PKCS1.5-FIPS-POST-not-relevant-for-RHEL.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
0058-asn1_d2i_read_bio_EOF.patch asn1: Do not raise NOT_ENOUGH_DATA at object boundary 2026-07-07 21:28:21 +02:00
0100-RHEL9-Allow-SHA1-in-seclevel-2-if-rh-allow-sha1-signatures.patch Rebase to 3.5.7 2026-06-12 13:01:11 +02:00
0101-FIPS-enable-pkcs12-mac.patch Rebase to OpenSSL 3.5.5 2026-01-28 14:20:32 +01:00
ci.fmf plans: migrate gating to fmf format 2025-04-16 18:20:25 +00:00
configuration-prefix.h Rebase to OpenSSL version 3.0.0 2021-04-12 00:34:30 +02:00
configuration-switch.h Rebase to OpenSSL version 3.0.0 2021-04-12 00:34:30 +02:00
fips-hmacify.sh Rebasing OpenSSL to 3.5 2025-04-16 14:34:22 +02:00
gating.yaml Fix for plan names to import 2025-07-04 13:40:25 +02:00
genpatches Rebase to OpenSSL version 3.0.0 2021-04-12 00:34:30 +02:00
make-dummy-cert RHEL 9.0.0 Alpha bootstrap 2020-10-15 22:27:53 +02:00
openssl.spec In FIPS mode when neither FIPS provider nor FIPS provider configuration is 2026-08-13 11:49:55 +02:00
renew-dummy-cert RHEL 9.0.0 Alpha bootstrap 2020-10-15 22:27:53 +02:00
rpminspect.yaml Make rpminspect happy 2021-12-10 14:19:15 +01:00
sources Rebase to 3.5.7 2026-06-12 13:01:11 +02:00