Fix ecdsa digest setting code to match dsa.
authorShane Lontis <shane.lontis@oracle.com>
Thu, 26 Nov 2020 05:03:10 +0000 (15:03 +1000)
committerShane Lontis <shane.lontis@oracle.com>
Thu, 3 Dec 2020 22:33:27 +0000 (08:33 +1000)
commit283320281bda4e1b5cfaedb0db723a96325aabb9
tree245e115891f1877e8be65adb8b2669fadd6eb96a
parentddfd7182cf2b7e69669cf4fd3471a37d09af4ea1
Fix ecdsa digest setting code to match dsa.

Fixes #13422

ecdsa_set_ctx_params() was not setting the digest correctly. The side
effect noted was that the check for sha1 when signing was not being
done in fips mode.

Also fixed the dupctx() so that propq is deep copied.
The usage of the variable 'flag_allow_md' was also copied from the dsa code.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/13520)
providers/implementations/signature/ecdsa.c
test/recipes/30-test_evp_data/evppkey_ecdsa.txt