Fixes related to separation of DH and DHX types
authorShane Lontis <shane.lontis@oracle.com>
Thu, 15 Apr 2021 08:25:17 +0000 (18:25 +1000)
committerTomas Mraz <tomas@openssl.org>
Mon, 26 Apr 2021 17:52:11 +0000 (19:52 +0200)
commitf1ffaaeece5efb7d2f4859a59e3164edf9b4b769
treea125dfda9f44ef0702f8bae025ccec829eb33652
parent6c9bc258d2e9e7b500236a1c696da1f384f0b907
Fixes related to separation of DH and DHX types

Fix dh_rfc5114 option in genpkey.

Fixes #14145
Fixes #13956
Fixes #13952
Fixes #13871
Fixes #14054
Fixes #14444

Updated documentation for app to indicate what options are available for
DH and DHX keys.

DH and DHX now have different keymanager gen_set_params() methods.

Added CHANGES entry to indicate the breaking change.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14883)
18 files changed:
CHANGES.md
crypto/dh/dh_pmeth.c
crypto/evp/ctrl_params_translate.c
crypto/evp/dh_support.c
crypto/evp/p_lib.c
crypto/ffc/ffc_dh.c
doc/man1/openssl-genpkey.pod.in
doc/man7/EVP_PKEY-DH.pod
doc/man7/EVP_PKEY-FFC.pod
include/crypto/dh.h
providers/implementations/keymgmt/dh_kmgmt.c
test/recipes/15-test_gendh.t
test/recipes/15-test_gendhparam.t [new file with mode: 0644]
test/recipes/20-test_dhparam_check.t
test/recipes/20-test_dhparam_check_data/valid/dh_5114_1.pem [moved from test/recipes/20-test_dhparam_check_data/invalid/dh5114_1_pkcs3.pem with 100% similarity]
test/recipes/20-test_dhparam_check_data/valid/dh_5114_2.pem [moved from test/recipes/20-test_dhparam_check_data/invalid/dh5114_2_pkcs3.pem with 100% similarity]
test/recipes/20-test_dhparam_check_data/valid/dh_5114_3.pem [moved from test/recipes/20-test_dhparam_check_data/invalid/dh5114_3_pkcs3.pem with 100% similarity]
test/recipes/20-test_dhparam_check_data/valid/dhx_5114_2.pem [new file with mode: 0644]