Add option to FIPS module to enforce EMS check during KDF TLS1_PRF.
authorslontis <shane.lontis@oracle.com>
Wed, 8 Feb 2023 07:22:43 +0000 (17:22 +1000)
committerTomas Mraz <tomas@openssl.org>
Tue, 7 Mar 2023 17:26:59 +0000 (18:26 +0100)
commit6a0a3fee222d7687c543bceaf245507674e66c58
tree102d67e993235d4cb0d8f88ac6b8b40e9a97e30e
parent5b2fe0ba65b37950742305684ad54abcba305e13
Add option to FIPS module to enforce EMS check during KDF TLS1_PRF.

Fixes #19989

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20241)

(cherry picked from commit 50ea5cdcb735916591e35a04c1f5a659bf253ddc)
18 files changed:
CHANGES.md
apps/fipsinstall.c
crypto/err/openssl.txt
doc/man1/openssl-fipsinstall.pod.in
doc/man7/OSSL_PROVIDER-FIPS.pod
include/openssl/core_names.h
include/openssl/fips_names.h
include/openssl/proverr.h
providers/common/include/prov/proverr.h
providers/common/include/prov/securitycheck.h
providers/common/provider_err.c
providers/common/securitycheck_default.c
providers/common/securitycheck_fips.c
providers/fips/fipsprov.c
providers/implementations/kdfs/tls1_prf.c
test/recipes/03-test_fipsinstall.t
test/recipes/90-test_sslapi.t
test/sslapitest.c