Add option to FIPS module to enforce EMS check during KDF TLS1_PRF.
authorslontis <shane.lontis@oracle.com>
Wed, 8 Feb 2023 07:22:43 +0000 (17:22 +1000)
committerTomas Mraz <tomas@openssl.org>
Tue, 7 Mar 2023 17:24:45 +0000 (18:24 +0100)
commit50ea5cdcb735916591e35a04c1f5a659bf253ddc
tree8cdfdf314aa83a346256e15dcf36a18c8e931bea
parentde13699370183ab565f548267afa57e25a921ca9
Add option to FIPS module to enforce EMS check during KDF TLS1_PRF.

Fixes #19989

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20241)
18 files changed:
CHANGES.md
apps/fipsinstall.c
crypto/err/openssl.txt
doc/man1/openssl-fipsinstall.pod.in
doc/man7/OSSL_PROVIDER-FIPS.pod
include/openssl/core_names.h
include/openssl/fips_names.h
include/openssl/proverr.h
providers/common/include/prov/proverr.h
providers/common/include/prov/securitycheck.h
providers/common/provider_err.c
providers/common/securitycheck_default.c
providers/common/securitycheck_fips.c
providers/fips/fipsprov.c
providers/implementations/kdfs/tls1_prf.c
test/recipes/03-test_fipsinstall.t
test/recipes/90-test_sslapi.t
test/sslapitest.c