Make sure all BIGNUM operations work within the FIPS provider
authorMatt Caswell <matt@openssl.org>
Thu, 4 Jul 2019 14:41:17 +0000 (15:41 +0100)
committerMatt Caswell <matt@openssl.org>
Mon, 15 Jul 2019 10:03:44 +0000 (11:03 +0100)
commit2934be91349b365f1350fe9c30e4263be653c0f6
tree926db8537c403e61baf0c228800fb88bcec37005
parent753149d97f8474ff8745a66175b8e4a19fe50743
Make sure all BIGNUM operations work within the FIPS provider

The FIPS provider does not have a default OPENSSL_CTX so, where
necessary, we need to ensure we can always access an explicit
OPENSSL_CTX. We remove functions from the FIPS provider that use
the default OPENSSL_CTX, and fixup some places which were using
those removed functions.

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/9310)
14 files changed:
crypto/bn/bn_blind.c
crypto/bn/bn_ctx.c
crypto/bn/bn_err.c
crypto/bn/bn_gf2m.c
crypto/bn/bn_prime.c
crypto/bn/bn_rand.c
crypto/bn/bn_rsa_fips186_4.c
crypto/bn/bn_sqrt.c
crypto/bn/bn_x931p.c
crypto/err/openssl.txt
doc/man3/BN_generate_prime.pod
include/openssl/bn.h
include/openssl/bnerr.h
util/libcrypto.num