Swap to FIPS186-2 DSA generation outside of the FIPS module
authorMatt Caswell <matt@openssl.org>
Fri, 23 Oct 2020 11:35:00 +0000 (12:35 +0100)
committerMatt Caswell <matt@openssl.org>
Wed, 18 Nov 2020 14:54:18 +0000 (14:54 +0000)
commitf1d6670840b08104646713f464a6ef42e2cf1c2a
tree5548329237ea84a4a4f67dfce768b708f2d62056
parentc2bd8d27835186b9fc4c7e4e12a3f6d81bac0544
Swap to FIPS186-2 DSA generation outside of the FIPS module

Inside the FIPS module we continue to use FIPS186-4. We prefer FIPS186-2
in the default provider for backwards compatibility reasons.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13228)
doc/man3/EVP_PKEY_CTX_ctrl.pod
providers/implementations/keymgmt/build.info
providers/implementations/keymgmt/dsa_kmgmt.c
test/dsatest.c
test/recipes/15-test_gendsa.t