3413ff9700
Upgrade to version 1.1.1h
...
Signed-off-by: Sahana Prasad <sahana@redhat.com>
2020-11-09 10:41:15 +01:00
261f10a200
Do not ship in main package manuals (or aliases) to tools from perl subpackage
2020-10-23 10:06:51 +02:00
7ae2c9cd85
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-07-28 12:48:57 +00:00
a75e581407
Use make macros
...
https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
2020-07-21 20:31:48 +00:00
067d5800f2
Additional FIPS mode check for EC key generation
2020-07-20 14:51:05 +02:00
04d5ef4d72
Further changes for SP 800-56A rev3 requirements
2020-07-17 12:41:39 +02:00
7f27ca925c
Drop long ago obsolete part of the FIPS patch
2020-06-23 15:55:16 +02:00
f023424321
Rewire FIPS_drbg API to use the RAND_DRBG
2020-06-22 13:43:12 +02:00
ef93cf994d
SHA1 is allowed in @SECLEVEL=2 only if allowed by TLS SigAlgs configuration
...
Also some small TLS protocol fixes/changes:
Disallow dropping Extended Master Secret extension on renegotiation
Return alert from s_server if ALPN protocol does not match
2020-06-05 17:39:16 +02:00
b9c80ecf85
Add FIPS selftest for PBKDF2 and KBKDF
...
Also more adjustments to the FIPS DH handling
2020-06-03 16:30:12 +02:00
9833eff277
Use the well known DH groups in TLS
2020-05-26 09:28:42 +02:00
8746bcba4c
Allow only well known DH groups in the FIPS mode
2020-05-25 18:52:45 +02:00
7396eb055e
Re-apply change from -2 now we have fixed nosync to work with it
2020-05-21 13:04:18 -07:00
6e23655506
Re-apply "FIPS module installed state definition is modified"
...
This reverts commit 1bc9545b3889a24d69fc
2020-05-21 13:01:54 -07:00
87eaf879ac
Revert the change from -2 as it seems to cause segfaults
2020-05-19 18:35:16 -07:00
1bc9545b38
Revert "FIPS module installed state definition is modified"
...
This reverts commit 89a24d69fc
2020-05-19 18:33:30 -07:00
1e6a98d9e9
pull some fixes and improvements from RHEL-8
2020-05-18 13:26:53 +02:00
d902645d90
Unused patch dropped
2020-05-18 13:13:56 +02:00
89a24d69fc
FIPS module installed state definition is modified
2020-05-15 17:45:44 +02:00
0f4ce87941
Fedora CI: Test with the "main" Python version
...
See https://src.fedoraproject.org/tests/python/pull-request/21
2020-04-28 19:01:56 +00:00
5888d1863e
update to the 1.1.1g release
2020-04-23 13:47:52 +02:00
5004ccfb25
update to the 1.1.1f release
2020-04-07 16:50:53 +02:00
ea310218f3
revert the unexpected EOF error reporting change
...
it is too disruptive for the stable release branch
2020-03-26 15:14:08 +01:00
c9936c55c2
Additional perl module buildrequires
2020-03-20 13:30:41 +01:00
30d45eb047
Add BuildRequires perl(FindBin)
2020-03-20 12:44:34 +01:00
c11b71fd2f
update to the 1.1.1e release
...
add selftest of the RAND_DRBG implementation
fix incorrect error return value from FIPS_selftest_dsa
2020-03-19 17:44:25 +01:00
c77593a912
Intel CET patch - also add CFI fixes to sync with upstream
2020-02-17 12:05:57 +01:00
b9b156fb97
apply Intel CET support patches by hjl ( #1788699 )
2020-02-17 11:54:47 +01:00
d742997a1e
Fix incorrect error return value from FIPS_selftest_dsa()
2020-02-12 17:03:11 +01:00
898af7893c
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2020-01-29 20:25:04 +00:00
b8a97dc1d8
allow zero length parameters in KDF_CTX_ctrl()
2019-11-21 14:49:21 +01:00
0536b721ef
backport of SSKDF from master
2019-11-14 16:13:49 +01:00
266efa3055
backport of KBKDF and KRB5KDF from master
2019-11-13 13:43:05 +01:00
dc9d5caf5e
KBKDF for Kerberos 5
2019-11-12 16:38:11 +01:00
f1c4ba61a3
Multiple fixes
...
re-enable the stitched AES-CBC-SHA implementations
make AES-GCM work in FIPS mode again
enable TLS-1.2 AES-CCM ciphers in FIPS mode
fix openssl speed errors in FIPS mode
2019-10-03 17:43:23 +02:00
10c30b2322
Re-add one hunk of the fips patch accidentally dropped in the rebase.
2019-09-27 08:36:50 +02:00
f6a62c4c2c
update to the 1.1.1d release
2019-09-13 17:25:44 +02:00
c44b3f96fe
Bump release correctly
2019-09-06 17:18:46 +02:00
45ebb7fdc2
upstream fix for status request extension non-compliance ( #1737471 )
2019-09-06 17:02:18 +02:00
dba4c3b578
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
...
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2019-07-25 23:35:44 +00:00
b395c9afd4
Fedora CI: Python: readd test_asyncio
2019-06-25 22:23:49 +02:00
8419f769c7
Do not try to use EC groups disallowed in FIPS mode in TLS
...
Also fix Valgrind regression with constant-time code
2019-06-24 15:13:12 +02:00
a71f5ae7ab
add upstream patch to defer sending KeyUpdate
...
(after pending writes are complete)
2019-06-03 16:05:45 +02:00
4784e45765
fix use of uninitialized memory
2019-05-30 11:55:39 +02:00
31d61b19d5
update to the 1.1.1c release
2019-05-29 17:23:31 +02:00
b3060e5f2d
Another attempt at the AES-CCM regression fix
2019-05-10 16:27:24 +02:00
22a821356e
Fix two small regressions
...
Change the ts application default hash to SHA256
2019-05-10 14:35:26 +02:00
e18dcc63f4
FIPS compliance fixes
2019-05-07 10:30:26 +02:00
65a11b2a90
Revert part of the s390x update
2019-05-06 11:58:45 +02:00
569a3cb917
add S390x chacha20-poly1305 assembler support from master branch
2019-05-06 11:07:12 +02:00
Sahana Prasad
Jakub Jelen
Fedora Release Engineering
Tom Stellard
Tomas Mraz
Adam Williamson
Miro Hrončok