/openssl-3.0.8-hobbled.tar.gz

  /openssl-3.0.8.tar.gz

  /openssl-3.1.1.tar.gz

  ---

   Configurations/unix-Makefile.tmpl | 2 +-

   1 file changed, 1 insertion(+), 1 deletion(-)

  diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl

  --- a/Configurations/unix-Makefile.tmpl

  +++ b/Configurations/unix-Makefile.tmpl

   uninstall_sw: uninstall_runtime uninstall_modules uninstall_engines uninstall_dev

  +install_docs: install_man_docs

   uninstall_docs: uninstall_man_docs uninstall_html_docs

  -- 

  From: rpm-build <rpm-build>

  Subject: [PATCH 16/46] 0033-FIPS-embed-hmac.patch

  Patch-name: 0033-FIPS-embed-hmac.patch

  Patch-id: 33

  Patch-status: |

  ---

   providers/fips/self_test.c            | 70 ++++++++++++++++++++++++---

   test/fipsmodule.cnf                   |  2 +

   create mode 100644 test/fipsmodule.cnf

  diff --git a/providers/fips/self_test.c b/providers/fips/self_test.c

  --- a/providers/fips/self_test.c

  +++ b/providers/fips/self_test.c

       return ok;

   }

   static int verify_integrity(OSSL_CORE_BIO *bio, OSSL_FUNC_BIO_read_ex_fn read_ex_cb,

                               unsigned char *expected, size_t expected_len,

                               OSSL_LIB_CTX *libctx, OSSL_SELF_TEST *ev,

       EVP_MAC *mac = NULL;

       EVP_MAC_CTX *ctx = NULL;

       OSSL_PARAM params[2], *p = params;

       mac = EVP_MAC_fetch(libctx, MAC_NAME, NULL);

       if (mac == NULL)

           goto err;

       if (!EVP_MAC_init(ctx, fixed_key, sizeof(fixed_key), params))

           goto err;

       if (!EVP_MAC_final(ctx, out, &out_len, sizeof(out)))

           goto err;

           goto err;

       ret = 1;

   err:

       OSSL_SELF_TEST_onend(ev, ret);

       EVP_MAC_CTX_free(ctx);

       EVP_MAC_free(mac);

       }

  -    if (st == NULL

           ERR_raise(ERR_LIB_PROV, PROV_R_MISSING_CONFIG_DATA);

           goto end;

       }

       if (ev == NULL)

           goto end;

       if (module_checksum == NULL) {

           ERR_raise(ERR_LIB_PROV, PROV_R_INVALID_CONFIG_DATA);

           goto end;

   end:

       EVP_RAND_free(testrand);

       OSSL_SELF_TEST_free(ev);

   # Compatible options for pedantic FIPS compliance

   my @pedantic_okay =

  diff --git a/test/recipes/30-test_defltfips.t b/test/recipes/30-test_defltfips.t

  --- a/test/recipes/30-test_defltfips.t

  +++ b/test/recipes/30-test_defltfips.t

  -my $no_fips = disabled('fips') || ($ENV{NO_FIPS} // 0);

  +my $no_fips = 1; #disabled('fips') || ($ENV{NO_FIPS} // 0);

  From: rpm-build <rpm-build>

  Patch-name: 0047-FIPS-early-KATS.patch

  Patch-id: 47

  Patch-status: |

  ---

   providers/fips/self_test.c | 22 ++++++++++------------

   1 file changed, 10 insertions(+), 12 deletions(-)

  diff --git a/providers/fips/self_test.c b/providers/fips/self_test.c

  --- a/providers/fips/self_test.c

  +++ b/providers/fips/self_test.c

       if (ev == NULL)

           goto end;

       module_checksum = fips_hmac_container;

       checksum_len = sizeof(fips_hmac_container);

           }

       }

  -    }

  -

       /* Verify that the RNG has been restored properly */

  -- 

  2.41.0

  From: rpm-build <rpm-build>

  Patch-name: 0079-RSA-PKCS15-implicit-rejection.patch

  Patch-id: 79

  Patch-status: |

  ---

   crypto/cms/cms_env.c                          |   7 +

   crypto/evp/ctrl_params_translate.c            |   6 +

   18 files changed, 962 insertions(+), 8 deletions(-)

  diff --git a/crypto/cms/cms_env.c b/crypto/cms/cms_env.c

  --- a/crypto/cms/cms_env.c

  +++ b/crypto/cms/cms_env.c

       if (!ossl_cms_env_asn1_ctrl(ri, 1))

           goto err;

                            ktri->encryptedKey->data,

                            ktri->encryptedKey->length) <= 0)

  diff --git a/crypto/evp/ctrl_params_translate.c b/crypto/evp/ctrl_params_translate.c

  --- a/crypto/evp/ctrl_params_translate.c

  +++ b/crypto/evp/ctrl_params_translate.c

         EVP_PKEY_CTRL_GET_RSA_OAEP_LABEL, NULL, NULL,

  +    { SET, EVP_PKEY_RSA, 0, EVP_PKEY_OP_TYPE_CRYPT,

  +      EVP_PKEY_CTRL_RSA_IMPLICIT_REJECTION, NULL,

    * ossl_rsa_padding_check_PKCS1_type_2_TLS() checks and removes the PKCS1 type 2

    * padding from a decrypted RSA message in a TLS signature. The result is stored

  diff --git a/crypto/rsa/rsa_pmeth.c b/crypto/rsa/rsa_pmeth.c

  --- a/crypto/rsa/rsa_pmeth.c

  +++ b/crypto/rsa/rsa_pmeth.c

  @@ -52,6 +52,8 @@ typedef struct {

       }

       *outlen = constant_time_select_s(constant_time_msb_s(ret), *outlen, ret);

       ret = constant_time_select_int(constant_time_msb(ret), ret, 1);

           *(unsigned char **)p2 = rctx->oaep_label;

           return rctx->oaep_labellen;

   =head1 RSA-PSS ALGORITHM

  diff --git a/doc/man1/openssl-rsautl.pod.in b/doc/man1/openssl-rsautl.pod.in

  --- a/doc/man1/openssl-rsautl.pod.in

  +++ b/doc/man1/openssl-rsautl.pod.in

  @@ -105,6 +105,11 @@ The padding to use: PKCS#1 v1.5 (the default), PKCS#1 OAEP,

                                               size_t tlen,

                                               const unsigned char *from,

  diff --git a/include/openssl/core_names.h b/include/openssl/core_names.h

  --- a/include/openssl/core_names.h

  +++ b/include/openssl/core_names.h

   #define OSSL_PKEY_PARAM_DIST_ID             "distid"

   #define OSSL_PKEY_PARAM_PUB_KEY             "pub"

   #define OSSL_PKEY_PARAM_PRIV_KEY            "priv"

   /* Diffie-Hellman/DSA Parameters */

   #define OSSL_PKEY_PARAM_FFC_P               "p"

   #define OSSL_ASYM_CIPHER_PARAM_OAEP_LABEL               "oaep-label"

   #define OSSL_ASYM_CIPHER_PARAM_TLS_CLIENT_VERSION       "tls-client-version"

   #define OSSL_ASYM_CIPHER_PARAM_TLS_NEGOTIATED_VERSION   "tls-negotiated-version"

  Summary: Utilities from the general purpose cryptography library with TLS implementation

  Name: openssl

  Epoch: 1

  Source: openssl-%{version}.tar.gz

  Source2: Makefile.certificate

  %ldconfig_scriptlets libs

  %changelog

  * Thu Aug 31 2023 Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.1.1-4

  - Drop duplicated patch and do some contamination