[openssl/openssl] ae3c30: APPS: dhparam: Support setting properties

[Clemens Lang]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: ae3c30acac17271693e91dcae42c804cd96e8f93
      https://github.com/openssl/openssl/commit/ae3c30acac17271693e91dcae42c804cd96e8f93
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M apps/dhparam.c
    M test/recipes/20-test_dhparam.t

  Log Message:
  -----------
  APPS: dhparam: Support setting properties

The -provider and -propquery options did not work on dhparam. Fix this
and add tests that check that operations that would usually fail with
the FIPS provider work when run with

| -provider default -propquery '?fips!=yes'

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed the same problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)


  Commit: 2b8f687d7627a4b15bba6a820825944185980376
      https://github.com/openssl/openssl/commit/2b8f687d7627a4b15bba6a820825944185980376
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M apps/ecparam.c
    M test/recipes/15-test_ecparam.t

  Log Message:
  -----------
  APPS: ecparam: Support setting properties

The -provider and -propquery options did not work on ecparam. Fix this
and add tests that check that operations that would usually fail with
the FIPS provider work when run with

| -provider default -propquery '?fips!=yes'

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed the same problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)


  Commit: 0185538799803a1a98823f42ac2402ede04f56da
      https://github.com/openssl/openssl/commit/0185538799803a1a98823f42ac2402ede04f56da
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M apps/pkeyparam.c
    M test/recipes/15-test_ecparam.t

  Log Message:
  -----------
  APPS: pkeyparam: Support setting properties

The -provider and -propquery options did not work on pkeyparam. Fix this
and add tests that check that operations that would usually fail with
the FIPS provider work when run with

| -provider default -propquery '?fips!=yes'

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed the same problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)


  Commit: 33b9bb45a4d463052aef763cc7c64c91384d4249
      https://github.com/openssl/openssl/commit/33b9bb45a4d463052aef763cc7c64c91384d4249
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M test/recipes/15-test_ec.t
    A test/testec-p112r1.pem

  Log Message:
  -----------
  TEST: Check property query support of apps/pkey

Property query support works correctly for apps/pkey, but there does not
seem to be a test for it yet, so add one.

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed a similar problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)


  Commit: 653a7706781ebbe8a6a4b84d29b39d001c395ffe
      https://github.com/openssl/openssl/commit/653a7706781ebbe8a6a4b84d29b39d001c395ffe
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M apps/dgst.c
    M test/recipes/20-test_cli_fips.t

  Log Message:
  -----------
  APPS: dgst: Support properties when signing

The -provider and -propquery options did not work on dgst when using it
for signing or signature verification (including HMACs). Fix this and
add tests that check that operations that would usually fail with the
FIPS provider work when run with

| -provider default -propquery '?fips!=yes'

Additionally, modify the behavior of dgst -list to also use the current
library context and property query. This reduces the output below the
headline "Supported digests" to a list of the digest algorithms that
will actually work with the current configuration, which is closer to
what users probably expect with this headline.

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed the same problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)


  Commit: b2ccfd81025fa115f1138123b9aa61657e779352
      https://github.com/openssl/openssl/commit/b2ccfd81025fa115f1138123b9aa61657e779352
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M apps/genrsa.c
    M test/recipes/15-test_genrsa.t

  Log Message:
  -----------
  APPS: genrsa: Support setting properties

The -provider and -propquery options did not work on genrsa. Fix this
and add a test that checks that operations that would usually fail with
the FIPS provider work when run with

| -provider default -propquery '?fips!=yes'

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed the same problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)


Compare: https://github.com/openssl/openssl/compare/45479dcee167...b2ccfd81025f