[openssl/openssl] 05c8bd: APPS: dhparam: Support setting properties

Wed Aug 17 07:34:11 UTC 2022

  Branch: refs/heads/openssl-3.0
  Home:   https://github.com/openssl/openssl
  Commit: 05c8bd1f35d07f1877860e671bfde51faf4b3483
      https://github.com/openssl/openssl/commit/05c8bd1f35d07f1877860e671bfde51faf4b3483
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M apps/dhparam.c
    M test/recipes/20-test_dhparam.t

  Log Message:
  -----------
  APPS: dhparam: Support setting properties

The -provider and -propquery options did not work on dhparam. Fix this
and add tests that check that operations that would usually fail with
the FIPS provider work when run with

| -provider default -propquery '?fips!=yes'

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed the same problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)

(cherry picked from commit ae3c30acac17271693e91dcae42c804cd96e8f93)

  Commit: 9bd968d42e77e2e7e00756cc7bef0817bf8322e1
      https://github.com/openssl/openssl/commit/9bd968d42e77e2e7e00756cc7bef0817bf8322e1
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M apps/ecparam.c
    M test/recipes/15-test_ecparam.t

  Log Message:
  -----------
  APPS: ecparam: Support setting properties

The -provider and -propquery options did not work on ecparam. Fix this
and add tests that check that operations that would usually fail with
the FIPS provider work when run with

| -provider default -propquery '?fips!=yes'

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed the same problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)

(cherry picked from commit 2b8f687d7627a4b15bba6a820825944185980376)

  Commit: be52cfec4974c47d8c5579928b774a43c9264883
      https://github.com/openssl/openssl/commit/be52cfec4974c47d8c5579928b774a43c9264883
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M apps/pkeyparam.c
    M test/recipes/15-test_ecparam.t

  Log Message:
  -----------
  APPS: pkeyparam: Support setting properties

The -provider and -propquery options did not work on pkeyparam. Fix this
and add tests that check that operations that would usually fail with
the FIPS provider work when run with

| -provider default -propquery '?fips!=yes'

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed the same problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)

(cherry picked from commit 0185538799803a1a98823f42ac2402ede04f56da)

  Commit: 9184cfcf661ad9338f652b0de4d5f38e7747381c
      https://github.com/openssl/openssl/commit/9184cfcf661ad9338f652b0de4d5f38e7747381c
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M test/recipes/15-test_ec.t
    A test/testec-p112r1.pem

  Log Message:
  -----------
  TEST: Check property query support of apps/pkey

Property query support works correctly for apps/pkey, but there does not
seem to be a test for it yet, so add one.

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed a similar problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)

(cherry picked from commit 33b9bb45a4d463052aef763cc7c64c91384d4249)

  Commit: 4fe6c2fdc80b11d6ec16c7a87ec46031d459e86b
      https://github.com/openssl/openssl/commit/4fe6c2fdc80b11d6ec16c7a87ec46031d459e86b
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M apps/dgst.c
    M test/recipes/20-test_cli_fips.t

  Log Message:
  -----------
  APPS: dgst: Support properties when signing

The -provider and -propquery options did not work on dgst when using it
for signing or signature verification (including HMACs). Fix this and
add tests that check that operations that would usually fail with the
FIPS provider work when run with

| -provider default -propquery '?fips!=yes'

Additionally, modify the behavior of dgst -list to also use the current
library context and property query. This reduces the output below the
headline "Supported digests" to a list of the digest algorithms that
will actually work with the current configuration, which is closer to
what users probably expect with this headline.

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed the same problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)

(cherry picked from commit 653a7706781ebbe8a6a4b84d29b39d001c395ffe)

  Commit: 8bb9fecf6341aad0a771bf585d9eea80ea6ac89d
      https://github.com/openssl/openssl/commit/8bb9fecf6341aad0a771bf585d9eea80ea6ac89d
  Author: Clemens Lang <cllang at redhat.com>
  Date:   2022-08-17 (Wed, 17 Aug 2022)

  Changed paths:
    M apps/genrsa.c
    M test/recipes/15-test_genrsa.t

  Log Message:
  -----------
  APPS: genrsa: Support setting properties

The -provider and -propquery options did not work on genrsa. Fix this
and add a test that checks that operations that would usually fail with
the FIPS provider work when run with

| -provider default -propquery '?fips!=yes'

See also 30b2c3592e8511b60d44f93eb657a1ecb3662c08, which previously
fixed the same problem in dsaparam and gendsa. See also the initial
report in https://bugzilla.redhat.com/show_bug.cgi?id=2094956.

Signed-off-by: Clemens Lang <cllang at redhat.com>

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit at gmail.com>
(Merged from https://github.com/openssl/openssl/pull/18717)

(cherry picked from commit b2ccfd81025fa115f1138123b9aa61657e779352)

Compare: https://github.com/openssl/openssl/compare/d6e3a2c15929...8bb9fecf6341