[openssl/openssl] bc5d95: sslapi: use correct fipsmodule.cnf

Pauli noreply at github.com
Fri Apr 21 16:05:42 UTC 2023


  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: bc5d9502c5f3c726e42ef72263a4076fd48300d6
      https://github.com/openssl/openssl/commit/bc5d9502c5f3c726e42ef72263a4076fd48300d6
  Author: Pauli <pauli at openssl.org>
  Date:   2023-04-21 (Fri, 21 Apr 2023)

  Changed paths:
    M test/recipes/90-test_sslapi.t

  Log Message:
  -----------
  sslapi: use correct fipsmodule.cnf

The SSL API tests copies fipsmodule.cnf and modifies it.  Unfortunately, it
grabbed the wrong instance of this file.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)


  Commit: cf3d5c2fbaf734731b1ccbd3a84e21eeb6d0f30d
      https://github.com/openssl/openssl/commit/cf3d5c2fbaf734731b1ccbd3a84e21eeb6d0f30d
  Author: Pauli <pauli at openssl.org>
  Date:   2023-04-21 (Fri, 21 Apr 2023)

  Changed paths:
    M test/recipes/30-test_evp_data/evprand.txt

  Log Message:
  -----------
  test: update evprand tests in line with pedantic FIPS policy

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)


  Commit: e07999369a13a29243f34cbd5d24281783984299
      https://github.com/openssl/openssl/commit/e07999369a13a29243f34cbd5d24281783984299
  Author: Pauli <pauli at openssl.org>
  Date:   2023-04-21 (Fri, 21 Apr 2023)

  Changed paths:
    M test/recipes/30-test_evp_data/evpkdf_tls12_prf.txt

  Log Message:
  -----------
  test: update TLS PDF tests in line with pedantic FIPS policy

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)


  Commit: 4454c20f026bb47f158ea05c207f143c81d674d8
      https://github.com/openssl/openssl/commit/4454c20f026bb47f158ea05c207f143c81d674d8
  Author: Pauli <pauli at openssl.org>
  Date:   2023-04-21 (Fri, 21 Apr 2023)

  Changed paths:
    M test/helpers/ssl_test_ctx.c
    M test/helpers/ssl_test_ctx.h
    M test/ssl-tests/30-extended-master-secret.cnf
    M test/ssl-tests/30-extended-master-secret.cnf.in
    M test/ssl_test.c

  Log Message:
  -----------
  test: update ssl_new tests in line with pedantic FIPS policy

Add a new option to the `test' section of SSL test data structure.
This contains a space separated list of version checks, all of which must
pass.

Note that the version checks are as they as because:

- 3.1.0 doesn't have mandatory EMS support, so it can run the old tests.
- 3.1.1 (& later) will have mandatory EMS support, so they can't run them.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)


  Commit: c04e78f0c69201226430fed14c291c281da47f2d
      https://github.com/openssl/openssl/commit/c04e78f0c69201226430fed14c291c281da47f2d
  Author: Pauli <pauli at openssl.org>
  Date:   2023-04-21 (Fri, 21 Apr 2023)

  Changed paths:
    M test/recipes/00-prep_fipsmodule_cnf.t
    M util/mk-fipsmodule-cnf.pl

  Log Message:
  -----------
  fips: setup the FIPS provider in pendantic mode for testing

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)


Compare: https://github.com/openssl/openssl/compare/3ac96c8f7156...c04e78f0c692


More information about the openssl-commits mailing list