[openssl/openssl] 7c6577: CMP lib and app: add optional certProfile request ...

[Bernd Edlinger]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 7c6577ba9f5eb348476a53d822a4db6af0d36d36
      https://github.com/openssl/openssl/commit/7c6577ba9f5eb348476a53d822a4db6af0d36d36
  Author: Dr. David von Oheimb <David.von.Oheimb at siemens.com>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M CHANGES.md
    M apps/cmp.c
    M apps/lib/cmp_mock_srv.c
    M crypto/cmp/cmp_asn.c
    M crypto/cmp/cmp_ctx.c
    M crypto/cmp/cmp_err.c
    M crypto/cmp/cmp_hdr.c
    M crypto/cmp/cmp_local.h
    M crypto/err/openssl.txt
    M doc/man1/openssl-cmp.pod.in
    M doc/man3/OSSL_CMP_CTX_new.pod
    M doc/man3/OSSL_CMP_HDR_get0_transactionID.pod
    M doc/man3/OSSL_CMP_ITAV_set0.pod
    M include/openssl/cmp.h.in
    M include/openssl/cmperr.h
    M test/recipes/80-test_cmp_http_data/test_commands.csv
    M util/libcrypto.num

  Log Message:
  -----------
  CMP lib and app: add optional certProfile request message header and respective -profile option

Also add missing getter functionss OSSL_CMP_{CTX,HDR}_get0_geninfo_ITAVs() to CMP API.

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: David von Oheimb <david.von.oheimb at siemens.com>
(Merged from https://github.com/openssl/openssl/pull/21281)


  Commit: 0739dd0022cc747cd7c8a2de043e1f513472310c
      https://github.com/openssl/openssl/commit/0739dd0022cc747cd7c8a2de043e1f513472310c
  Author: Dr. David von Oheimb <David.von.Oheimb at siemens.com>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M apps/cmp.c
    M doc/man1/openssl-cmp.pod.in
    M test/recipes/80-test_cmp_http_data/test_commands.csv

  Log Message:
  -----------
  CMP app: make -geninfo option accept multiple ITAVs and support string values besides integers

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: David von Oheimb <david.von.oheimb at siemens.com>
(Merged from https://github.com/openssl/openssl/pull/21281)


  Commit: cb03eef1a612212148690ca4ea6260cbb451fdee
      https://github.com/openssl/openssl/commit/cb03eef1a612212148690ca4ea6260cbb451fdee
  Author: Dr. David von Oheimb <dev at ddvo.net>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M doc/man1/openssl-cmp.pod.in

  Log Message:
  -----------
  openssl-cmp.pod.in: fix grammar glitch

Reviewed-by: Tomas Mraz <tomas at openssl.org>
Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
(Merged from https://github.com/openssl/openssl/pull/21281)


  Commit: 5df160f116fbe49eff5c938cf184f84bf4cc3952
      https://github.com/openssl/openssl/commit/5df160f116fbe49eff5c938cf184f84bf4cc3952
  Author: Tomas Mraz <tomas at openssl.org>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M test/sslapitest.c

  Log Message:
  -----------
  test_export_key_mat(): Long context support works with new fips provider only

Reviewed-by: Shane Lontis <shane.lontis at oracle.com>
Reviewed-by: Hugo Landau <hlandau at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23007)


  Commit: 5b4f4474b2562c4422193e1719461a0ef5cbc3e5
      https://github.com/openssl/openssl/commit/5b4f4474b2562c4422193e1719461a0ef5cbc3e5
  Author: Bernd Edlinger <bernd.edlinger at hotmail.de>
  Date:   2023-12-19 (Tue, 19 Dec 2023)

  Changed paths:
    M test/recipes/80-test_cms.t

  Log Message:
  -----------
  Fix no-des failure in test_cms

The newly introduced test case do not work
when configured with no-des, fix that by
choosing -aes128 as cipher.

Fixes ffed597882ba ("cms: avoid intermittent test failure")

Reviewed-by: Hugo Landau <hlandau at openssl.org>
Reviewed-by: Matt Caswell <matt at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23086)


Compare: https://github.com/openssl/openssl/compare/430dcbd04635...5b4f4474b256