[openssl/openssl] 50ea5c: Add option to FIPS module to enforce EMS check dur...

[Shane]

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 50ea5cdcb735916591e35a04c1f5a659bf253ddc
      https://github.com/openssl/openssl/commit/50ea5cdcb735916591e35a04c1f5a659bf253ddc
  Author: slontis <shane.lontis at oracle.com>
  Date:   2023-03-07 (Tue, 07 Mar 2023)

  Changed paths:
    M CHANGES.md
    M apps/fipsinstall.c
    M crypto/err/openssl.txt
    M doc/man1/openssl-fipsinstall.pod.in
    M doc/man7/OSSL_PROVIDER-FIPS.pod
    M include/openssl/core_names.h
    M include/openssl/fips_names.h
    M include/openssl/proverr.h
    M providers/common/include/prov/proverr.h
    M providers/common/include/prov/securitycheck.h
    M providers/common/provider_err.c
    M providers/common/securitycheck_default.c
    M providers/common/securitycheck_fips.c
    M providers/fips/fipsprov.c
    M providers/implementations/kdfs/tls1_prf.c
    M test/recipes/03-test_fipsinstall.t
    M test/recipes/90-test_sslapi.t
    M test/sslapitest.c

  Log Message:
  -----------
  Add option to FIPS module to enforce EMS check during KDF TLS1_PRF.

Fixes #19989

Reviewed-by: Paul Dale <pauli at openssl.org>
Reviewed-by: Tomas Mraz <tomas at openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20241)