diff options
| author | slontis <shane.lontis@oracle.com> | 2024-02-27 05:57:14 +0100 |
|---|---|---|
| committer | Tomas Mraz <tomas@openssl.org> | 2024-10-11 14:52:37 +0200 |
| commit | 01244adfc66aadc1fc3c6cfb8c96a0a6da3d4a3e (patch) | |
| tree | cf71ed4ed7afacf0963d2c989f009c6fb16dabb4 /ssl | |
| parent | Fix potential double free through SRP_user_pwd_set1_ids() (diff) | |
| download | openssl-01244adfc66aadc1fc3c6cfb8c96a0a6da3d4a3e.tar.xz openssl-01244adfc66aadc1fc3c6cfb8c96a0a6da3d4a3e.zip | |
fipsinstall: Save the 'status indicator' if the FIPS provider is 3.0.X.
Fixes #23400
The 3.1 FIPS provider no longer writes out the 'status indicator' by
default due to changes related to FIPS 140-3 requirements. For Backwards
compatability if the fipsinstall detects it is loading a 3.0.X FIPS
provider then it will save the 'status indicator' by default.
Disclaimer: Using a fipsinstall command line utility that is not supplied
with the FIPS provider tarball source is not recommended.
This PR deliberately does not attempt to exclude any additional options
that were added after 3.0.X. These additional options will be ignored by older
providers.
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Hugo Landau <hlandau@devever.net>
(Merged from https://github.com/openssl/openssl/pull/23689)
Diffstat (limited to 'ssl')
0 files changed, 0 insertions, 0 deletions