]> git.ipfire.org Git - thirdparty/openssl.git/commit
Enable RSA-SM3 in the default provider
authorRichard Levitte <levitte@openssl.org>
Mon, 19 Aug 2024 06:38:56 +0000 (08:38 +0200)
committerRichard Levitte <levitte@openssl.org>
Wed, 21 Aug 2024 06:21:06 +0000 (08:21 +0200)
commit523187df47cf6082004e872c6c47b202fce5d574
tree9629dc63a867bbf029f5b899d99efdaf27cfed2b
parent8736de5e77fe1ccb52efd84e1d93372f57420495
Enable RSA-SM3 in the default provider

It turns out that we didn't allow the combination RSA + SM3 anywhere.

This is perfectly reasonable in the FIPS module, but less so in the default
provider.  This change enables it in the default provider, and adds a simple
evp_test stanza for the RSA-SM3 signature scheme.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23416)
crypto/rsa/rsa_sign.c
providers/common/securitycheck_default.c
test/evp_test.c
test/recipes/30-test_evp_data/evppkey_rsa_sigalg.txt