]> git.ipfire.org Git - thirdparty/openssl.git/commit
TEST: correct test/recipes/30-test_evp_data/evppkey_ecdh.txt
authorRichard Levitte <levitte@openssl.org>
Fri, 23 Apr 2021 13:52:02 +0000 (15:52 +0200)
committerRichard Levitte <levitte@openssl.org>
Fri, 23 Apr 2021 18:22:49 +0000 (20:22 +0200)
commita70936a8453a307992820f2a9d3e252f6c4f9ad6
tree03bb388e2b609507cdf1b20a2af7a5b1a6941f4d
parent3d80b5e611f112fd004a4320cb5ecce93c73b7d4
TEST: correct test/recipes/30-test_evp_data/evppkey_ecdh.txt

Some keys with groups that aren't supported by FIPS were still used
for Derive stanzas, even when testing with the FIPS provider.
This was due to the flaw in evp_keymgmt_util_try_import() that meant
that even though the key was invalid for FIPS, it could still come
through, because the imported keydata wasn't cleared on import error.
With that flaw corrected, these few Derive stanzas start failing.

We mitigate this by making of "offending" Derive stanzas only
available with the default provider.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/15008)
test/recipes/30-test_evp_data/evppkey_ecdh.txt