rsa: convert to transient error state on import failure in FIPS provider

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28376)

diff --git a/crypto/rsa/rsa_gen.c b/crypto/rsa/rsa_gen.c
index 1897214dae124e70bef338efb578babfaeb4a3a1..62cbb57577fc3d82b487ccf0c4c2bed2c378012a 100644 (file)
--- a/crypto/rsa/rsa_gen.c
+++ b/crypto/rsa/rsa_gen.c
@@ -745,7 +745,7 @@ int ossl_rsa_key_pairwise_test(RSA *rsa)
     OSSL_SELF_TEST_get_callback(rsa->libctx, &stcb, &stcbarg);
     res = rsa_keygen_pairwise_test(rsa, stcb, stcbarg);
     if (res <= 0)
-        ossl_set_error_state(OSSL_SELF_TEST_TYPE_PCT);
+        ossl_set_error_state(OSSL_SELF_TEST_TYPE_PCT_IMPORT);
     return res;
 }
 #endif  /* FIPS_MODULE */