]> git.ipfire.org Git - thirdparty/openssl.git/commit
Refactor FIPS parameter and indicator handling
authorSimo Sorce <simo@redhat.com>
Mon, 2 Mar 2026 21:08:59 +0000 (16:08 -0500)
committerDmitry Belyavskiy <beldmit@gmail.com>
Wed, 11 Mar 2026 14:55:27 +0000 (15:55 +0100)
commitb5a69ec5a7c262d477b2b54d82df4fa7fa203ee3
treec71fd56677a0cd70f3f43a00f551c9f24a3d0d7c
parentc6c992b95406d4e597a57219f34db7d29afe6806
Refactor FIPS parameter and indicator handling

Consolidate FIPS indicators and self-test parameters into a single
structure managed by `fipsparams.pm`. Replace individual accessor
functions with a generic `ossl_fips_config` function that retrieves
values by name. This removes repetitive boilerplate code and
simplifies parameter access within the FIPS provider.

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/30213)
30 files changed:
providers/common/include/prov/securitycheck.h
providers/common/securitycheck_default.c
providers/common/securitycheck_fips.c
providers/fips/fipsindicator.c
providers/fips/fipsparams.inc.in
providers/fips/fipsprov.c
providers/fips/include/fips/fipsindicator.h
providers/fips/include/fipscommon.h
providers/fips/self_test.c
providers/fips/self_test.h
providers/implementations/asymciphers/rsa_enc.c
providers/implementations/ciphers/cipher_tdes_common.c
providers/implementations/exchange/dh_exch.c
providers/implementations/exchange/ecdh_exch.c
providers/implementations/kdfs/hkdf.c
providers/implementations/kdfs/kbkdf.c
providers/implementations/kdfs/pbkdf2.c
providers/implementations/kdfs/sshkdf.c
providers/implementations/kdfs/sskdf.c
providers/implementations/kdfs/tls1_prf.c
providers/implementations/kdfs/x942kdf.c
providers/implementations/keymgmt/dsa_kmgmt.c
providers/implementations/macs/cmac_prov.c
providers/implementations/macs/hmac_prov.c
providers/implementations/macs/kmac_prov.c
providers/implementations/rands/drbg.c
providers/implementations/signature/dsa_sig.c
providers/implementations/signature/ecdsa_sig.c
providers/implementations/signature/rsa_sig.c
util/perl/OpenSSL/fipsparams.pm [changed mode: 0644->0755]