From: Artem Boldariev <artem@isc.org>
Date: Wed, 4 Dec 2024 16:50:36 +0000 (+0000)
Subject: fix: ci: tests: Use FIPS compatible DH-param files
X-Git-Tag: v9.21.4~63
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=44f1b001189a434493a7c924f47529a264a682a8;p=thirdparty%2Fbind9.git

fix: ci: tests: Use FIPS compatible DH-param files

When the tests were added, the files were generated without FIPS
compatibility in mind. That made the tests fail on recent OpenSSL
versions in FIPS mode.

So, the files were regenerated on a FIPS compliant system using the
following stanza:

```
$ openssl dhparam -out <file> 3072
```

Apparently, the old files are not valid for FIPS starting with OpneSSL
3.1.X release series as "FIPS 140-3 compliance changes" are mentioned
in the [changelog](https://openssl-library.org/news/openssl-3.1-notes/).

Closes #5074.

Merge branch '5074-fips-compatible-dhparams' into 'main'

See merge request isc-projects/bind9!9807
---

44f1b001189a434493a7c924f47529a264a682a8