From c2ebeeeff67948cd4f44fc5e4a777cf9ea293f17 Mon Sep 17 00:00:00 2001 From: Pauli Date: Fri, 29 Aug 2025 12:42:17 +1000 Subject: [PATCH] dh: convert to transient error state on import failure in FIPS provider Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28376) --- providers/implementations/keymgmt/dh_kmgmt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/providers/implementations/keymgmt/dh_kmgmt.c b/providers/implementations/keymgmt/dh_kmgmt.c index 09d089c24de..aa123f37d9f 100644 --- a/providers/implementations/keymgmt/dh_kmgmt.c +++ b/providers/implementations/keymgmt/dh_kmgmt.c @@ -218,7 +218,7 @@ static int dh_import(void *keydata, int selection, const OSSL_PARAM params[]) if (ok > 0 && !ossl_fips_self_testing()) { ok = ossl_dh_check_pairwise(dh, 1); if (ok <= 0) - ossl_set_error_state(OSSL_SELF_TEST_TYPE_PCT); + ossl_set_error_state(OSSL_SELF_TEST_TYPE_PCT_IMPORT); } #endif /* FIPS_MODULE */ } -- 2.47.3