Accepting request 906749 from home:jsikes:branches:security:tls

New candidate fix for bsc1180995. Enjoy!

OBS-URL: https://build.opensuse.org/request/show/906749
OBS-URL: https://build.opensuse.org/package/show/security:tls/openssl-1_1?expand=0&rev=95
This commit is contained in:
Pedro Monreal Gonzalez 2021-07-17 07:22:41 +00:00 committed by Git OBS Bridge
parent 15122a3c70
commit bbd5132f50

View File

@ -2,9 +2,11 @@
Mon May 17 14:28:52 UTC 2021 - Jason Sikes <jsikes@suse.com>
- Added openssl-add_rfc3526_rfc7919.patch
* Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and ffdhe* (rfc7919) groups. Example:
* $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:ffdhe4096
* DH_new_by_nid(), DH_get_nid(), and EVP_PKEY_CTX_set_dh_nid(): NID_modp_* groups are now available, similar to NID_ffdhe*.
* Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526)
and ffdhe* (rfc7919) groups. Example:
$ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:ffdhe4096
* DH_new_by_nid(), DH_get_nid(), and EVP_PKEY_CTX_set_dh_nid():
NID_modp_* groups are now available, similar to NID_ffdhe*.
* Fixes bsc#1180995 - openssl s_server fails when FIPS is enabled
-------------------------------------------------------------------