Pedro Monreal Gonzalez
30c6de24df
* Miscellaneous minor bug fixes.
* The FIPS provider now performs a PCT on key import for RSA, EC and ECX.
This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
- Rebase patches:
* openssl-FIPS-140-3-keychecks.patch
* openssl-FIPS-NO-DES-support.patch
* openssl-FIPS-enforce-EMS-support.patch
* openssl-disable-fipsinstall.patch
- Move ssl configuration files to the libopenssl package [bsc#1247463]
- Don't install unneeded NOTES
OBS-URL: https://build.opensuse.org/package/show/security:tls/openssl-3?expand=0&rev=153
20 lines
481 B
Diff
20 lines
481 B
Diff
Index: openssl-3.1.4/apps/openssl.cnf
|
|
===================================================================
|
|
--- openssl-3.1.4.orig/apps/openssl.cnf
|
|
+++ openssl-3.1.4/apps/openssl.cnf
|
|
@@ -70,11 +70,11 @@ engines = engine_section
|
|
# to side-channel attacks and as such have been deprecated.
|
|
|
|
[provider_sect]
|
|
-default = default_sect
|
|
+##default = default_sect
|
|
##legacy = legacy_sect
|
|
|
|
-[default_sect]
|
|
-activate = 1
|
|
+##[default_sect]
|
|
+##activate = 1
|
|
|
|
##[legacy_sect]
|
|
##activate = 1
|