HomeFreeBSD

libcrypto: add missing symbols to the fips provider

Description

libcrypto: add missing symbols to the fips provider

OpenSSL 3 supports a modular architecture, allowing different providers
to bring specific implementations of cryptographical algorithms. One
such provider, "fips", ships with OpenSSL 3 directly, and groups
algorithms that can be FIPS 140-2 validated.

The import of OpenSSL 3.0.9 was building this provider incorrectly,
missing symbols required for proper operation.

In addition, without the change in OpenSSL's crypto/bn/bn_const.c, the
FIPS module fails loading: Undefined symbol "ossl_bignum_modp_1536_p".
This change is consistent with crypto/bn/bn_dh.c though.

Sponsored by: The FreeBSD Foundation
Pull Request: https://github.com/freebsd/freebsd-src/pull/787

Details

Provenance
khorben_defora.orgAuthored on Jun 29 2023, 10:24 PM
markjCommitted on Jul 5 2023, 8:00 PM
Parents
rG87e08018b175: libcrypto: add missing symbols to the legacy provider
Branches
Unknown
Tags
Unknown