Skip to content

Run evp_test in FIPS mode#9531

Closed
mattcaswell wants to merge 2 commits intoopenssl:masterfrom
mattcaswell:evp-test-in-fips
Closed

Run evp_test in FIPS mode#9531
mattcaswell wants to merge 2 commits intoopenssl:masterfrom
mattcaswell:evp-test-in-fips

Conversation

@mattcaswell
Copy link
Member

We run the cipher and digest evp_test test files in FIPS mode. Some ciphers/digests aren't available in FIPS mode so we mark those as only being available in the default provider.

We also fix a bug in EVP_CipherInit_ex which this work exposed.

If an implict EVP_CIPHER_fetch fails then ctx->cipher should not be set
otherwise strange things will happen when trying to free the ctx.
We run the cipher and digest evp_test test files in FIPS mode. Some
ciphers/digests aren't available in FIPS mode so we mark those as
only being available in the default provider.
@mattcaswell mattcaswell added the branch: master Applies to master branch label Aug 5, 2019
@mattcaswell
Copy link
Member Author

Pushed. Thanks.

@mattcaswell mattcaswell closed this Aug 7, 2019
levitte pushed a commit that referenced this pull request Aug 7, 2019
If an implict EVP_CIPHER_fetch fails then ctx->cipher should not be set
otherwise strange things will happen when trying to free the ctx.

Reviewed-by: Shane Lontis <[email protected]>
(Merged from #9531)
levitte pushed a commit that referenced this pull request Aug 7, 2019
We run the cipher and digest evp_test test files in FIPS mode. Some
ciphers/digests aren't available in FIPS mode so we mark those as
only being available in the default provider.

Reviewed-by: Shane Lontis <[email protected]>
(Merged from #9531)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

branch: master Applies to master branch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants