/[smecontribs]/rpms/openssl3/contribs10/0061-Deny-SHA-1-signature-verification-in-FIPS-provider.patch
ViewVC logotype

Contents of /rpms/openssl3/contribs10/0061-Deny-SHA-1-signature-verification-in-FIPS-provider.patch

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph

Revision 1.1 - (show annotations) (download)
Wed Jan 31 17:24:42 2024 UTC (9 months, 3 weeks ago) by jpp
Branch: MAIN
CVS Tags: openssl3-3_0_7-5_el7_sme_1, HEAD 
Initial import
1 From 5f4f350ce797a7cd2fdca84c474ee196da9d6fae Mon Sep 17 00:00:00 2001
2 From: Clemens Lang <cllang@redhat.com>
3 Date: Wed, 18 May 2022 17:25:59 +0200
4 Subject: [PATCH] Deny SHA-1 signature verification in FIPS provider
5
6 For RHEL, we already disable SHA-1 signatures by default in the default
7 provider, so it is unexpected that the FIPS provider would have a more
8 lenient configuration in this regard. Additionally, we do not think
9 continuing to accept SHA-1 signatures is a good idea due to the
10 published chosen-prefix collision attacks.
11
12 As a consequence, disable verification of SHA-1 signatures in the FIPS
13 provider.
14
15 This requires adjusting a few tests that would otherwise fail:
16 - 30-test_acvp: Remove the test vectors that use SHA-1.
17 - 30-test_evp: Mark tests in evppkey_rsa_common.txt and
18 evppkey_ecdsa.txt that use SHA-1 digests as "Availablein = default",
19 which will not run them when the FIPS provider is enabled.
20 - 80-test_cms: Re-create all certificates in test/smime-certificates
21 with SHA256 signatures while keeping the same private keys. These
22 certificates were signed with SHA-1 and thus fail verification in the
23 FIPS provider.
24 Fix some other tests by explicitly running them in the default
25 provider, where SHA-1 is available.
26 - 80-test_ssl_old: Skip tests that rely on SSLv3 and SHA-1 when run with
27 the FIPS provider.
28
29 Signed-off-by: Clemens Lang <cllang@redhat.com>
30 ---
31 providers/implementations/signature/dsa_sig.c | 4 --
32 .../implementations/signature/ecdsa_sig.c | 4 --
33 providers/implementations/signature/rsa_sig.c | 8 +--
34 test/acvp_test.inc | 20 -------
35 .../30-test_evp_data/evppkey_ecdsa.txt | 7 +++
36 .../30-test_evp_data/evppkey_rsa_common.txt | 51 +++++++++++++++-
37 test/recipes/80-test_cms.t | 4 +-
38 test/recipes/80-test_ssl_old.t | 4 ++
39 test/smime-certs/smdh.pem | 18 +++---
40 test/smime-certs/smdsa1.pem | 60 +++++++++----------
41 test/smime-certs/smdsa2.pem | 60 +++++++++----------
42 test/smime-certs/smdsa3.pem | 60 +++++++++----------
43 test/smime-certs/smec1.pem | 30 +++++-----
44 test/smime-certs/smec2.pem | 30 +++++-----
45 test/smime-certs/smec3.pem | 30 +++++-----
46 test/smime-certs/smroot.pem | 38 ++++++------
47 test/smime-certs/smrsa1.pem | 38 ++++++------
48 test/smime-certs/smrsa2.pem | 38 ++++++------
49 test/smime-certs/smrsa3.pem | 38 ++++++------
50 19 files changed, 286 insertions(+), 256 deletions(-)
51
52 diff --git a/providers/implementations/signature/dsa_sig.c b/providers/implementations/signature/dsa_sig.c
53 index fa3822f39f..c365d7b13a 100644
54 --- a/providers/implementations/signature/dsa_sig.c
55 +++ b/providers/implementations/signature/dsa_sig.c
56 @@ -128,11 +128,7 @@ static int dsa_setup_md(PROV_DSA_CTX *ctx,
57 EVP_MD *md = EVP_MD_fetch(ctx->libctx, mdname, mdprops);
58 int md_nid;
59 size_t mdname_len = strlen(mdname);
60 -#ifdef FIPS_MODULE
61 - int sha1_allowed = (ctx->operation != EVP_PKEY_OP_SIGN);
62 -#else
63 int sha1_allowed = 0;
64 -#endif
65 md_nid = ossl_digest_get_approved_nid_with_sha1(ctx->libctx, md,
66 sha1_allowed);
67
68 diff --git a/providers/implementations/signature/ecdsa_sig.c b/providers/implementations/signature/ecdsa_sig.c
69 index 99b228e82c..44a22832ec 100644
70 --- a/providers/implementations/signature/ecdsa_sig.c
71 +++ b/providers/implementations/signature/ecdsa_sig.c
72 @@ -237,11 +237,7 @@ static int ecdsa_setup_md(PROV_ECDSA_CTX *ctx, const char *mdname,
73 "%s could not be fetched", mdname);
74 return 0;
75 }
76 -#ifdef FIPS_MODULE
77 - sha1_allowed = (ctx->operation != EVP_PKEY_OP_SIGN);
78 -#else
79 sha1_allowed = 0;
80 -#endif
81 md_nid = ossl_digest_get_approved_nid_with_sha1(ctx->libctx, md,
82 sha1_allowed);
83 if (md_nid < 0) {
84 diff --git a/providers/implementations/signature/rsa_sig.c b/providers/implementations/signature/rsa_sig.c
85 index f66d7705c3..34f45175e8 100644
86 --- a/providers/implementations/signature/rsa_sig.c
87 +++ b/providers/implementations/signature/rsa_sig.c
88 @@ -292,11 +292,7 @@ static int rsa_setup_md(PROV_RSA_CTX *ctx, const char *mdname,
89 EVP_MD *md = EVP_MD_fetch(ctx->libctx, mdname, mdprops);
90 int md_nid;
91 size_t mdname_len = strlen(mdname);
92 -#ifdef FIPS_MODULE
93 - int sha1_allowed = (ctx->operation != EVP_PKEY_OP_SIGN);
94 -#else
95 int sha1_allowed = 0;
96 -#endif
97 md_nid = ossl_digest_rsa_sign_get_md_nid(ctx->libctx, md,
98 sha1_allowed);
99
100 @@ -1355,8 +1351,10 @@ static int rsa_set_ctx_params(void *vprsactx, const OSSL_PARAM params[])
101
102 if (prsactx->md == NULL && pmdname == NULL
103 && pad_mode == RSA_PKCS1_PSS_PADDING) {
104 +#ifdef FIPS_MODULE
105 + pmdname = RSA_DEFAULT_DIGEST_NAME_NONLEGACY;
106 +#else
107 pmdname = RSA_DEFAULT_DIGEST_NAME;
108 -#ifndef FIPS_MODULE
109 if (!ossl_ctx_legacy_digest_signatures_allowed(prsactx->libctx, 0)) {
110 pmdname = RSA_DEFAULT_DIGEST_NAME_NONLEGACY;
111 }
112 diff --git a/test/acvp_test.inc b/test/acvp_test.inc
113 index ad11d3ae1e..73b24bdb0c 100644
114 --- a/test/acvp_test.inc
115 +++ b/test/acvp_test.inc
116 @@ -1841,17 +1841,6 @@ static const struct rsa_sigver_st rsa_sigver_data[] = {
117 NO_PSS_SALT_LEN,
118 FAIL
119 },
120 - {
121 - "x931",
122 - 3072,
123 - "SHA1",
124 - ITM(rsa_sigverx931_0_msg),
125 - ITM(rsa_sigverx931_0_n),
126 - ITM(rsa_sigverx931_0_e),
127 - ITM(rsa_sigverx931_0_sig),
128 - NO_PSS_SALT_LEN,
129 - PASS
130 - },
131 {
132 "x931",
133 3072,
134 diff --git a/test/recipes/30-test_evp_data/evppkey_ecdsa.txt b/test/recipes/30-test_evp_data/evppkey_ecdsa.txt
135 index f36982845d..51e507a61c 100644
136 --- a/test/recipes/30-test_evp_data/evppkey_ecdsa.txt
137 +++ b/test/recipes/30-test_evp_data/evppkey_ecdsa.txt
138 @@ -37,12 +37,14 @@ PrivPubKeyPair = P-256:P-256-PUBLIC
139
140 Title = ECDSA tests
141
142 +Availablein = default
143 Verify = P-256
144 Ctrl = digest:SHA1
145 Input = "0123456789ABCDEF1234"
146 Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e15202201898cdd52b41ca502098184b409cf83a21bc945006746e3b7cea52234e043ec8
147
148 # Digest too long
149 +Availablein = default
150 Verify = P-256
151 Ctrl = digest:SHA1
152 Input = "0123456789ABCDEF12345"
153 @@ -50,6 +52,7 @@ Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e
154 Result = VERIFY_ERROR
155
156 # Digest too short
157 +Availablein = default
158 Verify = P-256
159 Ctrl = digest:SHA1
160 Input = "0123456789ABCDEF123"
161 @@ -57,6 +60,7 @@ Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e
162 Result = VERIFY_ERROR
163
164 # Digest invalid
165 +Availablein = default
166 Verify = P-256
167 Ctrl = digest:SHA1
168 Input = "0123456789ABCDEF1235"
169 @@ -64,6 +68,7 @@ Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e
170 Result = VERIFY_ERROR
171
172 # Invalid signature
173 +Availablein = default
174 Verify = P-256
175 Ctrl = digest:SHA1
176 Input = "0123456789ABCDEF1234"
177 @@ -79,12 +84,14 @@ Output = 3045022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e
178 Result = VERIFY_ERROR
179
180 # BER signature
181 +Availablein = default
182 Verify = P-256
183 Ctrl = digest:SHA1
184 Input = "0123456789ABCDEF1234"
185 Output = 3080022100b1d1cb1a577035bccdd5a86c6148c2cc7c633cd42b7234139b593076d041e15202201898cdd52b41ca502098184b409cf83a21bc945006746e3b7cea52234e043ec80000
186 Result = VERIFY_ERROR
187
188 +Availablein = default
189 Verify = P-256-PUBLIC
190 Ctrl = digest:SHA1
191 Input = "0123456789ABCDEF1234"
192 diff --git a/test/recipes/30-test_evp_data/evppkey_rsa_common.txt b/test/recipes/30-test_evp_data/evppkey_rsa_common.txt
193 index b8d8bb2993..8dd566067b 100644
194 --- a/test/recipes/30-test_evp_data/evppkey_rsa_common.txt
195 +++ b/test/recipes/30-test_evp_data/evppkey_rsa_common.txt
196 @@ -96,6 +96,7 @@ NDL6WCBbets=
197
198 Title = RSA tests
199
200 +Availablein = default
201 Verify = RSA-2048
202 Ctrl = digest:SHA1
203 Input = "0123456789ABCDEF1234"
204 @@ -112,24 +113,28 @@ Ctrl = digest:SHA512-224
205 Input = "0123456789ABCDEF123456789ABC"
206 Output = 5f720e9488139bb21e1c2f027fd5ce5993e6d31c5a8faaee833487b3a944d66891178868ace8070cad3ee2ffbe54aa4885a15fd1a7cc5166970fe1fd8c0423e72bd3e3b56fc4a53ed80aaaeca42497f0ec3c62113edc05cd006608f5eef7ce3ad4cba1069f68731dd28a524a1f93fcdc5547112d48d45586dd943ba0d443be9635720d8a61697c54c96627f0d85c5fbeaa3b4af86a65cf2fc3800dd5de34c046985f25d0efc0bb6edccc1d08b3a4fb9c8faffe181c7e68b31e374ad1440a4a664eec9ca0dc53a9d2f5bc7d9940d866f64201bcbc63612754df45727ea24b531d7de83d1bb707444859fa35521320c33bf6f4dbeb6fb56e653adbf7af15843f17
207
208 +Availablein = default
209 VerifyRecover = RSA-2048
210 Ctrl = digest:SHA1
211 Input = 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
212 Output = "0123456789ABCDEF1234"
213
214 # Leading zero in the signature
215 +Availablein = default
216 Verify = RSA-2048
217 Ctrl = digest:SHA1
218 Input = "0123456789ABCDEF1234"
219 Output = 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
220 Result = VERIFY_ERROR
221
222 +Availablein = default
223 VerifyRecover = RSA-2048
224 Ctrl = digest:SHA1
225 Input = 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
226 Result = KEYOP_ERROR
227
228 # Mismatched digest
229 +Availablein = default
230 Verify = RSA-2048
231 Ctrl = digest:SHA1
232 Input = "0123456789ABCDEF1233"
233 @@ -137,6 +142,7 @@ Output = c09d402423cbf233d26cae21f954547bc43fe80fd41360a0336cfdbe9aedad05bef6fd2
234 Result = VERIFY_ERROR
235
236 # Corrupted signature
237 +Availablein = default
238 Verify = RSA-2048
239 Ctrl = digest:SHA1
240 Input = "0123456789ABCDEF1233"
241 @@ -144,6 +150,7 @@ Output = c09d402423cbf233d26cae21f954547bc43fe80fd41360a0336cfdbe9aedad05bef6fd2
242 Result = VERIFY_ERROR
243
244 # parameter is not NULLt
245 +Availablein = default
246 Verify = RSA-2048
247 Ctrl = digest:sha1
248 Input = "0123456789ABCDEF1234"
249 @@ -151,42 +158,49 @@ Output = 3ec3fc29eb6e122bd7aa361cd09fe1bcbe85311096a7b9e4799cedfb2351ce0ab7fe4e7
250 Result = VERIFY_ERROR
251
252 # embedded digest too long
253 +Availablein = default
254 Verify = RSA-2048
255 Ctrl = digest:sha1
256 Input = "0123456789ABCDEF1234"
257 Output = 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
258 Result = VERIFY_ERROR
259
260 +Availablein = default
261 VerifyRecover = RSA-2048
262 Ctrl = digest:sha1
263 Input = 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
264 Result = KEYOP_ERROR
265
266 # embedded digest too short
267 +Availablein = default
268 Verify = RSA-2048
269 Ctrl = digest:sha1
270 Input = "0123456789ABCDEF1234"
271 Output = afec9a0d5330a08f54283bb4a9d4e7e7e70fc1342336c4c766fba713f66970151c6e27413c48c33864ea45a0238787004f338ed3e21b53b0fe9c1151c42c388cbc7cba5a06b706c407a5b48324fbe994dc7afc3a19fb3d2841e66222596c14cd72a0f0a7455a019d8eb554f59c0183f9552b75aa96fee8bf935945e079ca283d2bd3534a86f11351f6d6181fbf433e5b01a6d1422145c7a72214d3aacdd5d3af12b2d6bf6438f9f9a64010d8aeed801c87f0859412b236150b86a545f7239be022f4a7ad246b59df87514294cb4a4c7c5a997ee53c66054d9f38ca4e76c1f7af83c30f737ef70f83a45aebe18238ddb95e1998814ca4fc72388f1533147c169d
272 Result = VERIFY_ERROR
273
274 +Availablein = default
275 VerifyRecover = RSA-2048
276 Ctrl = digest:sha1
277 Input = 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
278 Result = KEYOP_ERROR
279
280 # Garbage after DigestInfo
281 +Availablein = default
282 Verify = RSA-2048
283 Ctrl = digest:sha1
284 Input = "0123456789ABCDEF1234"
285 Output = 9ee34872d4271a7d8808af0a4052a145a6d6a8437d00da3ed14428c7f087cd39f4d43334c41af63e7fa1ba363fee7bcef401d9d36a662abbab55ce89a696e1be0dfa19a5d09ca617dd488787b6048baaefeb29bc8688b2fe3882de2b77c905b5a8b56cf9616041e5ec934ba6de863efe93acc4eef783fe7f72a00fa65d6093ed32bf98ce527e62ccb1d56317f4be18b7e0f55d7c36617d2d0678a306e3350956b662ac15df45215dd8f6b314babb9788e6c272fa461e4c9b512a11a4b92bc77c3a4c95c903fccb238794eca5c750477bf56ea6ee6a167367d881b485ae3889e7c489af8fdf38e0c0f2aed780831182e34abedd43c39281b290774bf35cc25274
286 Result = VERIFY_ERROR
287
288 +Availablein = default
289 VerifyRecover = RSA-2048
290 Ctrl = digest:sha1
291 Input = 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
292 Result = KEYOP_ERROR
293
294 # invalid tag for parameter
295 +Availablein = default
296 Verify = RSA-2048
297 Ctrl = digest:sha1
298 Input = "0123456789ABCDEF1234"
299 @@ -195,6 +209,7 @@ Result = VERIFY_ERROR
300
301 # Verify using public key
302
303 +Availablein = default
304 Verify = RSA-2048-PUBLIC
305 Ctrl = digest:SHA1
306 Input = "0123456789ABCDEF1234"
307 @@ -370,6 +385,8 @@ Input="0123456789ABCDEF0123456789ABCDEF"
308 Output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
309
310 # Verify using salt length auto detect
311 +# In the FIPS provider on RHEL-9, the default digest for PSS signatures is SHA-256
312 +Availablein = default
313 Verify = RSA-2048-PUBLIC
314 Ctrl = rsa_padding_mode:pss
315 Ctrl = rsa_pss_saltlen:auto
316 @@ -404,6 +421,10 @@ Output=4DE433D5844043EF08D354DA03CB29068780D52706D7D1E4D50EFB7D58C9D547D83A747DD
317 Result = VERIFY_ERROR
318
319 # Verify using default parameters, explicitly setting parameters
320 +# NOTE: RSA-PSS-DEFAULT contains a restriction to use SHA1 as digest, which
321 +# RHEL-9 does not support in FIPS mode; all these tests are thus marked
322 +# Availablein = default.
323 +Availablein = default
324 Verify = RSA-PSS-DEFAULT
325 Ctrl = rsa_padding_mode:pss
326 Ctrl = rsa_pss_saltlen:20
327 @@ -412,6 +433,7 @@ Input="0123456789ABCDEF0123"
328 Output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
329
330 # Verify explicitly setting parameters "digest" salt length
331 +Availablein = default
332 Verify = RSA-PSS-DEFAULT
333 Ctrl = rsa_padding_mode:pss
334 Ctrl = rsa_pss_saltlen:digest
335 @@ -420,18 +442,21 @@ Input="0123456789ABCDEF0123"
336 Output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
337
338 # Verify using salt length larger than minimum
339 +Availablein = default
340 Verify = RSA-PSS-DEFAULT
341 Ctrl = rsa_pss_saltlen:30
342 Input="0123456789ABCDEF0123"
343 Output = 6BF7EDC63A0BA184EEEC7F3020FEC8F5EBF38C2B76481881F48BCCE5796E7AB294548BA9AE810457C7723CABD1BDE94CF59CF7C0FC7461B22760C8ED703DD98E97BFDD61FA8D1181C411F6DEE5FF159F4850746D78EDEE385A363DC28E2CB373D5CAD7953F3BD5E639BE345732C03A1BDEA268814DA036EB1891C82D4012F3B903D86636055F87B96FC98806AD1B217685A4D754046A5DE0B0D7870664BE07902153EC85BA457BE7D7F89D7FE0F626D02A9CBBB2BB479DDA1A5CAE75247FB7BF6BFB15C1D3FD9E6B1573CCDBC72011C3B97716058BB11C7EA2E4E56ADAFE1F5DE6A7FD405AC5890100F9C3408EFFB5C73BF73F48177FF743B4B819D0699D507B
344
345 # Verify using maximum salt length
346 +Availablein = default
347 Verify = RSA-PSS-DEFAULT
348 Ctrl = rsa_pss_saltlen:max
349 Input="0123456789ABCDEF0123"
350 Output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
351
352 # Attempt to change salt length below minimum
353 +Availablein = default
354 Verify = RSA-PSS-DEFAULT
355 Ctrl = rsa_pss_saltlen:0
356 Result = PKEY_CTRL_ERROR
357 @@ -439,21 +464,25 @@ Result = PKEY_CTRL_ERROR
358 # Attempt to change padding mode
359 # Note this used to return PKEY_CTRL_INVALID
360 # but it is limited because setparams only returns 0 or 1.
361 +Availablein = default
362 Verify = RSA-PSS-DEFAULT
363 Ctrl = rsa_padding_mode:pkcs1
364 Result = PKEY_CTRL_ERROR
365
366 # Attempt to change digest
367 +Availablein = default
368 Verify = RSA-PSS-DEFAULT
369 Ctrl = digest:sha256
370 Result = PKEY_CTRL_ERROR
371
372 # Invalid key: rejected when we try to init
373 +Availablein = default
374 Verify = RSA-PSS-BAD
375 Result = KEYOP_INIT_ERROR
376 Reason = invalid salt length
377
378 # Invalid key: rejected when we try to init
379 +Availablein = default
380 Verify = RSA-PSS-BAD2
381 Result = KEYOP_INIT_ERROR
382 Reason = invalid salt length
383 @@ -472,36 +501,42 @@ CAltWyuLbfXWce9jd8CSHLI8Jwpw4lmOb/idGfEFrMLT8Ms18pKA4Thrb2TE7yLh
384 4fINDOjP+yJJvZohNwIDAQAB
385 -----END PUBLIC KEY-----
386
387 +Availablein = default
388 Verify=RSA-PSS-1
389 Ctrl = rsa_padding_mode:pss
390 Ctrl = rsa_mgf1_md:sha1
391 Input=cd8b6538cb8e8de566b68bd067569dbf1ee2718e
392 Output=9074308fb598e9701b2294388e52f971faac2b60a5145af185df5287b5ed2887e57ce7fd44dc8634e407c8e0e4360bc226f3ec227f9d9e54638e8d31f5051215df6ebb9c2f9579aa77598a38f914b5b9c1bd83c4e2f9f382a0d0aa3542ffee65984a601bc69eb28deb27dca12c82c2d4c3f66cd500f1ff2b994d8a4e30cbb33c
393
394 +Availablein = default
395 Verify=RSA-PSS-1
396 Ctrl = rsa_padding_mode:pss
397 Ctrl = rsa_mgf1_md:sha1
398 Input=e35befc17a1d160b9ce35fbd8eb16e7ee491d3fd
399 Output=3ef7f46e831bf92b32274142a585ffcefbdca7b32ae90d10fb0f0c729984f04ef29a9df0780775ce43739b97838390db0a5505e63de927028d9d29b219ca2c4517832558a55d694a6d25b9dab66003c4cccd907802193be5170d26147d37b93590241be51c25055f47ef62752cfbe21418fafe98c22c4d4d47724fdb5669e843
400
401 +Availablein = default
402 Verify=RSA-PSS-1
403 Ctrl = rsa_padding_mode:pss
404 Ctrl = rsa_mgf1_md:sha1
405 Input=0652ec67bcee30f9d2699122b91c19abdba89f91
406 Output=666026fba71bd3e7cf13157cc2c51a8e4aa684af9778f91849f34335d141c00154c4197621f9624a675b5abc22ee7d5baaffaae1c9baca2cc373b3f33e78e6143c395a91aa7faca664eb733afd14d8827259d99a7550faca501ef2b04e33c23aa51f4b9e8282efdb728cc0ab09405a91607c6369961bc8270d2d4f39fce612b1
407
408 +Availablein = default
409 Verify=RSA-PSS-1
410 Ctrl = rsa_padding_mode:pss
411 Ctrl = rsa_mgf1_md:sha1
412 Input=39c21c4cceda9c1adf839c744e1212a6437575ec
413 Output=4609793b23e9d09362dc21bb47da0b4f3a7622649a47d464019b9aeafe53359c178c91cd58ba6bcb78be0346a7bc637f4b873d4bab38ee661f199634c547a1ad8442e03da015b136e543f7ab07c0c13e4225b8de8cce25d4f6eb8400f81f7e1833b7ee6e334d370964ca79fdb872b4d75223b5eeb08101591fb532d155a6de87
414
415 +Availablein = default
416 Verify=RSA-PSS-1
417 Ctrl = rsa_padding_mode:pss
418 Ctrl = rsa_mgf1_md:sha1
419 Input=36dae913b77bd17cae6e7b09453d24544cebb33c
420 Output=1d2aad221ca4d31ddf13509239019398e3d14b32dc34dc5af4aeaea3c095af73479cf0a45e5629635a53a018377615b16cb9b13b3e09d671eb71e387b8545c5960da5a64776e768e82b2c93583bf104c3fdb23512b7b4e89f633dd0063a530db4524b01c3f384c09310e315a79dcd3d684022a7f31c865a664e316978b759fad
421
422 +Availablein = default
423 Verify=RSA-PSS-1
424 Ctrl = rsa_padding_mode:pss
425 Ctrl = rsa_mgf1_md:sha1
426 @@ -517,36 +552,42 @@ swU7R97S7NSkyu/WFIM9yLtiLzF+0Ha4BX/o3j+ESArV6D5KYZBKTySPs5cCc1fh
427 0w5GMTmBXG/U/VrFuBcqRSMOy2MYoE8UVdhOWosCAwEAAQ==
428 -----END PUBLIC KEY-----
429
430 +Availablein = default
431 Verify=RSA-PSS-9
432 Ctrl = rsa_padding_mode:pss
433 Ctrl = rsa_mgf1_md:sha1
434 Input=2715a49b8b0012cd7aee84c116446e6dfe3faec0
435 Output=586107226c3ce013a7c8f04d1a6a2959bb4b8e205ba43a27b50f124111bc35ef589b039f5932187cb696d7d9a32c0c38300a5cdda4834b62d2eb240af33f79d13dfbf095bf599e0d9686948c1964747b67e89c9aba5cd85016236f566cc5802cb13ead51bc7ca6bef3b94dcbdbb1d570469771df0e00b1a8a06777472d2316279edae86474668d4e1efff95f1de61c6020da32ae92bbf16520fef3cf4d88f61121f24bbd9fe91b59caf1235b2a93ff81fc403addf4ebdea84934a9cdaf8e1a9e
436
437 +Availablein = default
438 Verify=RSA-PSS-9
439 Ctrl = rsa_padding_mode:pss
440 Ctrl = rsa_mgf1_md:sha1
441 Input=2dac956d53964748ac364d06595827c6b4f143cd
442 Output=80b6d643255209f0a456763897ac9ed259d459b49c2887e5882ecb4434cfd66dd7e1699375381e51cd7f554f2c271704b399d42b4be2540a0eca61951f55267f7c2878c122842dadb28b01bd5f8c025f7e228418a673c03d6bc0c736d0a29546bd67f786d9d692ccea778d71d98c2063b7a71092187a4d35af108111d83e83eae46c46aa34277e06044589903788f1d5e7cee25fb485e92949118814d6f2c3ee361489016f327fb5bc517eb50470bffa1afa5f4ce9aa0ce5b8ee19bf5501b958
443
444 +Availablein = default
445 Verify=RSA-PSS-9
446 Ctrl = rsa_padding_mode:pss
447 Ctrl = rsa_mgf1_md:sha1
448 Input=28d98c46cccafbd3bc04e72f967a54bd3ea12298
449 Output=484408f3898cd5f53483f80819efbf2708c34d27a8b2a6fae8b322f9240237f981817aca1846f1084daa6d7c0795f6e5bf1af59c38e1858437ce1f7ec419b98c8736adf6dd9a00b1806d2bd3ad0a73775e05f52dfef3a59ab4b08143f0df05cd1ad9d04bececa6daa4a2129803e200cbc77787caf4c1d0663a6c5987b605952019782caf2ec1426d68fb94ed1d4be816a7ed081b77e6ab330b3ffc073820fecde3727fcbe295ee61a050a343658637c3fd659cfb63736de32d9f90d3c2f63eca
450
451 +Availablein = default
452 Verify=RSA-PSS-9
453 Ctrl = rsa_padding_mode:pss
454 Ctrl = rsa_mgf1_md:sha1
455 Input=0866d2ff5a79f25ef668cd6f31b42dee421e4c0e
456 Output=84ebeb481be59845b46468bafb471c0112e02b235d84b5d911cbd1926ee5074ae0424495cb20e82308b8ebb65f419a03fb40e72b78981d88aad143053685172c97b29c8b7bf0ae73b5b2263c403da0ed2f80ff7450af7828eb8b86f0028bd2a8b176a4d228cccea18394f238b09ff758cc00bc04301152355742f282b54e663a919e709d8da24ade5500a7b9aa50226e0ca52923e6c2d860ec50ff480fa57477e82b0565f4379f79c772d5c2da80af9fbf325ece6fc20b00961614bee89a183e
457
458 +Availablein = default
459 Verify=RSA-PSS-9
460 Ctrl = rsa_padding_mode:pss
461 Ctrl = rsa_mgf1_md:sha1
462 Input=6a5b4be4cd36cc97dfde9995efbf8f097a4a991a
463 Output=82102df8cb91e7179919a04d26d335d64fbc2f872c44833943241de8454810274cdf3db5f42d423db152af7135f701420e39b494a67cbfd19f9119da233a23da5c6439b5ba0d2bc373eee3507001378d4a4073856b7fe2aba0b5ee93b27f4afec7d4d120921c83f606765b02c19e4d6a1a3b95fa4c422951be4f52131077ef17179729cddfbdb56950dbaceefe78cb16640a099ea56d24389eef10f8fecb31ba3ea3b227c0a86698bb89e3e9363905bf22777b2a3aa521b65b4cef76d83bde4c
464
465 +Availablein = default
466 Verify=RSA-PSS-9
467 Ctrl = rsa_padding_mode:pss
468 Ctrl = rsa_mgf1_md:sha1
469 @@ -564,36 +605,42 @@ F7jfF3jbOB3OCctK0FilEQAac4GY7ifPVaE7dUU5kGWC7IsXS9WNXR89dnxhNyGu
470 BQIDAQAB
471 -----END PUBLIC KEY-----
472
473 +Availablein = default
474 Verify=RSA-PSS-10
475 Ctrl = rsa_padding_mode:pss
476 Ctrl = rsa_mgf1_md:sha1
477 Input=9596bb630cf6a8d4ea4600422b9eba8b13675dd4
478 Output=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
479
480 +Availablein = default
481 Verify=RSA-PSS-10
482 Ctrl = rsa_padding_mode:pss
483 Ctrl = rsa_mgf1_md:sha1
484 Input=b503319399277fd6c1c8f1033cbf04199ea21716
485 Output=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
486
487 +Availablein = default
488 Verify=RSA-PSS-10
489 Ctrl = rsa_padding_mode:pss
490 Ctrl = rsa_mgf1_md:sha1
491 Input=50aaede8536b2c307208b275a67ae2df196c7628
492 Output=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
493
494 +Availablein = default
495 Verify=RSA-PSS-10
496 Ctrl = rsa_padding_mode:pss
497 Ctrl = rsa_mgf1_md:sha1
498 Input=aa0b72b8b371ddd10c8ae474425ccccf8842a294
499 Output=34047ff96c4dc0dc90b2d4ff59a1a361a4754b255d2ee0af7d8bf87c9bc9e7ddeede33934c63ca1c0e3d262cb145ef932a1f2c0a997aa6a34f8eaee7477d82ccf09095a6b8acad38d4eec9fb7eab7ad02da1d11d8e54c1825e55bf58c2a23234b902be124f9e9038a8f68fa45dab72f66e0945bf1d8bacc9044c6f07098c9fcec58a3aab100c805178155f030a124c450e5acbda47d0e4f10b80a23f803e774d023b0015c20b9f9bbe7c91296338d5ecb471cafb032007b67a60be5f69504a9f01abb3cb467b260e2bce860be8d95bf92c0c8e1496ed1e528593a4abb6df462dde8a0968dffe4683116857a232f5ebf6c85be238745ad0f38f767a5fdbf486fb
500
501 +Availablein = default
502 Verify=RSA-PSS-10
503 Ctrl = rsa_padding_mode:pss
504 Ctrl = rsa_mgf1_md:sha1
505 Input=fad3902c9750622a2bc672622c48270cc57d3ea8
506 Output=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
507
508 +Availablein = default
509 Verify=RSA-PSS-10
510 Ctrl = rsa_padding_mode:pss
511 Ctrl = rsa_mgf1_md:sha1
512 @@ -1329,11 +1376,13 @@ Title = RSA FIPS tests
513
514 # FIPS tests
515
516 -# Verifying with SHA1 is permitted in fips mode for older applications
517 +# Verifying with SHA1 is not permitted on RHEL-9 in FIPS mode
518 +Availablein = fips
519 DigestVerify = SHA1
520 Key = RSA-2048
521 Input = "Hello "
522 Output = 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
523 +Result = DIGESTVERIFYINIT_ERROR
524
525 # Verifying with a 1024 bit key is permitted in fips mode for older applications
526 DigestVerify = SHA256
527 diff --git a/test/recipes/80-test_cms.t b/test/recipes/80-test_cms.t
528 index 48a92f735d..34afe91b88 100644
529 --- a/test/recipes/80-test_cms.t
530 +++ b/test/recipes/80-test_cms.t
531 @@ -162,7 +162,7 @@ my @smime_pkcs7_tests = (
532 [ "{cmd1}", @defaultprov, "-sign", "-in", $smcont, "-md", "sha1",
533 "-certfile", $smroot,
534 "-signer", $smrsa1, "-out", "{output}.cms" ],
535 - [ "{cmd2}", @prov, "-verify", "-in", "{output}.cms",
536 + [ "{cmd2}", @defaultprov, "-verify", "-in", "{output}.cms",
537 "-CAfile", $smroot, "-out", "{output}.txt" ],
538 \&final_compare
539 ],
540 @@ -170,7 +170,7 @@ my @smime_pkcs7_tests = (
541 [ "signed zero-length content S/MIME format, RSA key SHA1",
542 [ "{cmd1}", @defaultprov, "-sign", "-in", $smcont_zero, "-md", "sha1",
543 "-certfile", $smroot, "-signer", $smrsa1, "-out", "{output}.cms" ],
544 - [ "{cmd2}", @prov, "-verify", "-in", "{output}.cms",
545 + [ "{cmd2}", @defaultprov, "-verify", "-in", "{output}.cms",
546 "-CAfile", $smroot, "-out", "{output}.txt" ],
547 \&zero_compare
548 ],
549 diff --git a/test/recipes/80-test_ssl_old.t b/test/recipes/80-test_ssl_old.t
550 index 8c52b637fc..ff75c5b6ec 100644
551 --- a/test/recipes/80-test_ssl_old.t
552 +++ b/test/recipes/80-test_ssl_old.t
553 @@ -394,6 +394,9 @@ sub testssl {
554 'test sslv2/sslv3 with 1024bit DHE via BIO pair');
555 }
556
557 + SKIP: {
558 + skip "SSLv3 is not supported by the FIPS provider", 4
559 + if $provider eq "fips";
560 ok(run(test([@ssltest, "-bio_pair", "-server_auth", @CA])),
561 'test sslv2/sslv3 with server authentication');
562 ok(run(test([@ssltest, "-bio_pair", "-client_auth", @CA])),
563 @@ -402,6 +405,7 @@ sub testssl {
564 'test sslv2/sslv3 with both client and server authentication via BIO pair');
565 ok(run(test([@ssltest, "-bio_pair", "-server_auth", "-client_auth", "-app_verify", @CA])),
566 'test sslv2/sslv3 with both client and server authentication via BIO pair and app verify');
567 + }
568
569 SKIP: {
570 skip "No IPv4 available on this machine", 4
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed