Code

OpenSSL FIPS provider support#262

Code

Merged

jbdelcuv merged 27 commits intointel:mainintel/intel-sgx-ssl:mainfrom jbdelcuv:ossl_fips_integrationjbdelcuv/intel-sgx-ssl:ossl_fips_integrationCopy head branch name to clipboardDec 27, 2024

+4,883-115

Commits

Commits on Nov 26, 2024

• update for OpenSSL 3.1.x (intel#187)

  Show description for 4586516
  

  jinghe-INTC

  authored and

  jbdelcuv

  committed
  4586516

• Create FIPS support branch based on OpenSSL 3.1 with a separate FIPS

  Show description for 87bad5c
  

  Jing He

  and

  jbdelcuv

  committed
  87bad5c

Commits on Nov 27, 2024

• Improve the patch.

  Show description for 4432ab9
  

  Jing He

  authored and

  jbdelcuv

  committed
  4432ab9

• Fix the keygen tests and other updates.

  Show description for 3b8f1bf
  

  Jing He

  authored and

  jbdelcuv

  committed
  3b8f1bf

• Workaround the failure of ec_d2i_publickey_test.

  Show description for 98b359b
  

  Jing He

  authored and

  jbdelcuv

  committed
  98b359b

• Workaround the failure of the EC test cases.

  Show description for f0f1bb8
  

  Jing He

  authored and

  jbdelcuv

  committed
  f0f1bb8

• Fix DH and AES-GCM test cases.

  Show description for b3df72b
  

  Jing He

  authored and

  jbdelcuv

  committed
  b3df72b

• Add another ECDSA test case.

  

  Jing He

  authored and

  jbdelcuv

  committed
  4e9380d

• Minor update to AES-GCM test case.

  

  Jing He

  authored and

  jbdelcuv

  committed
  1c55967

• Minor update to the test enclave.

  

  Jing He

  authored and

  jbdelcuv

  committed
  13c5f33

• Support loading fipsmodule.cnf included in openssl.cnf

  

  Jing He

  authored and

  jbdelcuv

  committed
  2aaf6ee

• Add suport for getpid and time functions to solve the issue where the

  Show description for b403dd5
  

  Jing He

  authored and

  jbdelcuv

  committed
  b403dd5

• avoid fflush()

  Show description for 12bfa07
  

  Jing He

  authored and

  jbdelcuv

  committed
  12bfa07

• Removed unused functionality from this file.

  Show description for d9f61e9
  

  Jing He

  authored and

  jbdelcuv

  committed
  d9f61e9

• Build the FIPS provider in its own Makefile.

  Show description for 1353a3c
  jbdelcuv

  committed
  1353a3c

• Don't build the test app by default in FIPS mode since it depends on

  Show description for be5eb51
  jbdelcuv

  committed
  be5eb51

• Add a simple test program demonstrating how to load the OpenSSL FIPS

  Show description for de2ac50
  jbdelcuv

  committed
  de2ac50

• Replace error code so that OpenSSL 3.1.2 builds without changes,

  Show description for cdb5bba
  jbdelcuv

  committed
  cdb5bba

• Document limitation regarding the location of the OpenSSL configuration

  Show description for 9258c91
  jbdelcuv

  committed
  9258c91

• Don't send the output of tar to the console.

  Show description for fc21415
  jbdelcuv

  committed
  fc21415

Commits on Dec 2, 2024

• Print detailed OSSL error information to console.

  jbdelcuv

  committed
  3bbc9b9

Commits on Dec 9, 2024

• Point back to the main branch.

  Show description for e0bd79b
  jbdelcuv

  committed
  e0bd79b

• Update to version 3.1.6, which is what we intend to support.

  Show description for a3b9f47
  jbdelcuv

  committed
  a3b9f47

Commits on Dec 16, 2024

• Rename API following update in the SDK.

  Show description for 3ead21b
  jbdelcuv

  committed
  3ead21b

Commits on Dec 19, 2024

• Generate an OpenSSL configuration file at build time.

  Show description for 7d10ac4
  jbdelcuv

  committed
  7d10ac4

• Revert "Generate an OpenSSL configuration file at build time."

  Show description for c0b43e4
  jbdelcuv

  committed
  c0b43e4

• Generate an OpenSSL configuration file at build time.

  Show description for 4b83850
  jbdelcuv

  committed
  4b83850