Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Done-Errata
Priority: Normal
Fix Version/s: rhel-9.4
Affects Version/s: None
Component/s: openssl
Labels:

Fixed in Build:
openssl-3.0.7-26.el9
Epic Link:
OpenSSL errata for RHEL 9.4

Pool Team:

sst_security_crypto
Sub-System Group:

ssg_security

Internal Target Milestone:
26
Story Points:
0.5
ACKs Check:

QE ack
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Product Documentation Required:
Yes
Sprint:
Crypto24Q1, Crypto23Q4

Acceptance Criteria:

Hide

AC1: /etc/pki/tls/openssl.d exists and is included from openssl.cnf

Show
AC1: /etc/pki/tls/openssl.d exists and is included from openssl.cnf
Preliminary Testing:
Pass
Errata Link:
https://errata.engineering.redhat.com/advisory/124119
Gating Tests:

Enabled
Test Coverage:

Yes

Release Note Type:
Enhancement
Release Note Text:

Hide
.OpenSSL adds a drop-in directory for provider configuration

The OpenSSL TLS toolkit supports provider APIs for installation and configuration of modules that provide cryptographic algorithms. With this update, you can place provider-specific configuration in separate `.conf` files in the `/etc/pki/tls/openssl.d` directory without modifying the main OpenSSL configuration file.

Show
.OpenSSL adds a drop-in directory for provider configuration The OpenSSL TLS toolkit supports provider APIs for installation and configuration of modules that provide cryptographic algorithms. With this update, you can place provider-specific configuration in separate `.conf` files in the `/etc/pki/tls/openssl.d` directory without modifying the main OpenSSL configuration file.
Release Note Status:
Done

SFDC Cases Counter:
SFDC Cases Links:

Description

We want to install 3rd-party providers and activate them in load time

OpenSSL supports a mechanism of including files from a directory when all of the files in that directory are parsed on load and openssl is configured accordingly.

We need to create the directory for provider configuration files on installation and add the corresponding include directive to openssl.cnf

Attachments

Issue Links

links to

RHSA-2023:124119 openssl bug fix and enhancement update

mentioned on

Commit - Add a directory for OpenSSL providers configuration

Activity

People

Assignee:: Dmitry Belyavskiy

Reporter:: Dmitry Belyavskiy

Developer:: Dmitry Belyavskiy

QA Contact:: Hubert Kario

Doc Contact:: Jan Fiala

Votes:: 0 Vote for this issue

Watchers:: 7 Start watching this issue

Dates

Created:: 2023/11/22 12:19 PM

Updated:: 2024/04/30 10:52 AM

Resolved:: 2024/04/30 10:52 AM

Target end:: 2024/02/26

Release Date:: 2024/04/30