Bug 1990814

Summary: OpenSSL-3: Rebase to latest (future) upstream release
Product: Red Hat Enterprise Linux 9 Reporter: Sahana Prasad <sahana>
Component: opensslAssignee: Sahana Prasad <sahana>
Status: CLOSED ERRATA QA Contact: Alicja Kario <hkario>
Severity: high Docs Contact: Mirek Jahoda <mjahoda>
Priority: high    
Version: 9.0CC: bstinson, dbelyavs, hkario, jwboyer, mjahoda, ssorce
Target Milestone: betaKeywords: Triaged
Target Release: ---Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openssl-3.0.1-4.el9 Doc Type: Enhancement
Doc Text:
.RHEL 9 provides OpenSSL 3.0.1 RHEL 9 provides `openssl` packages in upstream version 3.0.1, which includes many improvements and bug fixes over the previous version. The most notable changes include: * Added the new Provider concept. Providers are collections of algorithms, and you can choose different providers for different applications. * Introduced the new versioning scheme in the following format: _<major>.<minor>.<patch>_. * Added support for the Certificate Management Protocol (CMP, RFC 4210), the Certificate Request Message Format (CRMF), and HTTP transfer (RFC 6712). * Introduced an HTTP(S) client that supports GET and POST, redirection, plain and ASN.1-encoded contents, proxies, and timeouts. * Added new Key Derivation Function API (EVP_KDF) and Message Authentication Code API (EVP_MAC). * Added support for Linux Kernel TLS (KTLS) through compiling with the `enable-ktls` configuration option. * Added CAdES-BES signature verification support. * Added CAdES-BES signature scheme and attributes support (RFC 5126) to CMS API. * Added support for new algorithms, for example: ** KDF algorithms "SINGLE STEP" and "SSH". ** MAC algorithms "GMAC" and "KMAC". ** KEM algorithm "RSASVE". ** Cipher algorithm "AES-SIV" * Added AuthEnvelopedData content type structure (RFC 5083) using AES_GCM. * The default algorithms for PKCS #12 creation with the `PKCS12_create()` function changed to more modern PBKDF2 and AES-based algorithms. * Added a new generic trace API.
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-05-17 15:36:34 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 24 errata-xmlrpc 2022-05-17 15:36:34 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (new packages: openssl), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:3900