Bug 1990814
| Summary: | OpenSSL-3: Rebase to latest (future) upstream release | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | Sahana Prasad <sahana> |
| Component: | openssl | Assignee: | Sahana Prasad <sahana> |
| Status: | CLOSED ERRATA | QA Contact: | Alicja Kario <hkario> |
| Severity: | high | Docs Contact: | Mirek Jahoda <mjahoda> |
| Priority: | high | ||
| Version: | 9.0 | CC: | bstinson, dbelyavs, hkario, jwboyer, mjahoda, ssorce |
| Target Milestone: | beta | Keywords: | Triaged |
| Target Release: | --- | Flags: | pm-rhel:
mirror+
|
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | openssl-3.0.1-4.el9 | Doc Type: | Enhancement |
| Doc Text: |
.RHEL 9 provides OpenSSL 3.0.1
RHEL 9 provides `openssl` packages in upstream version 3.0.1, which includes many improvements and bug fixes over the previous version. The most notable changes include:
* Added the new Provider concept. Providers are collections of algorithms, and you can choose different providers for different applications.
* Introduced the new versioning scheme in the following format: _<major>.<minor>.<patch>_.
* Added support for the Certificate Management Protocol (CMP, RFC 4210), the Certificate Request Message Format (CRMF), and HTTP transfer (RFC 6712).
* Introduced an HTTP(S) client that supports GET and POST, redirection, plain and ASN.1-encoded contents, proxies, and timeouts.
* Added new Key Derivation Function API (EVP_KDF) and Message Authentication Code API (EVP_MAC).
* Added support for Linux Kernel TLS (KTLS) through compiling with the `enable-ktls` configuration option.
* Added CAdES-BES signature verification support.
* Added CAdES-BES signature scheme and attributes support (RFC 5126) to CMS API.
* Added support for new algorithms, for example:
** KDF algorithms "SINGLE STEP" and "SSH".
** MAC algorithms "GMAC" and "KMAC".
** KEM algorithm "RSASVE".
** Cipher algorithm "AES-SIV"
* Added AuthEnvelopedData content type structure (RFC 5083) using AES_GCM.
* The default algorithms for PKCS #12 creation with the `PKCS12_create()` function changed to more modern PBKDF2 and AES-based algorithms.
* Added a new generic trace API.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2022-05-17 15:36:34 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Comment 24
errata-xmlrpc
2022-05-17 15:36:34 UTC
|