From 50ea5cdcb735916591e35a04c1f5a659bf253ddc Mon Sep 17 00:00:00 2001 From: slontis Date: Wed, 8 Feb 2023 17:22:43 +1000 Subject: Add option to FIPS module to enforce EMS check during KDF TLS1_PRF. Fixes #19989 Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/20241) --- crypto/err/openssl.txt | 1 + 1 file changed, 1 insertion(+) (limited to 'crypto') diff --git a/crypto/err/openssl.txt b/crypto/err/openssl.txt index e90e5dc033..f391e75647 100644 --- a/crypto/err/openssl.txt +++ b/crypto/err/openssl.txt @@ -1006,6 +1006,7 @@ PROV_R_BN_ERROR:160:bn error PROV_R_CIPHER_OPERATION_FAILED:102:cipher operation failed PROV_R_DERIVATION_FUNCTION_INIT_FAILED:205:derivation function init failed PROV_R_DIGEST_NOT_ALLOWED:174:digest not allowed +PROV_R_EMS_NOT_ENABLED:233:ems not enabled PROV_R_ENTROPY_SOURCE_STRENGTH_TOO_WEAK:186:entropy source strength too weak PROV_R_ERROR_INSTANTIATING_DRBG:188:error instantiating drbg PROV_R_ERROR_RETRIEVING_ENTROPY:189:error retrieving entropy -- cgit v1.2.3