diff options
| author | Enji Cooper <[email protected]> | 2026-07-02 01:38:24 +0200 |
|---|---|---|
| committer | Tomas Mraz <[email protected]> | 2026-08-26 11:26:30 +0200 |
| commit | 38242ab403a292eef6f0f91796526b2183c8bb50 (patch) | |
| tree | ef58b901394a1a696c61a039b9b95788d670c0be /include | |
| parent | Skip the legacy session ID check for DTLS 1.3 resumption (diff) | |
| download | openssl-38242ab403a292eef6f0f91796526b2183c8bb50.tar.gz openssl-38242ab403a292eef6f0f91796526b2183c8bb50.zip | |
fips: make diagnosing `*-mac` issues in openssl.cnf easier
Prior to this change, if either the config data or checksum data
for a provider was missing, a single error would have been emitted for
the two scenarios, resulting in potential confusion around missing
checksum data from `openssl.cnf`.
This change splits apart the conditional to help the end-user better
determine why loading the FIPS provider failed after running the
self-test check. A new error,
`PROV_R_FIPS_MODULE_MISSING_CHECKSUM`, is added to capture this
[new] more fine-grain error state.
Signed-off-by: Enji Cooper <[email protected]>
Reviewed-by: Paul Dale <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
Merge-date: Wed Aug 26 09:26:38 2026
Merged-from: https://github.com/openssl/openssl/pull/31820
Diffstat (limited to 'include')
| -rw-r--r-- | include/openssl/proverr.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/openssl/proverr.h b/include/openssl/proverr.h index 0db3a82b470..34bd02af9d0 100644 --- a/include/openssl/proverr.h +++ b/include/openssl/proverr.h @@ -49,6 +49,7 @@ #define PROV_R_FIPS_MODULE_ENTERING_ERROR_STATE 224 #define PROV_R_FIPS_MODULE_IMPORT_PCT_ERROR 253 #define PROV_R_FIPS_MODULE_IN_ERROR_STATE 225 +#define PROV_R_FIPS_MODULE_MISSING_CHECKSUM 267 #define PROV_R_GENERATE_ERROR 191 #define PROV_R_ILLEGAL_OR_UNSUPPORTED_PADDING_MODE 165 #define PROV_R_INDICATOR_INTEGRITY_FAILURE 210 |