root
/
openssl
mirror of https://github.com/openssl/openssl.git
1
0
Fork 0
Code Issues Actions 7 Packages Projects Releases Wiki Activity

ecx: convert to transient error state on import failure in FIPS provider 

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28376)
This commit is contained in:
Pauli 2025-08-29 12:42:46 +10:00 committed by Neil Horman
parent d6f398cc95
commit 811f68ffe2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
providers/implementations/keymgmt/ecx_kmgmt.c.in
View File

@ -234,7 +234,7 @@ static int ecx_import(void *keydata, int selection, const OSSL_PARAM params[])
if (key->haspubkey && key->privkey != NULL) { if (key->haspubkey && key->privkey != NULL) {
ok = ecd_fips140_pairwise_test(key, key->type, 1); ok = ecd_fips140_pairwise_test(key, key->type, 1);
if (ok <= 0) if (ok <= 0)
ossl_set_error_state(OSSL_SELF_TEST_TYPE_PCT); ossl_set_error_state(OSSL_SELF_TEST_TYPE_PCT_IMPORT);
} }
#endif /* FIPS_MODULE */ #endif /* FIPS_MODULE */
return ok; return ok;