Skip to content

fix: ci: tests: Use FIPS compatible DH-param files

Artem Boldariev requested to merge 5074-fips-compatible-dhparams into main

When the tests were added, the files were generated without FIPS compatibility in mind. That made the tests fail on recent OpenSSL versions in FIPS mode.

So, the files were regenerated on a FIPS compliant system using the following stanza:

$ openssl dhparam -out <file> 3072

Apparently, the old files are not valid for FIPS starting with OpneSSL 3.1.X release series as "FIPS 140-3 compliance changes" are mentioned in the changelog.

Closes #5074 (closed).

Edited by Artem Boldariev

Merge request reports