Synopsis

openssl bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

Updated openssl packages that fix a bug and add various enhancements are now
available for Red Hat Enterprise Linux 5.

Description

OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and
Transport Layer Security (TLS) protocols, as well as a full-strength
general-purpose cryptography library.

This update fixes the following bug:

• Prior to this update, the openssl configuration file variables with "yes" or
  "no" values were parsed incorrectly. The value of "yes" was interpreted as "no".
  With this update, the "yes" or "no" values in the configuration file are now
  parsed correctly. (BZ#726593)
  

In addition, this update provides the following enhancements:

• Documentation of possible error states related to the FIPS mode is now
  included in the README.FIPS file. (BZ#628976)
  
• DigiCert Certification Authority certificates were added to the
  /etc/pki/tls/certs/ca-bundle.crt file that contains the certificates of trusted
  certification authorities. (BZ#735819)
  
• Known answer self-tests for the SHA2 algorithms (SHA256 and SHA512) were added
  to the FIPS mode start up self tests. (BZ#740866)
  
• The makefile for generating keys and certificates was updated to generate the
  private keys with a length of 2048 bits by default as the previous length of
  1024 bits is now considered too weak. (BZ#745410)
  

All users of OpenSSL should upgrade to these updated packages, which fix this
bug and add these enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 628976 - Update README.FIPS for error state clarification
• BZ - 745410 - Makefile for generating keys and certificates specifies less than the recommended number of bits

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
openssl-0.9.8e-22.el5.src.rpm	SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5
x86_64
openssl-0.9.8e-22.el5.i686.rpm	SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258
openssl-0.9.8e-22.el5.x86_64.rpm	SHA-256: 4eca1043c61d8bde9702ea95ce5ba555bf73877662ddd8d363d6c425581f62e9
openssl-devel-0.9.8e-22.el5.i386.rpm	SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307
openssl-devel-0.9.8e-22.el5.x86_64.rpm	SHA-256: 9ee1d6386662ffcccc699e268c142c06a1bc6b30a51dcfc75aebece2389d5de2
openssl-perl-0.9.8e-22.el5.x86_64.rpm	SHA-256: 2ac70639a877f7beaac0019eeb9f9c52e1a9e1866ef6abc669e3de55ae015714
ia64
openssl-0.9.8e-22.el5.i686.rpm	SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258
openssl-0.9.8e-22.el5.ia64.rpm	SHA-256: b8b18472ceb841f1e1588541ddb195f8f0590c50c426dedd179d190aae6f21f7
openssl-devel-0.9.8e-22.el5.ia64.rpm	SHA-256: aca4bd949bc7b34a535bb7a0a13960ad181acefa48ce1a2f0b2ae42764c8fc0c
openssl-perl-0.9.8e-22.el5.ia64.rpm	SHA-256: ee17e6bef7dfa1ad842f8d7f0bd2a3d7cb9f4c8cebc449003130b89734b11201
i386
openssl-0.9.8e-22.el5.i386.rpm	SHA-256: 1c7a648be9d38a494bfa9d2285f2a2816f1a27832c6630f14480a158c8de38f2
openssl-0.9.8e-22.el5.i686.rpm	SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258
openssl-devel-0.9.8e-22.el5.i386.rpm	SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307
openssl-perl-0.9.8e-22.el5.i386.rpm	SHA-256: daaeb75519e70b360c30d18e8feb760c59b7c005f95c97fee0412e6812df1313

Red Hat Enterprise Linux Workstation 5

SRPM
openssl-0.9.8e-22.el5.src.rpm	SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5
x86_64
openssl-0.9.8e-22.el5.i686.rpm	SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258
openssl-0.9.8e-22.el5.x86_64.rpm	SHA-256: 4eca1043c61d8bde9702ea95ce5ba555bf73877662ddd8d363d6c425581f62e9
openssl-devel-0.9.8e-22.el5.i386.rpm	SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307
openssl-devel-0.9.8e-22.el5.x86_64.rpm	SHA-256: 9ee1d6386662ffcccc699e268c142c06a1bc6b30a51dcfc75aebece2389d5de2
openssl-perl-0.9.8e-22.el5.x86_64.rpm	SHA-256: 2ac70639a877f7beaac0019eeb9f9c52e1a9e1866ef6abc669e3de55ae015714
i386
openssl-0.9.8e-22.el5.i386.rpm	SHA-256: 1c7a648be9d38a494bfa9d2285f2a2816f1a27832c6630f14480a158c8de38f2
openssl-0.9.8e-22.el5.i686.rpm	SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258
openssl-devel-0.9.8e-22.el5.i386.rpm	SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307
openssl-perl-0.9.8e-22.el5.i386.rpm	SHA-256: daaeb75519e70b360c30d18e8feb760c59b7c005f95c97fee0412e6812df1313

Red Hat Enterprise Linux Desktop 5

SRPM
openssl-0.9.8e-22.el5.src.rpm	SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5
x86_64
openssl-0.9.8e-22.el5.i686.rpm	SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258
openssl-0.9.8e-22.el5.x86_64.rpm	SHA-256: 4eca1043c61d8bde9702ea95ce5ba555bf73877662ddd8d363d6c425581f62e9
openssl-perl-0.9.8e-22.el5.x86_64.rpm	SHA-256: 2ac70639a877f7beaac0019eeb9f9c52e1a9e1866ef6abc669e3de55ae015714
i386
openssl-0.9.8e-22.el5.i386.rpm	SHA-256: 1c7a648be9d38a494bfa9d2285f2a2816f1a27832c6630f14480a158c8de38f2
openssl-0.9.8e-22.el5.i686.rpm	SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258
openssl-perl-0.9.8e-22.el5.i386.rpm	SHA-256: daaeb75519e70b360c30d18e8feb760c59b7c005f95c97fee0412e6812df1313

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
openssl-0.9.8e-22.el5.src.rpm	SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5
s390x
openssl-0.9.8e-22.el5.s390.rpm	SHA-256: 60a07aa5cce4997d836c3b8836a717b2e8485f798a9c51cc6222804fea397874
openssl-0.9.8e-22.el5.s390x.rpm	SHA-256: 5e9af3b655dc04ad2bcc844fe3f7d43fcb22560577cbfd589ad70ce441800791
openssl-devel-0.9.8e-22.el5.s390.rpm	SHA-256: 2ad78bbeb2ae7040460987498fed26ef099cbba77c2d824cf3d36cb8c57149aa
openssl-devel-0.9.8e-22.el5.s390x.rpm	SHA-256: 04798dad3bcf971b8a05d8d9c99013c02244d2150da740de1d3543abeaf93613
openssl-perl-0.9.8e-22.el5.s390x.rpm	SHA-256: 2fc089e89a68920cb709621122c80d148c5077e7f9783b6e65abee85dfdf0510

Red Hat Enterprise Linux for Power, big endian 5

SRPM
openssl-0.9.8e-22.el5.src.rpm	SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5
ppc
openssl-0.9.8e-22.el5.ppc.rpm	SHA-256: dc04e2e01c2873c2824b7dfd4965d3ad331c2951ed05e6ab9319580ac74e2ccb
openssl-0.9.8e-22.el5.ppc64.rpm	SHA-256: 391026a2ed9ab1fd5a2bb4084762a293c7ee22265ee949156866fd4c272974af
openssl-devel-0.9.8e-22.el5.ppc.rpm	SHA-256: 0e43bc1ae415d40b7a31dbec079dd56a6c5a0a3d9774a11d882962528c80a474
openssl-devel-0.9.8e-22.el5.ppc64.rpm	SHA-256: 9b752e785b971be22c35086ba5bf2ac5dae9c1cb867f7596c2410ff8dfeaa20e
openssl-perl-0.9.8e-22.el5.ppc.rpm	SHA-256: b2eb78ae003776bdbbfee6785c2bd91d692d8158259f0e5251486b60c69d4e74

Red Hat Enterprise Linux Server from RHUI 5

SRPM
openssl-0.9.8e-22.el5.src.rpm	SHA-256: 5c1b33c8a555e7d11f6e5d0a55fd308dc4c4d91c82e6ae83b7dcf0d5ce418bc5
x86_64
openssl-0.9.8e-22.el5.i686.rpm	SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258
openssl-0.9.8e-22.el5.x86_64.rpm	SHA-256: 4eca1043c61d8bde9702ea95ce5ba555bf73877662ddd8d363d6c425581f62e9
openssl-devel-0.9.8e-22.el5.i386.rpm	SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307
openssl-devel-0.9.8e-22.el5.x86_64.rpm	SHA-256: 9ee1d6386662ffcccc699e268c142c06a1bc6b30a51dcfc75aebece2389d5de2
openssl-perl-0.9.8e-22.el5.x86_64.rpm	SHA-256: 2ac70639a877f7beaac0019eeb9f9c52e1a9e1866ef6abc669e3de55ae015714
i386
openssl-0.9.8e-22.el5.i386.rpm	SHA-256: 1c7a648be9d38a494bfa9d2285f2a2816f1a27832c6630f14480a158c8de38f2
openssl-0.9.8e-22.el5.i686.rpm	SHA-256: fee8506307c16c870c56ba2a3b2fd655d098ab435d39ae8a45439cb01293a258
openssl-devel-0.9.8e-22.el5.i386.rpm	SHA-256: 71eaaa837df1fee1568c3c44bdeaec4f2f9408175b215a30f1dee359a8f87307
openssl-perl-0.9.8e-22.el5.i386.rpm	SHA-256: daaeb75519e70b360c30d18e8feb760c59b7c005f95c97fee0412e6812df1313