CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory
Resolves: rhbz#2089444
CVE-2022-1343 openssl: Signer certificate verification returned
Resolves: rhbz#2087911
CVE-2022-1292 openssl: c_rehash script allows command injection
Resolves: rhbz#2090362
Revert "Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode"
Use KAT for ECDSA signature tests, s390 arch
Resolves: rhbz#2069235

`openssl ecparam -list_curves` lists only FIPS-approved curves in FIPS mode
Resolves: rhbz#2083240
Ciphersuites with RSA KX should be filterd in FIPS mode
Related: rhbz#2085088
In FIPS mode, signature verification works with keys of arbitrary size
Resolves: rhbz#2077884

Disable SHA-1 signature verification in FIPS mode
Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode

Use KAT for ECDSA signature tests
Resolves: rhbz#2069235

`-config` argument of openssl app should work properly in FIPS mode
Resolves: rhbz#2083274
openssl req defaults on PKCS#8 encryption changed to AES-256-CBC
Resolves: rhbz#2063947

OpenSSL should not accept custom elliptic curve parameters
Resolves rhbz#2066412
OpenSSL should not accept explicit curve parameters in FIPS mode
Resolves rhbz#2058663

Change FIPS module version to include hash of specfile, patches and sources

OpenSSL FIPS module should not build in non-approved algorithms
Resolves: rhbz#2081378

FIPS provider should block RSA encryption for key transport.
Other RSA encryption options should still be available
Resolves: rhbz#2053289

Fix regression in evp_pkey_name2type caused by tr_TR locale fix

Fix openssl curl error with LANG=tr_TR.utf8
Resolves: rhbz#2071631

FIPS provider should block RSA encryption for key transport
Resolves: rhbz#2053289

Fix occasional internal error in TLS when DHE is used
Resolves: rhbz#2004915

Fix acceptance of SHA-1 certificates with rh-allow-sha1-signatures = yes when
Resolves: rhbz#2065400

Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes
Resolves: rhbz#2065400

CVE-2022-0778 fix
Resolves: rhbz#2062315