Update to version 1.1.1k

Use AI_ADDRCONFIG only when explicit host name is given
Allow only curves defined in RFC 8446 in TLS 1.3

Remove 2-key 3DES test from FIPS_selftest

Fix CVE-2021-3450 openssl: CA certificate check bypass with
Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing

Fix CVE-2020-1971 ediparty null pointer dereference

Implemented new FIPS requirements in regards to KDF and DH selftests
Disallow certificates with explicit EC parameters

Further changes for SP 800-56A rev3 requirements

Rewire FIPS_drbg API to use the RAND_DRBG
Use the well known DH groups in TLS even for 2048 and 1024 bit parameters

Disallow dropping Extended Master Secret extension
Return alert from s_server if ALPN protocol does not match
SHA1 is allowed in @SECLEVEL=2 only if allowed by

Add FIPS selftest for PBKDF2 and KBKDF

Allow only well known DH groups in the FIPS mode

update to the 1.1.1g release
FIPS module installed state definition is modified

add selftest of the RAND_DRBG implementation

fix incorrect error return value from FIPS_selftest_dsa
S390x: properly restore SIGILL signal handler

additional fix for the edk2 build

disallow use of SHA-1 signatures in TLS in FIPS mode