File _patchinfo of Package patchinfo.41798
<patchinfo incident="41798"> <issue tracker="bnc" id="1246914">[NetApp SLES15 SP7 Bug]: libnvme/nvme-cli TLS PSK generation logic not compliant to RFC 8446</issue> <packager>wagi</packager> <rating>important</rating> <category>recommended</category> <summary>Recommended update for libnvme, nvme-cli</summary> <description>This update for libnvme, nvme-cli fixes the following issues: Fix: libnvme/nvme-cli TLS PSK generation logic not compliant to RFC 8446: (bsc#1246914) * linux: use EVP_PKEY_CTX_add1_hkdf_info only once in compat function * nvme/linux: check for empty digest in gen_tls_identity() * nvme/linux: add fallback implementation for nvme_insert_tls_key_compat() * linux: fix HKDF TLS key derivation back to OpenSSL 3.0.8 * libnvme: TLS PSK derivation fixes * linux: rename __nvme_insert_tls_key_versioned() to __nvme_insert_tls_key() * linux: rename __nvme_insert_tls_key() to __nvme_import_tls_key() * test/psk: add testcase for TLS identity derivation * linux: set errno when nvme_generate_tls_key_identity() fails * nvme: add --compat flag for 'gen-tls-key' and 'check-tls-key' </description> </patchinfo>