Luis Colmenero

Support for p384 curves and allowed security algorithms

1

### Summary This PR introduces the possibility to generate ECDSA P384 resources (CA, peers, and sign Governance/Permissions Documents). It also introduces an example that uses these resources and tests the...

OpenSSL 3.0 performance degradation due to bottleneck in the `ossl_gcm_get_ctx_params` and `ossl_gcm_set_ctx_params` functions

4

**Context**: We are observing some performance degradation when migrating to OpenSSL 3.0.7 from OpenSSL 1.1.1s. Looking at a profiler in a Linux architecture revealed that the calls to [`EVP_CipherInit_ex`](https://github.com/openssl/openssl/blob/19cc035b6c6f2283573d29c7ea7f7d675cf750ce/crypto/evp/evp_enc.c#L408), [`EVP_CIPHER_CTX_set_params`](https://github.com/openssl/openssl/blob/19cc035b6c6f2283573d29c7ea7f7d675cf750ce/crypto/evp/evp_enc.c#L1266),...

[Bug]: X509_NAME_cmp returns != 0 for subject names that only differ in capitalization

2

### Contact Details [email protected] ### Version 5.5.1 (but I tested it on master as well, see reproducer) ### Description [wolfSSL compares directly the subject name strings](https://github.com/wolfSSL/wolfssl/blob/ff09f418c08f9a08019b6c3e215c617aedd97fc6/src/x509.c#L11162) and capitalization matters. On...

Store context flags vs verification parameters flags

3

### Version 5.8.2 ### Description In OpenSSL `X509_STORE_CTX_set_flags` translates to `X509_VERIFY_PARAM_set_flags` (see [here](https://github.com/openssl/openssl/blob/aea7aaf2abb04789f5868cbabec406ea43aa84bf/crypto/x509/x509_vfy.c#L2679)). In wolfSSL, `X509_STORE_CTX_set_flags` sets the context flags (see [here](https://github.com/wolfSSL/wolfssl/blob/decea12e223869c8f8f3ab5a53dc90b69f436eb2/src/x509_str.c#L692)). These are not the same as the verification...