[openssl/openssl] c90b7d: Performance Optimization of SM4-CBC Encryption and...
0 views
Skip to first unread message
Bob Beck
Dec 12, 2025, 9:19:58 AM (4 days ago) Dec 12
to openssl...@openssl.org
Branch: refs/heads/feature/method-store-freeze
Home: https://github.com/openssl/openssl
Commit: c90b7dddf25f44c3ed27a69ae6bc67cfdb4894cd
https://github.com/openssl/openssl/commit/c90b7dddf25f44c3ed27a69ae6bc67cfdb4894cd
Author: zhoulu <zhou...@zte.com.cn>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/sm4/asm/sm4-riscv64-zvksed.pl
M include/crypto/sm4_platform.h
M providers/implementations/ciphers/cipher_sm4_hw_rv64i.inc
M test/recipes/30-test_evp_data/evpciph_sm4.txt
Log Message:
-----------
Performance Optimization of SM4-CBC Encryption and Decryption with Assembly on RISC-V Architecture
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29137)
Commit: c7a657d8007853791f27235a176131ad1daf358a
https://github.com/openssl/openssl/commit/c7a657d8007853791f27235a176131ad1daf358a
Author: Timothy Copeland <tacop...@proton.me>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/x509/x509_vfy.c
M test/crltest.c
Log Message:
-----------
check_cert_crl(): Set CRL score for CRLs returned by get_crl callback
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29199)
Commit: 9ee928fb8c63d50bb2b9fdcb43c8374192f8cfca
https://github.com/openssl/openssl/commit/9ee928fb8c63d50bb2b9fdcb43c8374192f8cfca
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configurations/10-main.conf
M Configure
Log Message:
-----------
Engine removal: Silence the CI tests about engines
As we can't do every change in one big PR (and we also don't want),
therefore there always will be failing tests until everything is
resolved/cleaned up. This way we silence the CI about engine tests and
later we can reenable them to see what else needs to be fixed.
Resolves: https://github.com/openssl/project/issues/1371
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: b1f2078493a47f2cfde36b4c51ffe05e592a88b4
https://github.com/openssl/openssl/commit/b1f2078493a47f2cfde36b4c51ffe05e592a88b4
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/build.info
R test/enginetest.c
R test/recipes/30-test_engine.t
Log Message:
-----------
Remove engine test
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: d688be3b95a782e7bc58d0763aad4a470a6567a5
https://github.com/openssl/openssl/commit/d688be3b95a782e7bc58d0763aad4a470a6567a5
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/README-external.md
R test/recipes/95-test_external_gost_engine.t
R test/recipes/95-test_external_gost_engine_data/gost_engine.sh
Log Message:
-----------
Remove GOST external tests
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 4bd0612a2a4ddfe4e56ea67f25392c41a34c69ee
https://github.com/openssl/openssl/commit/4bd0612a2a4ddfe4e56ea67f25392c41a34c69ee
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M apps/build.info
R apps/engine.c
M doc/build.info
M doc/man1/build.info
M doc/man1/openssl-cmds.pod.in
R doc/man1/openssl-engine.pod.in
M doc/man1/openssl.pod
M doc/man7/openssl-env.pod
Log Message:
-----------
Remove openssl engine command
This patch removes apps/engine.c and associated man pages.
Resolves: https://github.com/openssl/project/issues/1370
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 8c7e974bb5296a26dd63e51cbe5d3739b8057bb5
https://github.com/openssl/openssl/commit/8c7e974bb5296a26dd63e51cbe5d3739b8057bb5
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M providers/common/include/prov/provider_util.h
M providers/common/provider_util.c
M providers/implementations/asymciphers/sm2_enc.c
M providers/implementations/kdfs/hkdf.c
M providers/implementations/kdfs/hmacdrbg_kdf.c
M providers/implementations/kdfs/kbkdf.c
M providers/implementations/kdfs/krb5kdf.c
M providers/implementations/kdfs/pbkdf1.c
M providers/implementations/kdfs/pbkdf2.c
M providers/implementations/kdfs/pkcs12kdf.c
M providers/implementations/kdfs/pvkkdf.c
M providers/implementations/kdfs/sshkdf.c
M providers/implementations/kdfs/sskdf.c
M providers/implementations/kdfs/tls1_prf.c
M providers/implementations/kdfs/x942kdf.c
M providers/implementations/keymgmt/mac_legacy_kmgmt.c
M providers/implementations/macs/cmac_prov.c
M providers/implementations/macs/gmac_prov.c
M providers/implementations/macs/hmac_prov.c
M providers/implementations/macs/kmac_prov.c
M providers/implementations/rands/drbg_hash.c
M providers/implementations/rands/drbg_hmac.c
M providers/implementations/signature/mac_legacy_sig.c
Log Message:
-----------
providers/: Remove ENGINEs
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 26b1723ed4be98657953b597ea4f8706748b2835
https://github.com/openssl/openssl/commit/26b1723ed4be98657953b597ea4f8706748b2835
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M apps/ca.c
M apps/cmp.c
M apps/cms.c
M apps/crl.c
M apps/dgst.c
M apps/dhparam.c
M apps/dsa.c
M apps/dsaparam.c
M apps/ec.c
M apps/ecparam.c
M apps/enc.c
M apps/gendsa.c
M apps/genpkey.c
M apps/genrsa.c
M apps/include/apps.h
R apps/include/engine_loader.h
M apps/include/opt.h
M apps/info.c
M apps/lib/apps.c
M apps/lib/build.info
R apps/lib/engine.c
R apps/lib/engine_loader.c
M apps/lib/s_cb.c
M apps/list.c
M apps/ocsp.c
M apps/openssl-vms.cnf
M apps/openssl.c
M apps/openssl.cnf
M apps/pkcs12.c
M apps/pkcs7.c
M apps/pkcs8.c
M apps/pkey.c
M apps/pkeyparam.c
M apps/pkeyutl.c
M apps/rand.c
M apps/req.c
M apps/rsa.c
M apps/rsautl.c
M apps/s_client.c
M apps/s_server.c
M apps/smime.c
M apps/speed.c
M apps/spkac.c
M apps/srp.c
M apps/storeutl.c
M apps/ts.c
M apps/verify.c
M apps/version.c
M apps/x509.c
M test/build.info
Log Message:
-----------
apps/: Remove engines
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 9425238145aa620b22050021a7e66affdef12fb9
https://github.com/openssl/openssl/commit/9425238145aa620b22050021a7e66affdef12fb9
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M apps/ca.c
M apps/cmp.c
M apps/cms.c
M apps/dgst.c
M apps/include/fmt.h
M apps/include/opt.h
M apps/lib/opt.c
M apps/pkey.c
M apps/pkeyutl.c
M apps/req.c
M apps/rsautl.c
M apps/s_client.c
M apps/s_server.c
M apps/smime.c
M apps/spkac.c
M apps/x509.c
M doc/man1/openssl-cmp.pod.in
Log Message:
-----------
apps/: Remove "-keyform engine"
Resolves: https://github.com/openssl/project/issues/1354
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 25fd85ff2873aa17a6a18402005a5e1ad2da4266
https://github.com/openssl/openssl/commit/25fd85ff2873aa17a6a18402005a5e1ad2da4266
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/man1/openssl-ca.pod.in
M doc/man1/openssl-cmp.pod.in
M doc/man1/openssl-cms.pod.in
M doc/man1/openssl-dgst.pod.in
M doc/man1/openssl-dhparam.pod.in
M doc/man1/openssl-dsa.pod.in
M doc/man1/openssl-dsaparam.pod.in
M doc/man1/openssl-ec.pod.in
M doc/man1/openssl-ecparam.pod.in
M doc/man1/openssl-enc.pod.in
M doc/man1/openssl-format-options.pod
M doc/man1/openssl-gendsa.pod.in
M doc/man1/openssl-genpkey.pod.in
M doc/man1/openssl-genrsa.pod.in
M doc/man1/openssl-info.pod.in
M doc/man1/openssl-list.pod.in
M doc/man1/openssl-pkcs12.pod.in
M doc/man1/openssl-pkcs7.pod.in
M doc/man1/openssl-pkcs8.pod.in
M doc/man1/openssl-pkey.pod.in
M doc/man1/openssl-pkeyparam.pod.in
M doc/man1/openssl-pkeyutl.pod.in
M doc/man1/openssl-rand.pod.in
M doc/man1/openssl-req.pod.in
M doc/man1/openssl-rsa.pod.in
M doc/man1/openssl-rsautl.pod.in
M doc/man1/openssl-s_client.pod.in
M doc/man1/openssl-s_server.pod.in
M doc/man1/openssl-smime.pod.in
M doc/man1/openssl-speed.pod.in
M doc/man1/openssl-spkac.pod.in
M doc/man1/openssl-srp.pod.in
M doc/man1/openssl-storeutl.pod.in
M doc/man1/openssl-ts.pod.in
M doc/man1/openssl-verify.pod.in
M doc/man1/openssl-version.pod.in
M doc/man1/openssl-x509.pod.in
Log Message:
-----------
apps/: Update docs
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 612af351c709d6b8d0b4ad087fda8cb1214b3c94
https://github.com/openssl/openssl/commit/612af351c709d6b8d0b4ad087fda8cb1214b3c94
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
R test/afalgtest.c
M test/build.info
M test/danetest.c
M test/ectest.c
Log Message:
-----------
test/: Remove ENGINEs
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 0d591943816fdb28580f87acada61a781b98df2a
https://github.com/openssl/openssl/commit/0d591943816fdb28580f87acada61a781b98df2a
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/err/err_all.c
M crypto/err/err_all_legacy.c
M crypto/ts/ts_conf.c
M include/openssl/cryptoerr_legacy.h
M include/openssl/evp.h
M include/openssl/rand.h
M include/openssl/ssl.h.in
M include/openssl/ts.h
Log Message:
-----------
include/: Remove ENGINEs
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 7a8075206b3ba93b2e30f304761d6eefaefcfd39
https://github.com/openssl/openssl/commit/7a8075206b3ba93b2e30f304761d6eefaefcfd39
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M ssl/ssl_ciph.c
M ssl/ssl_lib.c
M ssl/ssl_local.h
M ssl/statem/statem_clnt.c
M ssl/tls_depr.c
Log Message:
-----------
ssl/: Remove ENGINEs
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 9d94a6164fc5a9ff81754a98dfdfe5705df9fa7f
https://github.com/openssl/openssl/commit/9d94a6164fc5a9ff81754a98dfdfe5705df9fa7f
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/asn1/a_digest.c
M crypto/asn1/ameth_lib.c
M crypto/asn1/d2i_pr.c
M crypto/conf/conf_mall.c
M crypto/conf/conf_mod.c
M crypto/dh/dh_lib.c
M crypto/dsa/dsa_lib.c
M crypto/ec/ec_key.c
M crypto/ec/ec_kmeth.c
M crypto/evp/digest.c
M crypto/evp/evp_enc.c
M crypto/evp/evp_pkey_type.c
M crypto/evp/p_lib.c
M crypto/evp/pmeth_lib.c
M crypto/hmac/hmac_s390x.c
M crypto/init.c
M crypto/pem/pem_lib.c
M crypto/rand/rand_lib.c
M crypto/rsa/rsa_lib.c
M crypto/x509/x_pubkey.c
Log Message:
-----------
crypto/: Remove OPENSSL_NO_ENGINE guarded code
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 848de1f04ab73a97692097b8d4355b3b5e4424d0
https://github.com/openssl/openssl/commit/848de1f04ab73a97692097b8d4355b3b5e4424d0
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M engines/e_loader_attic.c
Log Message:
-----------
engine/e_loader_attic: Remove OPENSSL_NO_ENGINE parts
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 255a169aeb9eb23d551db6af4a68d9314f846a2a
https://github.com/openssl/openssl/commit/255a169aeb9eb23d551db6af4a68d9314f846a2a
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/man3/EVP_PKEY_set1_RSA.pod
M include/openssl/sslerr_legacy.h
M util/libcrypto.num
M util/libssl.num
Log Message:
-----------
Update symbols after OPENSSL_NO_ENGINE clearup
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: eda9285a441f931cc483c58a92e6c7e8a63ae6ae
https://github.com/openssl/openssl/commit/eda9285a441f931cc483c58a92e6c7e8a63ae6ae
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configure
M engines/e_afalg.c
M engines/e_capi.c
M engines/e_dasync.c
M engines/e_devcrypto.c
M engines/e_ossltest.c
M engines/e_padlock.c
M test/evp_extra_test.c
M test/helpers/ssltestlib.c
M test/sslapitest.c
M test/sslbuffertest.c
Log Message:
-----------
Remove OPENSSL_NO_DYNAMIC_ENGINE
Most of the ifdefs were removed, but we want to rewrite the dasync
engine to a provider. Therefore that code was not removed; instead a new
temporary macro was added named TODO_REWRITE_ME_DASYNC_PROVIDER.
Resolves: https://github.com/openssl/project/issues/1363
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: b890e5c07c539ed74154e0593890a951d9f8f14f
https://github.com/openssl/openssl/commit/b890e5c07c539ed74154e0593890a951d9f8f14f
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configure
Log Message:
-----------
Remove OPENSSL_NO_STATIC_ENGINE macro
Resolves: https://github.com/openssl/project/issues/1364
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 1c47a5eb290cad88619af145465b63a160ade43f
https://github.com/openssl/openssl/commit/1c47a5eb290cad88619af145465b63a160ade43f
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M providers/common/include/prov/provider_util.h
Log Message:
-----------
Remove engine from PROV_CIPHER and PROV_DIGEST structs.
Resolves: https://github.com/openssl/project/issues/1352
Resolves: https://github.com/openssl/project/issues/1353
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: a7a0576e2189198301db8afb47621e6de9a5f036
https://github.com/openssl/openssl/commit/a7a0576e2189198301db8afb47621e6de9a5f036
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/dh/dh_backend.c
M crypto/dh/dh_lib.c
M crypto/dh/dh_local.h
M crypto/dsa/dsa_backend.c
M crypto/dsa/dsa_lib.c
M crypto/dsa/dsa_local.h
M crypto/ec/ec_backend.c
M crypto/ec/ec_key.c
M crypto/ec/ec_local.h
M crypto/evp/evp_enc.c
M crypto/evp/evp_local.h
M crypto/evp/p_lib.c
M crypto/evp/pmeth_lib.c
M crypto/rsa/rsa_backend.c
M crypto/rsa/rsa_lib.c
M crypto/rsa/rsa_local.h
M crypto/store/store_local.h
M crypto/store/store_register.c
M include/crypto/evp.h
Log Message:
-----------
Remove private ENGINE references from local structs.
Resolves: https://github.com/openssl/project/issues/1368
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 5e0371986a40739d730ac6dca75dcc17283b2376
https://github.com/openssl/openssl/commit/5e0371986a40739d730ac6dca75dcc17283b2376
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configure
Log Message:
-----------
Configure: deprecate-disable engine related options
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: ddcc7734a6f7538c28b0bef9e2ebec55df658571
https://github.com/openssl/openssl/commit/ddcc7734a6f7538c28b0bef9e2ebec55df658571
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/engine/eng_init.c
M crypto/engine/eng_lib.c
M crypto/engine/eng_list.c
M crypto/engine/eng_local.h
M crypto/engine/eng_table.c
M crypto/engine/tb_asnmth.c
M crypto/trace.c
M include/openssl/trace.h
M test/trace_api_test.c
Log Message:
-----------
Remove ENGINE_TABLE and ENGINE_REF_COUNT trace categories
With ENGINES going away we need to remove these trace catagories
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 8f0c28a7bae0699237517d01127b680fc7abd192
https://github.com/openssl/openssl/commit/8f0c28a7bae0699237517d01127b680fc7abd192
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/man3/OSSL_trace_set_channel.pod
M doc/man7/openssl-env.pod
Log Message:
-----------
Remove ENGINE_TABLE and ENGINE_REF_COUNT trace documentation
As the subject indicates, with these trace categories gone, we shouldn't
reference them in the docs anymore.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 3984c056b7d7d6d82287642f4f63daefc0a83995
https://github.com/openssl/openssl/commit/3984c056b7d7d6d82287642f4f63daefc0a83995
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/evp/p_lib.c
Log Message:
-----------
p_lib.c: Remove engine from pkey_set_type
Resolves: https://github.com/openssl/project/issues/1437
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 246a186a24ee387121c6a4fd8dc856ab66ce58f0
https://github.com/openssl/openssl/commit/246a186a24ee387121c6a4fd8dc856ab66ce58f0
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
R README-ENGINES.md
M README.md
Log Message:
-----------
Remove README-ENGINES.md
Resolves: https://github.com/openssl/project/issues/1616
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 99144c3b59f3da0244dbdb769927a21bc35dec76
https://github.com/openssl/openssl/commit/99144c3b59f3da0244dbdb769927a21bc35dec76
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/dsa/dsa_lib.c
Log Message:
-----------
crypto/dsa: Remove ENGINE usage
Resolves: https://github.com/openssl/project/issues/1614
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 03771bcd3f5f52e154341d6751ffd7a01fc8fa16
https://github.com/openssl/openssl/commit/03771bcd3f5f52e154341d6751ffd7a01fc8fa16
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/ec/ec_backend.c
M crypto/ec/ec_key.c
M crypto/ec/ec_kmeth.c
M crypto/ec/ec_local.h
Log Message:
-----------
crypto/ec: Remove ENGINE usage
Resolves: https://github.com/openssl/project/issues/1615
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: cfd96295fc9df42ce7e07f000fa21efb08204456
https://github.com/openssl/openssl/commit/cfd96295fc9df42ce7e07f000fa21efb08204456
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M .github/workflows/windows.yml
M .github/workflows/windows_comp.yml
M Configurations/descrip.mms.tmpl
M Configurations/unix-Makefile.tmpl
M Configurations/windows-makefile.tmpl
M NOTES-WINDOWS.md
M build.info
M crypto/cversion.c
M crypto/defaults.c
M crypto/engine/eng_list.c
M crypto/info.c
M doc/man3/OpenSSL_version.pod
M exporters/build.info
M exporters/cmake/OpenSSLConfig.cmake.in
M exporters/pkg-config/libcrypto.pc.in
M include/internal/common.h
M test/recipes/02-test_windows_registry.t
M util/mkinstallvars.pl
Log Message:
-----------
Remove ENGINESDIR variable and engines installation from Makefiles.
For compatibility reasons, OPENSSL_ENGINES_DIR and OPENSSL_INFO_ENGINES_DIR
are still supported but return values like with engines disabled.
The OPENSSL_ENGINES environment variable will be removed with engine
removal later.
Resolves: https://github.com/openssl/project/issues/1425
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 1da939bb9521aebf10ba1b8f1a6a12bde50d686a
https://github.com/openssl/openssl/commit/1da939bb9521aebf10ba1b8f1a6a12bde50d686a
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/evp_extra_test.c
Log Message:
-----------
remove engine references from evp_extra_test
The evp_extra_test code makes use of the dasync engine to ensure that we
can do evp operations (signatures and ciphers) with an engine.
The dasync engine is used for this purpose, but it does not exercize any
specific pipeline functionality.
Given that engines are getting removed, the engine tests here I think
can just be removed.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: c383ad87e917278646c7709899e2663be8ff7088
https://github.com/openssl/openssl/commit/c383ad87e917278646c7709899e2663be8ff7088
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/helpers/ssltestlib.c
M test/helpers/ssltestlib.h
M test/sslapitest.c
M test/sslbuffertest.c
Log Message:
-----------
Remove dasync engine from sslapitest and sslbuffertest
With the impending engine removal, we don't have a need to test engine
functionality in these tests anymore, so remove the test cases that make
use of the dasync engine here.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 1337499ebbd9e19add11ad3f1291bdbb328566c9
https://github.com/openssl/openssl/commit/1337499ebbd9e19add11ad3f1291bdbb328566c9
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/ssl_handshake_rtt_test.c
Log Message:
-----------
remove engine.h include from ssl_handshake_rtt_test.c
It seems like it wasn't ever needed before, so with the removal of
engines, just get rid of it.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 2db3f8cf8b432f0c39b619dd92269a732256449e
https://github.com/openssl/openssl/commit/2db3f8cf8b432f0c39b619dd92269a732256449e
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
R test/recipes/30-test_afalg.t
Log Message:
-----------
remove afalg tests
We have a specific test suite that exercizes the afalg engine, that is
becoming useless with engine removal.
I had considered that we should perhaps convert this into a provider,
but having looked at the engine itself, it only offers implementations
for AES-128, AES-192 and AES-256. Given that the default provider
offers these algorithms with hardware acceleration via the aesni
instruction set (or comparable instructions on non-x86 arches), it seems
like the only advantage the afalg engine offers is acceleration of these
ciphers on platforms that have off-cpu accelerators and no cpu based
acceleration support.
given that:
a) Most cpus have instruction based acceleration
b) We don't test with any platforms that use external accelerators
It seems like alot of investment to get no real advantage, so just
remove the test, allowing us to delete the engine entirely in another
PR.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 3a1d4a53e4f12c3bdffed5ca32889804d004d714
https://github.com/openssl/openssl/commit/3a1d4a53e4f12c3bdffed5ca32889804d004d714
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/sysdefaulttest.c
Log Message:
-----------
Don't enable engines on sysdefault tests
With engine removal, we expect that init flag to disappear, so stop
using it here.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 9b2b31102998f9006a8bd7e31a82500542758eab
https://github.com/openssl/openssl/commit/9b2b31102998f9006a8bd7e31a82500542758eab
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/recipes/05-test_rand.t
Log Message:
-----------
remove dasync engine test from test_rand
We're removing the engine, so we don't need to test this anymore.
NOTE: This also removes the engine skip check from the test, and this
breaks testing until such time as PR #28461 is merged (which replaces
the remaining engine test with a provider).
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 99398b342d15ecb3164869f6059e2d9eeef06ed4
https://github.com/openssl/openssl/commit/99398b342d15ecb3164869f6059e2d9eeef06ed4
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/README-dev.md
M test/helpers/ssltestlib.c
M test/run_tests.pl
M test/sslbuffertest.c
Log Message:
-----------
Additonal removals of engine references in tests/*
Spotted by @andrewkdinh, some extra notes about/useages of engines that
are now vestigial.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: c370c2596bb544ebe5df71f0b52669643cebff1c
https://github.com/openssl/openssl/commit/c370c2596bb544ebe5df71f0b52669643cebff1c
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configurations/unix-Makefile.tmpl
M Configure
M build.info
R engines/asm/e_padlock-x86.pl
R engines/asm/e_padlock-x86_64.pl
R engines/build.info
R engines/e_afalg.c
R engines/e_afalg.ec
R engines/e_afalg.h
R engines/e_afalg.txt
R engines/e_afalg_err.c
R engines/e_afalg_err.h
R engines/e_capi.c
R engines/e_capi.ec
R engines/e_capi.txt
R engines/e_capi_err.c
R engines/e_capi_err.h
R engines/e_dasync.c
R engines/e_dasync.ec
R engines/e_dasync.txt
R engines/e_dasync_err.c
R engines/e_dasync_err.h
R engines/e_devcrypto.c
R engines/e_loader_attic.c
R engines/e_loader_attic.ec
R engines/e_loader_attic.txt
R engines/e_loader_attic_err.c
R engines/e_loader_attic_err.h
R engines/e_ossltest.c
R engines/e_ossltest.ec
R engines/e_ossltest.txt
R engines/e_ossltest_err.c
R engines/e_ossltest_err.h
R engines/e_padlock.c
Log Message:
-----------
Remove top-level engines dir.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: b1960f28cbd91515883094286c8dabaf0d7437e6
https://github.com/openssl/openssl/commit/b1960f28cbd91515883094286c8dabaf0d7437e6
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/build.info
R crypto/engine/README.md
R crypto/engine/build.info
R crypto/engine/eng_all.c
R crypto/engine/eng_cnf.c
R crypto/engine/eng_ctrl.c
R crypto/engine/eng_dyn.c
R crypto/engine/eng_err.c
R crypto/engine/eng_fat.c
R crypto/engine/eng_init.c
R crypto/engine/eng_lib.c
R crypto/engine/eng_list.c
R crypto/engine/eng_local.h
R crypto/engine/eng_openssl.c
R crypto/engine/eng_pkey.c
R crypto/engine/eng_rdrand.c
R crypto/engine/eng_table.c
R crypto/engine/tb_asnmth.c
R crypto/engine/tb_cipher.c
R crypto/engine/tb_dh.c
R crypto/engine/tb_digest.c
R crypto/engine/tb_dsa.c
R crypto/engine/tb_eckey.c
R crypto/engine/tb_pkmeth.c
R crypto/engine/tb_rand.c
R crypto/engine/tb_rsa.c
M crypto/err/openssl.ec
M crypto/err/openssl.txt
M include/openssl/cryptoerr_legacy.h
M include/openssl/engineerr.h
Log Message:
-----------
Remove crypto/engine dir.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 74f8a3f1cd2a6fab822c855f00a9b3f52e3a2e41
https://github.com/openssl/openssl/commit/74f8a3f1cd2a6fab822c855f00a9b3f52e3a2e41
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configurations/unix-Makefile.tmpl
M util/libcrypto.num
Log Message:
-----------
Remove ENGINE symbols from API.
Note, that engine.h now does not contain any real forward declarations,
so it should be excluded from the symbols parsing.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: ad0d325689f52e5d463db1c21a53323860ca47fb
https://github.com/openssl/openssl/commit/ad0d325689f52e5d463db1c21a53323860ca47fb
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M util/find-doc-nits
Log Message:
-----------
Temporary disable ENGINE_* docs tests.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 8e9771cf2259ca579a4c1a30cb31a6e0f50e40e2
https://github.com/openssl/openssl/commit/8e9771cf2259ca579a4c1a30cb31a6e0f50e40e2
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/engine.h
M include/openssl/macros.h
Log Message:
-----------
Use stub declarations in engine.h
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 92e0d58e0279abfff9883dcff84d347361b08851
https://github.com/openssl/openssl/commit/92e0d58e0279abfff9883dcff84d347361b08851
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/cryptoerr_legacy.h
M include/openssl/engine.h
M include/openssl/sslerr_legacy.h
Log Message:
-----------
Define stubs for other ENGINE-related legacy API and revert legacy errors definitions.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 80db9e92fd1d2b693b0e6f756b4f71b47b57ceae
https://github.com/openssl/openssl/commit/80db9e92fd1d2b693b0e6f756b4f71b47b57ceae
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/engine.h
Log Message:
-----------
Ignore unused arguments warnings in engine.h stubs.
This add pragma setting for gcc an clang compilers.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 696913bdd20b2b0f67e8f784ab76cac13feeb928
https://github.com/openssl/openssl/commit/696913bdd20b2b0f67e8f784ab76cac13feeb928
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M CHANGES.md
M NEWS.md
Log Message:
-----------
Mention ENGINE removal in CHANGES and NEWS
Resolves: https://github.com/openssl/project/issues/1423
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: a6bd3216d0687e45df87bb2a93c4e48768a812a3
https://github.com/openssl/openssl/commit/a6bd3216d0687e45df87bb2a93c4e48768a812a3
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M providers/implementations/asymciphers/sm2_enc.inc.in
M providers/implementations/include/prov/drbg.h
M providers/implementations/kdfs/hkdf.c
M providers/implementations/kdfs/hkdf.inc.in
M providers/implementations/kdfs/hmacdrbg_kdf.inc.in
M providers/implementations/kdfs/kbkdf.inc.in
M providers/implementations/kdfs/krb5kdf.inc.in
M providers/implementations/kdfs/pbkdf1.inc.in
M providers/implementations/kdfs/pbkdf2.inc.in
M providers/implementations/kdfs/pkcs12kdf.inc.in
M providers/implementations/kdfs/pvkkdf.inc.in
M providers/implementations/kdfs/sshkdf.inc.in
M providers/implementations/kdfs/sskdf.c
M providers/implementations/kdfs/sskdf.inc.in
M providers/implementations/kdfs/tls1_prf.inc.in
M providers/implementations/kdfs/x942kdf.inc.in
M providers/implementations/keymgmt/mac_legacy_kmgmt.c
M providers/implementations/keymgmt/mac_legacy_kmgmt.inc.in
M providers/implementations/macs/cmac_prov.inc.in
M providers/implementations/macs/gmac_prov.inc.in
M providers/implementations/macs/hmac_prov.inc.in
M providers/implementations/macs/kmac_prov.inc.in
M providers/implementations/rands/drbg_hash.inc.in
M providers/implementations/rands/drbg_hmac.inc.in
Log Message:
-----------
Providers: Remove OSSL_ALG_PARAM_ENGINE
Resolves: https://github.com/openssl/project/issues/1427
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 380c9544edd0961d13d663f2f091b5cbd9d20012
https://github.com/openssl/openssl/commit/380c9544edd0961d13d663f2f091b5cbd9d20012
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M providers/fips-sources.checksums
M providers/fips.module.sources
M providers/implementations/kdfs/krb5kdf.c
M providers/implementations/keymgmt/mac_legacy_kmgmt.c
Log Message:
-----------
Clear providers dir from engines
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 30569f8644ac0b457fea8c2d733f7856b75b7be6
https://github.com/openssl/openssl/commit/30569f8644ac0b457fea8c2d733f7856b75b7be6
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M ssl/record/methods/ssl3_cbc.c
M ssl/record/methods/ssl3_meth.c
M ssl/record/methods/tls1_meth.c
M ssl/ssl_ciph.c
M ssl/ssl_sess.c
M ssl/statem/statem_srvr.c
Log Message:
-----------
Clear ssl dir from engines
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 9626fb450977cc9bf57c7a13d2fce2ac1f5b7ec0
https://github.com/openssl/openssl/commit/9626fb450977cc9bf57c7a13d2fce2ac1f5b7ec0
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/evp_kdf_test.c
M util/err-to-raise
M util/fix-includes.sed
M util/indent.pro
M util/opensslwrap.sh
M util/perl/OpenSSL/paramnames.pm
M util/perl/TLSProxy/Proxy.pm
M util/wrap.pl.in
Log Message:
-----------
Clear util dir from engines
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: b2ff25627a365aae637ffe0c08cd3eeb2b7260ff
https://github.com/openssl/openssl/commit/b2ff25627a365aae637ffe0c08cd3eeb2b7260ff
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M ssl/ssl_ciph.c
M ssl/ssl_lib.c
M ssl/ssl_local.h
Log Message:
-----------
Refactor ssl_evp_cipher_fetch()
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: b792cf3cb390683fbc253799488a7e395eb1bb2a
https://github.com/openssl/openssl/commit/b792cf3cb390683fbc253799488a7e395eb1bb2a
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M ssl/s3_enc.c
M ssl/ssl_ciph.c
M ssl/ssl_lib.c
M ssl/ssl_local.h
M ssl/statem/statem_clnt.c
Log Message:
-----------
Remove ssl_evp_md_fetch()
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 5ef339776d835fb0d20a975448dd8d52f6cd1a36
https://github.com/openssl/openssl/commit/5ef339776d835fb0d20a975448dd8d52f6cd1a36
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/man3/OPENSSL_init_crypto.pod
M include/openssl/crypto.h.in
M include/openssl/engine.h
Log Message:
-----------
Remove OPENSSL_INIT_ENGINE_* definitions
Keeping OPENSSL_INIT_ENGINE_ALL_BUILTIN to be defined always to zero as
it might be the most used one outside of the library, meanwhile keeping
the others undefined unless OPENSSL_ENGINE_STUBS is defined.
Resolves: https://github.com/openssl/project/issues/1428
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 41a5916f8e7e1d34e362a9b3982547c47f43c8cd
https://github.com/openssl/openssl/commit/41a5916f8e7e1d34e362a9b3982547c47f43c8cd
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/engine.h
R util/engines.num
Log Message:
-----------
Remove engine.num and make helper functions for engine loading stubs.
Fixes openssl/project#1420
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: e50c4e239558c4591f4b886ac695e7ef2521c1a8
https://github.com/openssl/openssl/commit/e50c4e239558c4591f4b886ac695e7ef2521c1a8
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configurations/10-main.conf
M Configure
M INSTALL.md
Log Message:
-----------
Remove engine-related tests
As engines are no longer included in test, these configuration
options make no longer sense.
All other test should be already enabled.
Fixes openssl/project#1376
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: d8999834c891432ab6d4109d9d86bffd6a6613e3
https://github.com/openssl/openssl/commit/d8999834c891432ab6d4109d9d86bffd6a6613e3
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configure
M INSTALL.md
Log Message:
-----------
Make no-engine config permanently set.
It enables configuration defines:
OPENSSL_NO_DYNAMIC_ENGINE
OPENSSL_NO_STATIC_ENGINE
OPENSSL_NO_ENGINE
Fixes openssl/project#1711
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 197ae2f63db8590f055bf56b42b4223b7d2be1f8
https://github.com/openssl/openssl/commit/197ae2f63db8590f055bf56b42b4223b7d2be1f8
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M .github/workflows/ci.yml
M .github/workflows/coveralls.yml
M .github/workflows/run-checker-daily.yml
M .github/workflows/run-checker-merge.yml
Log Message:
-----------
ci: Remove no longer supported config options
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: dc62c97ca56ec028082a33b132071a1faa465ccf
https://github.com/openssl/openssl/commit/dc62c97ca56ec028082a33b132071a1faa465ccf
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/dh/dh_lib.c
M crypto/dsa/dsa_lib.c
M crypto/ec/ec_key.c
M crypto/rsa/rsa_lib.c
M crypto/store/store_register.c
M doc/man3/DH_get0_pqg.pod
M doc/man3/DSA_get0_pqg.pod
M doc/man3/EC_KEY_new.pod
M doc/man3/OSSL_STORE_LOADER.pod
M doc/man3/RSA_get0_key.pod
M include/openssl/dh.h
M include/openssl/dsa.h
M include/openssl/ec.h
M include/openssl/engine.h
M include/openssl/rsa.h
M include/openssl/store.h
M include/openssl/types.h
M util/libcrypto.num
Log Message:
-----------
Remove *_get0_engine() API calls
Resolves: https://github.com/openssl/project/issues/1337
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: bf24dd887c803b53ae61fa580b17e6d233acf8a8
https://github.com/openssl/openssl/commit/bf24dd887c803b53ae61fa580b17e6d233acf8a8
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M apps/include/apps.h
M crypto/asn1/a_digest.c
M crypto/asn1/ameth_lib.c
M crypto/asn1/d2i_pr.c
M crypto/conf/conf_mall.c
M crypto/conf/conf_mod.c
M crypto/conf/conf_sap.c
M crypto/ec/ec_backend.c
M crypto/ec/ec_kmeth.c
M crypto/evp/digest.c
M crypto/evp/evp_enc.c
M crypto/evp/evp_pkey_type.c
M crypto/evp/p_lib.c
M crypto/evp/pmeth_lib.c
M crypto/init.c
M crypto/pem/pem_lib.c
M crypto/pem/pem_pkey.c
M crypto/rand/rand_lib.c
M crypto/rand/rand_pool.c
M crypto/store/store_local.h
M crypto/ts/ts_conf.c
M crypto/x509/x_pubkey.c
R include/crypto/engine.h
Log Message:
-----------
Remove engine.h includes for internal code.
This should no be used anywhere, as typedef for ENGINE is in types.h.
Only apps should include this header for compatibility stubs.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 95fb37c9b6bcc564df72a29cb24f397748e32e85
https://github.com/openssl/openssl/commit/95fb37c9b6bcc564df72a29cb24f397748e32e85
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
R include/crypto/engineerr.h
Log Message:
-----------
Remove internal crypto/engineerr.h header
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 1c81b147a962bb9ce33de4e070e855faab92489d
https://github.com/openssl/openssl/commit/1c81b147a962bb9ce33de4e070e855faab92489d
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/engine.h
Log Message:
-----------
Use better description of macros purpose in engine.h
Resolves: https://github.com/openssl/project/issues/1735
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: f2ed7652e3c4318c20a768dafef853484e86457d
https://github.com/openssl/openssl/commit/f2ed7652e3c4318c20a768dafef853484e86457d
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/engine.h
Log Message:
-----------
Remove no longer needed macro argument
Resolves: https://github.com/openssl/project/issues/1736
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 4e96426a8d857a13e09a213d72c1f59cf46ee813
https://github.com/openssl/openssl/commit/4e96426a8d857a13e09a213d72c1f59cf46ee813
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M apps/include/opt.h
M apps/lib/apps.c
M apps/lib/opt.c
M doc/internal/man3/OPTIONS.pod
M test/testutil/apps_shims.c
Log Message:
-----------
apps: Remove opt_legacy_okay function
The function used to check for ENGINEs to determine if a legacy code
path is available, but it makes no sense to keep it after the ENGINE
removal, as the legacy path will always fail.
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 807928c0aa1b2ad013f021c8f8ad15906a127ce7
https://github.com/openssl/openssl/commit/807928c0aa1b2ad013f021c8f8ad15906a127ce7
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/ts/ts_conf.c
Log Message:
-----------
Remove engine related crypto_device option
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 7c8e2bfcd5ba74bfe6f7d1597bf0ff599f7a984c
https://github.com/openssl/openssl/commit/7c8e2bfcd5ba74bfe6f7d1597bf0ff599f7a984c
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/man1/openssl-ciphers.pod.in
M doc/man3/ENGINE_add.pod
Log Message:
-----------
Docs: Update ENGINE_add.pod to reflect the engine removal
Resolves: https://github.com/openssl/project/issues/1366
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: adc73bfcb30ea78b74caec3785d81ad9a281bd9c
https://github.com/openssl/openssl/commit/adc73bfcb30ea78b74caec3785d81ad9a281bd9c
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/internal/man3/OPTIONS.pod
M doc/internal/man7/EVP_PKEY.pod
M doc/internal/man7/build.info.pod
M doc/man1/openssl-ciphers.pod.in
M doc/man1/openssl-cmds.pod.in
M doc/man1/openssl-genpkey.pod.in
M doc/man1/openssl-pkcs12.pod.in
M doc/man1/openssl-s_client.pod.in
M doc/man1/openssl-s_server.pod.in
M doc/man1/openssl-ts.pod.in
M doc/man1/openssl.pod
M doc/man3/ASYNC_WAIT_CTX_new.pod
M doc/man3/ASYNC_start_job.pod
M doc/man3/BIO_get_ex_new_index.pod
M doc/man3/CMAC_CTX.pod
M doc/man3/CMS_add1_signer.pod
M doc/man3/CMS_sign.pod
M doc/man3/CRYPTO_get_ex_new_index.pod
M doc/man3/DH_set_method.pod
M doc/man3/DSA_set_method.pod
M doc/man3/ECDSA_sign.pod
M doc/man3/ENGINE_add.pod
M doc/man3/ERR_put_error.pod
M doc/man3/EVP_CIPHER_CTX_get_cipher_data.pod
M doc/man3/EVP_DigestInit.pod
M doc/man3/EVP_DigestSignInit.pod
M doc/man3/EVP_DigestVerifyInit.pod
M doc/man3/EVP_EncryptInit.pod
M doc/man3/EVP_PKEY_CTX_get0_libctx.pod
M doc/man3/EVP_PKEY_CTX_new.pod
M doc/man3/EVP_PKEY_CTX_set_hkdf_md.pod
M doc/man3/EVP_PKEY_CTX_set_tls1_prf_md.pod
M doc/man3/EVP_PKEY_asn1_get_count.pod
M doc/man3/EVP_PKEY_decrypt.pod
M doc/man3/EVP_PKEY_derive.pod
M doc/man3/EVP_PKEY_encrypt.pod
M doc/man3/EVP_PKEY_get_default_digest_nid.pod
M doc/man3/EVP_PKEY_keygen.pod
M doc/man3/EVP_PKEY_new.pod
M doc/man3/EVP_PKEY_sign.pod
M doc/man3/EVP_PKEY_verify.pod
M doc/man3/EVP_PKEY_verify_recover.pod
M doc/man3/EVP_SignInit.pod
M doc/man3/EVP_VerifyInit.pod
M doc/man3/HMAC.pod
M doc/man3/OPENSSL_config.pod
M doc/man3/OPENSSL_init_crypto.pod
M doc/man3/OPENSSL_load_builtin_modules.pod
M doc/man3/OSSL_STORE_LOADER.pod
M doc/man3/OSSL_trace_enabled.pod
M doc/man3/OpenSSL_version.pod
M doc/man3/RAND_set_rand_method.pod
M doc/man3/RSA_check_key.pod
M doc/man3/RSA_set_method.pod
M doc/man3/SSL_CTX_set_mode.pod
M doc/man3/SSL_CTX_set_split_send_fragment.pod
M doc/man3/SSL_CTX_use_certificate.pod
M doc/man3/SSL_get_all_async_fds.pod
M doc/man3/SSL_get_error.pod
M doc/man3/SSL_set_async_callback.pod
M doc/man5/config.pod
M doc/man7/EVP_PKEY-HMAC.pod
M doc/man7/evp.pod
M doc/man7/fips_module.pod
M doc/man7/openssl-env.pod
M doc/man7/ossl_store.pod
M doc/perlvars.pm
Log Message:
-----------
Docs: Clean up ENGINE mentions
Engines are removed and the documentation should reflect that, even with
deprecated and legacy API.
Resolves: https://github.com/openssl/project/issues/1366
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 7f52f97f6fa9e196bd8033ac45dd56ee71e59ebb
https://github.com/openssl/openssl/commit/7f52f97f6fa9e196bd8033ac45dd56ee71e59ebb
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/asn1/ameth_lib.c
M crypto/cmac/cmac.c
M crypto/dh/dh_lib.c
M crypto/dsa/dsa_lib.c
M crypto/evp/digest.c
M crypto/evp/evp_enc.c
M crypto/evp/evp_pkey_type.c
M crypto/evp/m_sigver.c
M crypto/evp/p_lib.c
M crypto/evp/pmeth_gn.c
M crypto/evp/pmeth_lib.c
M crypto/hmac/hmac.c
M crypto/hmac/hmac_local.h
M crypto/hmac/hmac_s390x.c
M crypto/pem/pem_lib.c
M crypto/rand/rand_lib.c
M crypto/rsa/rsa_lib.c
M crypto/store/store_register.c
M include/crypto/cmac.h
M include/openssl/cmac.h
M include/openssl/dh.h
M include/openssl/dsa.h
M include/openssl/evp.h
M include/openssl/hmac.h
M include/openssl/rsa.h
M include/openssl/store.h
M providers/implementations/macs/cmac_prov.c
Log Message:
-----------
crypto: Remove internal ENGINE usage from the subdir
Engines can be removed safely from static and internal functions
clearing out our codebase.
Resolves: https://github.com/openssl/project/issues/1625
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 21069c983bc385f46c522e0bf7edbefabc6d4d19
https://github.com/openssl/openssl/commit/21069c983bc385f46c522e0bf7edbefabc6d4d19
Author: Dimitri John Ledkov <dimitri...@surgut.co.uk>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M providers/implementations/rands/seed_src_jitter.c
Log Message:
-----------
seed_src_jitter: prevent hypothetical getrandom fallback
In a hypothetical scenario that jent_entropy_init_ex fails, or if
get_jitter_random-value fails, there are a few unexpected
posibilities.
If jent_entropy_init_ex fails, the seed initialisation may return NULL
and then DRBG will be initiated with NULL seed, which will
automatically fallback to os-seed, which will escape module boundary
(if this jitter rng is from the fips module), and call getrandom
syscall.
And separately if get_jitter_random_value fails, it may put DRBG in an
error state, but it might not put the FIPS module in error state, like
it should as per the ISO standard.
To instrument these things, I had to create tampered
jitterentropy-library that always returns errors for init_ex and
read_entropy apis, and then use gdb tracing on both libcrypto.so and
fips.so.
The most minimal solution to above hypothetical error code paths, is
to simply call ossl_set_error_state. It is either harmless, or in case
of fips-jitter will correctly put the FIPS module into error state and
prevent any further operation; and cruitially prevent silent fallback
to getrandom syscall.
Note it is unlikely that this ever was out of compliance, as often
enough getrandom syscall goes to a kernel with validated entropy
source; and openssl fips module still did reject sampling which is too
entropy source compliant.
Nonetheless it is good to fix this hypothetical error path, and
backport this to 3.5 and up.
This is similar / additional fixes, to this previous change:
- https://github.com/openssl/openssl/pull/25957
- https://github.com/openssl/openssl/commit/b9886a6f3483e0525596d3b3956416282038da82
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29226)
Commit: 3720c946f095d4f35f04f61cf6efa8b84e26fc7c
https://github.com/openssl/openssl/commit/3720c946f095d4f35f04f61cf6efa8b84e26fc7c
Author: Viktor Dukhovni <openss...@dukhovni.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M crypto/ml_dsa/ml_dsa_key.c
M crypto/ml_kem/ml_kem.c
M doc/man7/EVP_PKEY-ML-DSA.pod
M doc/man7/EVP_PKEY-ML-KEM.pod
M include/openssl/core_names.h.in
M providers/implementations/encode_decode/encode_key2any.c
M providers/implementations/encode_decode/encode_key2any.inc.in
M providers/implementations/encode_decode/ml_dsa_codecs.c
M providers/implementations/encode_decode/ml_kem_codecs.c
M providers/implementations/include/prov/ml_dsa_codecs.h
M providers/implementations/include/prov/ml_kem_codecs.h
M test/evp_extra_test.c
M util/perl/OpenSSL/paramnames.pm
Log Message:
-----------
Per-key encoding formats for ML-KEM and ML-DSA
We support selection of ML-KEM and ML-DSA key formats on input and
output at the provider level, these are essentially global defaults,
in effect for the lifetime of the process.
Unfortunately, the JAVA interface in openssl-jostle needs to be able to
output a specific key in seed-only form. To that end, this PR
introduces a new "output-formats" PKEY encoding parameter, that can be used
with OSSL_ENCODER_CTX_set_params(3) when encoding a key to PKCS#8, after
using OSSL_ENCODER_CTX_new_for_key(3), rather than i2d_PrivateKey(3),
i2d_PKCS8PrivateKey(3) or PEM equivalents.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29206)
Commit: bf236e07afbd235d609f057eb50c92d1d2ee5008
https://github.com/openssl/openssl/commit/bf236e07afbd235d609f057eb50c92d1d2ee5008
Author: Viktor Dukhovni <openss...@dukhovni.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M CHANGES.md
M crypto/encode_decode/decoder_lib.c
M crypto/encode_decode/decoder_pkey.c
M crypto/encode_decode/encoder_lib.c
M crypto/encode_decode/encoder_local.h
M crypto/encode_decode/encoder_pkey.c
M doc/man3/OSSL_DECODER_CTX.pod
M doc/man3/OSSL_DECODER_CTX_new_for_pkey.pod
M doc/man3/OSSL_ENCODER_CTX.pod
M doc/man3/OSSL_ENCODER_CTX_new_for_pkey.pod
M include/openssl/decoder.h
M include/openssl/encoder.h
M test/endecode_test.c
M test/evp_extra_test.c
M util/libcrypto.num
Log Message:
-----------
Clarify/fix encoder/decoder context docs and code
In was premature to make OSSL_(EN|DE)CODER_CTX_[sg]et_finalized() be
public interfaces. Forunately, these have not yet appeared outside the
"master" branch, so we can still retract them.
Also, in the case of decoders, the implementation failed to take into
account that the context was duplicated before it was returned to the
user, and the duplicated copy failed to copy the "finalized" field.
This commit also renames "finalized" to "frozen", because
finalisation is a misleading term in this context, it suggests
resource reclamation during garbage collection or deallocation,
not marking a structure partly immutable.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29206)
Commit: 8482cb8232444dde70c4b2b0a853fca050bea01a
https://github.com/openssl/openssl/commit/8482cb8232444dde70c4b2b0a853fca050bea01a
Author: Dr. David von Oheimb <d...@ddvo.net>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M crypto/cmp/cmp_vfy.c
Log Message:
-----------
CMP check_cert_path_3gpp(): add missing checks trying to retrieve newly enrolled cert
Fixes #29285
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29302)
Commit: 64e96ecf3c7edbd82322ddcc21a60be490ba2943
https://github.com/openssl/openssl/commit/64e96ecf3c7edbd82322ddcc21a60be490ba2943
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M util/find-doc-nits
Log Message:
-----------
Make find-doc-nits compatible accross git versions
We recently found that the addition of a git config command in
util/find-doc-nits is broken in some cases, sepecifically because git
around version 2.46 broke command line compatibility, replacing the
--regexp option with the --get-regexp option. So to maintain usage of
this specific command to parse the .gitconfig file, we would need to do
some extra version detection to construct the proper command line.
However, find-doc-nits already has a fallback condition, which does some
pure perl parsing of the gitconfig file, which works perfectly well.
Instead of trying to do version matching to construct the right form of
the git config command line, just remove it all, and rely on the perl
parrse to do this work for us, which works currently in all cases.
Fixes #29197
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29304)
Commit: e3e371382289ad60baa9e67850b284c33f03e763
https://github.com/openssl/openssl/commit/e3e371382289ad60baa9e67850b284c33f03e763
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/ssl_unwrap.h
M include/openssl/quic.h
M ssl/quic/quic_method.c
Log Message:
-----------
Add OSSL_QUIC_method
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 03e4ecf92e7b2cee2de34656a2afa682cba13801
https://github.com/openssl/openssl/commit/03e4ecf92e7b2cee2de34656a2afa682cba13801
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/quic_ssl.h
M include/openssl/ssl.h.in
M ssl/quic/quic_impl.c
M ssl/ssl_lib.c
Log Message:
-----------
Start implementing SSL_listen_ex
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: c6eb7383702638c89b71884551eb1f990b6886a5
https://github.com/openssl/openssl/commit/c6eb7383702638c89b71884551eb1f990b6886a5
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/quic_port.h
M ssl/quic/quic_impl.c
M ssl/quic/quic_port.c
M ssl/quic/quic_port_local.h
Log Message:
-----------
Add flag to determine how quic accepts connections
The flag defaults to 0 (unknown), and gets set to
1 (using SSL_accept_ex), or -1 (using SSL_accpet_connection)
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 3d3021afdfd792c2d0c1dbf8c9e61d0040c3d695
https://github.com/openssl/openssl/commit/3d3021afdfd792c2d0c1dbf8c9e61d0040c3d695
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M ssl/quic/quic_impl.c
M ssl/quic/quic_port.c
Log Message:
-----------
Update port_make_channel to behave for accept_ex/accept_connection
Based on the value of the using_peeloff flag, we need to choose if we're
going to create a user_ssl when creating a new channel
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 974d00769895605c4076a7f6acdfc31ba328096f
https://github.com/openssl/openssl/commit/974d00769895605c4076a7f6acdfc31ba328096f
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/quic_channel.h
M ssl/quic/quic_channel.c
M ssl/quic/quic_impl.c
M ssl/ssl_lib.c
Log Message:
-----------
stitch in ssls for SSL_listen_ex
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: a47c685ea72d611ecf78d91e95120693b006d845
https://github.com/openssl/openssl/commit/a47c685ea72d611ecf78d91e95120693b006d845
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M test/quicapitest.c
Log Message:
-----------
adding test for SSL_listen_ex
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: a1a9c61a9efea6c08d6144019504ccbf9ac18eba
https://github.com/openssl/openssl/commit/a1a9c61a9efea6c08d6144019504ccbf9ac18eba
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/openssl/ssl.h.in
Log Message:
-----------
Don't require SSL_listen_ex to have its return value checked
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: a5c2b1cbb981789d20b341d684035acd6ecb6318
https://github.com/openssl/openssl/commit/a5c2b1cbb981789d20b341d684035acd6ecb6318
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M ssl/quic/quic_port.c
Log Message:
-----------
Fixup creation of qlog object
Changes for SSL_listen_ex squashed creation of qlog objects even when
configured.
Fix that up so qlog objects are created regardless of weather we use
SSL_accept_connection or SSL_listen_ex
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 1bf5280b691fbb56222b1f3904dcdd37e5a4f884
https://github.com/openssl/openssl/commit/1bf5280b691fbb56222b1f3904dcdd37e5a4f884
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M util/libssl.num
Log Message:
-----------
Run make update
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 3702f51c29f25aee25951b4d48fd4093f475e107
https://github.com/openssl/openssl/commit/3702f51c29f25aee25951b4d48fd4093f475e107
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M ssl/quic/quic_port.c
Log Message:
-----------
Fix segfault on qlog creation with no tls
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: c2b14acee4b7d6d1b20ee5af664d51193ec32f76
https://github.com/openssl/openssl/commit/c2b14acee4b7d6d1b20ee5af664d51193ec32f76
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M doc/man3/OSSL_QUIC_client_method.pod
M doc/man3/SSL_new_listener.pod
Log Message:
-----------
Add docs for OSSL_QUIC_method() and SSL_listen_ex()
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: cfbd214c8cad98e9296be3bb33655bc666778c87
https://github.com/openssl/openssl/commit/cfbd214c8cad98e9296be3bb33655bc666778c87
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/quic_port.h
M ssl/quic/quic_channel.c
M ssl/quic/quic_impl.c
M ssl/quic/quic_port.c
M ssl/quic/quic_port_local.h
Log Message:
-----------
Drop use of get_using_peeloff for quic connections
folow the using_peeloff get/set routines to just a set routine that
fails if the set is for a mode that doesn't match the current mode
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 5e33f306aebb96f6373d344a79b3df5d18c69797
https://github.com/openssl/openssl/commit/5e33f306aebb96f6373d344a79b3df5d18c69797
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/quic_port.h
M ssl/quic/quic_channel.c
M ssl/quic/quic_impl.c
M ssl/quic/quic_port.c
M ssl/quic/quic_port_local.h
Log Message:
-----------
Various fixups for SSL_listen_ex (readability/error unwinding)
Various review fixups to clarify meaning of variables and fix unwinding
of operations should we encounter errors in some operations.
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 32a33dae788742c4511eade62336e2e814c7c68f
https://github.com/openssl/openssl/commit/32a33dae788742c4511eade62336e2e814c7c68f
Author: Alexandr Nedvedicky <sas...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M ssl/ssl_mcnf.c
Log Message:
-----------
ssl_do_config(): Check for NULL name argument
Fixes 0c2a196af8ab9c12da27
Fixes Coverity issue 1675312
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29306)
Commit: 9e29188aa77e248cac3f76e0c308a76f285b10cc
https://github.com/openssl/openssl/commit/9e29188aa77e248cac3f76e0c308a76f285b10cc
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M doc/man1/openssl-ciphers.pod.in
M doc/man1/openssl-dgst.pod.in
M doc/man1/openssl-req.pod.in
Log Message:
-----------
Add GOST provider related docs
GOST provider is in a good shape already, so keep the mentions rewritten
to provider instead of the engine.
Resolves: https://github.com/openssl/project/issues/1733
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29286)
Commit: d292c363b92bd92d0a8c8f2fe99b283307dbb6fb
https://github.com/openssl/openssl/commit/d292c363b92bd92d0a8c8f2fe99b283307dbb6fb
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M doc/build.info
A doc/internal/man7/removal.pod
M doc/man7/ossl-guide-migration.pod
A doc/man7/ossl-removed-api.pod
Log Message:
-----------
Start the 4.0 migration guide
This includes adding a little internal procedure for when functions
are removed, and a special ossl-ex-api page to document what API has
been removed.
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29220)
Commit: 13015c3f41ba33a6b247ee564dde0586043e7e4a
https://github.com/openssl/openssl/commit/13015c3f41ba33a6b247ee564dde0586043e7e4a
Author: Nikola Pajkovsky <nik...@openssl.org>
Date: 2025-12-08 (Mon, 08 Dec 2025)
Changed paths:
M providers/implementations/encode_decode/encode_key2any.c
Log Message:
-----------
key2any: free val if string is empty
Resolves: https://scan5.scan.coverity.com/#/project-view/65138/10222?selectedIssue=1675327
Signed-off-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tim Hudson <t...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29317)
Commit: 00a7e5ea1e51f58180cd7aa4028e998949a36d66
https://github.com/openssl/openssl/commit/00a7e5ea1e51f58180cd7aa4028e998949a36d66
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M include/crypto/dso_conf.h.in
M include/openssl/asn1.h.in
M include/openssl/asn1t.h.in
M include/openssl/bio.h.in
M include/openssl/cmp.h.in
M include/openssl/cms.h.in
M include/openssl/comp.h.in
M include/openssl/conf.h.in
M include/openssl/configuration.h.in
M include/openssl/core_names.h.in
M include/openssl/crmf.h.in
M include/openssl/crypto.h.in
M include/openssl/ct.h.in
M include/openssl/err.h.in
M include/openssl/ess.h.in
M include/openssl/fipskey.h.in
M include/openssl/lhash.h.in
M include/openssl/ocsp.h.in
M include/openssl/opensslv.h.in
M include/openssl/pkcs12.h.in
M include/openssl/pkcs7.h.in
M include/openssl/safestack.h.in
M include/openssl/srp.h.in
M include/openssl/ssl.h.in
M include/openssl/ui.h.in
M include/openssl/x509.h.in
M include/openssl/x509_acert.h.in
M include/openssl/x509_vfy.h.in
M include/openssl/x509v3.h.in
M providers/common/der/der_digests_gen.c.in
M providers/common/der/der_dsa_gen.c.in
M providers/common/der/der_ec_gen.c.in
M providers/common/der/der_ecx_gen.c.in
M providers/common/der/der_hkdf_gen.c.in
M providers/common/der/der_ml_dsa_gen.c.in
M providers/common/der/der_rsa_gen.c.in
M providers/common/der/der_slh_dsa_gen.c.in
M providers/common/der/der_sm2_gen.c.in
M providers/common/der/der_wrap_gen.c.in
M providers/common/include/prov/der_digests.h.in
M providers/common/include/prov/der_dsa.h.in
M providers/common/include/prov/der_ec.h.in
M providers/common/include/prov/der_ecx.h.in
M providers/common/include/prov/der_hkdf.h.in
M providers/common/include/prov/der_ml_dsa.h.in
M providers/common/include/prov/der_rsa.h.in
M providers/common/include/prov/der_slh_dsa.h.in
M providers/common/include/prov/der_sm2.h.in
M providers/common/include/prov/der_wrap.h.in
Log Message:
-----------
4.0-PRE-CLANG-FORMAT-WEBKIT
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29242)
Commit: 2fab90bb5e1937f1c2125eab144f7f6c39e70087
https://github.com/openssl/openssl/commit/2fab90bb5e1937f1c2125eab144f7f6c39e70087
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M apps/asn1parse.c
M apps/ca.c
M apps/ciphers.c
M apps/cmp.c
M apps/cms.c
M apps/configutl.c
M apps/crl.c
M apps/crl2pkcs7.c
M apps/dgst.c
M apps/dhparam.c
M apps/dsa.c
M apps/dsaparam.c
M apps/ec.c
M apps/ecparam.c
M apps/enc.c
M apps/errstr.c
M apps/fipsinstall.c
M apps/gendsa.c
M apps/genpkey.c
M apps/genrsa.c
M apps/include/app_libctx.h
M apps/include/app_params.h
M apps/include/apps.h
M apps/include/apps_ui.h
M apps/include/cmp_mock_srv.h
M apps/include/fmt.h
M apps/include/function.h
M apps/include/http_server.h
M apps/include/log.h
M apps/include/names.h
M apps/include/opt.h
M apps/include/platform.h
M apps/include/s_apps.h
M apps/include/vms_term_sock.h
M apps/info.c
M apps/kdf.c
M apps/lib/app_libctx.c
M apps/lib/app_params.c
M apps/lib/app_provider.c
M apps/lib/app_rand.c
M apps/lib/app_x509.c
M apps/lib/apps.c
M apps/lib/apps_opt_printf.c
M apps/lib/apps_ui.c
M apps/lib/cmp_mock_srv.c
M apps/lib/columns.c
M apps/lib/http_server.c
M apps/lib/log.c
M apps/lib/names.c
M apps/lib/opt.c
M apps/lib/s_cb.c
M apps/lib/s_socket.c
M apps/lib/tlssrp_depr.c
M apps/lib/vms_decc_argv.c
M apps/lib/vms_term_sock.c
M apps/lib/win32_init.c
M apps/list.c
M apps/mac.c
M apps/nseq.c
M apps/ocsp.c
M apps/openssl.c
M apps/passwd.c
M apps/pkcs12.c
M apps/pkcs7.c
M apps/pkcs8.c
M apps/pkey.c
M apps/pkeyparam.c
M apps/pkeyutl.c
M apps/prime.c
M apps/rand.c
M apps/rehash.c
M apps/req.c
M apps/rsa.c
M apps/rsautl.c
M apps/s_client.c
M apps/s_server.c
M apps/s_time.c
M apps/sess_id.c
M apps/skeyutl.c
M apps/smime.c
M apps/speed.c
M apps/spkac.c
M apps/srp.c
M apps/storeutl.c
M apps/testdsa.h
M apps/testrsa.h
M apps/timeouts.h
M apps/ts.c
M apps/verify.c
M apps/version.c
M apps/vms_decc_init.c
M apps/x509.c
M crypto/LPdir_nyi.c
M crypto/LPdir_unix.c
M crypto/LPdir_vms.c
M crypto/LPdir_win.c
M crypto/aes/aes_cbc.c
M crypto/aes/aes_cfb.c
M crypto/aes/aes_core.c
M crypto/aes/aes_ecb.c
M crypto/aes/aes_ige.c
M crypto/aes/aes_local.h
M crypto/aes/aes_misc.c
M crypto/aes/aes_ofb.c
M crypto/aes/aes_wrap.c
M crypto/aes/aes_x86core.c
M crypto/aligned_alloc.c
M crypto/aria/aria.c
M crypto/arm_arch.h
M crypto/armcap.c
M crypto/array_alloc.c
M crypto/asn1/a_bitstr.c
M crypto/asn1/a_d2i_fp.c
M crypto/asn1/a_digest.c
M crypto/asn1/a_dup.c
M crypto/asn1/a_gentm.c
M crypto/asn1/a_i2d_fp.c
M crypto/asn1/a_int.c
M crypto/asn1/a_mbstr.c
M crypto/asn1/a_object.c
M crypto/asn1/a_octet.c
M crypto/asn1/a_print.c
M crypto/asn1/a_sign.c
M crypto/asn1/a_strex.c
M crypto/asn1/a_strnid.c
M crypto/asn1/a_time.c
M crypto/asn1/a_time_posix.c
M crypto/asn1/a_type.c
M crypto/asn1/a_utctm.c
M crypto/asn1/a_utf8.c
M crypto/asn1/a_verify.c
M crypto/asn1/ameth_lib.c
M crypto/asn1/asn1_err.c
M crypto/asn1/asn1_gen.c
M crypto/asn1/asn1_item_list.h
M crypto/asn1/asn1_lib.c
M crypto/asn1/asn1_local.h
M crypto/asn1/asn1_parse.c
M crypto/asn1/asn_mime.c
M crypto/asn1/asn_mstbl.c
M crypto/asn1/asn_pack.c
M crypto/asn1/bio_asn1.c
M crypto/asn1/bio_ndef.c
M crypto/asn1/d2i_param.c
M crypto/asn1/d2i_pr.c
M crypto/asn1/d2i_pu.c
M crypto/asn1/evp_asn1.c
M crypto/asn1/f_int.c
M crypto/asn1/f_string.c
M crypto/asn1/i2d_evp.c
M crypto/asn1/n_pkey.c
M crypto/asn1/nsseq.c
M crypto/asn1/p5_pbe.c
M crypto/asn1/p5_pbev2.c
M crypto/asn1/p5_scrypt.c
M crypto/asn1/p8_pkey.c
M crypto/asn1/t_bitst.c
M crypto/asn1/t_pkey.c
M crypto/asn1/t_spki.c
M crypto/asn1/tasn_dec.c
M crypto/asn1/tasn_enc.c
M crypto/asn1/tasn_new.c
M crypto/asn1/tasn_prn.c
M crypto/asn1/tasn_scn.c
M crypto/asn1/tasn_typ.c
M crypto/asn1/tasn_utl.c
M crypto/asn1/tbl_standard.h
M crypto/asn1/x_algor.c
M crypto/asn1/x_bignum.c
M crypto/asn1/x_int64.c
M crypto/asn1/x_long.c
M crypto/asn1/x_sig.c
M crypto/asn1/x_spki.c
M crypto/asn1/x_val.c
M crypto/asn1_dsa.c
M crypto/async/arch/async_null.c
M crypto/async/arch/async_null.h
M crypto/async/arch/async_posix.c
M crypto/async/arch/async_posix.h
M crypto/async/arch/async_win.c
M crypto/async/arch/async_win.h
M crypto/async/async.c
M crypto/async/async_err.c
M crypto/async/async_local.h
M crypto/async/async_wait.c
M crypto/bf/bf_cfb64.c
M crypto/bf/bf_ecb.c
M crypto/bf/bf_enc.c
M crypto/bf/bf_local.h
M crypto/bf/bf_ofb64.c
M crypto/bf/bf_pi.h
M crypto/bio/bf_buff.c
M crypto/bio/bf_lbuf.c
M crypto/bio/bf_prefix.c
M crypto/bio/bf_readbuff.c
M crypto/bio/bio_addr.c
M crypto/bio/bio_cb.c
M crypto/bio/bio_dump.c
M crypto/bio/bio_err.c
M crypto/bio/bio_lib.c
M crypto/bio/bio_local.h
M crypto/bio/bio_meth.c
M crypto/bio/bio_print.c
M crypto/bio/bio_sock.c
M crypto/bio/bio_sock2.c
M crypto/bio/bss_acpt.c
M crypto/bio/bss_bio.c
M crypto/bio/bss_conn.c
M crypto/bio/bss_core.c
M crypto/bio/bss_dgram.c
M crypto/bio/bss_dgram_pair.c
M crypto/bio/bss_fd.c
M crypto/bio/bss_file.c
M crypto/bio/bss_log.c
M crypto/bio/bss_mem.c
M crypto/bio/bss_null.c
M crypto/bio/bss_sock.c
M crypto/bio/ossl_core_bio.c
M crypto/bn/asm/x86_64-gcc.c
M crypto/bn/bn_add.c
M crypto/bn/bn_asm.c
M crypto/bn/bn_blind.c
M crypto/bn/bn_const.c
M crypto/bn/bn_conv.c
M crypto/bn/bn_ctx.c
M crypto/bn/bn_depr.c
M crypto/bn/bn_dh.c
M crypto/bn/bn_div.c
M crypto/bn/bn_err.c
M crypto/bn/bn_exp.c
M crypto/bn/bn_exp2.c
M crypto/bn/bn_gcd.c
M crypto/bn/bn_gf2m.c
M crypto/bn/bn_intern.c
M crypto/bn/bn_kron.c
M crypto/bn/bn_lib.c
M crypto/bn/bn_local.h
M crypto/bn/bn_mod.c
M crypto/bn/bn_mont.c
M crypto/bn/bn_mpi.c
M crypto/bn/bn_mul.c
M crypto/bn/bn_nist.c
M crypto/bn/bn_ppc.c
M crypto/bn/bn_prime.c
M crypto/bn/bn_print.c
M crypto/bn/bn_rand.c
M crypto/bn/bn_recp.c
M crypto/bn/bn_rsa_fips186_5.c
M crypto/bn/bn_s390x.c
M crypto/bn/bn_shift.c
M crypto/bn/bn_sparc.c
M crypto/bn/bn_sqr.c
M crypto/bn/bn_sqrt.c
M crypto/bn/bn_srp.c
M crypto/bn/bn_word.c
M crypto/bn/bn_x931p.c
M crypto/bn/rsaz_exp.c
M crypto/bn/rsaz_exp.h
M crypto/bn/rsaz_exp_x2.c
M crypto/bsearch.c
M crypto/buffer/buf_err.c
M crypto/camellia/camellia.c
M crypto/camellia/cmll_cbc.c
M crypto/camellia/cmll_cfb.c
M crypto/camellia/cmll_ctr.c
M crypto/camellia/cmll_ecb.c
M crypto/camellia/cmll_local.h
M crypto/camellia/cmll_misc.c
M crypto/camellia/cmll_ofb.c
M crypto/cast/c_cfb64.c
M crypto/cast/c_ecb.c
M crypto/cast/c_enc.c
M crypto/cast/c_ofb64.c
M crypto/cast/c_skey.c
M crypto/cast/cast_local.h
M crypto/cast/cast_s.h
M crypto/chacha/chacha_enc.c
M crypto/chacha/chacha_ppc.c
M crypto/chacha/chacha_riscv.c
M crypto/cmac/cmac.c
M crypto/cmp/cmp_asn.c
M crypto/cmp/cmp_client.c
M crypto/cmp/cmp_ctx.c
M crypto/cmp/cmp_err.c
M crypto/cmp/cmp_genm.c
M crypto/cmp/cmp_hdr.c
M crypto/cmp/cmp_http.c
M crypto/cmp/cmp_local.h
M crypto/cmp/cmp_msg.c
M crypto/cmp/cmp_protect.c
M crypto/cmp/cmp_server.c
M crypto/cmp/cmp_status.c
M crypto/cmp/cmp_util.c
M crypto/cmp/cmp_vfy.c
M crypto/cms/cms_asn1.c
M crypto/cms/cms_att.c
M crypto/cms/cms_cd.c
M crypto/cms/cms_dd.c
M crypto/cms/cms_dh.c
M crypto/cms/cms_ec.c
M crypto/cms/cms_enc.c
M crypto/cms/cms_env.c
M crypto/cms/cms_err.c
M crypto/cms/cms_ess.c
M crypto/cms/cms_io.c
M crypto/cms/cms_kari.c
M crypto/cms/cms_kem.c
M crypto/cms/cms_kemri.c
M crypto/cms/cms_lib.c
M crypto/cms/cms_local.h
M crypto/cms/cms_pwri.c
M crypto/cms/cms_rsa.c
M crypto/cms/cms_sd.c
M crypto/cms/cms_smime.c
M crypto/comp/c_brotli.c
M crypto/comp/c_zlib.c
M crypto/comp/c_zstd.c
M crypto/comp/comp_err.c
M crypto/comp/comp_lib.c
M crypto/comp/comp_local.h
M crypto/comp_methods.c
M crypto/conf/conf_api.c
M crypto/conf/conf_def.c
M crypto/conf/conf_err.c
M crypto/conf/conf_lib.c
M crypto/conf/conf_mod.c
M crypto/conf/conf_sap.c
M crypto/conf/conf_ssl.c
M crypto/context.c
M crypto/core_algorithm.c
M crypto/core_fetch.c
M crypto/core_namemap.c
M crypto/cpt_err.c
M crypto/cpuid.c
M crypto/crmf/crmf_asn.c
M crypto/crmf/crmf_err.c
M crypto/crmf/crmf_lib.c
M crypto/crmf/crmf_local.h
M crypto/crmf/crmf_pbm.c
M crypto/cryptlib.c
M crypto/ct/ct_b64.c
M crypto/ct/ct_err.c
M crypto/ct/ct_local.h
M crypto/ct/ct_log.c
M crypto/ct/ct_oct.c
M crypto/ct/ct_policy.c
M crypto/ct/ct_prn.c
M crypto/ct/ct_sct.c
M crypto/ct/ct_sct_ctx.c
M crypto/ct/ct_vfy.c
M crypto/ct/ct_x509v3.c
M crypto/ctype.c
M crypto/cversion.c
M crypto/defaults.c
M crypto/der_writer.c
M crypto/des/cbc_cksm.c
M crypto/des/cfb64ede.c
M crypto/des/cfb64enc.c
M crypto/des/cfb_enc.c
M crypto/des/des_enc.c
M crypto/des/des_local.h
M crypto/des/ecb3_enc.c
M crypto/des/ecb_enc.c
M crypto/des/fcrypt.c
M crypto/des/fcrypt_b.c
M crypto/des/ncbc_enc.c
M crypto/des/ofb64ede.c
M crypto/des/ofb64enc.c
M crypto/des/ofb_enc.c
M crypto/des/pcbc_enc.c
M crypto/des/qud_cksm.c
M crypto/des/set_key.c
M crypto/des/spr.h
M crypto/des/xcbc_enc.c
M crypto/deterministic_nonce.c
M crypto/dh/dh_ameth.c
M crypto/dh/dh_asn1.c
M crypto/dh/dh_backend.c
M crypto/dh/dh_check.c
M crypto/dh/dh_depr.c
M crypto/dh/dh_err.c
M crypto/dh/dh_gen.c
M crypto/dh/dh_group_params.c
M crypto/dh/dh_kdf.c
M crypto/dh/dh_key.c
M crypto/dh/dh_lib.c
M crypto/dh/dh_local.h
M crypto/dh/dh_meth.c
M crypto/dh/dh_pmeth.c
M crypto/dh/dh_rfc5114.c
M crypto/dllmain.c
M crypto/dsa/dsa_ameth.c
M crypto/dsa/dsa_asn1.c
M crypto/dsa/dsa_backend.c
M crypto/dsa/dsa_check.c
M crypto/dsa/dsa_depr.c
M crypto/dsa/dsa_err.c
M crypto/dsa/dsa_gen.c
M crypto/dsa/dsa_key.c
M crypto/dsa/dsa_lib.c
M crypto/dsa/dsa_local.h
M crypto/dsa/dsa_meth.c
M crypto/dsa/dsa_ossl.c
M crypto/dsa/dsa_pmeth.c
M crypto/dsa/dsa_sign.c
M crypto/dsa/dsa_vrf.c
M crypto/dso/dso_dl.c
M crypto/dso/dso_dlfcn.c
M crypto/dso/dso_err.c
M crypto/dso/dso_lib.c
M crypto/dso/dso_local.h
M crypto/dso/dso_vms.c
M crypto/dso/dso_win32.c
M crypto/ebcdic.c
M crypto/ec/curve25519.c
M crypto/ec/curve448/arch_32/arch_intrinsics.h
M crypto/ec/curve448/arch_32/f_impl.h
M crypto/ec/curve448/arch_32/f_impl32.c
M crypto/ec/curve448/arch_64/arch_intrinsics.h
M crypto/ec/curve448/arch_64/f_impl.h
M crypto/ec/curve448/arch_64/f_impl64.c
M crypto/ec/curve448/curve448.c
M crypto/ec/curve448/curve448_local.h
M crypto/ec/curve448/curve448_tables.c
M crypto/ec/curve448/curve448utils.h
M crypto/ec/curve448/ed448.h
M crypto/ec/curve448/eddsa.c
M crypto/ec/curve448/f_generic.c
M crypto/ec/curve448/field.h
M crypto/ec/curve448/point_448.h
M crypto/ec/curve448/scalar.c
M crypto/ec/curve448/word.h
M crypto/ec/ec2_oct.c
M crypto/ec/ec2_smpl.c
M crypto/ec/ec_ameth.c
M crypto/ec/ec_asn1.c
M crypto/ec/ec_backend.c
M crypto/ec/ec_check.c
M crypto/ec/ec_curve.c
M crypto/ec/ec_cvt.c
M crypto/ec/ec_deprecated.c
M crypto/ec/ec_err.c
M crypto/ec/ec_key.c
M crypto/ec/ec_kmeth.c
M crypto/ec/ec_lib.c
M crypto/ec/ec_local.h
M crypto/ec/ec_mult.c
M crypto/ec/ec_oct.c
M crypto/ec/ec_pmeth.c
M crypto/ec/ec_print.c
M crypto/ec/ecdh_kdf.c
M crypto/ec/ecdh_ossl.c
M crypto/ec/ecdsa_ossl.c
M crypto/ec/ecdsa_sign.c
M crypto/ec/ecdsa_vrf.c
M crypto/ec/eck_prn.c
M crypto/ec/ecp_mont.c
M crypto/ec/ecp_nist.c
M crypto/ec/ecp_nistp224.c
M crypto/ec/ecp_nistp256.c
M crypto/ec/ecp_nistp384.c
M crypto/ec/ecp_nistp521.c
M crypto/ec/ecp_nistputil.c
M crypto/ec/ecp_nistz256.c
M crypto/ec/ecp_nistz256_table.c
M crypto/ec/ecp_oct.c
M crypto/ec/ecp_ppc.c
M crypto/ec/ecp_s390x_nistp.c
M crypto/ec/ecp_sm2p256.c
M crypto/ec/ecp_sm2p256_table.c
M crypto/ec/ecp_smpl.c
M crypto/ec/ecx_backend.c
M crypto/ec/ecx_backend.h
M crypto/ec/ecx_key.c
M crypto/ec/ecx_meth.c
M crypto/ec/ecx_s390x.c
M crypto/encode_decode/decoder_err.c
M crypto/encode_decode/decoder_lib.c
M crypto/encode_decode/decoder_meth.c
M crypto/encode_decode/decoder_pkey.c
M crypto/encode_decode/encoder_err.c
M crypto/encode_decode/encoder_lib.c
M crypto/encode_decode/encoder_local.h
M crypto/encode_decode/encoder_meth.c
M crypto/encode_decode/encoder_pkey.c
M crypto/err/err.c
M crypto/err/err_all.c
M crypto/err/err_all_legacy.c
M crypto/err/err_local.h
M crypto/err/err_mark.c
M crypto/err/err_prn.c
M crypto/err/err_save.c
M crypto/ess/ess_asn1.c
M crypto/ess/ess_err.c
M crypto/ess/ess_lib.c
M crypto/evp/asymcipher.c
M crypto/evp/bio_b64.c
M crypto/evp/bio_enc.c
M crypto/evp/bio_md.c
M crypto/evp/bio_ok.c
M crypto/evp/c_allc.c
M crypto/evp/cmeth_lib.c
M crypto/evp/ctrl_params_translate.c
M crypto/evp/dh_ctrl.c
M crypto/evp/dh_support.c
M crypto/evp/digest.c
M crypto/evp/dsa_ctrl.c
M crypto/evp/e_aes.c
M crypto/evp/e_aes_cbc_hmac_sha1.c
M crypto/evp/e_aes_cbc_hmac_sha256.c
M crypto/evp/e_aria.c
M crypto/evp/e_bf.c
M crypto/evp/e_camellia.c
M crypto/evp/e_cast.c
M crypto/evp/e_chacha20_poly1305.c
M crypto/evp/e_des.c
M crypto/evp/e_des3.c
M crypto/evp/e_idea.c
M crypto/evp/e_null.c
M crypto/evp/e_old.c
M crypto/evp/e_rc2.c
M crypto/evp/e_rc4.c
M crypto/evp/e_rc4_hmac_md5.c
M crypto/evp/e_rc5.c
M crypto/evp/e_seed.c
M crypto/evp/e_sm4.c
M crypto/evp/e_xcbc_d.c
M crypto/evp/ec_ctrl.c
M crypto/evp/ec_support.c
M crypto/evp/encode.c
M crypto/evp/evp_cnf.c
M crypto/evp/evp_enc.c
M crypto/evp/evp_err.c
M crypto/evp/evp_fetch.c
M crypto/evp/evp_key.c
M crypto/evp/evp_lib.c
M crypto/evp/evp_local.h
M crypto/evp/evp_pbe.c
M crypto/evp/evp_pkey.c
M crypto/evp/evp_pkey_type.c
M crypto/evp/evp_rand.c
M crypto/evp/evp_utils.c
M crypto/evp/exchange.c
M crypto/evp/kdf_lib.c
M crypto/evp/kdf_meth.c
M crypto/evp/kem.c
M crypto/evp/keymgmt_lib.c
M crypto/evp/keymgmt_meth.c
M crypto/evp/legacy_blake2.c
M crypto/evp/legacy_md5_sha1.c
M crypto/evp/legacy_mdc2.c
M crypto/evp/legacy_meth.h
M crypto/evp/legacy_ripemd.c
M crypto/evp/legacy_sha.c
M crypto/evp/legacy_wp.c
M crypto/evp/m_sigver.c
M crypto/evp/mac_lib.c
M crypto/evp/mac_meth.c
M crypto/evp/names.c
M crypto/evp/p5_crpt.c
M crypto/evp/p5_crpt2.c
M crypto/evp/p_dec.c
M crypto/evp/p_enc.c
M crypto/evp/p_lib.c
M crypto/evp/p_open.c
M crypto/evp/p_seal.c
M crypto/evp/p_sign.c
M crypto/evp/p_verify.c
M crypto/evp/pbe_scrypt.c
M crypto/evp/pmeth_check.c
M crypto/evp/pmeth_gn.c
M crypto/evp/pmeth_lib.c
M crypto/evp/s_lib.c
M crypto/evp/signature.c
M crypto/evp/skeymgmt_meth.c
M crypto/ex_data.c
M crypto/ffc/ffc_backend.c
M crypto/ffc/ffc_dh.c
M crypto/ffc/ffc_key_generate.c
M crypto/ffc/ffc_key_validate.c
M crypto/ffc/ffc_params.c
M crypto/ffc/ffc_params_generate.c
M crypto/ffc/ffc_params_validate.c
M crypto/getenv.c
M crypto/hashtable/hashtable.c
M crypto/hmac/hmac.c
M crypto/hmac/hmac_local.h
M crypto/hmac/hmac_s390x.c
M crypto/hpke/hpke.c
M crypto/hpke/hpke_util.c
M crypto/http/http_client.c
M crypto/http/http_err.c
M crypto/http/http_lib.c
M crypto/idea/i_cbc.c
M crypto/idea/i_cfb64.c
M crypto/idea/i_ecb.c
M crypto/idea/i_ofb64.c
M crypto/idea/idea_local.h
M crypto/indicator_core.c
M crypto/info.c
M crypto/init.c
M crypto/initthread.c
M crypto/lhash/lh_stats.c
M crypto/lhash/lhash.c
M crypto/lhash/lhash_local.h
M crypto/lms/lm_ots_params.c
M crypto/lms/lm_ots_verify.c
M crypto/lms/lms_key.c
M crypto/lms/lms_params.c
M crypto/lms/lms_pubkey_decode.c
M crypto/lms/lms_sig_decoder.c
M crypto/lms/lms_verify.c
M crypto/loongarch_arch.h
M crypto/md2/md2_dgst.c
M crypto/md4/md4_dgst.c
M crypto/md4/md4_local.h
M crypto/md4/md4_one.c
M crypto/md5/md5_dgst.c
M crypto/md5/md5_local.h
M crypto/md5/md5_one.c
M crypto/mdc2/mdc2dgst.c
M crypto/mem.c
M crypto/mem_sec.c
M crypto/mips_arch.h
M crypto/ml_dsa/ml_dsa_encoders.c
M crypto/ml_dsa/ml_dsa_hash.h
M crypto/ml_dsa/ml_dsa_key.c
M crypto/ml_dsa/ml_dsa_key.h
M crypto/ml_dsa/ml_dsa_key_compress.c
M crypto/ml_dsa/ml_dsa_local.h
M crypto/ml_dsa/ml_dsa_matrix.c
M crypto/ml_dsa/ml_dsa_matrix.h
M crypto/ml_dsa/ml_dsa_ntt.c
M crypto/ml_dsa/ml_dsa_params.c
M crypto/ml_dsa/ml_dsa_poly.h
M crypto/ml_dsa/ml_dsa_sample.c
M crypto/ml_dsa/ml_dsa_sign.c
M crypto/ml_dsa/ml_dsa_vector.h
M crypto/ml_kem/ml_kem.c
M crypto/modes/cbc128.c
M crypto/modes/ccm128.c
M crypto/modes/cfb128.c
M crypto/modes/ctr128.c
M crypto/modes/cts128.c
M crypto/modes/gcm128.c
M crypto/modes/ocb128.c
M crypto/modes/ofb128.c
M crypto/modes/siv128.c
M crypto/modes/wrap128.c
M crypto/modes/xts128.c
M crypto/modes/xts128gb.c
M crypto/o_fopen.c
M crypto/o_str.c
M crypto/objects/o_names.c
M crypto/objects/obj_compat.h
M crypto/objects/obj_dat.c
M crypto/objects/obj_err.c
M crypto/objects/obj_lib.c
M crypto/objects/obj_xref.c
M crypto/ocsp/ocsp_asn.c
M crypto/ocsp/ocsp_cl.c
M crypto/ocsp/ocsp_err.c
M crypto/ocsp/ocsp_ext.c
M crypto/ocsp/ocsp_http.c
M crypto/ocsp/ocsp_lib.c
M crypto/ocsp/ocsp_local.h
M crypto/ocsp/ocsp_prn.c
M crypto/ocsp/ocsp_srv.c
M crypto/ocsp/ocsp_vfy.c
M crypto/ocsp/v3_ocsp.c
M crypto/packet.c
M crypto/param_build.c
M crypto/param_build_set.c
M crypto/params.c
M crypto/params_dup.c
M crypto/params_from_text.c
M crypto/passphrase.c
M crypto/pem/pem_all.c
M crypto/pem/pem_err.c
M crypto/pem/pem_info.c
M crypto/pem/pem_lib.c
M crypto/pem/pem_local.h
M crypto/pem/pem_oth.c
M crypto/pem/pem_pk8.c
M crypto/pem/pem_pkey.c
M crypto/pem/pem_sign.c
M crypto/pem/pvkfmt.c
M crypto/pkcs12/p12_add.c
M crypto/pkcs12/p12_asn.c
M crypto/pkcs12/p12_attr.c
M crypto/pkcs12/p12_crpt.c
M crypto/pkcs12/p12_crt.c
M crypto/pkcs12/p12_decr.c
M crypto/pkcs12/p12_init.c
M crypto/pkcs12/p12_key.c
M crypto/pkcs12/p12_kiss.c
M crypto/pkcs12/p12_local.h
M crypto/pkcs12/p12_mutl.c
M crypto/pkcs12/p12_npas.c
M crypto/pkcs12/p12_p8d.c
M crypto/pkcs12/p12_p8e.c
M crypto/pkcs12/p12_sbag.c
M crypto/pkcs12/p12_utl.c
M crypto/pkcs12/pk12err.c
M crypto/pkcs7/pk7_asn1.c
M crypto/pkcs7/pk7_attr.c
M crypto/pkcs7/pk7_doit.c
M crypto/pkcs7/pk7_lib.c
M crypto/pkcs7/pk7_mime.c
M crypto/pkcs7/pk7_smime.c
M crypto/pkcs7/pkcs7err.c
M crypto/poly1305/poly1305.c
M crypto/poly1305/poly1305_base2_44.c
M crypto/poly1305/poly1305_ieee754.c
M crypto/poly1305/poly1305_ppc.c
M crypto/ppccap.c
M crypto/property/defn_cache.c
M crypto/property/property.c
M crypto/property/property_err.c
M crypto/property/property_local.h
M crypto/property/property_parse.c
M crypto/property/property_query.c
M crypto/property/property_string.c
M crypto/provider.c
M crypto/provider_child.c
M crypto/provider_conf.c
M crypto/provider_core.c
M crypto/provider_local.h
M crypto/provider_predefined.c
M crypto/punycode.c
M crypto/quic_vlint.c
M crypto/rand/prov_seed.c
M crypto/rand/rand_deprecated.c
M crypto/rand/rand_egd.c
M crypto/rand/rand_err.c
M crypto/rand/rand_lib.c
M crypto/rand/rand_local.h
M crypto/rand/rand_meth.c
M crypto/rand/rand_pool.c
M crypto/rand/rand_uniform.c
M crypto/rand/randfile.c
M crypto/rc2/rc2_cbc.c
M crypto/rc2/rc2_ecb.c
M crypto/rc2/rc2_local.h
M crypto/rc2/rc2_skey.c
M crypto/rc2/rc2cfb64.c
M crypto/rc2/rc2ofb64.c
M crypto/rc4/rc4_enc.c
M crypto/rc4/rc4_local.h
M crypto/rc4/rc4_skey.c
M crypto/rc5/rc5_ecb.c
M crypto/rc5/rc5_enc.c
M crypto/rc5/rc5_local.h
M crypto/rc5/rc5_skey.c
M crypto/rc5/rc5cfb64.c
M crypto/rc5/rc5ofb64.c
M crypto/rcu_internal.h
M crypto/ripemd/rmd_dgst.c
M crypto/ripemd/rmd_local.h
M crypto/ripemd/rmdconst.h
M crypto/riscvcap.c
M crypto/rsa/rsa_acvp_test_params.c
M crypto/rsa/rsa_ameth.c
M crypto/rsa/rsa_asn1.c
M crypto/rsa/rsa_backend.c
M crypto/rsa/rsa_chk.c
M crypto/rsa/rsa_crpt.c
M crypto/rsa/rsa_depr.c
M crypto/rsa/rsa_err.c
M crypto/rsa/rsa_gen.c
M crypto/rsa/rsa_lib.c
M crypto/rsa/rsa_local.h
M crypto/rsa/rsa_meth.c
M crypto/rsa/rsa_mp.c
M crypto/rsa/rsa_none.c
M crypto/rsa/rsa_oaep.c
M crypto/rsa/rsa_ossl.c
M crypto/rsa/rsa_pk1.c
M crypto/rsa/rsa_pmeth.c
M crypto/rsa/rsa_pss.c
M crypto/rsa/rsa_saos.c
M crypto/rsa/rsa_schemes.c
M crypto/rsa/rsa_sign.c
M crypto/rsa/rsa_sp800_56b_check.c
M crypto/rsa/rsa_sp800_56b_gen.c
M crypto/rsa/rsa_x931.c
M crypto/rsa/rsa_x931g.c
M crypto/s390x_arch.h
M crypto/s390xcap.c
M crypto/seed/seed.c
M crypto/seed/seed_cbc.c
M crypto/seed/seed_cfb.c
M crypto/seed/seed_ecb.c
M crypto/seed/seed_local.h
M crypto/seed/seed_ofb.c
M crypto/self_test_core.c
M crypto/sha/keccak1600.c
M crypto/sha/sha256.c
M crypto/sha/sha3.c
M crypto/sha/sha512.c
M crypto/sha/sha_local.h
M crypto/sha/sha_ppc.c
M crypto/sha/sha_riscv.c
M crypto/siphash/siphash.c
M crypto/sleep.c
M crypto/slh_dsa/slh_adrs.c
M crypto/slh_dsa/slh_adrs.h
M crypto/slh_dsa/slh_dsa.c
M crypto/slh_dsa/slh_dsa_hash_ctx.c
M crypto/slh_dsa/slh_dsa_key.c
M crypto/slh_dsa/slh_dsa_key.h
M crypto/slh_dsa/slh_dsa_local.h
M crypto/slh_dsa/slh_fors.c
M crypto/slh_dsa/slh_hash.c
M crypto/slh_dsa/slh_hash.h
M crypto/slh_dsa/slh_hypertree.c
M crypto/slh_dsa/slh_params.c
M crypto/slh_dsa/slh_params.h
M crypto/slh_dsa/slh_wots.c
M crypto/slh_dsa/slh_xmss.c
M crypto/sm2/sm2_crypt.c
M crypto/sm2/sm2_err.c
M crypto/sm2/sm2_key.c
M crypto/sm2/sm2_sign.c
M crypto/sm3/legacy_sm3.c
M crypto/sm3/sm3.c
M crypto/sm3/sm3_local.h
M crypto/sm4/sm4.c
M crypto/sparcv9cap.c
M crypto/sparse_array.c
M crypto/srp/srp_lib.c
M crypto/srp/srp_vfy.c
M crypto/ssl_err.c
M crypto/sslerr.h
M crypto/stack/stack.c
M crypto/store/store_err.c
M crypto/store/store_lib.c
M crypto/store/store_local.h
M crypto/store/store_meth.c
M crypto/store/store_register.c
M crypto/store/store_result.c
M crypto/store/store_strings.c
M crypto/thread/arch.c
M crypto/thread/arch/thread_none.c
M crypto/thread/arch/thread_posix.c
M crypto/thread/arch/thread_win.c
M crypto/thread/internal.c
M crypto/threads_common.c
M crypto/threads_lib.c
M crypto/threads_none.c
M crypto/threads_pthread.c
M crypto/threads_win.c
M crypto/time.c
M crypto/trace.c
M crypto/ts/ts_asn1.c
M crypto/ts/ts_conf.c
M crypto/ts/ts_err.c
M crypto/ts/ts_lib.c
M crypto/ts/ts_local.h
M crypto/ts/ts_req_print.c
M crypto/ts/ts_rsp_print.c
M crypto/ts/ts_rsp_sign.c
M crypto/ts/ts_rsp_verify.c
M crypto/ts/ts_verify_ctx.c
M crypto/txt_db/txt_db.c
M crypto/ui/ui_err.c
M crypto/ui/ui_lib.c
M crypto/ui/ui_local.h
M crypto/ui/ui_null.c
M crypto/ui/ui_openssl.c
M crypto/ui/ui_util.c
M crypto/uid.c
M crypto/vms_rms.h
M crypto/whrlpool/wp_block.c
M crypto/whrlpool/wp_dgst.c
M crypto/x509/by_dir.c
M crypto/x509/by_file.c
M crypto/x509/by_store.c
M crypto/x509/pcy_cache.c
M crypto/x509/pcy_data.c
M crypto/x509/pcy_lib.c
M crypto/x509/pcy_local.h
M crypto/x509/pcy_map.c
M crypto/x509/pcy_node.c
M crypto/x509/pcy_tree.c
M crypto/x509/standard_exts.h
M crypto/x509/t_acert.c
M crypto/x509/t_crl.c
M crypto/x509/t_req.c
M crypto/x509/t_x509.c
M crypto/x509/v3_aaa.c
M crypto/x509/v3_ac_tgt.c
M crypto/x509/v3_addr.c
M crypto/x509/v3_admis.c
M crypto/x509/v3_admis.h
M crypto/x509/v3_akeya.c
M crypto/x509/v3_akid.c
M crypto/x509/v3_asid.c
M crypto/x509/v3_attrdesc.c
M crypto/x509/v3_attrmap.c
M crypto/x509/v3_authattid.c
M crypto/x509/v3_battcons.c
M crypto/x509/v3_bcons.c
M crypto/x509/v3_bitst.c
M crypto/x509/v3_conf.c
M crypto/x509/v3_cpols.c
M crypto/x509/v3_crld.c
M crypto/x509/v3_enum.c
M crypto/x509/v3_extku.c
M crypto/x509/v3_genn.c
M crypto/x509/v3_group_ac.c
M crypto/x509/v3_ia5.c
M crypto/x509/v3_ind_iss.c
M crypto/x509/v3_info.c
M crypto/x509/v3_int.c
M crypto/x509/v3_iobo.c
M crypto/x509/v3_ist.c
M crypto/x509/v3_lib.c
M crypto/x509/v3_ncons.c
M crypto/x509/v3_no_ass.c
M crypto/x509/v3_no_rev_avail.c
M crypto/x509/v3_pci.c
M crypto/x509/v3_pcia.c
M crypto/x509/v3_pcons.c
M crypto/x509/v3_pku.c
M crypto/x509/v3_pmaps.c
M crypto/x509/v3_prn.c
M crypto/x509/v3_purp.c
M crypto/x509/v3_rolespec.c
M crypto/x509/v3_san.c
M crypto/x509/v3_sda.c
M crypto/x509/v3_single_use.c
M crypto/x509/v3_skid.c
M crypto/x509/v3_soa_id.c
M crypto/x509/v3_sxnet.c
M crypto/x509/v3_timespec.c
M crypto/x509/v3_tlsf.c
M crypto/x509/v3_usernotice.c
M crypto/x509/v3_utf8.c
M crypto/x509/v3_utl.c
M crypto/x509/v3err.c
M crypto/x509/x509_acert.c
M crypto/x509/x509_acert.h
M crypto/x509/x509_att.c
M crypto/x509/x509_cmp.c
M crypto/x509/x509_d2.c
M crypto/x509/x509_def.c
M crypto/x509/x509_err.c
M crypto/x509/x509_ext.c
M crypto/x509/x509_local.h
M crypto/x509/x509_lu.c
M crypto/x509/x509_meth.c
M crypto/x509/x509_obj.c
M crypto/x509/x509_r2x.c
M crypto/x509/x509_req.c
M crypto/x509/x509_set.c
M crypto/x509/x509_trust.c
M crypto/x509/x509_txt.c
M crypto/x509/x509_v3.c
M crypto/x509/x509_vfy.c
M crypto/x509/x509_vpm.c
M crypto/x509/x509aset.c
M crypto/x509/x509cset.c
M crypto/x509/x509name.c
M crypto/x509/x509type.c
M crypto/x509/x_all.c
M crypto/x509/x_attrib.c
M crypto/x509/x_crl.c
M crypto/x509/x_exten.c
M crypto/x509/x_ietfatt.c
M crypto/x509/x_name.c
M crypto/x509/x_pubkey.c
M crypto/x509/x_req.c
M crypto/x509/x_x509.c
M crypto/x509/x_x509a.c
M demos/bio/client-arg.c
M demos/bio/client-conf.c
M demos/bio/saccept.c
M demos/bio/sconnect.c
M demos/bio/server-arg.c
M demos/bio/server-cmod.c
M demos/bio/server-conf.c
M demos/cipher/aesccm.c
M demos/cipher/aesgcm.c
M demos/cipher/aeskeywrap.c
M demos/cipher/ariacbc.c
M demos/cms/cms_comp.c
M demos/cms/cms_ddec.c
M demos/cms/cms_dec.c
M demos/cms/cms_denc.c
M demos/cms/cms_enc.c
M demos/cms/cms_sign.c
M demos/cms/cms_sign2.c
M demos/cms/cms_uncomp.c
M demos/cms/cms_ver.c
M demos/digest/BIO_f_md.c
M demos/digest/EVP_MD_demo.c
M demos/digest/EVP_MD_stdin.c
M demos/digest/EVP_MD_xof.c
M demos/encode/ec_encode.c
M demos/encode/rsa_encode.c
M demos/encrypt/rsa_encrypt.c
M demos/encrypt/rsa_encrypt.h
M demos/guide/quic-client-block.c
M demos/guide/quic-client-non-block.c
M demos/guide/quic-multi-stream.c
M demos/guide/quic-server-block.c
M demos/guide/quic-server-non-block.c
M demos/guide/tls-client-block.c
M demos/guide/tls-client-non-block.c
M demos/guide/tls-server-block.c
M demos/http3/ossl-nghttp3-demo-server.c
M demos/http3/ossl-nghttp3-demo.c
M demos/http3/ossl-nghttp3.c
M demos/http3/ossl-nghttp3.h
M demos/kdf/argon2.c
M demos/kdf/hkdf.c
M demos/kdf/pbkdf2.c
M demos/kdf/scrypt.c
M demos/keyexch/ecdh.c
M demos/keyexch/x25519.c
M demos/mac/cmac-aes256.c
M demos/mac/gmac.c
M demos/mac/hmac-sha512.c
M demos/mac/poly1305.c
M demos/pkcs12/pkread.c
M demos/pkey/EVP_PKEY_DSA_keygen.c
M demos/pkey/EVP_PKEY_DSA_paramfromdata.c
M demos/pkey/EVP_PKEY_DSA_paramgen.c
M demos/pkey/EVP_PKEY_DSA_paramvalidate.c
M demos/pkey/EVP_PKEY_EC_keygen.c
M demos/quic/poll-server/quic-server-ssl-poll-http.c
M demos/quic/server/server.c
M demos/signature/EVP_DSA_Signature_demo.c
M demos/signature/EVP_EC_Signature_demo.c
M demos/signature/EVP_EC_Signature_demo.h
M demos/signature/EVP_ED_Signature_demo.c
M demos/signature/rsa_pss_direct.c
M demos/signature/rsa_pss_hash.c
M demos/smime/smdec.c
M demos/smime/smenc.c
M demos/smime/smsign.c
M demos/smime/smsign2.c
M demos/smime/smver.c
M demos/sslecho/main.c
M doc/designs/ddd/ddd-01-conn-blocking.c
M doc/designs/ddd/ddd-02-conn-nonblocking-threads.c
M doc/designs/ddd/ddd-02-conn-nonblocking.c
M doc/designs/ddd/ddd-03-fd-blocking.c
M doc/designs/ddd/ddd-04-fd-nonblocking.c
M doc/designs/ddd/ddd-05-mem-nonblocking.c
M doc/designs/ddd/ddd-06-mem-uv.c
M fuzz/asn1.c
M fuzz/bignum.c
M fuzz/bndiv.c
M fuzz/client.c
M fuzz/cmp.c
M fuzz/decoder.c
M fuzz/driver.c
M fuzz/dtlsclient.c
M fuzz/dtlsserver.c
M fuzz/fuzz_rand.c
M fuzz/fuzzer.h
M fuzz/hashtable.c
M fuzz/ml-dsa.c
M fuzz/ml-kem.c
M fuzz/provider.c
M fuzz/quic-client.c
M fuzz/quic-lcidm.c
M fuzz/quic-server.c
M fuzz/quic-srtm.c
M fuzz/server.c
M fuzz/slh-dsa.c
M fuzz/smime.c
M fuzz/test-corpus.c
M fuzz/v3name.c
M fuzz/x509.c
M include/crypto/aes_platform.h
M include/crypto/aria.h
M include/crypto/asn1.h
M include/crypto/asn1_dsa.h
M include/crypto/asn1err.h
M include/crypto/async.h
M include/crypto/asyncerr.h
M include/crypto/bioerr.h
M include/crypto/bn.h
M include/crypto/bn_dh.h
M include/crypto/bnerr.h
M include/crypto/buffererr.h
M include/crypto/chacha.h
M include/crypto/cmac.h
M include/crypto/cmll_platform.h
M include/crypto/cmperr.h
M include/crypto/cmserr.h
M include/crypto/comperr.h
M include/crypto/conferr.h
M include/crypto/crmferr.h
M include/crypto/cryptlib.h
M include/crypto/cryptoerr.h
M include/crypto/cterr.h
M include/crypto/ctype.h
M include/crypto/decoder.h
M include/crypto/decodererr.h
M include/crypto/des_platform.h
M include/crypto/dh.h
M include/crypto/dherr.h
M include/crypto/dsa.h
M include/crypto/dsaerr.h
M include/crypto/dso_conf.h.in
M include/crypto/ec.h
M include/crypto/ecerr.h
M include/crypto/ecx.h
M include/crypto/encoder.h
M include/crypto/encodererr.h
M include/crypto/err.h
M include/crypto/ess.h
M include/crypto/esserr.h
M include/crypto/evp.h
M include/crypto/evperr.h
M include/crypto/httperr.h
M include/crypto/lhash.h
M include/crypto/lms.h
M include/crypto/lms_sig.h
M include/crypto/lms_util.h
M include/crypto/md32_common.h
M include/crypto/ml_dsa.h
M include/crypto/ml_kem.h
M include/crypto/modes.h
M include/crypto/objectserr.h
M include/crypto/ocsperr.h
M include/crypto/pem.h
M include/crypto/pemerr.h
M include/crypto/pkcs12err.h
M include/crypto/pkcs7.h
M include/crypto/pkcs7err.h
M include/crypto/poly1305.h
M include/crypto/ppc_arch.h
M include/crypto/punycode.h
M include/crypto/rand.h
M include/crypto/rand_pool.h
M include/crypto/randerr.h
M include/crypto/riscv_arch.h
M include/crypto/rsa.h
M include/crypto/rsaerr.h
M include/crypto/security_bits.h
M include/crypto/sha.h
M include/crypto/siphash.h
M include/crypto/siv.h
M include/crypto/slh_dsa.h
M include/crypto/sm2.h
M include/crypto/sm2err.h
M include/crypto/sm4.h
M include/crypto/sm4_platform.h
M include/crypto/sparc_arch.h
M include/crypto/sparse_array.h
M include/crypto/store.h
M include/crypto/storeerr.h
M include/crypto/tserr.h
M include/crypto/types.h
M include/crypto/uierr.h
M include/crypto/x509.h
M include/crypto/x509_acert.h
M include/crypto/x509err.h
M include/crypto/x509v3err.h
M include/internal/asn1.h
M include/internal/bio.h
M include/internal/bio_addr.h
M include/internal/bio_tfo.h
M include/internal/cms.h
M include/internal/common.h
M include/internal/comp.h
M include/internal/conf.h
M include/internal/constant_time.h
M include/internal/core.h
M include/internal/crmf.h
M include/internal/cryptlib.h
M include/internal/dane.h
M include/internal/deprecated.h
M include/internal/der.h
M include/internal/deterministic_nonce.h
M include/internal/dso.h
M include/internal/dsoerr.h
M include/internal/e_os.h
M include/internal/e_winsock.h
M include/internal/encoder.h
M include/internal/endian.h
M include/internal/err.h
M include/internal/ffc.h
M include/internal/fips.h
M include/internal/hashfunc.h
M include/internal/hashtable.h
M include/internal/hpke_util.h
M include/internal/json_enc.h
M include/internal/ktls.h
M include/internal/list.h
M include/internal/mem_alloc_utils.h
M include/internal/namemap.h
M include/internal/nelem.h
M include/internal/numbers.h
M include/internal/o_dir.h
M include/internal/packet.h
M include/internal/packet_quic.h
M include/internal/param_build_set.h
M include/internal/params.h
M include/internal/passphrase.h
M include/internal/priority_queue.h
M include/internal/property.h
M include/internal/propertyerr.h
M include/internal/provider.h
M include/internal/qlog.h
M include/internal/qlog_event_helpers.h
M include/internal/quic_ackm.h
M include/internal/quic_cc.h
M include/internal/quic_cfq.h
M include/internal/quic_channel.h
M include/internal/quic_demux.h
M include/internal/quic_engine.h
M include/internal/quic_error.h
M include/internal/quic_fc.h
M include/internal/quic_fifd.h
M include/internal/quic_lcidm.h
M include/internal/quic_port.h
M include/internal/quic_predef.h
M include/internal/quic_rcidm.h
M include/internal/quic_reactor.h
M include/internal/quic_reactor_wait_ctx.h
M include/internal/quic_record_rx.h
M include/internal/quic_record_tx.h
M include/internal/quic_record_util.h
M include/internal/quic_rx_depack.h
M include/internal/quic_sf_list.h
M include/internal/quic_srt_gen.h
M include/internal/quic_srtm.h
M include/internal/quic_ssl.h
M include/internal/quic_statm.h
M include/internal/quic_stream.h
M include/internal/quic_stream_map.h
M include/internal/quic_thread_assist.h
M include/internal/quic_tls.h
M include/internal/quic_trace.h
M include/internal/quic_tserver.h
M include/internal/quic_txp.h
M include/internal/quic_txpim.h
M include/internal/quic_types.h
M include/internal/quic_vlint.h
M include/internal/quic_wire.h
M include/internal/quic_wire_pkt.h
M include/internal/rcu.h
M include/internal/recordmethod.h
M include/internal/refcount.h
M include/internal/ring_buf.h
M include/internal/rio_notifier.h
M include/internal/safe_math.h
M include/internal/sha3.h
M include/internal/sizes.h
M include/internal/skey.h
M include/internal/sm3.h
M include/internal/sockets.h
M include/internal/ssl.h
M include/internal/ssl3_cbc.h
M include/internal/ssl_unwrap.h
M include/internal/sslconf.h
M include/internal/statem.h
M include/internal/symhacks.h
M include/internal/thread.h
M include/internal/thread_arch.h
M include/internal/thread_once.h
M include/internal/threads_common.h
M include/internal/time.h
M include/internal/tlsgroups.h
M include/internal/to_hex.h
M include/internal/tsan_assist.h
M include/internal/uint_set.h
M include/internal/unicode.h
M include/openssl/aes.h
M include/openssl/asn1.h.in
M include/openssl/asn1err.h
M include/openssl/asn1t.h.in
M include/openssl/async.h
M include/openssl/asyncerr.h
M include/openssl/bio.h.in
M include/openssl/bioerr.h
M include/openssl/blowfish.h
M include/openssl/bn.h
M include/openssl/bnerr.h
M include/openssl/buffer.h
M include/openssl/buffererr.h
M include/openssl/byteorder.h
M include/openssl/camellia.h
M include/openssl/cast.h
M include/openssl/cmac.h
M include/openssl/cmp.h.in
M include/openssl/cmp_util.h
M include/openssl/cmperr.h
M include/openssl/cms.h.in
M include/openssl/cmserr.h
M include/openssl/comp.h.in
M include/openssl/comperr.h
M include/openssl/conf.h.in
M include/openssl/conf_api.h
M include/openssl/conferr.h
M include/openssl/configuration.h.in
M include/openssl/conftypes.h
M include/openssl/core.h
M include/openssl/core_dispatch.h
M include/openssl/core_names.h.in
M include/openssl/core_object.h
M include/openssl/crmf.h.in
M include/openssl/crmferr.h
M include/openssl/crypto.h.in
M include/openssl/cryptoerr.h
M include/openssl/cryptoerr_legacy.h
M include/openssl/ct.h.in
M include/openssl/cterr.h
M include/openssl/decoder.h
M include/openssl/decodererr.h
M include/openssl/des.h
M include/openssl/dh.h
M include/openssl/dherr.h
M include/openssl/dsa.h
M include/openssl/dsaerr.h
M include/openssl/dtls1.h
M include/openssl/e_os2.h
M include/openssl/e_ostime.h
M include/openssl/ebcdic.h
M include/openssl/ec.h
M include/openssl/ecerr.h
M include/openssl/encoder.h
M include/openssl/encodererr.h
M include/openssl/engine.h
M include/openssl/engineerr.h
M include/openssl/err.h.in
M include/openssl/ess.h.in
M include/openssl/esserr.h
M include/openssl/evp.h
M include/openssl/evperr.h
M include/openssl/fips_names.h
M include/openssl/fipskey.h.in
M include/openssl/hmac.h
M include/openssl/hpke.h
M include/openssl/http.h
M include/openssl/httperr.h
M include/openssl/idea.h
M include/openssl/indicator.h
M include/openssl/kdf.h
M include/openssl/kdferr.h
M include/openssl/lhash.h.in
M include/openssl/macros.h
M include/openssl/md2.h
M include/openssl/md4.h
M include/openssl/md5.h
M include/openssl/mdc2.h
M include/openssl/ml_kem.h
M include/openssl/modes.h
M include/openssl/obj_mac.h
M include/openssl/objects.h
M include/openssl/objectserr.h
M include/openssl/ocsp.h.in
M include/openssl/ocsperr.h
M include/openssl/opensslconf.h
M include/openssl/opensslv.h.in
M include/openssl/ossl_typ.h
M include/openssl/param_build.h
M include/openssl/params.h
M include/openssl/pem.h
M include/openssl/pem2.h
M include/openssl/pemerr.h
M include/openssl/pkcs12.h.in
M include/openssl/pkcs12err.h
M include/openssl/pkcs7.h.in
M include/openssl/pkcs7err.h
M include/openssl/posix_time.h
M include/openssl/prov_ssl.h
M include/openssl/proverr.h
M include/openssl/provider.h
M include/openssl/quic.h
M include/openssl/rand.h
M include/openssl/randerr.h
M include/openssl/rc2.h
M include/openssl/rc4.h
M include/openssl/rc5.h
M include/openssl/ripemd.h
M include/openssl/rsa.h
M include/openssl/rsaerr.h
M include/openssl/safestack.h.in
M include/openssl/seed.h
M include/openssl/self_test.h
M include/openssl/sha.h
M include/openssl/srp.h.in
M include/openssl/srtp.h
M include/openssl/ssl.h.in
M include/openssl/ssl2.h
M include/openssl/ssl3.h
M include/openssl/sslerr.h
M include/openssl/sslerr_legacy.h
M include/openssl/stack.h
M include/openssl/store.h
M include/openssl/storeerr.h
M include/openssl/symhacks.h
M include/openssl/thread.h
M include/openssl/tls1.h
M include/openssl/trace.h
M include/openssl/ts.h
M include/openssl/tserr.h
M include/openssl/txt_db.h
M include/openssl/types.h
M include/openssl/ui.h.in
M include/openssl/uierr.h
M include/openssl/whrlpool.h
M include/openssl/x509.h.in
M include/openssl/x509_acert.h.in
M include/openssl/x509_vfy.h.in
M include/openssl/x509err.h
M include/openssl/x509v3.h.in
M include/openssl/x509v3err.h
M ms/applink.c
M ms/uplink.c
M ms/uplink.h
M providers/baseprov.c
M providers/common/bio_prov.c
M providers/common/capabilities.c
M providers/common/der/der_dsa_key.c
M providers/common/der/der_dsa_sig.c
M providers/common/der/der_ec_key.c
M providers/common/der/der_ec_sig.c
M providers/common/der/der_ecx_key.c
M providers/common/der/der_rsa_key.c
M providers/common/der/der_rsa_sig.c
M providers/common/der/der_slh_dsa_key.c
M providers/common/der/der_sm2_key.c
M providers/common/der/der_sm2_sig.c
M providers/common/digest_to_nid.c
M providers/common/include/prov/bio.h
M providers/common/include/prov/der_dsa.h.in
M providers/common/include/prov/der_ec.h.in
M providers/common/include/prov/der_rsa.h.in
M providers/common/include/prov/der_sm2.h.in
M providers/common/include/prov/proverr.h
M providers/common/include/prov/provider_ctx.h
M providers/common/include/prov/provider_util.h
M providers/common/provider_ctx.c
M providers/common/provider_err.c
M providers/common/provider_seeding.c
M providers/common/provider_util.c
M providers/common/securitycheck.c
M providers/common/securitycheck_default.c
M providers/common/securitycheck_fips.c
M providers/defltprov.c
M providers/fips/fips_entry.c
M providers/fips/fipsindicator.c
M providers/fips/fipsprov.c
M providers/fips/include/fips/fipsindicator.h
M providers/fips/include/fipscommon.h
M providers/fips/self_test.c
M providers/fips/self_test.h
M providers/fips/self_test_kats.c
M providers/implementations/asymciphers/rsa_enc.c
M providers/implementations/asymciphers/sm2_enc.c
M providers/implementations/ciphers/cipher_aes.h
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha.h
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha1_etm_hw.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha1_hw.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha256_etm_hw.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha256_hw.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha512_etm_hw.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha_etm.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha_etm.h
M providers/implementations/ciphers/cipher_aes_ccm.c
M providers/implementations/ciphers/cipher_aes_ccm.h
M providers/implementations/ciphers/cipher_aes_ccm_hw.c
M providers/implementations/ciphers/cipher_aes_cfb_hw.c
M providers/implementations/ciphers/cipher_aes_gcm.c
M providers/implementations/ciphers/cipher_aes_gcm.h
M providers/implementations/ciphers/cipher_aes_gcm_hw.c
M providers/implementations/ciphers/cipher_aes_gcm_siv.c
M providers/implementations/ciphers/cipher_aes_gcm_siv.h
M providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c
M providers/implementations/ciphers/cipher_aes_gcm_siv_polyval.c
M providers/implementations/ciphers/cipher_aes_hw.c
M providers/implementations/ciphers/cipher_aes_ocb.c
M providers/implementations/ciphers/cipher_aes_ocb.h
M providers/implementations/ciphers/cipher_aes_ocb_hw.c
M providers/implementations/ciphers/cipher_aes_siv.c
M providers/implementations/ciphers/cipher_aes_siv.h
M providers/implementations/ciphers/cipher_aes_siv_hw.c
M providers/implementations/ciphers/cipher_aes_wrp.c
M providers/implementations/ciphers/cipher_aes_xts.c
M providers/implementations/ciphers/cipher_aes_xts.h
M providers/implementations/ciphers/cipher_aes_xts_hw.c
M providers/implementations/ciphers/cipher_aria.c
M providers/implementations/ciphers/cipher_aria.h
M providers/implementations/ciphers/cipher_aria_ccm.c
M providers/implementations/ciphers/cipher_aria_ccm.h
M providers/implementations/ciphers/cipher_aria_ccm_hw.c
M providers/implementations/ciphers/cipher_aria_gcm.c
M providers/implementations/ciphers/cipher_aria_gcm.h
M providers/implementations/ciphers/cipher_aria_gcm_hw.c
M providers/implementations/ciphers/cipher_aria_hw.c
M providers/implementations/ciphers/cipher_blowfish.c
M providers/implementations/ciphers/cipher_blowfish.h
M providers/implementations/ciphers/cipher_blowfish_hw.c
M providers/implementations/ciphers/cipher_camellia.c
M providers/implementations/ciphers/cipher_camellia.h
M providers/implementations/ciphers/cipher_camellia_hw.c
M providers/implementations/ciphers/cipher_cast.h
M providers/implementations/ciphers/cipher_cast5.c
M providers/implementations/ciphers/cipher_cast5_hw.c
M providers/implementations/ciphers/cipher_chacha20.c
M providers/implementations/ciphers/cipher_chacha20.h
M providers/implementations/ciphers/cipher_chacha20_hw.c
M providers/implementations/ciphers/cipher_chacha20_poly1305.c
M providers/implementations/ciphers/cipher_chacha20_poly1305.h
M providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c
M providers/implementations/ciphers/cipher_cts.c
M providers/implementations/ciphers/cipher_cts.h
M providers/implementations/ciphers/cipher_des.c
M providers/implementations/ciphers/cipher_des.h
M providers/implementations/ciphers/cipher_des_hw.c
M providers/implementations/ciphers/cipher_desx.c
M providers/implementations/ciphers/cipher_desx_hw.c
M providers/implementations/ciphers/cipher_idea.c
M providers/implementations/ciphers/cipher_idea.h
M providers/implementations/ciphers/cipher_idea_hw.c
M providers/implementations/ciphers/cipher_null.c
M providers/implementations/ciphers/cipher_rc2.c
M providers/implementations/ciphers/cipher_rc2.h
M providers/implementations/ciphers/cipher_rc2_hw.c
M providers/implementations/ciphers/cipher_rc4.c
M providers/implementations/ciphers/cipher_rc4.h
M providers/implementations/ciphers/cipher_rc4_hmac_md5.c
M providers/implementations/ciphers/cipher_rc4_hmac_md5.h
M providers/implementations/ciphers/cipher_rc4_hmac_md5_hw.c
M providers/implementations/ciphers/cipher_rc4_hw.c
M providers/implementations/ciphers/cipher_rc5.c
M providers/implementations/ciphers/cipher_rc5.h
M providers/implementations/ciphers/cipher_rc5_hw.c
M providers/implementations/ciphers/cipher_seed.c
M providers/implementations/ciphers/cipher_seed.h
M providers/implementations/ciphers/cipher_seed_hw.c
M providers/implementations/ciphers/cipher_sm4.c
M providers/implementations/ciphers/cipher_sm4.h
M providers/implementations/ciphers/cipher_sm4_ccm.c
M providers/implementations/ciphers/cipher_sm4_ccm.h
M providers/implementations/ciphers/cipher_sm4_ccm_hw.c
M providers/implementations/ciphers/cipher_sm4_gcm.c
M providers/implementations/ciphers/cipher_sm4_gcm.h
M providers/implementations/ciphers/cipher_sm4_gcm_hw.c
M providers/implementations/ciphers/cipher_sm4_hw.c
M providers/implementations/ciphers/cipher_sm4_xts.c
M providers/implementations/ciphers/cipher_sm4_xts.h
M providers/implementations/ciphers/cipher_sm4_xts_hw.c
M providers/implementations/ciphers/cipher_tdes.c
M providers/implementations/ciphers/cipher_tdes.h
M providers/implementations/ciphers/cipher_tdes_common.c
M providers/implementations/ciphers/cipher_tdes_default.c
M providers/implementations/ciphers/cipher_tdes_default_hw.c
M providers/implementations/ciphers/cipher_tdes_hw.c
M providers/implementations/ciphers/cipher_tdes_wrap.c
M providers/implementations/ciphers/ciphercommon.c
M providers/implementations/ciphers/ciphercommon_block.c
M providers/implementations/ciphers/ciphercommon_ccm.c
M providers/implementations/ciphers/ciphercommon_ccm_hw.c
M providers/implementations/ciphers/ciphercommon_gcm.c
M providers/implementations/ciphers/ciphercommon_gcm_hw.c
M providers/implementations/ciphers/ciphercommon_hw.c
M providers/implementations/ciphers/ciphercommon_local.h
M providers/implementations/digests/blake2_impl.h
M providers/implementations/digests/blake2_prov.c
M providers/implementations/digests/blake2b_prov.c
M providers/implementations/digests/blake2s_prov.c
M providers/implementations/digests/digestcommon.c
M providers/implementations/digests/md2_prov.c
M providers/implementations/digests/md4_prov.c
M providers/implementations/digests/md5_prov.c
M providers/implementations/digests/md5_sha1_prov.c
M providers/implementations/digests/mdc2_prov.c
M providers/implementations/digests/null_prov.c
M providers/implementations/digests/ripemd_prov.c
M providers/implementations/digests/sha2_prov.c
M providers/implementations/digests/sha3_prov.c
M providers/implementations/digests/sm3_prov.c
M providers/implementations/digests/wp_prov.c
M providers/implementations/encode_decode/decode_der2key.c
M providers/implementations/encode_decode/decode_epki2pki.c
M providers/implementations/encode_decode/decode_lmsxdr2key.c
M providers/implementations/encode_decode/decode_msblob2key.c
M providers/implementations/encode_decode/decode_pem2der.c
M providers/implementations/encode_decode/decode_pvk2key.c
M providers/implementations/encode_decode/decode_spki2typespki.c
M providers/implementations/encode_decode/encode_key2any.c
M providers/implementations/encode_decode/encode_key2blob.c
M providers/implementations/encode_decode/encode_key2ms.c
M providers/implementations/encode_decode/encode_key2text.c
M providers/implementations/encode_decode/endecoder_common.c
M providers/implementations/encode_decode/ml_common_codecs.c
M providers/implementations/encode_decode/ml_dsa_codecs.c
M providers/implementations/encode_decode/ml_kem_codecs.c
M providers/implementations/exchange/dh_exch.c
M providers/implementations/exchange/ecdh_exch.c
M providers/implementations/exchange/ecx_exch.c
M providers/implementations/exchange/kdf_exch.c
M providers/implementations/include/prov/blake2.h
M providers/implementations/include/prov/ciphercommon.h
M providers/implementations/include/prov/ciphercommon_aead.h
M providers/implementations/include/prov/ciphercommon_ccm.h
M providers/implementations/include/prov/ciphercommon_gcm.h
M providers/implementations/include/prov/decoders.h
M providers/implementations/include/prov/digestcommon.h
M providers/implementations/include/prov/drbg.h
M providers/implementations/include/prov/eckem.h
M providers/implementations/include/prov/ecx.h
M providers/implementations/include/prov/endecoder_local.h
M providers/implementations/include/prov/file_store_local.h
M providers/implementations/include/prov/hmac_drbg.h
M providers/implementations/include/prov/implementations.h
M providers/implementations/include/prov/md5_sha1.h
M providers/implementations/include/prov/ml_common_codecs.h
M providers/implementations/include/prov/ml_dsa_codecs.h
M providers/implementations/include/prov/ml_kem_codecs.h
M providers/implementations/include/prov/mlx_kem.h
M providers/implementations/include/prov/seeding.h
M providers/implementations/include/prov/skeymgmt_lcl.h
M providers/implementations/kdfs/argon2.c
M providers/implementations/kdfs/hkdf.c
M providers/implementations/kdfs/hmacdrbg_kdf.c
M providers/implementations/kdfs/kbkdf.c
M providers/implementations/kdfs/krb5kdf.c
M providers/implementations/kdfs/pbkdf1.c
M providers/implementations/kdfs/pbkdf2.c
M providers/implementations/kdfs/pkcs12kdf.c
M providers/implementations/kdfs/pvkkdf.c
M providers/implementations/kdfs/scrypt.c
M providers/implementations/kdfs/sshkdf.c
M providers/implementations/kdfs/sskdf.c
M providers/implementations/kdfs/tls1_prf.c
M providers/implementations/kdfs/x942kdf.c
M providers/implementations/kem/ec_kem.c
M providers/implementations/kem/ecx_kem.c
M providers/implementations/kem/ml_kem_kem.c
M providers/implementations/kem/mlx_kem.c
M providers/implementations/kem/rsa_kem.c
M providers/implementations/kem/template_kem.c
M providers/implementations/keymgmt/dh_kmgmt.c
M providers/implementations/keymgmt/dsa_kmgmt.c
M providers/implementations/keymgmt/ec_kmgmt.c
M providers/implementations/keymgmt/ecx_kmgmt.c
M providers/implementations/keymgmt/lms_kmgmt.c
M providers/implementations/keymgmt/mac_legacy_kmgmt.c
M providers/implementations/keymgmt/ml_dsa_kmgmt.c
M providers/implementations/keymgmt/ml_kem_kmgmt.c
M providers/implementations/keymgmt/mlx_kmgmt.c
M providers/implementations/keymgmt/rsa_kmgmt.c
M providers/implementations/keymgmt/slh_dsa_kmgmt.c
M providers/implementations/keymgmt/template_kmgmt.c
M providers/implementations/macs/blake2_mac_impl.c
M providers/implementations/macs/blake2b_mac.c
M providers/implementations/macs/cmac_prov.c
M providers/implementations/macs/gmac_prov.c
M providers/implementations/macs/hmac_prov.c
M providers/implementations/macs/kmac_prov.c
M providers/implementations/macs/poly1305_prov.c
M providers/implementations/macs/siphash_prov.c
M providers/implementations/rands/drbg.c
M providers/implementations/rands/drbg_ctr.c
M providers/implementations/rands/drbg_hash.c
M providers/implementations/rands/drbg_hmac.c
M providers/implementations/rands/fips_crng_test.c
M providers/implementations/rands/seed_src.c
M providers/implementations/rands/seed_src_jitter.c
M providers/implementations/rands/seeding/rand_cpu_arm64.c
M providers/implementations/rands/seeding/rand_cpu_x86.c
M providers/implementations/rands/seeding/rand_tsc.c
M providers/implementations/rands/seeding/rand_unix.c
M providers/implementations/rands/seeding/rand_vms.c
M providers/implementations/rands/seeding/rand_vxworks.c
M providers/implementations/rands/seeding/rand_win.c
M providers/implementations/rands/test_rng.c
M providers/implementations/signature/dsa_sig.c
M providers/implementations/signature/ecdsa_sig.c
M providers/implementations/signature/eddsa_sig.c
M providers/implementations/signature/lms_signature.c
M providers/implementations/signature/mac_legacy_sig.c
M providers/implementations/signature/ml_dsa_sig.c
M providers/implementations/signature/rsa_sig.c
M providers/implementations/signature/slh_dsa_sig.c
M providers/implementations/signature/sm2_sig.c
M providers/implementations/skeymgmt/aes_skmgmt.c
M providers/implementations/skeymgmt/generic.c
M providers/implementations/storemgmt/file_store.c
M providers/implementations/storemgmt/file_store_any2obj.c
M providers/implementations/storemgmt/winstore_store.c
M providers/legacyprov.c
M providers/nullprov.c
M ssl/bio_ssl.c
M ssl/d1_lib.c
M ssl/d1_msg.c
M ssl/d1_srtp.c
M ssl/methods.c
M ssl/pqueue.c
M ssl/priority_queue.c
M ssl/quic/cc_newreno.c
M ssl/quic/json_enc.c
M ssl/quic/qlog.c
M ssl/quic/qlog_event_helpers.c
M ssl/quic/quic_ackm.c
M ssl/quic/quic_cfq.c
M ssl/quic/quic_channel.c
M ssl/quic/quic_channel_local.h
M ssl/quic/quic_demux.c
M ssl/quic/quic_engine.c
M ssl/quic/quic_engine_local.h
M ssl/quic/quic_fc.c
M ssl/quic/quic_fifd.c
M ssl/quic/quic_impl.c
M ssl/quic/quic_lcidm.c
M ssl/quic/quic_local.h
M ssl/quic/quic_method.c
M ssl/quic/quic_obj.c
M ssl/quic/quic_obj_local.h
M ssl/quic/quic_port.c
M ssl/quic/quic_port_local.h
M ssl/quic/quic_rcidm.c
M ssl/quic/quic_reactor.c
M ssl/quic/quic_reactor_wait_ctx.c
M ssl/quic/quic_record_rx.c
M ssl/quic/quic_record_shared.c
M ssl/quic/quic_record_shared.h
M ssl/quic/quic_record_tx.c
M ssl/quic/quic_record_util.c
M ssl/quic/quic_rstream.c
M ssl/quic/quic_rx_depack.c
M ssl/quic/quic_sf_list.c
M ssl/quic/quic_srt_gen.c
M ssl/quic/quic_srtm.c
M ssl/quic/quic_sstream.c
M ssl/quic/quic_statm.c
M ssl/quic/quic_stream_map.c
M ssl/quic/quic_thread_assist.c
M ssl/quic/quic_tls.c
M ssl/quic/quic_tls_api.c
M ssl/quic/quic_trace.c
M ssl/quic/quic_tserver.c
M ssl/quic/quic_txp.c
M ssl/quic/quic_txpim.c
M ssl/quic/quic_types.c
M ssl/quic/quic_wire.c
M ssl/quic/quic_wire_pkt.c
M ssl/quic/uint_set.c
M ssl/record/methods/dtls_meth.c
M ssl/record/methods/ktls_meth.c
M ssl/record/methods/recmethod_local.h
M ssl/record/methods/ssl3_cbc.c
M ssl/record/methods/ssl3_meth.c
M ssl/record/methods/tls13_meth.c
M ssl/record/methods/tls1_meth.c
M ssl/record/methods/tls_common.c
M ssl/record/methods/tls_multib.c
M ssl/record/methods/tls_pad.c
M ssl/record/methods/tlsany_meth.c
M ssl/record/rec_layer_d1.c
M ssl/record/rec_layer_s3.c
M ssl/record/record.h
M ssl/record/record_local.h
M ssl/rio/poll_builder.c
M ssl/rio/poll_builder.h
M ssl/rio/poll_immediate.c
M ssl/rio/poll_method.h
M ssl/rio/rio_notifier.c
M ssl/s3_enc.c
M ssl/s3_lib.c
M ssl/s3_msg.c
M ssl/ssl_asn1.c
M ssl/ssl_cert.c
M ssl/ssl_cert_comp.c
M ssl/ssl_cert_table.h
M ssl/ssl_ciph.c
M ssl/ssl_conf.c
M ssl/ssl_init.c
M ssl/ssl_lib.c
M ssl/ssl_local.h
M ssl/ssl_mcnf.c
M ssl/ssl_rsa.c
M ssl/ssl_rsa_legacy.c
M ssl/ssl_sess.c
M ssl/ssl_txt.c
M ssl/statem/extensions.c
M ssl/statem/extensions_clnt.c
M ssl/statem/extensions_cust.c
M ssl/statem/extensions_srvr.c
M ssl/statem/statem.c
M ssl/statem/statem_clnt.c
M ssl/statem/statem_dtls.c
M ssl/statem/statem_lib.c
M ssl/statem/statem_local.h
M ssl/statem/statem_srvr.c
M ssl/t1_enc.c
M ssl/t1_lib.c
M ssl/t1_trce.c
M ssl/tls13_enc.c
M ssl/tls_depr.c
M ssl/tls_srp.c
M test/acvp_test.c
M test/aesgcmtest.c
M test/algorithmid_test.c
M test/asn1_decode_test.c
M test/asn1_dsa_internal_test.c
M test/asn1_encode_test.c
M test/asn1_internal_test.c
M test/asn1_stable_parse_test.c
M test/asn1_string_table_test.c
M test/asn1_time_test.c
M test/asynciotest.c
M test/asynctest.c
M test/bad_dtls_test.c
M test/bftest.c
M test/bio_addr_test.c
M test/bio_base64_test.c
M test/bio_callback_test.c
M test/bio_comp_test.c
M test/bio_core_test.c
M test/bio_dgram_test.c
M test/bio_enc_test.c
M test/bio_memleak_test.c
M test/bio_meth_test.c
M test/bio_prefix_text.c
M test/bio_pw_callback_test.c
M test/bio_readbuffer_test.c
M test/bio_tfo_test.c
M test/bioprinttest.c
M test/bn_internal_test.c
M test/bn_rand_range.h
M test/bntest.c
M test/build_wincrypt_test.c
M test/byteorder_test.c
M test/ca_internals_test.c
M test/casttest.c
M test/cc_dummy.c
M test/cert_comp_test.c
M test/cipher_overhead_test.c
M test/cipherbytes_test.c
M test/cipherlist_test.c
M test/ciphername_test.c
M test/clienthellotest.c
M test/cmactest.c
M test/cmp_asn_test.c
M test/cmp_client_test.c
M test/cmp_ctx_test.c
M test/cmp_hdr_test.c
M test/cmp_msg_test.c
M test/cmp_protect_test.c
M test/cmp_server_test.c
M test/cmp_status_test.c
M test/cmp_vfy_test.c
M test/cmsapitest.c
M test/conf_include_test.c
M test/constant_time_test.c
M test/context_internal_test.c
M test/crltest.c
M test/ct_test.c
M test/ctype_internal_test.c
M test/curve448_internal_test.c
M test/d2i_test.c
M test/danetest.c
M test/decoder_propq_test.c
M test/defltfips_test.c
M test/destest.c
M test/dhtest.c
M test/drbgtest.c
M test/dsa_no_digest_size_test.c
M test/dsatest.c
M test/dtls_mtu_test.c
M test/dtlstest.c
M test/dtlsv1listentest.c
M test/ec_internal_test.c
M test/ecdsatest.c
M test/ecdsatest.h
M test/ecstresstest.c
M test/ectest.c
M test/endecode_test.c
M test/endecoder_legacy_test.c
M test/errtest.c
M test/evp_extra_test.c
M test/evp_extra_test2.c
M test/evp_fetch_prov_test.c
M test/evp_kdf_test.c
M test/evp_libctx_test.c
M test/evp_pkey_dhkem_test.c
M test/evp_pkey_dparams_test.c
M test/evp_pkey_provided_test.c
M test/evp_skey_test.c
M test/evp_test.c
M test/evp_xof_test.c
M test/exdatatest.c
M test/exptest.c
M test/ext_internal_test.c
M test/fake_cipherprov.c
M test/fake_pipelineprov.c
M test/fake_rsaprov.c
M test/fatalerrtest.c
M test/ffc_internal_test.c
M test/filterprov.c
M test/fips_version_test.c
M test/gmdifftest.c
M test/handshake-memfail.c
M test/helpers/cmp_testlib.c
M test/helpers/cmp_testlib.h
M test/helpers/handshake.c
M test/helpers/handshake.h
M test/helpers/handshake_srp.c
M test/helpers/noisydgrambio.c
M test/helpers/pkcs12.c
M test/helpers/pkcs12.h
M test/helpers/pktsplitbio.c
M test/helpers/predefined_dhparams.c
M test/helpers/quictestlib.c
M test/helpers/quictestlib.h
M test/helpers/ssl_test_ctx.c
M test/helpers/ssl_test_ctx.h
M test/helpers/ssltestlib.c
M test/helpers/ssltestlib.h
M test/hexstr_test.c
M test/hmactest.c
M test/hpke_test.c
M test/http_test.c
M test/ideatest.c
M test/igetest.c
M test/json_test.c
M test/keymgmt_internal_test.c
M test/lhash_test.c
M test/list_test.c
M test/lms_test.c
M test/localetest.c
M test/mdc2_internal_test.c
M test/mdc2test.c
M test/mem_alloc_test.c
M test/membio_test.c
M test/memleaktest.c
M test/ml_dsa_test.c
M test/ml_kem_evp_extra_test.c
M test/ml_kem_internal_test.c
M test/modes_internal_test.c
M test/namemap_internal_test.c
M test/nodefltctxtest.c
M test/ocspapitest.c
M test/ossl_store_test.c
M test/p_minimal.c
M test/p_ossltest.c
M test/p_test.c
M test/packettest.c
M test/pairwise_fail_test.c
M test/param_build_test.c
M test/params_api_test.c
M test/params_conversion_test.c
M test/params_test.c
M test/pbelutest.c
M test/pbetest.c
M test/pem_read_depr_test.c
M test/pemtest.c
M test/pkcs12_api_test.c
M test/pkcs12_format_test.c
M test/pkcs7_test.c
M test/pkey_meth_kdf_test.c
M test/pkey_meth_test.c
M test/poly1305_internal_test.c
M test/priority_queue_test.c
M test/property_test.c
M test/prov_config_test.c
M test/provfetchtest.c
M test/provider_default_search_path_test.c
M test/provider_fallback_test.c
M test/provider_internal_test.c
M test/provider_pkey_test.c
M test/provider_status_test.c
M test/provider_test.c
M test/punycode_test.c
M test/quic-openssl-docker/hq-interop/quic-hq-interop-server.c
M test/quic-openssl-docker/hq-interop/quic-hq-interop.c
M test/quic_ackm_test.c
M test/quic_cc_test.c
M test/quic_cfq_test.c
M test/quic_client_test.c
M test/quic_fc_test.c
M test/quic_fifd_test.c
M test/quic_lcidm_test.c
M test/quic_multistream_test.c
M test/quic_newcid_test.c
M test/quic_qlog_test.c
M test/quic_rcidm_test.c
M test/quic_record_test.c
M test/quic_record_test_util.h
M test/quic_srt_gen_test.c
M test/quic_srtm_test.c
M test/quic_stream_test.c
M test/quic_tserver_test.c
M test/quic_txp_test.c
M test/quic_txpim_test.c
M test/quic_wire_test.c
M test/quicapitest.c
M test/quicfaultstest.c
M test/radix/main.c
M test/radix/quic_bindings.c
M test/radix/quic_ops.c
M test/radix/quic_tests.c
M test/radix/terp.c
M test/rand_test.c
M test/rc2test.c
M test/rc4test.c
M test/rc5test.c
M test/rdcpu_sanitytest.c
M test/recordlentest.c
M test/rpktest.c
M test/rsa_complex.c
M test/rsa_mp_test.c
M test/rsa_sp800_56b_test.c
M test/rsa_test.c
M test/rsa_x931_test.c
M test/safe_math_test.c
M test/sanitytest.c
M test/secmemtest.c
M test/servername_test.c
M test/sha_test.c
M test/shlibloadtest.c
M test/simpledynamic.c
M test/simpledynamic.h
M test/siphash_internal_test.c
M test/slh_dsa_test.c
M test/sm2_internal_test.c
M test/sm3_internal_test.c
M test/sm4_internal_test.c
M test/sparse_array_test.c
M test/srptest.c
M test/ssl_cert_table_internal_test.c
M test/ssl_ctx_test.c
M test/ssl_handshake_rtt_test.c
M test/ssl_old_test.c
M test/ssl_test.c
M test/ssl_test_ctx_test.c
M test/sslapitest.c
M test/sslbuffertest.c
M test/sslcorrupttest.c
M test/stack_test.c
M test/strtoultest.c
M test/sysdefaulttest.c
M test/test_test.c
M test/testutil.h
M test/testutil/compare.c
M test/testutil/driver.c
M test/testutil/fake_random.c
M test/testutil/format_output.c
M test/testutil/helper.c
M test/testutil/load.c
M test/testutil/main.c
M test/testutil/options.c
M test/testutil/output.h
M test/testutil/provider.c
M test/testutil/random.c
M test/testutil/stanza.c
M test/testutil/tests.c
M test/testutil/testutil_init.c
M test/testutil/tu_local.h
M test/threadpool_test.c
M test/threadstest.c
M test/threadstest.h
M test/threadstest_fips.c
M test/time_offset_test.c
M test/timing_load_creds.c
M test/tls-provider.c
M test/tls13ccstest.c
M test/tls13encryptiontest.c
M test/tls13groupselection_test.c
M test/tls13secretstest.c
M test/trace_api_test.c
M test/uitest.c
M test/upcallstest.c
M test/user_property_test.c
M test/v3ext.c
M test/v3nametest.c
M test/verify_extra_test.c
M test/versions.c
M test/wpackettest.c
M test/x509_acert_test.c
M test/x509_check_cert_pkey_test.c
M test/x509_internal_test.c
M test/x509_load_cert_file_test.c
M test/x509_memfail.c
M test/x509_test.c
M test/x509_time_test.c
M test/x509aux.c
M util/check-format-test-negatives.c
M util/check-format-test-positives.c
Log Message:
-----------
4.0-POST-CLANG-FORMAT-WEBKIT
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29242)
Commit: b40b673f9958e9b3cc296296092e1d95a1f9c460
https://github.com/openssl/openssl/commit/b40b673f9958e9b3cc296296092e1d95a1f9c460
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M .git-blame-ignore-revs
Log Message:
-----------
add 4.0 clang-format diff to .git-blame-ignore-revs
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/29343)
Commit: 5b0dffa8610a085e937f692754281634aca7b7b8
https://github.com/openssl/openssl/commit/5b0dffa8610a085e937f692754281634aca7b7b8
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M crypto/rand/rand_lib.c
Log Message:
-----------
Disable clang-format around this macro
clang-format sensibly thinks this is an arithmatic operation,
and formats the math. Sadly it does not know we eventually
stringify this behind several other layers of nested macros
and so putting spaces in here is bad.
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29350)
Commit: d54932c9fa4b59e0db8296b91a9392efb9cd897e
https://github.com/openssl/openssl/commit/d54932c9fa4b59e0db8296b91a9392efb9cd897e
Author: Matt Caswell <ma...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M test/evp_extra_test.c
Log Message:
-----------
Fix array formatting in evp_extra_test.c
The reformat did something silly with some of the arrays in evp_extra_test.c
Fix the arrays such that clang-format is still happy.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29349)
Commit: d6f3733f94fe6414571b080ee22813bba3621dab
https://github.com/openssl/openssl/commit/d6f3733f94fe6414571b080ee22813bba3621dab
Author: Dmitry Misharov <dmi...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M .github/workflows/style-checks.yml
M .pre-commit-config.yaml
R util/check-format-commit.sh
R util/check-format.pl
Log Message:
-----------
add clang-format as a pre-commit hook
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29282)
Commit: 9fb44b527ee3717795609fb876a7a81f8898c623
https://github.com/openssl/openssl/commit/9fb44b527ee3717795609fb876a7a81f8898c623
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M crypto/asn1/a_time_posix.c
Log Message:
-----------
Only write to pdays/psecs if they are not null
We have a few cases in which one of the paramters passed to
ASN1_TIME_diff is null (i.e. the caller doesn't care about the psec
differnce and so passes NULL as that pointer parameter).
However, OPENSSL_gmtime_diff assumes both pointers are valid, and so
writes to them unilaterally resulting in a crash as observed here:
https://github.com/openssl/openssl/pull/29333#issuecomment-3628103959
Check the pointers before writing to them.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29337)
Commit: 1b035166bdb2d86e718ad51a55caffc8bc9504a7
https://github.com/openssl/openssl/commit/1b035166bdb2d86e718ad51a55caffc8bc9504a7
Author: Helen Zhang <helz...@cisco.com>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M CHANGES.md
M build.info
M crypto/err/openssl.txt
M doc/build.info
M doc/man1/openssl-kdf.pod.in
A doc/man7/EVP_KDF-SNMPKDF.pod
M doc/man7/OSSL_PROVIDER-FIPS.pod
M doc/man7/OSSL_PROVIDER-default.pod
M include/openssl/core_names.h.in
M include/openssl/proverr.h
M include/openssl/self_test.h
M providers/common/provider_err.c
M providers/defltprov.c
M providers/fips/fipsprov.c
M providers/fips/self_test_data.inc
M providers/implementations/include/prov/implementations.h
M providers/implementations/include/prov/names.h
M providers/implementations/kdfs/build.info
A providers/implementations/kdfs/snmpkdf.c
A providers/implementations/kdfs/snmpkdf.inc.in
M test/recipes/30-test_evp.t
A test/recipes/30-test_evp_data/evpkdf_snmp.txt
M util/perl/OpenSSL/paramnames.pm
Log Message:
-----------
Add SNMPKDF implementation
In compliance with SP800-135 and RFC7860
Reviewed-by: Shane Lontis <shane....@oracle.com>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29195)
Commit: 1b0f21f0555cfada3e789c80100df40d1c429800
https://github.com/openssl/openssl/commit/1b0f21f0555cfada3e789c80100df40d1c429800
Author: Dmitry Belyavskiy <bel...@gmail.com>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M apps/enc.c
M apps/include/apps.h
M apps/lib/apps.c
M apps/storeutl.c
M crypto/err/openssl.txt
M crypto/store/store_err.c
M crypto/store/store_lib.c
M crypto/store/store_local.h
M crypto/store/store_result.c
M crypto/store/store_strings.c
M doc/man1/openssl-enc.pod.in
M doc/man1/openssl-storeutl.pod.in
M doc/man3/OSSL_STORE_INFO.pod
M doc/man7/ossl_store-file.pod
M include/openssl/core_object.h
M include/openssl/store.h
M include/openssl/storeerr.h
M providers/implementations/storemgmt/file_store.c
M providers/implementations/storemgmt/file_store_any2obj.c
M test/recipes/20-test_enc.t
A test/recipes/20-test_enc_data/skeyfile.bin
M util/libcrypto.num
Log Message:
-----------
Implementing store support for EVP_SKEY
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Simo Sorce <si...@redhat.com>
(Merged from https://github.com/openssl/openssl/pull/28278)
Commit: d3288746455890ac0b368f56e55ac20fcb0f2479
https://github.com/openssl/openssl/commit/d3288746455890ac0b368f56e55ac20fcb0f2479
Author: Dmitry Belyavskiy <bel...@gmail.com>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M apps/enc.c
M apps/include/apps.h
M apps/lib/apps.c
M doc/man7/provider-decoder.pod
Log Message:
-----------
Document skey decoder
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Simo Sorce <si...@redhat.com>
(Merged from https://github.com/openssl/openssl/pull/28278)
Commit: d70b22bf2df27e02db5b209d2bc42cd97d6a928c
https://github.com/openssl/openssl/commit/d70b22bf2df27e02db5b209d2bc42cd97d6a928c
Author: Dmitry Misharov <dmi...@openssl.org>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M .pre-commit-config.yaml
Log Message:
-----------
run codespell pre-commit hook on staged files only
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29360)
Commit: 21722fe5545cb73d2f3051a3dbae5cd5e30b5de0
https://github.com/openssl/openssl/commit/21722fe5545cb73d2f3051a3dbae5cd5e30b5de0
Author: Dr. David von Oheimb <d...@ddvo.net>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M crypto/cmp/cmp_vfy.c
M doc/man3/OSSL_CMP_CTX_new.pod
Log Message:
-----------
OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR: use new TA(s) for whole transaction (also pkiconf); update doc
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28015)
Commit: e7d5206e892e14fd380e3f04401a47de7c759818
https://github.com/openssl/openssl/commit/e7d5206e892e14fd380e3f04401a47de7c759818
Author: Dr. David von Oheimb <d...@ddvo.net>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M apps/cmp.c
M doc/man1/openssl-cmp.pod.in
Log Message:
-----------
apps/cmp.c: add -ta_in_ip_extracerts permitting non-authenticated trust anchors in IP extracerts according to 3GPP TS 33.310
Fixes #27888
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28015)
Commit: 996d50da8fac4938fd910af96389c1e67ff1cb11
https://github.com/openssl/openssl/commit/996d50da8fac4938fd910af96389c1e67ff1cb11
Author: Carter Thaxton <carter....@gmail.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M crypto/x509/x509_vfy.c
Log Message:
-----------
Fix regression when X509_V_FLAG_CRL_CHECK_ALL is set, while X509_V_FLAG_CRL_CHECK is clear
Fixes #28758
When X509_V_FLAG_CRL_CHECK is not set, the man pages document that X509_V_FLAG_CRL_CHECK_ALL is ignored.
Prior to 3.6.0, this was indeed the case.
In 3.6.0, the behavior changed, and setting X509_V_FLAG_CRL_CHECK_ALL began to imply X509_V_FLAG_CRL_CHECK.
This unfortunately breaks the majority of ruby installations, which relied on the documented behavior.
For consistency, this commit applies the same logic to the new X509_V_FLAG_OCSP_RESP_CHECK and X509_V_FLAG_OCSP_RESP_CHECK_ALL flags,
which are still undocumented as of 3.6.0.
All existing tests continue to pass. They also make the assumption that the xxx_CHECK_ALL flags are irrelevant unless xxx_CHECK is set.
We could add a new test for this regression. I'll leave that to another commit.
CLA: trivial
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28797)
(cherry picked from commit cbaf28ce48805f47345f39dc6aaf39e181ab4861)
Commit: 21d4585718a235a412115ca5c2dcdc2fe8932b61
https://github.com/openssl/openssl/commit/21d4585718a235a412115ca5c2dcdc2fe8932b61
Author: Joshua Rogers <MegaM...@users.noreply.github.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M include/internal/ktls.h
Log Message:
-----------
ktls_read_record(): Harden linux recv path
- drop tag subtraction in recv buffer sizing
- enforce MSG_EOR and reject MSG_CTRUNC
- zero prepended header bytes before recvmsg
Signed-off-by: Joshua Rogers <MegaM...@users.noreply.github.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28861)
Commit: 688e4f4a5f5cb8d287ad1efbc0017cf6be628c17
https://github.com/openssl/openssl/commit/688e4f4a5f5cb8d287ad1efbc0017cf6be628c17
Author: Joshua Rogers <MegaM...@users.noreply.github.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M ssl/d1_lib.c
Log Message:
-----------
dtls: fix DTLSv1_listen msg_callback to report HelloVerifyRequest
DTLSv1_listen built the HelloVerifyRequest in wbuf but invoked
msg_callback with buf and DTLS1_RT_HEADER_LENGTH, and version 0.
That caused incorrect logging and could disclose the ClientHello
to write callbacks. Use wbuf and the actual record version for the
record header, and add a second callback that reports the handshake
message bytes. No change to on-wire behavior.
Signed-off-by: Joshua Rogers <MegaM...@users.noreply.github.com>
Reviewed-by: Frederik Wedel-Heinen <fwh.o...@gmail.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28916)
Commit: ba26e3f46b075d44ba673e57d9c81c08f92ef7f0
https://github.com/openssl/openssl/commit/ba26e3f46b075d44ba673e57d9c81c08f92ef7f0
Author: George Wilson <gcwi...@linux.ibm.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M doc/build.info
M doc/man1/openssl.pod
A doc/man3/OPENSSL_ppccap.pod
M doc/man7/openssl-env.pod
Log Message:
-----------
doc/man3: Add OPENSSL_ppccap.pod
This patch adds a man page documenting the OPENSSL_ppccap environment
variable that is analogous to capability environment variable man pages
for other architectures.
Fixes #17046
Signed-off-by: George Wilson <gcwi...@linux.ibm.com>
Reviewed-by: Paul Dale <paul...@oracle.com>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29230)
Commit: 0f22d746628c0c5d2371dd89652137fbbeed6ed6
https://github.com/openssl/openssl/commit/0f22d746628c0c5d2371dd89652137fbbeed6ed6
Author: Viktor Dukhovni <openss...@dukhovni.org>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M providers/implementations/keymgmt/ml_kem_kmgmt.inc.in
Log Message:
-----------
Fix ML-KEM/ML-DSA macro typo
This is largely cosmetic, since the macro expands to "seed" either way,
but it is best to avoid this type of error.
Reviewed-by: Kurt Roeckx <ku...@roeckx.be>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29313)
Commit: 013e1174df1b3f8a51b393aaa22309dab66d371f
https://github.com/openssl/openssl/commit/013e1174df1b3f8a51b393aaa22309dab66d371f
Author: lan1120 <lan...@huawei.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M providers/implementations/keymgmt/mlx_kmgmt.c
Log Message:
-----------
Fix memory leak in abnormal branch of mlx_kem_dup function
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29318)
Commit: f247d36074353f44596cb941c0a5f929c2e46e67
https://github.com/openssl/openssl/commit/f247d36074353f44596cb941c0a5f929c2e46e67
Author: Viktor Dukhovni <openss...@dukhovni.org>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M crypto/rsa/rsa_gen.c
Log Message:
-----------
The return value of RSA_*_{en,de}crypt() is signed
The functions RSA_(public|private)_(en|de)crypt() return a signed
result, in particular `-1` may be returned on error, so the caller
MUST treat the value as signed.
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29323)
Commit: 26d138af724961c5f30263c15ae8137d4f86645b
https://github.com/openssl/openssl/commit/26d138af724961c5f30263c15ae8137d4f86645b
Author: Niels Dossche <niels....@ugent.be>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M providers/implementations/keymgmt/ec_kmgmt.c
Log Message:
-----------
Fix memory leak in error path of ec_gen_init()
ec_gen_set_params() can fail after some big numbers have already been
copied over. Those need to be cleaned to avoid a memory leak on failure.
This can be done with ec_gen_cleanup(), which is also consistent in how
the ecx_gen code does it.
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29335)
Commit: 52cd2a49c53ee6b08a8a76624f2a80f00248d679
https://github.com/openssl/openssl/commit/52cd2a49c53ee6b08a8a76624f2a80f00248d679
Author: Matthias Kraft <Matthia...@ibm.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M crypto/bio/bss_dgram.c
Log Message:
-----------
Enable send-/recvmmsg for AIX >= 7.2 and disable SUPPORT_LOCAL_ADDR.
AIX doesn't support this implementation for local addresses. The AF_INET
case is unimplemented when sending. The AF_INET6 case is limited to 110
messages. The limiting factor is currently unclear.
Fixes #29292
Signed-off-by: Matthias Kraft <Matthia...@ibm.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29334)
Commit: ba4970afb5b60f022126b7fb3ee3c44cb9ceac8c
https://github.com/openssl/openssl/commit/ba4970afb5b60f022126b7fb3ee3c44cb9ceac8c
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M .clang-format
M providers/implementations/encode_decode/decode_der2key.c
Log Message:
-----------
Add static_ASN1_SEQUENCE_END to the list of statment macros
This one is pretty special, we should ponder simplifying some of
the clever preprocessor stuff here, but for now..
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29359)
Compare: https://github.com/openssl/openssl/compare/8ca421f88193...ba4970afb5b6
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
Home: https://github.com/openssl/openssl
Commit: c90b7dddf25f44c3ed27a69ae6bc67cfdb4894cd
https://github.com/openssl/openssl/commit/c90b7dddf25f44c3ed27a69ae6bc67cfdb4894cd
Author: zhoulu <zhou...@zte.com.cn>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/sm4/asm/sm4-riscv64-zvksed.pl
M include/crypto/sm4_platform.h
M providers/implementations/ciphers/cipher_sm4_hw_rv64i.inc
M test/recipes/30-test_evp_data/evpciph_sm4.txt
Log Message:
-----------
Performance Optimization of SM4-CBC Encryption and Decryption with Assembly on RISC-V Architecture
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29137)
Commit: c7a657d8007853791f27235a176131ad1daf358a
https://github.com/openssl/openssl/commit/c7a657d8007853791f27235a176131ad1daf358a
Author: Timothy Copeland <tacop...@proton.me>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/x509/x509_vfy.c
M test/crltest.c
Log Message:
-----------
check_cert_crl(): Set CRL score for CRLs returned by get_crl callback
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29199)
Commit: 9ee928fb8c63d50bb2b9fdcb43c8374192f8cfca
https://github.com/openssl/openssl/commit/9ee928fb8c63d50bb2b9fdcb43c8374192f8cfca
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configurations/10-main.conf
M Configure
Log Message:
-----------
Engine removal: Silence the CI tests about engines
As we can't do every change in one big PR (and we also don't want),
therefore there always will be failing tests until everything is
resolved/cleaned up. This way we silence the CI about engine tests and
later we can reenable them to see what else needs to be fixed.
Resolves: https://github.com/openssl/project/issues/1371
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: b1f2078493a47f2cfde36b4c51ffe05e592a88b4
https://github.com/openssl/openssl/commit/b1f2078493a47f2cfde36b4c51ffe05e592a88b4
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/build.info
R test/enginetest.c
R test/recipes/30-test_engine.t
Log Message:
-----------
Remove engine test
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: d688be3b95a782e7bc58d0763aad4a470a6567a5
https://github.com/openssl/openssl/commit/d688be3b95a782e7bc58d0763aad4a470a6567a5
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/README-external.md
R test/recipes/95-test_external_gost_engine.t
R test/recipes/95-test_external_gost_engine_data/gost_engine.sh
Log Message:
-----------
Remove GOST external tests
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 4bd0612a2a4ddfe4e56ea67f25392c41a34c69ee
https://github.com/openssl/openssl/commit/4bd0612a2a4ddfe4e56ea67f25392c41a34c69ee
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M apps/build.info
R apps/engine.c
M doc/build.info
M doc/man1/build.info
M doc/man1/openssl-cmds.pod.in
R doc/man1/openssl-engine.pod.in
M doc/man1/openssl.pod
M doc/man7/openssl-env.pod
Log Message:
-----------
Remove openssl engine command
This patch removes apps/engine.c and associated man pages.
Resolves: https://github.com/openssl/project/issues/1370
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 8c7e974bb5296a26dd63e51cbe5d3739b8057bb5
https://github.com/openssl/openssl/commit/8c7e974bb5296a26dd63e51cbe5d3739b8057bb5
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M providers/common/include/prov/provider_util.h
M providers/common/provider_util.c
M providers/implementations/asymciphers/sm2_enc.c
M providers/implementations/kdfs/hkdf.c
M providers/implementations/kdfs/hmacdrbg_kdf.c
M providers/implementations/kdfs/kbkdf.c
M providers/implementations/kdfs/krb5kdf.c
M providers/implementations/kdfs/pbkdf1.c
M providers/implementations/kdfs/pbkdf2.c
M providers/implementations/kdfs/pkcs12kdf.c
M providers/implementations/kdfs/pvkkdf.c
M providers/implementations/kdfs/sshkdf.c
M providers/implementations/kdfs/sskdf.c
M providers/implementations/kdfs/tls1_prf.c
M providers/implementations/kdfs/x942kdf.c
M providers/implementations/keymgmt/mac_legacy_kmgmt.c
M providers/implementations/macs/cmac_prov.c
M providers/implementations/macs/gmac_prov.c
M providers/implementations/macs/hmac_prov.c
M providers/implementations/macs/kmac_prov.c
M providers/implementations/rands/drbg_hash.c
M providers/implementations/rands/drbg_hmac.c
M providers/implementations/signature/mac_legacy_sig.c
Log Message:
-----------
providers/: Remove ENGINEs
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 26b1723ed4be98657953b597ea4f8706748b2835
https://github.com/openssl/openssl/commit/26b1723ed4be98657953b597ea4f8706748b2835
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M apps/ca.c
M apps/cmp.c
M apps/cms.c
M apps/crl.c
M apps/dgst.c
M apps/dhparam.c
M apps/dsa.c
M apps/dsaparam.c
M apps/ec.c
M apps/ecparam.c
M apps/enc.c
M apps/gendsa.c
M apps/genpkey.c
M apps/genrsa.c
M apps/include/apps.h
R apps/include/engine_loader.h
M apps/include/opt.h
M apps/info.c
M apps/lib/apps.c
M apps/lib/build.info
R apps/lib/engine.c
R apps/lib/engine_loader.c
M apps/lib/s_cb.c
M apps/list.c
M apps/ocsp.c
M apps/openssl-vms.cnf
M apps/openssl.c
M apps/openssl.cnf
M apps/pkcs12.c
M apps/pkcs7.c
M apps/pkcs8.c
M apps/pkey.c
M apps/pkeyparam.c
M apps/pkeyutl.c
M apps/rand.c
M apps/req.c
M apps/rsa.c
M apps/rsautl.c
M apps/s_client.c
M apps/s_server.c
M apps/smime.c
M apps/speed.c
M apps/spkac.c
M apps/srp.c
M apps/storeutl.c
M apps/ts.c
M apps/verify.c
M apps/version.c
M apps/x509.c
M test/build.info
Log Message:
-----------
apps/: Remove engines
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 9425238145aa620b22050021a7e66affdef12fb9
https://github.com/openssl/openssl/commit/9425238145aa620b22050021a7e66affdef12fb9
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M apps/ca.c
M apps/cmp.c
M apps/cms.c
M apps/dgst.c
M apps/include/fmt.h
M apps/include/opt.h
M apps/lib/opt.c
M apps/pkey.c
M apps/pkeyutl.c
M apps/req.c
M apps/rsautl.c
M apps/s_client.c
M apps/s_server.c
M apps/smime.c
M apps/spkac.c
M apps/x509.c
M doc/man1/openssl-cmp.pod.in
Log Message:
-----------
apps/: Remove "-keyform engine"
Resolves: https://github.com/openssl/project/issues/1354
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 25fd85ff2873aa17a6a18402005a5e1ad2da4266
https://github.com/openssl/openssl/commit/25fd85ff2873aa17a6a18402005a5e1ad2da4266
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/man1/openssl-ca.pod.in
M doc/man1/openssl-cmp.pod.in
M doc/man1/openssl-cms.pod.in
M doc/man1/openssl-dgst.pod.in
M doc/man1/openssl-dhparam.pod.in
M doc/man1/openssl-dsa.pod.in
M doc/man1/openssl-dsaparam.pod.in
M doc/man1/openssl-ec.pod.in
M doc/man1/openssl-ecparam.pod.in
M doc/man1/openssl-enc.pod.in
M doc/man1/openssl-format-options.pod
M doc/man1/openssl-gendsa.pod.in
M doc/man1/openssl-genpkey.pod.in
M doc/man1/openssl-genrsa.pod.in
M doc/man1/openssl-info.pod.in
M doc/man1/openssl-list.pod.in
M doc/man1/openssl-pkcs12.pod.in
M doc/man1/openssl-pkcs7.pod.in
M doc/man1/openssl-pkcs8.pod.in
M doc/man1/openssl-pkey.pod.in
M doc/man1/openssl-pkeyparam.pod.in
M doc/man1/openssl-pkeyutl.pod.in
M doc/man1/openssl-rand.pod.in
M doc/man1/openssl-req.pod.in
M doc/man1/openssl-rsa.pod.in
M doc/man1/openssl-rsautl.pod.in
M doc/man1/openssl-s_client.pod.in
M doc/man1/openssl-s_server.pod.in
M doc/man1/openssl-smime.pod.in
M doc/man1/openssl-speed.pod.in
M doc/man1/openssl-spkac.pod.in
M doc/man1/openssl-srp.pod.in
M doc/man1/openssl-storeutl.pod.in
M doc/man1/openssl-ts.pod.in
M doc/man1/openssl-verify.pod.in
M doc/man1/openssl-version.pod.in
M doc/man1/openssl-x509.pod.in
Log Message:
-----------
apps/: Update docs
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 612af351c709d6b8d0b4ad087fda8cb1214b3c94
https://github.com/openssl/openssl/commit/612af351c709d6b8d0b4ad087fda8cb1214b3c94
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
R test/afalgtest.c
M test/build.info
M test/danetest.c
M test/ectest.c
Log Message:
-----------
test/: Remove ENGINEs
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 0d591943816fdb28580f87acada61a781b98df2a
https://github.com/openssl/openssl/commit/0d591943816fdb28580f87acada61a781b98df2a
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/err/err_all.c
M crypto/err/err_all_legacy.c
M crypto/ts/ts_conf.c
M include/openssl/cryptoerr_legacy.h
M include/openssl/evp.h
M include/openssl/rand.h
M include/openssl/ssl.h.in
M include/openssl/ts.h
Log Message:
-----------
include/: Remove ENGINEs
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 7a8075206b3ba93b2e30f304761d6eefaefcfd39
https://github.com/openssl/openssl/commit/7a8075206b3ba93b2e30f304761d6eefaefcfd39
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M ssl/ssl_ciph.c
M ssl/ssl_lib.c
M ssl/ssl_local.h
M ssl/statem/statem_clnt.c
M ssl/tls_depr.c
Log Message:
-----------
ssl/: Remove ENGINEs
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 9d94a6164fc5a9ff81754a98dfdfe5705df9fa7f
https://github.com/openssl/openssl/commit/9d94a6164fc5a9ff81754a98dfdfe5705df9fa7f
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/asn1/a_digest.c
M crypto/asn1/ameth_lib.c
M crypto/asn1/d2i_pr.c
M crypto/conf/conf_mall.c
M crypto/conf/conf_mod.c
M crypto/dh/dh_lib.c
M crypto/dsa/dsa_lib.c
M crypto/ec/ec_key.c
M crypto/ec/ec_kmeth.c
M crypto/evp/digest.c
M crypto/evp/evp_enc.c
M crypto/evp/evp_pkey_type.c
M crypto/evp/p_lib.c
M crypto/evp/pmeth_lib.c
M crypto/hmac/hmac_s390x.c
M crypto/init.c
M crypto/pem/pem_lib.c
M crypto/rand/rand_lib.c
M crypto/rsa/rsa_lib.c
M crypto/x509/x_pubkey.c
Log Message:
-----------
crypto/: Remove OPENSSL_NO_ENGINE guarded code
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 848de1f04ab73a97692097b8d4355b3b5e4424d0
https://github.com/openssl/openssl/commit/848de1f04ab73a97692097b8d4355b3b5e4424d0
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M engines/e_loader_attic.c
Log Message:
-----------
engine/e_loader_attic: Remove OPENSSL_NO_ENGINE parts
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 255a169aeb9eb23d551db6af4a68d9314f846a2a
https://github.com/openssl/openssl/commit/255a169aeb9eb23d551db6af4a68d9314f846a2a
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/man3/EVP_PKEY_set1_RSA.pod
M include/openssl/sslerr_legacy.h
M util/libcrypto.num
M util/libssl.num
Log Message:
-----------
Update symbols after OPENSSL_NO_ENGINE clearup
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: eda9285a441f931cc483c58a92e6c7e8a63ae6ae
https://github.com/openssl/openssl/commit/eda9285a441f931cc483c58a92e6c7e8a63ae6ae
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configure
M engines/e_afalg.c
M engines/e_capi.c
M engines/e_dasync.c
M engines/e_devcrypto.c
M engines/e_ossltest.c
M engines/e_padlock.c
M test/evp_extra_test.c
M test/helpers/ssltestlib.c
M test/sslapitest.c
M test/sslbuffertest.c
Log Message:
-----------
Remove OPENSSL_NO_DYNAMIC_ENGINE
Most of the ifdefs were removed, but we want to rewrite the dasync
engine to a provider. Therefore that code was not removed; instead a new
temporary macro was added named TODO_REWRITE_ME_DASYNC_PROVIDER.
Resolves: https://github.com/openssl/project/issues/1363
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: b890e5c07c539ed74154e0593890a951d9f8f14f
https://github.com/openssl/openssl/commit/b890e5c07c539ed74154e0593890a951d9f8f14f
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configure
Log Message:
-----------
Remove OPENSSL_NO_STATIC_ENGINE macro
Resolves: https://github.com/openssl/project/issues/1364
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 1c47a5eb290cad88619af145465b63a160ade43f
https://github.com/openssl/openssl/commit/1c47a5eb290cad88619af145465b63a160ade43f
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M providers/common/include/prov/provider_util.h
Log Message:
-----------
Remove engine from PROV_CIPHER and PROV_DIGEST structs.
Resolves: https://github.com/openssl/project/issues/1352
Resolves: https://github.com/openssl/project/issues/1353
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: a7a0576e2189198301db8afb47621e6de9a5f036
https://github.com/openssl/openssl/commit/a7a0576e2189198301db8afb47621e6de9a5f036
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/dh/dh_backend.c
M crypto/dh/dh_lib.c
M crypto/dh/dh_local.h
M crypto/dsa/dsa_backend.c
M crypto/dsa/dsa_lib.c
M crypto/dsa/dsa_local.h
M crypto/ec/ec_backend.c
M crypto/ec/ec_key.c
M crypto/ec/ec_local.h
M crypto/evp/evp_enc.c
M crypto/evp/evp_local.h
M crypto/evp/p_lib.c
M crypto/evp/pmeth_lib.c
M crypto/rsa/rsa_backend.c
M crypto/rsa/rsa_lib.c
M crypto/rsa/rsa_local.h
M crypto/store/store_local.h
M crypto/store/store_register.c
M include/crypto/evp.h
Log Message:
-----------
Remove private ENGINE references from local structs.
Resolves: https://github.com/openssl/project/issues/1368
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 5e0371986a40739d730ac6dca75dcc17283b2376
https://github.com/openssl/openssl/commit/5e0371986a40739d730ac6dca75dcc17283b2376
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configure
Log Message:
-----------
Configure: deprecate-disable engine related options
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: ddcc7734a6f7538c28b0bef9e2ebec55df658571
https://github.com/openssl/openssl/commit/ddcc7734a6f7538c28b0bef9e2ebec55df658571
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/engine/eng_init.c
M crypto/engine/eng_lib.c
M crypto/engine/eng_list.c
M crypto/engine/eng_local.h
M crypto/engine/eng_table.c
M crypto/engine/tb_asnmth.c
M crypto/trace.c
M include/openssl/trace.h
M test/trace_api_test.c
Log Message:
-----------
Remove ENGINE_TABLE and ENGINE_REF_COUNT trace categories
With ENGINES going away we need to remove these trace catagories
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 8f0c28a7bae0699237517d01127b680fc7abd192
https://github.com/openssl/openssl/commit/8f0c28a7bae0699237517d01127b680fc7abd192
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/man3/OSSL_trace_set_channel.pod
M doc/man7/openssl-env.pod
Log Message:
-----------
Remove ENGINE_TABLE and ENGINE_REF_COUNT trace documentation
As the subject indicates, with these trace categories gone, we shouldn't
reference them in the docs anymore.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 3984c056b7d7d6d82287642f4f63daefc0a83995
https://github.com/openssl/openssl/commit/3984c056b7d7d6d82287642f4f63daefc0a83995
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/evp/p_lib.c
Log Message:
-----------
p_lib.c: Remove engine from pkey_set_type
Resolves: https://github.com/openssl/project/issues/1437
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 246a186a24ee387121c6a4fd8dc856ab66ce58f0
https://github.com/openssl/openssl/commit/246a186a24ee387121c6a4fd8dc856ab66ce58f0
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
R README-ENGINES.md
M README.md
Log Message:
-----------
Remove README-ENGINES.md
Resolves: https://github.com/openssl/project/issues/1616
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 99144c3b59f3da0244dbdb769927a21bc35dec76
https://github.com/openssl/openssl/commit/99144c3b59f3da0244dbdb769927a21bc35dec76
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/dsa/dsa_lib.c
Log Message:
-----------
crypto/dsa: Remove ENGINE usage
Resolves: https://github.com/openssl/project/issues/1614
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 03771bcd3f5f52e154341d6751ffd7a01fc8fa16
https://github.com/openssl/openssl/commit/03771bcd3f5f52e154341d6751ffd7a01fc8fa16
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/ec/ec_backend.c
M crypto/ec/ec_key.c
M crypto/ec/ec_kmeth.c
M crypto/ec/ec_local.h
Log Message:
-----------
crypto/ec: Remove ENGINE usage
Resolves: https://github.com/openssl/project/issues/1615
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Dale <ppz...@gmail.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: cfd96295fc9df42ce7e07f000fa21efb08204456
https://github.com/openssl/openssl/commit/cfd96295fc9df42ce7e07f000fa21efb08204456
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M .github/workflows/windows.yml
M .github/workflows/windows_comp.yml
M Configurations/descrip.mms.tmpl
M Configurations/unix-Makefile.tmpl
M Configurations/windows-makefile.tmpl
M NOTES-WINDOWS.md
M build.info
M crypto/cversion.c
M crypto/defaults.c
M crypto/engine/eng_list.c
M crypto/info.c
M doc/man3/OpenSSL_version.pod
M exporters/build.info
M exporters/cmake/OpenSSLConfig.cmake.in
M exporters/pkg-config/libcrypto.pc.in
M include/internal/common.h
M test/recipes/02-test_windows_registry.t
M util/mkinstallvars.pl
Log Message:
-----------
Remove ENGINESDIR variable and engines installation from Makefiles.
For compatibility reasons, OPENSSL_ENGINES_DIR and OPENSSL_INFO_ENGINES_DIR
are still supported but return values like with engines disabled.
The OPENSSL_ENGINES environment variable will be removed with engine
removal later.
Resolves: https://github.com/openssl/project/issues/1425
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 1da939bb9521aebf10ba1b8f1a6a12bde50d686a
https://github.com/openssl/openssl/commit/1da939bb9521aebf10ba1b8f1a6a12bde50d686a
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/evp_extra_test.c
Log Message:
-----------
remove engine references from evp_extra_test
The evp_extra_test code makes use of the dasync engine to ensure that we
can do evp operations (signatures and ciphers) with an engine.
The dasync engine is used for this purpose, but it does not exercize any
specific pipeline functionality.
Given that engines are getting removed, the engine tests here I think
can just be removed.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: c383ad87e917278646c7709899e2663be8ff7088
https://github.com/openssl/openssl/commit/c383ad87e917278646c7709899e2663be8ff7088
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/helpers/ssltestlib.c
M test/helpers/ssltestlib.h
M test/sslapitest.c
M test/sslbuffertest.c
Log Message:
-----------
Remove dasync engine from sslapitest and sslbuffertest
With the impending engine removal, we don't have a need to test engine
functionality in these tests anymore, so remove the test cases that make
use of the dasync engine here.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 1337499ebbd9e19add11ad3f1291bdbb328566c9
https://github.com/openssl/openssl/commit/1337499ebbd9e19add11ad3f1291bdbb328566c9
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/ssl_handshake_rtt_test.c
Log Message:
-----------
remove engine.h include from ssl_handshake_rtt_test.c
It seems like it wasn't ever needed before, so with the removal of
engines, just get rid of it.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 2db3f8cf8b432f0c39b619dd92269a732256449e
https://github.com/openssl/openssl/commit/2db3f8cf8b432f0c39b619dd92269a732256449e
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
R test/recipes/30-test_afalg.t
Log Message:
-----------
remove afalg tests
We have a specific test suite that exercizes the afalg engine, that is
becoming useless with engine removal.
I had considered that we should perhaps convert this into a provider,
but having looked at the engine itself, it only offers implementations
for AES-128, AES-192 and AES-256. Given that the default provider
offers these algorithms with hardware acceleration via the aesni
instruction set (or comparable instructions on non-x86 arches), it seems
like the only advantage the afalg engine offers is acceleration of these
ciphers on platforms that have off-cpu accelerators and no cpu based
acceleration support.
given that:
a) Most cpus have instruction based acceleration
b) We don't test with any platforms that use external accelerators
It seems like alot of investment to get no real advantage, so just
remove the test, allowing us to delete the engine entirely in another
PR.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 3a1d4a53e4f12c3bdffed5ca32889804d004d714
https://github.com/openssl/openssl/commit/3a1d4a53e4f12c3bdffed5ca32889804d004d714
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/sysdefaulttest.c
Log Message:
-----------
Don't enable engines on sysdefault tests
With engine removal, we expect that init flag to disappear, so stop
using it here.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 9b2b31102998f9006a8bd7e31a82500542758eab
https://github.com/openssl/openssl/commit/9b2b31102998f9006a8bd7e31a82500542758eab
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/recipes/05-test_rand.t
Log Message:
-----------
remove dasync engine test from test_rand
We're removing the engine, so we don't need to test this anymore.
NOTE: This also removes the engine skip check from the test, and this
breaks testing until such time as PR #28461 is merged (which replaces
the remaining engine test with a provider).
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 99398b342d15ecb3164869f6059e2d9eeef06ed4
https://github.com/openssl/openssl/commit/99398b342d15ecb3164869f6059e2d9eeef06ed4
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/README-dev.md
M test/helpers/ssltestlib.c
M test/run_tests.pl
M test/sslbuffertest.c
Log Message:
-----------
Additonal removals of engine references in tests/*
Spotted by @andrewkdinh, some extra notes about/useages of engines that
are now vestigial.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: c370c2596bb544ebe5df71f0b52669643cebff1c
https://github.com/openssl/openssl/commit/c370c2596bb544ebe5df71f0b52669643cebff1c
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configurations/unix-Makefile.tmpl
M Configure
M build.info
R engines/asm/e_padlock-x86.pl
R engines/asm/e_padlock-x86_64.pl
R engines/build.info
R engines/e_afalg.c
R engines/e_afalg.ec
R engines/e_afalg.h
R engines/e_afalg.txt
R engines/e_afalg_err.c
R engines/e_afalg_err.h
R engines/e_capi.c
R engines/e_capi.ec
R engines/e_capi.txt
R engines/e_capi_err.c
R engines/e_capi_err.h
R engines/e_dasync.c
R engines/e_dasync.ec
R engines/e_dasync.txt
R engines/e_dasync_err.c
R engines/e_dasync_err.h
R engines/e_devcrypto.c
R engines/e_loader_attic.c
R engines/e_loader_attic.ec
R engines/e_loader_attic.txt
R engines/e_loader_attic_err.c
R engines/e_loader_attic_err.h
R engines/e_ossltest.c
R engines/e_ossltest.ec
R engines/e_ossltest.txt
R engines/e_ossltest_err.c
R engines/e_ossltest_err.h
R engines/e_padlock.c
Log Message:
-----------
Remove top-level engines dir.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: b1960f28cbd91515883094286c8dabaf0d7437e6
https://github.com/openssl/openssl/commit/b1960f28cbd91515883094286c8dabaf0d7437e6
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/build.info
R crypto/engine/README.md
R crypto/engine/build.info
R crypto/engine/eng_all.c
R crypto/engine/eng_cnf.c
R crypto/engine/eng_ctrl.c
R crypto/engine/eng_dyn.c
R crypto/engine/eng_err.c
R crypto/engine/eng_fat.c
R crypto/engine/eng_init.c
R crypto/engine/eng_lib.c
R crypto/engine/eng_list.c
R crypto/engine/eng_local.h
R crypto/engine/eng_openssl.c
R crypto/engine/eng_pkey.c
R crypto/engine/eng_rdrand.c
R crypto/engine/eng_table.c
R crypto/engine/tb_asnmth.c
R crypto/engine/tb_cipher.c
R crypto/engine/tb_dh.c
R crypto/engine/tb_digest.c
R crypto/engine/tb_dsa.c
R crypto/engine/tb_eckey.c
R crypto/engine/tb_pkmeth.c
R crypto/engine/tb_rand.c
R crypto/engine/tb_rsa.c
M crypto/err/openssl.ec
M crypto/err/openssl.txt
M include/openssl/cryptoerr_legacy.h
M include/openssl/engineerr.h
Log Message:
-----------
Remove crypto/engine dir.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 74f8a3f1cd2a6fab822c855f00a9b3f52e3a2e41
https://github.com/openssl/openssl/commit/74f8a3f1cd2a6fab822c855f00a9b3f52e3a2e41
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configurations/unix-Makefile.tmpl
M util/libcrypto.num
Log Message:
-----------
Remove ENGINE symbols from API.
Note, that engine.h now does not contain any real forward declarations,
so it should be excluded from the symbols parsing.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: ad0d325689f52e5d463db1c21a53323860ca47fb
https://github.com/openssl/openssl/commit/ad0d325689f52e5d463db1c21a53323860ca47fb
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M util/find-doc-nits
Log Message:
-----------
Temporary disable ENGINE_* docs tests.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 8e9771cf2259ca579a4c1a30cb31a6e0f50e40e2
https://github.com/openssl/openssl/commit/8e9771cf2259ca579a4c1a30cb31a6e0f50e40e2
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/engine.h
M include/openssl/macros.h
Log Message:
-----------
Use stub declarations in engine.h
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 92e0d58e0279abfff9883dcff84d347361b08851
https://github.com/openssl/openssl/commit/92e0d58e0279abfff9883dcff84d347361b08851
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/cryptoerr_legacy.h
M include/openssl/engine.h
M include/openssl/sslerr_legacy.h
Log Message:
-----------
Define stubs for other ENGINE-related legacy API and revert legacy errors definitions.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 80db9e92fd1d2b693b0e6f756b4f71b47b57ceae
https://github.com/openssl/openssl/commit/80db9e92fd1d2b693b0e6f756b4f71b47b57ceae
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/engine.h
Log Message:
-----------
Ignore unused arguments warnings in engine.h stubs.
This add pragma setting for gcc an clang compilers.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 696913bdd20b2b0f67e8f784ab76cac13feeb928
https://github.com/openssl/openssl/commit/696913bdd20b2b0f67e8f784ab76cac13feeb928
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M CHANGES.md
M NEWS.md
Log Message:
-----------
Mention ENGINE removal in CHANGES and NEWS
Resolves: https://github.com/openssl/project/issues/1423
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: a6bd3216d0687e45df87bb2a93c4e48768a812a3
https://github.com/openssl/openssl/commit/a6bd3216d0687e45df87bb2a93c4e48768a812a3
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M providers/implementations/asymciphers/sm2_enc.inc.in
M providers/implementations/include/prov/drbg.h
M providers/implementations/kdfs/hkdf.c
M providers/implementations/kdfs/hkdf.inc.in
M providers/implementations/kdfs/hmacdrbg_kdf.inc.in
M providers/implementations/kdfs/kbkdf.inc.in
M providers/implementations/kdfs/krb5kdf.inc.in
M providers/implementations/kdfs/pbkdf1.inc.in
M providers/implementations/kdfs/pbkdf2.inc.in
M providers/implementations/kdfs/pkcs12kdf.inc.in
M providers/implementations/kdfs/pvkkdf.inc.in
M providers/implementations/kdfs/sshkdf.inc.in
M providers/implementations/kdfs/sskdf.c
M providers/implementations/kdfs/sskdf.inc.in
M providers/implementations/kdfs/tls1_prf.inc.in
M providers/implementations/kdfs/x942kdf.inc.in
M providers/implementations/keymgmt/mac_legacy_kmgmt.c
M providers/implementations/keymgmt/mac_legacy_kmgmt.inc.in
M providers/implementations/macs/cmac_prov.inc.in
M providers/implementations/macs/gmac_prov.inc.in
M providers/implementations/macs/hmac_prov.inc.in
M providers/implementations/macs/kmac_prov.inc.in
M providers/implementations/rands/drbg_hash.inc.in
M providers/implementations/rands/drbg_hmac.inc.in
Log Message:
-----------
Providers: Remove OSSL_ALG_PARAM_ENGINE
Resolves: https://github.com/openssl/project/issues/1427
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 380c9544edd0961d13d663f2f091b5cbd9d20012
https://github.com/openssl/openssl/commit/380c9544edd0961d13d663f2f091b5cbd9d20012
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M providers/fips-sources.checksums
M providers/fips.module.sources
M providers/implementations/kdfs/krb5kdf.c
M providers/implementations/keymgmt/mac_legacy_kmgmt.c
Log Message:
-----------
Clear providers dir from engines
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 30569f8644ac0b457fea8c2d733f7856b75b7be6
https://github.com/openssl/openssl/commit/30569f8644ac0b457fea8c2d733f7856b75b7be6
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M ssl/record/methods/ssl3_cbc.c
M ssl/record/methods/ssl3_meth.c
M ssl/record/methods/tls1_meth.c
M ssl/ssl_ciph.c
M ssl/ssl_sess.c
M ssl/statem/statem_srvr.c
Log Message:
-----------
Clear ssl dir from engines
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 9626fb450977cc9bf57c7a13d2fce2ac1f5b7ec0
https://github.com/openssl/openssl/commit/9626fb450977cc9bf57c7a13d2fce2ac1f5b7ec0
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M test/evp_kdf_test.c
M util/err-to-raise
M util/fix-includes.sed
M util/indent.pro
M util/opensslwrap.sh
M util/perl/OpenSSL/paramnames.pm
M util/perl/TLSProxy/Proxy.pm
M util/wrap.pl.in
Log Message:
-----------
Clear util dir from engines
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: b2ff25627a365aae637ffe0c08cd3eeb2b7260ff
https://github.com/openssl/openssl/commit/b2ff25627a365aae637ffe0c08cd3eeb2b7260ff
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M ssl/ssl_ciph.c
M ssl/ssl_lib.c
M ssl/ssl_local.h
Log Message:
-----------
Refactor ssl_evp_cipher_fetch()
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: b792cf3cb390683fbc253799488a7e395eb1bb2a
https://github.com/openssl/openssl/commit/b792cf3cb390683fbc253799488a7e395eb1bb2a
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M ssl/s3_enc.c
M ssl/ssl_ciph.c
M ssl/ssl_lib.c
M ssl/ssl_local.h
M ssl/statem/statem_clnt.c
Log Message:
-----------
Remove ssl_evp_md_fetch()
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Paul Yang <paulya...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 5ef339776d835fb0d20a975448dd8d52f6cd1a36
https://github.com/openssl/openssl/commit/5ef339776d835fb0d20a975448dd8d52f6cd1a36
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/man3/OPENSSL_init_crypto.pod
M include/openssl/crypto.h.in
M include/openssl/engine.h
Log Message:
-----------
Remove OPENSSL_INIT_ENGINE_* definitions
Keeping OPENSSL_INIT_ENGINE_ALL_BUILTIN to be defined always to zero as
it might be the most used one outside of the library, meanwhile keeping
the others undefined unless OPENSSL_ENGINE_STUBS is defined.
Resolves: https://github.com/openssl/project/issues/1428
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 41a5916f8e7e1d34e362a9b3982547c47f43c8cd
https://github.com/openssl/openssl/commit/41a5916f8e7e1d34e362a9b3982547c47f43c8cd
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/engine.h
R util/engines.num
Log Message:
-----------
Remove engine.num and make helper functions for engine loading stubs.
Fixes openssl/project#1420
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: e50c4e239558c4591f4b886ac695e7ef2521c1a8
https://github.com/openssl/openssl/commit/e50c4e239558c4591f4b886ac695e7ef2521c1a8
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configurations/10-main.conf
M Configure
M INSTALL.md
Log Message:
-----------
Remove engine-related tests
As engines are no longer included in test, these configuration
options make no longer sense.
All other test should be already enabled.
Fixes openssl/project#1376
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: d8999834c891432ab6d4109d9d86bffd6a6613e3
https://github.com/openssl/openssl/commit/d8999834c891432ab6d4109d9d86bffd6a6613e3
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M Configure
M INSTALL.md
Log Message:
-----------
Make no-engine config permanently set.
It enables configuration defines:
OPENSSL_NO_DYNAMIC_ENGINE
OPENSSL_NO_STATIC_ENGINE
OPENSSL_NO_ENGINE
Fixes openssl/project#1711
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 197ae2f63db8590f055bf56b42b4223b7d2be1f8
https://github.com/openssl/openssl/commit/197ae2f63db8590f055bf56b42b4223b7d2be1f8
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M .github/workflows/ci.yml
M .github/workflows/coveralls.yml
M .github/workflows/run-checker-daily.yml
M .github/workflows/run-checker-merge.yml
Log Message:
-----------
ci: Remove no longer supported config options
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: dc62c97ca56ec028082a33b132071a1faa465ccf
https://github.com/openssl/openssl/commit/dc62c97ca56ec028082a33b132071a1faa465ccf
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/dh/dh_lib.c
M crypto/dsa/dsa_lib.c
M crypto/ec/ec_key.c
M crypto/rsa/rsa_lib.c
M crypto/store/store_register.c
M doc/man3/DH_get0_pqg.pod
M doc/man3/DSA_get0_pqg.pod
M doc/man3/EC_KEY_new.pod
M doc/man3/OSSL_STORE_LOADER.pod
M doc/man3/RSA_get0_key.pod
M include/openssl/dh.h
M include/openssl/dsa.h
M include/openssl/ec.h
M include/openssl/engine.h
M include/openssl/rsa.h
M include/openssl/store.h
M include/openssl/types.h
M util/libcrypto.num
Log Message:
-----------
Remove *_get0_engine() API calls
Resolves: https://github.com/openssl/project/issues/1337
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: bf24dd887c803b53ae61fa580b17e6d233acf8a8
https://github.com/openssl/openssl/commit/bf24dd887c803b53ae61fa580b17e6d233acf8a8
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M apps/include/apps.h
M crypto/asn1/a_digest.c
M crypto/asn1/ameth_lib.c
M crypto/asn1/d2i_pr.c
M crypto/conf/conf_mall.c
M crypto/conf/conf_mod.c
M crypto/conf/conf_sap.c
M crypto/ec/ec_backend.c
M crypto/ec/ec_kmeth.c
M crypto/evp/digest.c
M crypto/evp/evp_enc.c
M crypto/evp/evp_pkey_type.c
M crypto/evp/p_lib.c
M crypto/evp/pmeth_lib.c
M crypto/init.c
M crypto/pem/pem_lib.c
M crypto/pem/pem_pkey.c
M crypto/rand/rand_lib.c
M crypto/rand/rand_pool.c
M crypto/store/store_local.h
M crypto/ts/ts_conf.c
M crypto/x509/x_pubkey.c
R include/crypto/engine.h
Log Message:
-----------
Remove engine.h includes for internal code.
This should no be used anywhere, as typedef for ENGINE is in types.h.
Only apps should include this header for compatibility stubs.
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 95fb37c9b6bcc564df72a29cb24f397748e32e85
https://github.com/openssl/openssl/commit/95fb37c9b6bcc564df72a29cb24f397748e32e85
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
R include/crypto/engineerr.h
Log Message:
-----------
Remove internal crypto/engineerr.h header
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 1c81b147a962bb9ce33de4e070e855faab92489d
https://github.com/openssl/openssl/commit/1c81b147a962bb9ce33de4e070e855faab92489d
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/engine.h
Log Message:
-----------
Use better description of macros purpose in engine.h
Resolves: https://github.com/openssl/project/issues/1735
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: f2ed7652e3c4318c20a768dafef853484e86457d
https://github.com/openssl/openssl/commit/f2ed7652e3c4318c20a768dafef853484e86457d
Author: Milan Broz <gmaz...@gmail.com>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M include/openssl/engine.h
Log Message:
-----------
Remove no longer needed macro argument
Resolves: https://github.com/openssl/project/issues/1736
Signed-off-by: Milan Broz <gmaz...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 4e96426a8d857a13e09a213d72c1f59cf46ee813
https://github.com/openssl/openssl/commit/4e96426a8d857a13e09a213d72c1f59cf46ee813
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M apps/include/opt.h
M apps/lib/apps.c
M apps/lib/opt.c
M doc/internal/man3/OPTIONS.pod
M test/testutil/apps_shims.c
Log Message:
-----------
apps: Remove opt_legacy_okay function
The function used to check for ENGINEs to determine if a legacy code
path is available, but it makes no sense to keep it after the ENGINE
removal, as the legacy path will always fail.
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 807928c0aa1b2ad013f021c8f8ad15906a127ce7
https://github.com/openssl/openssl/commit/807928c0aa1b2ad013f021c8f8ad15906a127ce7
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/ts/ts_conf.c
Log Message:
-----------
Remove engine related crypto_device option
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 7c8e2bfcd5ba74bfe6f7d1597bf0ff599f7a984c
https://github.com/openssl/openssl/commit/7c8e2bfcd5ba74bfe6f7d1597bf0ff599f7a984c
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/man1/openssl-ciphers.pod.in
M doc/man3/ENGINE_add.pod
Log Message:
-----------
Docs: Update ENGINE_add.pod to reflect the engine removal
Resolves: https://github.com/openssl/project/issues/1366
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: adc73bfcb30ea78b74caec3785d81ad9a281bd9c
https://github.com/openssl/openssl/commit/adc73bfcb30ea78b74caec3785d81ad9a281bd9c
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M doc/internal/man3/OPTIONS.pod
M doc/internal/man7/EVP_PKEY.pod
M doc/internal/man7/build.info.pod
M doc/man1/openssl-ciphers.pod.in
M doc/man1/openssl-cmds.pod.in
M doc/man1/openssl-genpkey.pod.in
M doc/man1/openssl-pkcs12.pod.in
M doc/man1/openssl-s_client.pod.in
M doc/man1/openssl-s_server.pod.in
M doc/man1/openssl-ts.pod.in
M doc/man1/openssl.pod
M doc/man3/ASYNC_WAIT_CTX_new.pod
M doc/man3/ASYNC_start_job.pod
M doc/man3/BIO_get_ex_new_index.pod
M doc/man3/CMAC_CTX.pod
M doc/man3/CMS_add1_signer.pod
M doc/man3/CMS_sign.pod
M doc/man3/CRYPTO_get_ex_new_index.pod
M doc/man3/DH_set_method.pod
M doc/man3/DSA_set_method.pod
M doc/man3/ECDSA_sign.pod
M doc/man3/ENGINE_add.pod
M doc/man3/ERR_put_error.pod
M doc/man3/EVP_CIPHER_CTX_get_cipher_data.pod
M doc/man3/EVP_DigestInit.pod
M doc/man3/EVP_DigestSignInit.pod
M doc/man3/EVP_DigestVerifyInit.pod
M doc/man3/EVP_EncryptInit.pod
M doc/man3/EVP_PKEY_CTX_get0_libctx.pod
M doc/man3/EVP_PKEY_CTX_new.pod
M doc/man3/EVP_PKEY_CTX_set_hkdf_md.pod
M doc/man3/EVP_PKEY_CTX_set_tls1_prf_md.pod
M doc/man3/EVP_PKEY_asn1_get_count.pod
M doc/man3/EVP_PKEY_decrypt.pod
M doc/man3/EVP_PKEY_derive.pod
M doc/man3/EVP_PKEY_encrypt.pod
M doc/man3/EVP_PKEY_get_default_digest_nid.pod
M doc/man3/EVP_PKEY_keygen.pod
M doc/man3/EVP_PKEY_new.pod
M doc/man3/EVP_PKEY_sign.pod
M doc/man3/EVP_PKEY_verify.pod
M doc/man3/EVP_PKEY_verify_recover.pod
M doc/man3/EVP_SignInit.pod
M doc/man3/EVP_VerifyInit.pod
M doc/man3/HMAC.pod
M doc/man3/OPENSSL_config.pod
M doc/man3/OPENSSL_init_crypto.pod
M doc/man3/OPENSSL_load_builtin_modules.pod
M doc/man3/OSSL_STORE_LOADER.pod
M doc/man3/OSSL_trace_enabled.pod
M doc/man3/OpenSSL_version.pod
M doc/man3/RAND_set_rand_method.pod
M doc/man3/RSA_check_key.pod
M doc/man3/RSA_set_method.pod
M doc/man3/SSL_CTX_set_mode.pod
M doc/man3/SSL_CTX_set_split_send_fragment.pod
M doc/man3/SSL_CTX_use_certificate.pod
M doc/man3/SSL_get_all_async_fds.pod
M doc/man3/SSL_get_error.pod
M doc/man3/SSL_set_async_callback.pod
M doc/man5/config.pod
M doc/man7/EVP_PKEY-HMAC.pod
M doc/man7/evp.pod
M doc/man7/fips_module.pod
M doc/man7/openssl-env.pod
M doc/man7/ossl_store.pod
M doc/perlvars.pm
Log Message:
-----------
Docs: Clean up ENGINE mentions
Engines are removed and the documentation should reflect that, even with
deprecated and legacy API.
Resolves: https://github.com/openssl/project/issues/1366
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 7f52f97f6fa9e196bd8033ac45dd56ee71e59ebb
https://github.com/openssl/openssl/commit/7f52f97f6fa9e196bd8033ac45dd56ee71e59ebb
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-04 (Thu, 04 Dec 2025)
Changed paths:
M crypto/asn1/ameth_lib.c
M crypto/cmac/cmac.c
M crypto/dh/dh_lib.c
M crypto/dsa/dsa_lib.c
M crypto/evp/digest.c
M crypto/evp/evp_enc.c
M crypto/evp/evp_pkey_type.c
M crypto/evp/m_sigver.c
M crypto/evp/p_lib.c
M crypto/evp/pmeth_gn.c
M crypto/evp/pmeth_lib.c
M crypto/hmac/hmac.c
M crypto/hmac/hmac_local.h
M crypto/hmac/hmac_s390x.c
M crypto/pem/pem_lib.c
M crypto/rand/rand_lib.c
M crypto/rsa/rsa_lib.c
M crypto/store/store_register.c
M include/crypto/cmac.h
M include/openssl/cmac.h
M include/openssl/dh.h
M include/openssl/dsa.h
M include/openssl/evp.h
M include/openssl/hmac.h
M include/openssl/rsa.h
M include/openssl/store.h
M providers/implementations/macs/cmac_prov.c
Log Message:
-----------
crypto: Remove internal ENGINE usage from the subdir
Engines can be removed safely from static and internal functions
clearing out our codebase.
Resolves: https://github.com/openssl/project/issues/1625
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29305)
Commit: 21069c983bc385f46c522e0bf7edbefabc6d4d19
https://github.com/openssl/openssl/commit/21069c983bc385f46c522e0bf7edbefabc6d4d19
Author: Dimitri John Ledkov <dimitri...@surgut.co.uk>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M providers/implementations/rands/seed_src_jitter.c
Log Message:
-----------
seed_src_jitter: prevent hypothetical getrandom fallback
In a hypothetical scenario that jent_entropy_init_ex fails, or if
get_jitter_random-value fails, there are a few unexpected
posibilities.
If jent_entropy_init_ex fails, the seed initialisation may return NULL
and then DRBG will be initiated with NULL seed, which will
automatically fallback to os-seed, which will escape module boundary
(if this jitter rng is from the fips module), and call getrandom
syscall.
And separately if get_jitter_random_value fails, it may put DRBG in an
error state, but it might not put the FIPS module in error state, like
it should as per the ISO standard.
To instrument these things, I had to create tampered
jitterentropy-library that always returns errors for init_ex and
read_entropy apis, and then use gdb tracing on both libcrypto.so and
fips.so.
The most minimal solution to above hypothetical error code paths, is
to simply call ossl_set_error_state. It is either harmless, or in case
of fips-jitter will correctly put the FIPS module into error state and
prevent any further operation; and cruitially prevent silent fallback
to getrandom syscall.
Note it is unlikely that this ever was out of compliance, as often
enough getrandom syscall goes to a kernel with validated entropy
source; and openssl fips module still did reject sampling which is too
entropy source compliant.
Nonetheless it is good to fix this hypothetical error path, and
backport this to 3.5 and up.
This is similar / additional fixes, to this previous change:
- https://github.com/openssl/openssl/pull/25957
- https://github.com/openssl/openssl/commit/b9886a6f3483e0525596d3b3956416282038da82
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29226)
Commit: 3720c946f095d4f35f04f61cf6efa8b84e26fc7c
https://github.com/openssl/openssl/commit/3720c946f095d4f35f04f61cf6efa8b84e26fc7c
Author: Viktor Dukhovni <openss...@dukhovni.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M crypto/ml_dsa/ml_dsa_key.c
M crypto/ml_kem/ml_kem.c
M doc/man7/EVP_PKEY-ML-DSA.pod
M doc/man7/EVP_PKEY-ML-KEM.pod
M include/openssl/core_names.h.in
M providers/implementations/encode_decode/encode_key2any.c
M providers/implementations/encode_decode/encode_key2any.inc.in
M providers/implementations/encode_decode/ml_dsa_codecs.c
M providers/implementations/encode_decode/ml_kem_codecs.c
M providers/implementations/include/prov/ml_dsa_codecs.h
M providers/implementations/include/prov/ml_kem_codecs.h
M test/evp_extra_test.c
M util/perl/OpenSSL/paramnames.pm
Log Message:
-----------
Per-key encoding formats for ML-KEM and ML-DSA
We support selection of ML-KEM and ML-DSA key formats on input and
output at the provider level, these are essentially global defaults,
in effect for the lifetime of the process.
Unfortunately, the JAVA interface in openssl-jostle needs to be able to
output a specific key in seed-only form. To that end, this PR
introduces a new "output-formats" PKEY encoding parameter, that can be used
with OSSL_ENCODER_CTX_set_params(3) when encoding a key to PKCS#8, after
using OSSL_ENCODER_CTX_new_for_key(3), rather than i2d_PrivateKey(3),
i2d_PKCS8PrivateKey(3) or PEM equivalents.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29206)
Commit: bf236e07afbd235d609f057eb50c92d1d2ee5008
https://github.com/openssl/openssl/commit/bf236e07afbd235d609f057eb50c92d1d2ee5008
Author: Viktor Dukhovni <openss...@dukhovni.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M CHANGES.md
M crypto/encode_decode/decoder_lib.c
M crypto/encode_decode/decoder_pkey.c
M crypto/encode_decode/encoder_lib.c
M crypto/encode_decode/encoder_local.h
M crypto/encode_decode/encoder_pkey.c
M doc/man3/OSSL_DECODER_CTX.pod
M doc/man3/OSSL_DECODER_CTX_new_for_pkey.pod
M doc/man3/OSSL_ENCODER_CTX.pod
M doc/man3/OSSL_ENCODER_CTX_new_for_pkey.pod
M include/openssl/decoder.h
M include/openssl/encoder.h
M test/endecode_test.c
M test/evp_extra_test.c
M util/libcrypto.num
Log Message:
-----------
Clarify/fix encoder/decoder context docs and code
In was premature to make OSSL_(EN|DE)CODER_CTX_[sg]et_finalized() be
public interfaces. Forunately, these have not yet appeared outside the
"master" branch, so we can still retract them.
Also, in the case of decoders, the implementation failed to take into
account that the context was duplicated before it was returned to the
user, and the duplicated copy failed to copy the "finalized" field.
This commit also renames "finalized" to "frozen", because
finalisation is a misleading term in this context, it suggests
resource reclamation during garbage collection or deallocation,
not marking a structure partly immutable.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29206)
Commit: 8482cb8232444dde70c4b2b0a853fca050bea01a
https://github.com/openssl/openssl/commit/8482cb8232444dde70c4b2b0a853fca050bea01a
Author: Dr. David von Oheimb <d...@ddvo.net>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M crypto/cmp/cmp_vfy.c
Log Message:
-----------
CMP check_cert_path_3gpp(): add missing checks trying to retrieve newly enrolled cert
Fixes #29285
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29302)
Commit: 64e96ecf3c7edbd82322ddcc21a60be490ba2943
https://github.com/openssl/openssl/commit/64e96ecf3c7edbd82322ddcc21a60be490ba2943
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M util/find-doc-nits
Log Message:
-----------
Make find-doc-nits compatible accross git versions
We recently found that the addition of a git config command in
util/find-doc-nits is broken in some cases, sepecifically because git
around version 2.46 broke command line compatibility, replacing the
--regexp option with the --get-regexp option. So to maintain usage of
this specific command to parse the .gitconfig file, we would need to do
some extra version detection to construct the proper command line.
However, find-doc-nits already has a fallback condition, which does some
pure perl parsing of the gitconfig file, which works perfectly well.
Instead of trying to do version matching to construct the right form of
the git config command line, just remove it all, and rely on the perl
parrse to do this work for us, which works currently in all cases.
Fixes #29197
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29304)
Commit: e3e371382289ad60baa9e67850b284c33f03e763
https://github.com/openssl/openssl/commit/e3e371382289ad60baa9e67850b284c33f03e763
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/ssl_unwrap.h
M include/openssl/quic.h
M ssl/quic/quic_method.c
Log Message:
-----------
Add OSSL_QUIC_method
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 03e4ecf92e7b2cee2de34656a2afa682cba13801
https://github.com/openssl/openssl/commit/03e4ecf92e7b2cee2de34656a2afa682cba13801
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/quic_ssl.h
M include/openssl/ssl.h.in
M ssl/quic/quic_impl.c
M ssl/ssl_lib.c
Log Message:
-----------
Start implementing SSL_listen_ex
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: c6eb7383702638c89b71884551eb1f990b6886a5
https://github.com/openssl/openssl/commit/c6eb7383702638c89b71884551eb1f990b6886a5
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/quic_port.h
M ssl/quic/quic_impl.c
M ssl/quic/quic_port.c
M ssl/quic/quic_port_local.h
Log Message:
-----------
Add flag to determine how quic accepts connections
The flag defaults to 0 (unknown), and gets set to
1 (using SSL_accept_ex), or -1 (using SSL_accpet_connection)
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 3d3021afdfd792c2d0c1dbf8c9e61d0040c3d695
https://github.com/openssl/openssl/commit/3d3021afdfd792c2d0c1dbf8c9e61d0040c3d695
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M ssl/quic/quic_impl.c
M ssl/quic/quic_port.c
Log Message:
-----------
Update port_make_channel to behave for accept_ex/accept_connection
Based on the value of the using_peeloff flag, we need to choose if we're
going to create a user_ssl when creating a new channel
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 974d00769895605c4076a7f6acdfc31ba328096f
https://github.com/openssl/openssl/commit/974d00769895605c4076a7f6acdfc31ba328096f
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/quic_channel.h
M ssl/quic/quic_channel.c
M ssl/quic/quic_impl.c
M ssl/ssl_lib.c
Log Message:
-----------
stitch in ssls for SSL_listen_ex
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: a47c685ea72d611ecf78d91e95120693b006d845
https://github.com/openssl/openssl/commit/a47c685ea72d611ecf78d91e95120693b006d845
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M test/quicapitest.c
Log Message:
-----------
adding test for SSL_listen_ex
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: a1a9c61a9efea6c08d6144019504ccbf9ac18eba
https://github.com/openssl/openssl/commit/a1a9c61a9efea6c08d6144019504ccbf9ac18eba
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/openssl/ssl.h.in
Log Message:
-----------
Don't require SSL_listen_ex to have its return value checked
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: a5c2b1cbb981789d20b341d684035acd6ecb6318
https://github.com/openssl/openssl/commit/a5c2b1cbb981789d20b341d684035acd6ecb6318
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M ssl/quic/quic_port.c
Log Message:
-----------
Fixup creation of qlog object
Changes for SSL_listen_ex squashed creation of qlog objects even when
configured.
Fix that up so qlog objects are created regardless of weather we use
SSL_accept_connection or SSL_listen_ex
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 1bf5280b691fbb56222b1f3904dcdd37e5a4f884
https://github.com/openssl/openssl/commit/1bf5280b691fbb56222b1f3904dcdd37e5a4f884
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M util/libssl.num
Log Message:
-----------
Run make update
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 3702f51c29f25aee25951b4d48fd4093f475e107
https://github.com/openssl/openssl/commit/3702f51c29f25aee25951b4d48fd4093f475e107
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M ssl/quic/quic_port.c
Log Message:
-----------
Fix segfault on qlog creation with no tls
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: c2b14acee4b7d6d1b20ee5af664d51193ec32f76
https://github.com/openssl/openssl/commit/c2b14acee4b7d6d1b20ee5af664d51193ec32f76
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M doc/man3/OSSL_QUIC_client_method.pod
M doc/man3/SSL_new_listener.pod
Log Message:
-----------
Add docs for OSSL_QUIC_method() and SSL_listen_ex()
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: cfbd214c8cad98e9296be3bb33655bc666778c87
https://github.com/openssl/openssl/commit/cfbd214c8cad98e9296be3bb33655bc666778c87
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/quic_port.h
M ssl/quic/quic_channel.c
M ssl/quic/quic_impl.c
M ssl/quic/quic_port.c
M ssl/quic/quic_port_local.h
Log Message:
-----------
Drop use of get_using_peeloff for quic connections
folow the using_peeloff get/set routines to just a set routine that
fails if the set is for a mode that doesn't match the current mode
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 5e33f306aebb96f6373d344a79b3df5d18c69797
https://github.com/openssl/openssl/commit/5e33f306aebb96f6373d344a79b3df5d18c69797
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M include/internal/quic_port.h
M ssl/quic/quic_channel.c
M ssl/quic/quic_impl.c
M ssl/quic/quic_port.c
M ssl/quic/quic_port_local.h
Log Message:
-----------
Various fixups for SSL_listen_ex (readability/error unwinding)
Various review fixups to clarify meaning of variables and fix unwinding
of operations should we encounter errors in some operations.
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27397)
Commit: 32a33dae788742c4511eade62336e2e814c7c68f
https://github.com/openssl/openssl/commit/32a33dae788742c4511eade62336e2e814c7c68f
Author: Alexandr Nedvedicky <sas...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M ssl/ssl_mcnf.c
Log Message:
-----------
ssl_do_config(): Check for NULL name argument
Fixes 0c2a196af8ab9c12da27
Fixes Coverity issue 1675312
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29306)
Commit: 9e29188aa77e248cac3f76e0c308a76f285b10cc
https://github.com/openssl/openssl/commit/9e29188aa77e248cac3f76e0c308a76f285b10cc
Author: Norbert Pocs <norb...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M doc/man1/openssl-ciphers.pod.in
M doc/man1/openssl-dgst.pod.in
M doc/man1/openssl-req.pod.in
Log Message:
-----------
Add GOST provider related docs
GOST provider is in a good shape already, so keep the mentions rewritten
to provider instead of the engine.
Resolves: https://github.com/openssl/project/issues/1733
Signed-off-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29286)
Commit: d292c363b92bd92d0a8c8f2fe99b283307dbb6fb
https://github.com/openssl/openssl/commit/d292c363b92bd92d0a8c8f2fe99b283307dbb6fb
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-05 (Fri, 05 Dec 2025)
Changed paths:
M doc/build.info
A doc/internal/man7/removal.pod
M doc/man7/ossl-guide-migration.pod
A doc/man7/ossl-removed-api.pod
Log Message:
-----------
Start the 4.0 migration guide
This includes adding a little internal procedure for when functions
are removed, and a special ossl-ex-api page to document what API has
been removed.
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29220)
Commit: 13015c3f41ba33a6b247ee564dde0586043e7e4a
https://github.com/openssl/openssl/commit/13015c3f41ba33a6b247ee564dde0586043e7e4a
Author: Nikola Pajkovsky <nik...@openssl.org>
Date: 2025-12-08 (Mon, 08 Dec 2025)
Changed paths:
M providers/implementations/encode_decode/encode_key2any.c
Log Message:
-----------
key2any: free val if string is empty
Resolves: https://scan5.scan.coverity.com/#/project-view/65138/10222?selectedIssue=1675327
Signed-off-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Viktor Dukhovni <vik...@openssl.org>
Reviewed-by: Tim Hudson <t...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29317)
Commit: 00a7e5ea1e51f58180cd7aa4028e998949a36d66
https://github.com/openssl/openssl/commit/00a7e5ea1e51f58180cd7aa4028e998949a36d66
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M include/crypto/dso_conf.h.in
M include/openssl/asn1.h.in
M include/openssl/asn1t.h.in
M include/openssl/bio.h.in
M include/openssl/cmp.h.in
M include/openssl/cms.h.in
M include/openssl/comp.h.in
M include/openssl/conf.h.in
M include/openssl/configuration.h.in
M include/openssl/core_names.h.in
M include/openssl/crmf.h.in
M include/openssl/crypto.h.in
M include/openssl/ct.h.in
M include/openssl/err.h.in
M include/openssl/ess.h.in
M include/openssl/fipskey.h.in
M include/openssl/lhash.h.in
M include/openssl/ocsp.h.in
M include/openssl/opensslv.h.in
M include/openssl/pkcs12.h.in
M include/openssl/pkcs7.h.in
M include/openssl/safestack.h.in
M include/openssl/srp.h.in
M include/openssl/ssl.h.in
M include/openssl/ui.h.in
M include/openssl/x509.h.in
M include/openssl/x509_acert.h.in
M include/openssl/x509_vfy.h.in
M include/openssl/x509v3.h.in
M providers/common/der/der_digests_gen.c.in
M providers/common/der/der_dsa_gen.c.in
M providers/common/der/der_ec_gen.c.in
M providers/common/der/der_ecx_gen.c.in
M providers/common/der/der_hkdf_gen.c.in
M providers/common/der/der_ml_dsa_gen.c.in
M providers/common/der/der_rsa_gen.c.in
M providers/common/der/der_slh_dsa_gen.c.in
M providers/common/der/der_sm2_gen.c.in
M providers/common/der/der_wrap_gen.c.in
M providers/common/include/prov/der_digests.h.in
M providers/common/include/prov/der_dsa.h.in
M providers/common/include/prov/der_ec.h.in
M providers/common/include/prov/der_ecx.h.in
M providers/common/include/prov/der_hkdf.h.in
M providers/common/include/prov/der_ml_dsa.h.in
M providers/common/include/prov/der_rsa.h.in
M providers/common/include/prov/der_slh_dsa.h.in
M providers/common/include/prov/der_sm2.h.in
M providers/common/include/prov/der_wrap.h.in
Log Message:
-----------
4.0-PRE-CLANG-FORMAT-WEBKIT
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29242)
Commit: 2fab90bb5e1937f1c2125eab144f7f6c39e70087
https://github.com/openssl/openssl/commit/2fab90bb5e1937f1c2125eab144f7f6c39e70087
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M apps/asn1parse.c
M apps/ca.c
M apps/ciphers.c
M apps/cmp.c
M apps/cms.c
M apps/configutl.c
M apps/crl.c
M apps/crl2pkcs7.c
M apps/dgst.c
M apps/dhparam.c
M apps/dsa.c
M apps/dsaparam.c
M apps/ec.c
M apps/ecparam.c
M apps/enc.c
M apps/errstr.c
M apps/fipsinstall.c
M apps/gendsa.c
M apps/genpkey.c
M apps/genrsa.c
M apps/include/app_libctx.h
M apps/include/app_params.h
M apps/include/apps.h
M apps/include/apps_ui.h
M apps/include/cmp_mock_srv.h
M apps/include/fmt.h
M apps/include/function.h
M apps/include/http_server.h
M apps/include/log.h
M apps/include/names.h
M apps/include/opt.h
M apps/include/platform.h
M apps/include/s_apps.h
M apps/include/vms_term_sock.h
M apps/info.c
M apps/kdf.c
M apps/lib/app_libctx.c
M apps/lib/app_params.c
M apps/lib/app_provider.c
M apps/lib/app_rand.c
M apps/lib/app_x509.c
M apps/lib/apps.c
M apps/lib/apps_opt_printf.c
M apps/lib/apps_ui.c
M apps/lib/cmp_mock_srv.c
M apps/lib/columns.c
M apps/lib/http_server.c
M apps/lib/log.c
M apps/lib/names.c
M apps/lib/opt.c
M apps/lib/s_cb.c
M apps/lib/s_socket.c
M apps/lib/tlssrp_depr.c
M apps/lib/vms_decc_argv.c
M apps/lib/vms_term_sock.c
M apps/lib/win32_init.c
M apps/list.c
M apps/mac.c
M apps/nseq.c
M apps/ocsp.c
M apps/openssl.c
M apps/passwd.c
M apps/pkcs12.c
M apps/pkcs7.c
M apps/pkcs8.c
M apps/pkey.c
M apps/pkeyparam.c
M apps/pkeyutl.c
M apps/prime.c
M apps/rand.c
M apps/rehash.c
M apps/req.c
M apps/rsa.c
M apps/rsautl.c
M apps/s_client.c
M apps/s_server.c
M apps/s_time.c
M apps/sess_id.c
M apps/skeyutl.c
M apps/smime.c
M apps/speed.c
M apps/spkac.c
M apps/srp.c
M apps/storeutl.c
M apps/testdsa.h
M apps/testrsa.h
M apps/timeouts.h
M apps/ts.c
M apps/verify.c
M apps/version.c
M apps/vms_decc_init.c
M apps/x509.c
M crypto/LPdir_nyi.c
M crypto/LPdir_unix.c
M crypto/LPdir_vms.c
M crypto/LPdir_win.c
M crypto/aes/aes_cbc.c
M crypto/aes/aes_cfb.c
M crypto/aes/aes_core.c
M crypto/aes/aes_ecb.c
M crypto/aes/aes_ige.c
M crypto/aes/aes_local.h
M crypto/aes/aes_misc.c
M crypto/aes/aes_ofb.c
M crypto/aes/aes_wrap.c
M crypto/aes/aes_x86core.c
M crypto/aligned_alloc.c
M crypto/aria/aria.c
M crypto/arm_arch.h
M crypto/armcap.c
M crypto/array_alloc.c
M crypto/asn1/a_bitstr.c
M crypto/asn1/a_d2i_fp.c
M crypto/asn1/a_digest.c
M crypto/asn1/a_dup.c
M crypto/asn1/a_gentm.c
M crypto/asn1/a_i2d_fp.c
M crypto/asn1/a_int.c
M crypto/asn1/a_mbstr.c
M crypto/asn1/a_object.c
M crypto/asn1/a_octet.c
M crypto/asn1/a_print.c
M crypto/asn1/a_sign.c
M crypto/asn1/a_strex.c
M crypto/asn1/a_strnid.c
M crypto/asn1/a_time.c
M crypto/asn1/a_time_posix.c
M crypto/asn1/a_type.c
M crypto/asn1/a_utctm.c
M crypto/asn1/a_utf8.c
M crypto/asn1/a_verify.c
M crypto/asn1/ameth_lib.c
M crypto/asn1/asn1_err.c
M crypto/asn1/asn1_gen.c
M crypto/asn1/asn1_item_list.h
M crypto/asn1/asn1_lib.c
M crypto/asn1/asn1_local.h
M crypto/asn1/asn1_parse.c
M crypto/asn1/asn_mime.c
M crypto/asn1/asn_mstbl.c
M crypto/asn1/asn_pack.c
M crypto/asn1/bio_asn1.c
M crypto/asn1/bio_ndef.c
M crypto/asn1/d2i_param.c
M crypto/asn1/d2i_pr.c
M crypto/asn1/d2i_pu.c
M crypto/asn1/evp_asn1.c
M crypto/asn1/f_int.c
M crypto/asn1/f_string.c
M crypto/asn1/i2d_evp.c
M crypto/asn1/n_pkey.c
M crypto/asn1/nsseq.c
M crypto/asn1/p5_pbe.c
M crypto/asn1/p5_pbev2.c
M crypto/asn1/p5_scrypt.c
M crypto/asn1/p8_pkey.c
M crypto/asn1/t_bitst.c
M crypto/asn1/t_pkey.c
M crypto/asn1/t_spki.c
M crypto/asn1/tasn_dec.c
M crypto/asn1/tasn_enc.c
M crypto/asn1/tasn_new.c
M crypto/asn1/tasn_prn.c
M crypto/asn1/tasn_scn.c
M crypto/asn1/tasn_typ.c
M crypto/asn1/tasn_utl.c
M crypto/asn1/tbl_standard.h
M crypto/asn1/x_algor.c
M crypto/asn1/x_bignum.c
M crypto/asn1/x_int64.c
M crypto/asn1/x_long.c
M crypto/asn1/x_sig.c
M crypto/asn1/x_spki.c
M crypto/asn1/x_val.c
M crypto/asn1_dsa.c
M crypto/async/arch/async_null.c
M crypto/async/arch/async_null.h
M crypto/async/arch/async_posix.c
M crypto/async/arch/async_posix.h
M crypto/async/arch/async_win.c
M crypto/async/arch/async_win.h
M crypto/async/async.c
M crypto/async/async_err.c
M crypto/async/async_local.h
M crypto/async/async_wait.c
M crypto/bf/bf_cfb64.c
M crypto/bf/bf_ecb.c
M crypto/bf/bf_enc.c
M crypto/bf/bf_local.h
M crypto/bf/bf_ofb64.c
M crypto/bf/bf_pi.h
M crypto/bio/bf_buff.c
M crypto/bio/bf_lbuf.c
M crypto/bio/bf_prefix.c
M crypto/bio/bf_readbuff.c
M crypto/bio/bio_addr.c
M crypto/bio/bio_cb.c
M crypto/bio/bio_dump.c
M crypto/bio/bio_err.c
M crypto/bio/bio_lib.c
M crypto/bio/bio_local.h
M crypto/bio/bio_meth.c
M crypto/bio/bio_print.c
M crypto/bio/bio_sock.c
M crypto/bio/bio_sock2.c
M crypto/bio/bss_acpt.c
M crypto/bio/bss_bio.c
M crypto/bio/bss_conn.c
M crypto/bio/bss_core.c
M crypto/bio/bss_dgram.c
M crypto/bio/bss_dgram_pair.c
M crypto/bio/bss_fd.c
M crypto/bio/bss_file.c
M crypto/bio/bss_log.c
M crypto/bio/bss_mem.c
M crypto/bio/bss_null.c
M crypto/bio/bss_sock.c
M crypto/bio/ossl_core_bio.c
M crypto/bn/asm/x86_64-gcc.c
M crypto/bn/bn_add.c
M crypto/bn/bn_asm.c
M crypto/bn/bn_blind.c
M crypto/bn/bn_const.c
M crypto/bn/bn_conv.c
M crypto/bn/bn_ctx.c
M crypto/bn/bn_depr.c
M crypto/bn/bn_dh.c
M crypto/bn/bn_div.c
M crypto/bn/bn_err.c
M crypto/bn/bn_exp.c
M crypto/bn/bn_exp2.c
M crypto/bn/bn_gcd.c
M crypto/bn/bn_gf2m.c
M crypto/bn/bn_intern.c
M crypto/bn/bn_kron.c
M crypto/bn/bn_lib.c
M crypto/bn/bn_local.h
M crypto/bn/bn_mod.c
M crypto/bn/bn_mont.c
M crypto/bn/bn_mpi.c
M crypto/bn/bn_mul.c
M crypto/bn/bn_nist.c
M crypto/bn/bn_ppc.c
M crypto/bn/bn_prime.c
M crypto/bn/bn_print.c
M crypto/bn/bn_rand.c
M crypto/bn/bn_recp.c
M crypto/bn/bn_rsa_fips186_5.c
M crypto/bn/bn_s390x.c
M crypto/bn/bn_shift.c
M crypto/bn/bn_sparc.c
M crypto/bn/bn_sqr.c
M crypto/bn/bn_sqrt.c
M crypto/bn/bn_srp.c
M crypto/bn/bn_word.c
M crypto/bn/bn_x931p.c
M crypto/bn/rsaz_exp.c
M crypto/bn/rsaz_exp.h
M crypto/bn/rsaz_exp_x2.c
M crypto/bsearch.c
M crypto/buffer/buf_err.c
M crypto/camellia/camellia.c
M crypto/camellia/cmll_cbc.c
M crypto/camellia/cmll_cfb.c
M crypto/camellia/cmll_ctr.c
M crypto/camellia/cmll_ecb.c
M crypto/camellia/cmll_local.h
M crypto/camellia/cmll_misc.c
M crypto/camellia/cmll_ofb.c
M crypto/cast/c_cfb64.c
M crypto/cast/c_ecb.c
M crypto/cast/c_enc.c
M crypto/cast/c_ofb64.c
M crypto/cast/c_skey.c
M crypto/cast/cast_local.h
M crypto/cast/cast_s.h
M crypto/chacha/chacha_enc.c
M crypto/chacha/chacha_ppc.c
M crypto/chacha/chacha_riscv.c
M crypto/cmac/cmac.c
M crypto/cmp/cmp_asn.c
M crypto/cmp/cmp_client.c
M crypto/cmp/cmp_ctx.c
M crypto/cmp/cmp_err.c
M crypto/cmp/cmp_genm.c
M crypto/cmp/cmp_hdr.c
M crypto/cmp/cmp_http.c
M crypto/cmp/cmp_local.h
M crypto/cmp/cmp_msg.c
M crypto/cmp/cmp_protect.c
M crypto/cmp/cmp_server.c
M crypto/cmp/cmp_status.c
M crypto/cmp/cmp_util.c
M crypto/cmp/cmp_vfy.c
M crypto/cms/cms_asn1.c
M crypto/cms/cms_att.c
M crypto/cms/cms_cd.c
M crypto/cms/cms_dd.c
M crypto/cms/cms_dh.c
M crypto/cms/cms_ec.c
M crypto/cms/cms_enc.c
M crypto/cms/cms_env.c
M crypto/cms/cms_err.c
M crypto/cms/cms_ess.c
M crypto/cms/cms_io.c
M crypto/cms/cms_kari.c
M crypto/cms/cms_kem.c
M crypto/cms/cms_kemri.c
M crypto/cms/cms_lib.c
M crypto/cms/cms_local.h
M crypto/cms/cms_pwri.c
M crypto/cms/cms_rsa.c
M crypto/cms/cms_sd.c
M crypto/cms/cms_smime.c
M crypto/comp/c_brotli.c
M crypto/comp/c_zlib.c
M crypto/comp/c_zstd.c
M crypto/comp/comp_err.c
M crypto/comp/comp_lib.c
M crypto/comp/comp_local.h
M crypto/comp_methods.c
M crypto/conf/conf_api.c
M crypto/conf/conf_def.c
M crypto/conf/conf_err.c
M crypto/conf/conf_lib.c
M crypto/conf/conf_mod.c
M crypto/conf/conf_sap.c
M crypto/conf/conf_ssl.c
M crypto/context.c
M crypto/core_algorithm.c
M crypto/core_fetch.c
M crypto/core_namemap.c
M crypto/cpt_err.c
M crypto/cpuid.c
M crypto/crmf/crmf_asn.c
M crypto/crmf/crmf_err.c
M crypto/crmf/crmf_lib.c
M crypto/crmf/crmf_local.h
M crypto/crmf/crmf_pbm.c
M crypto/cryptlib.c
M crypto/ct/ct_b64.c
M crypto/ct/ct_err.c
M crypto/ct/ct_local.h
M crypto/ct/ct_log.c
M crypto/ct/ct_oct.c
M crypto/ct/ct_policy.c
M crypto/ct/ct_prn.c
M crypto/ct/ct_sct.c
M crypto/ct/ct_sct_ctx.c
M crypto/ct/ct_vfy.c
M crypto/ct/ct_x509v3.c
M crypto/ctype.c
M crypto/cversion.c
M crypto/defaults.c
M crypto/der_writer.c
M crypto/des/cbc_cksm.c
M crypto/des/cfb64ede.c
M crypto/des/cfb64enc.c
M crypto/des/cfb_enc.c
M crypto/des/des_enc.c
M crypto/des/des_local.h
M crypto/des/ecb3_enc.c
M crypto/des/ecb_enc.c
M crypto/des/fcrypt.c
M crypto/des/fcrypt_b.c
M crypto/des/ncbc_enc.c
M crypto/des/ofb64ede.c
M crypto/des/ofb64enc.c
M crypto/des/ofb_enc.c
M crypto/des/pcbc_enc.c
M crypto/des/qud_cksm.c
M crypto/des/set_key.c
M crypto/des/spr.h
M crypto/des/xcbc_enc.c
M crypto/deterministic_nonce.c
M crypto/dh/dh_ameth.c
M crypto/dh/dh_asn1.c
M crypto/dh/dh_backend.c
M crypto/dh/dh_check.c
M crypto/dh/dh_depr.c
M crypto/dh/dh_err.c
M crypto/dh/dh_gen.c
M crypto/dh/dh_group_params.c
M crypto/dh/dh_kdf.c
M crypto/dh/dh_key.c
M crypto/dh/dh_lib.c
M crypto/dh/dh_local.h
M crypto/dh/dh_meth.c
M crypto/dh/dh_pmeth.c
M crypto/dh/dh_rfc5114.c
M crypto/dllmain.c
M crypto/dsa/dsa_ameth.c
M crypto/dsa/dsa_asn1.c
M crypto/dsa/dsa_backend.c
M crypto/dsa/dsa_check.c
M crypto/dsa/dsa_depr.c
M crypto/dsa/dsa_err.c
M crypto/dsa/dsa_gen.c
M crypto/dsa/dsa_key.c
M crypto/dsa/dsa_lib.c
M crypto/dsa/dsa_local.h
M crypto/dsa/dsa_meth.c
M crypto/dsa/dsa_ossl.c
M crypto/dsa/dsa_pmeth.c
M crypto/dsa/dsa_sign.c
M crypto/dsa/dsa_vrf.c
M crypto/dso/dso_dl.c
M crypto/dso/dso_dlfcn.c
M crypto/dso/dso_err.c
M crypto/dso/dso_lib.c
M crypto/dso/dso_local.h
M crypto/dso/dso_vms.c
M crypto/dso/dso_win32.c
M crypto/ebcdic.c
M crypto/ec/curve25519.c
M crypto/ec/curve448/arch_32/arch_intrinsics.h
M crypto/ec/curve448/arch_32/f_impl.h
M crypto/ec/curve448/arch_32/f_impl32.c
M crypto/ec/curve448/arch_64/arch_intrinsics.h
M crypto/ec/curve448/arch_64/f_impl.h
M crypto/ec/curve448/arch_64/f_impl64.c
M crypto/ec/curve448/curve448.c
M crypto/ec/curve448/curve448_local.h
M crypto/ec/curve448/curve448_tables.c
M crypto/ec/curve448/curve448utils.h
M crypto/ec/curve448/ed448.h
M crypto/ec/curve448/eddsa.c
M crypto/ec/curve448/f_generic.c
M crypto/ec/curve448/field.h
M crypto/ec/curve448/point_448.h
M crypto/ec/curve448/scalar.c
M crypto/ec/curve448/word.h
M crypto/ec/ec2_oct.c
M crypto/ec/ec2_smpl.c
M crypto/ec/ec_ameth.c
M crypto/ec/ec_asn1.c
M crypto/ec/ec_backend.c
M crypto/ec/ec_check.c
M crypto/ec/ec_curve.c
M crypto/ec/ec_cvt.c
M crypto/ec/ec_deprecated.c
M crypto/ec/ec_err.c
M crypto/ec/ec_key.c
M crypto/ec/ec_kmeth.c
M crypto/ec/ec_lib.c
M crypto/ec/ec_local.h
M crypto/ec/ec_mult.c
M crypto/ec/ec_oct.c
M crypto/ec/ec_pmeth.c
M crypto/ec/ec_print.c
M crypto/ec/ecdh_kdf.c
M crypto/ec/ecdh_ossl.c
M crypto/ec/ecdsa_ossl.c
M crypto/ec/ecdsa_sign.c
M crypto/ec/ecdsa_vrf.c
M crypto/ec/eck_prn.c
M crypto/ec/ecp_mont.c
M crypto/ec/ecp_nist.c
M crypto/ec/ecp_nistp224.c
M crypto/ec/ecp_nistp256.c
M crypto/ec/ecp_nistp384.c
M crypto/ec/ecp_nistp521.c
M crypto/ec/ecp_nistputil.c
M crypto/ec/ecp_nistz256.c
M crypto/ec/ecp_nistz256_table.c
M crypto/ec/ecp_oct.c
M crypto/ec/ecp_ppc.c
M crypto/ec/ecp_s390x_nistp.c
M crypto/ec/ecp_sm2p256.c
M crypto/ec/ecp_sm2p256_table.c
M crypto/ec/ecp_smpl.c
M crypto/ec/ecx_backend.c
M crypto/ec/ecx_backend.h
M crypto/ec/ecx_key.c
M crypto/ec/ecx_meth.c
M crypto/ec/ecx_s390x.c
M crypto/encode_decode/decoder_err.c
M crypto/encode_decode/decoder_lib.c
M crypto/encode_decode/decoder_meth.c
M crypto/encode_decode/decoder_pkey.c
M crypto/encode_decode/encoder_err.c
M crypto/encode_decode/encoder_lib.c
M crypto/encode_decode/encoder_local.h
M crypto/encode_decode/encoder_meth.c
M crypto/encode_decode/encoder_pkey.c
M crypto/err/err.c
M crypto/err/err_all.c
M crypto/err/err_all_legacy.c
M crypto/err/err_local.h
M crypto/err/err_mark.c
M crypto/err/err_prn.c
M crypto/err/err_save.c
M crypto/ess/ess_asn1.c
M crypto/ess/ess_err.c
M crypto/ess/ess_lib.c
M crypto/evp/asymcipher.c
M crypto/evp/bio_b64.c
M crypto/evp/bio_enc.c
M crypto/evp/bio_md.c
M crypto/evp/bio_ok.c
M crypto/evp/c_allc.c
M crypto/evp/cmeth_lib.c
M crypto/evp/ctrl_params_translate.c
M crypto/evp/dh_ctrl.c
M crypto/evp/dh_support.c
M crypto/evp/digest.c
M crypto/evp/dsa_ctrl.c
M crypto/evp/e_aes.c
M crypto/evp/e_aes_cbc_hmac_sha1.c
M crypto/evp/e_aes_cbc_hmac_sha256.c
M crypto/evp/e_aria.c
M crypto/evp/e_bf.c
M crypto/evp/e_camellia.c
M crypto/evp/e_cast.c
M crypto/evp/e_chacha20_poly1305.c
M crypto/evp/e_des.c
M crypto/evp/e_des3.c
M crypto/evp/e_idea.c
M crypto/evp/e_null.c
M crypto/evp/e_old.c
M crypto/evp/e_rc2.c
M crypto/evp/e_rc4.c
M crypto/evp/e_rc4_hmac_md5.c
M crypto/evp/e_rc5.c
M crypto/evp/e_seed.c
M crypto/evp/e_sm4.c
M crypto/evp/e_xcbc_d.c
M crypto/evp/ec_ctrl.c
M crypto/evp/ec_support.c
M crypto/evp/encode.c
M crypto/evp/evp_cnf.c
M crypto/evp/evp_enc.c
M crypto/evp/evp_err.c
M crypto/evp/evp_fetch.c
M crypto/evp/evp_key.c
M crypto/evp/evp_lib.c
M crypto/evp/evp_local.h
M crypto/evp/evp_pbe.c
M crypto/evp/evp_pkey.c
M crypto/evp/evp_pkey_type.c
M crypto/evp/evp_rand.c
M crypto/evp/evp_utils.c
M crypto/evp/exchange.c
M crypto/evp/kdf_lib.c
M crypto/evp/kdf_meth.c
M crypto/evp/kem.c
M crypto/evp/keymgmt_lib.c
M crypto/evp/keymgmt_meth.c
M crypto/evp/legacy_blake2.c
M crypto/evp/legacy_md5_sha1.c
M crypto/evp/legacy_mdc2.c
M crypto/evp/legacy_meth.h
M crypto/evp/legacy_ripemd.c
M crypto/evp/legacy_sha.c
M crypto/evp/legacy_wp.c
M crypto/evp/m_sigver.c
M crypto/evp/mac_lib.c
M crypto/evp/mac_meth.c
M crypto/evp/names.c
M crypto/evp/p5_crpt.c
M crypto/evp/p5_crpt2.c
M crypto/evp/p_dec.c
M crypto/evp/p_enc.c
M crypto/evp/p_lib.c
M crypto/evp/p_open.c
M crypto/evp/p_seal.c
M crypto/evp/p_sign.c
M crypto/evp/p_verify.c
M crypto/evp/pbe_scrypt.c
M crypto/evp/pmeth_check.c
M crypto/evp/pmeth_gn.c
M crypto/evp/pmeth_lib.c
M crypto/evp/s_lib.c
M crypto/evp/signature.c
M crypto/evp/skeymgmt_meth.c
M crypto/ex_data.c
M crypto/ffc/ffc_backend.c
M crypto/ffc/ffc_dh.c
M crypto/ffc/ffc_key_generate.c
M crypto/ffc/ffc_key_validate.c
M crypto/ffc/ffc_params.c
M crypto/ffc/ffc_params_generate.c
M crypto/ffc/ffc_params_validate.c
M crypto/getenv.c
M crypto/hashtable/hashtable.c
M crypto/hmac/hmac.c
M crypto/hmac/hmac_local.h
M crypto/hmac/hmac_s390x.c
M crypto/hpke/hpke.c
M crypto/hpke/hpke_util.c
M crypto/http/http_client.c
M crypto/http/http_err.c
M crypto/http/http_lib.c
M crypto/idea/i_cbc.c
M crypto/idea/i_cfb64.c
M crypto/idea/i_ecb.c
M crypto/idea/i_ofb64.c
M crypto/idea/idea_local.h
M crypto/indicator_core.c
M crypto/info.c
M crypto/init.c
M crypto/initthread.c
M crypto/lhash/lh_stats.c
M crypto/lhash/lhash.c
M crypto/lhash/lhash_local.h
M crypto/lms/lm_ots_params.c
M crypto/lms/lm_ots_verify.c
M crypto/lms/lms_key.c
M crypto/lms/lms_params.c
M crypto/lms/lms_pubkey_decode.c
M crypto/lms/lms_sig_decoder.c
M crypto/lms/lms_verify.c
M crypto/loongarch_arch.h
M crypto/md2/md2_dgst.c
M crypto/md4/md4_dgst.c
M crypto/md4/md4_local.h
M crypto/md4/md4_one.c
M crypto/md5/md5_dgst.c
M crypto/md5/md5_local.h
M crypto/md5/md5_one.c
M crypto/mdc2/mdc2dgst.c
M crypto/mem.c
M crypto/mem_sec.c
M crypto/mips_arch.h
M crypto/ml_dsa/ml_dsa_encoders.c
M crypto/ml_dsa/ml_dsa_hash.h
M crypto/ml_dsa/ml_dsa_key.c
M crypto/ml_dsa/ml_dsa_key.h
M crypto/ml_dsa/ml_dsa_key_compress.c
M crypto/ml_dsa/ml_dsa_local.h
M crypto/ml_dsa/ml_dsa_matrix.c
M crypto/ml_dsa/ml_dsa_matrix.h
M crypto/ml_dsa/ml_dsa_ntt.c
M crypto/ml_dsa/ml_dsa_params.c
M crypto/ml_dsa/ml_dsa_poly.h
M crypto/ml_dsa/ml_dsa_sample.c
M crypto/ml_dsa/ml_dsa_sign.c
M crypto/ml_dsa/ml_dsa_vector.h
M crypto/ml_kem/ml_kem.c
M crypto/modes/cbc128.c
M crypto/modes/ccm128.c
M crypto/modes/cfb128.c
M crypto/modes/ctr128.c
M crypto/modes/cts128.c
M crypto/modes/gcm128.c
M crypto/modes/ocb128.c
M crypto/modes/ofb128.c
M crypto/modes/siv128.c
M crypto/modes/wrap128.c
M crypto/modes/xts128.c
M crypto/modes/xts128gb.c
M crypto/o_fopen.c
M crypto/o_str.c
M crypto/objects/o_names.c
M crypto/objects/obj_compat.h
M crypto/objects/obj_dat.c
M crypto/objects/obj_err.c
M crypto/objects/obj_lib.c
M crypto/objects/obj_xref.c
M crypto/ocsp/ocsp_asn.c
M crypto/ocsp/ocsp_cl.c
M crypto/ocsp/ocsp_err.c
M crypto/ocsp/ocsp_ext.c
M crypto/ocsp/ocsp_http.c
M crypto/ocsp/ocsp_lib.c
M crypto/ocsp/ocsp_local.h
M crypto/ocsp/ocsp_prn.c
M crypto/ocsp/ocsp_srv.c
M crypto/ocsp/ocsp_vfy.c
M crypto/ocsp/v3_ocsp.c
M crypto/packet.c
M crypto/param_build.c
M crypto/param_build_set.c
M crypto/params.c
M crypto/params_dup.c
M crypto/params_from_text.c
M crypto/passphrase.c
M crypto/pem/pem_all.c
M crypto/pem/pem_err.c
M crypto/pem/pem_info.c
M crypto/pem/pem_lib.c
M crypto/pem/pem_local.h
M crypto/pem/pem_oth.c
M crypto/pem/pem_pk8.c
M crypto/pem/pem_pkey.c
M crypto/pem/pem_sign.c
M crypto/pem/pvkfmt.c
M crypto/pkcs12/p12_add.c
M crypto/pkcs12/p12_asn.c
M crypto/pkcs12/p12_attr.c
M crypto/pkcs12/p12_crpt.c
M crypto/pkcs12/p12_crt.c
M crypto/pkcs12/p12_decr.c
M crypto/pkcs12/p12_init.c
M crypto/pkcs12/p12_key.c
M crypto/pkcs12/p12_kiss.c
M crypto/pkcs12/p12_local.h
M crypto/pkcs12/p12_mutl.c
M crypto/pkcs12/p12_npas.c
M crypto/pkcs12/p12_p8d.c
M crypto/pkcs12/p12_p8e.c
M crypto/pkcs12/p12_sbag.c
M crypto/pkcs12/p12_utl.c
M crypto/pkcs12/pk12err.c
M crypto/pkcs7/pk7_asn1.c
M crypto/pkcs7/pk7_attr.c
M crypto/pkcs7/pk7_doit.c
M crypto/pkcs7/pk7_lib.c
M crypto/pkcs7/pk7_mime.c
M crypto/pkcs7/pk7_smime.c
M crypto/pkcs7/pkcs7err.c
M crypto/poly1305/poly1305.c
M crypto/poly1305/poly1305_base2_44.c
M crypto/poly1305/poly1305_ieee754.c
M crypto/poly1305/poly1305_ppc.c
M crypto/ppccap.c
M crypto/property/defn_cache.c
M crypto/property/property.c
M crypto/property/property_err.c
M crypto/property/property_local.h
M crypto/property/property_parse.c
M crypto/property/property_query.c
M crypto/property/property_string.c
M crypto/provider.c
M crypto/provider_child.c
M crypto/provider_conf.c
M crypto/provider_core.c
M crypto/provider_local.h
M crypto/provider_predefined.c
M crypto/punycode.c
M crypto/quic_vlint.c
M crypto/rand/prov_seed.c
M crypto/rand/rand_deprecated.c
M crypto/rand/rand_egd.c
M crypto/rand/rand_err.c
M crypto/rand/rand_lib.c
M crypto/rand/rand_local.h
M crypto/rand/rand_meth.c
M crypto/rand/rand_pool.c
M crypto/rand/rand_uniform.c
M crypto/rand/randfile.c
M crypto/rc2/rc2_cbc.c
M crypto/rc2/rc2_ecb.c
M crypto/rc2/rc2_local.h
M crypto/rc2/rc2_skey.c
M crypto/rc2/rc2cfb64.c
M crypto/rc2/rc2ofb64.c
M crypto/rc4/rc4_enc.c
M crypto/rc4/rc4_local.h
M crypto/rc4/rc4_skey.c
M crypto/rc5/rc5_ecb.c
M crypto/rc5/rc5_enc.c
M crypto/rc5/rc5_local.h
M crypto/rc5/rc5_skey.c
M crypto/rc5/rc5cfb64.c
M crypto/rc5/rc5ofb64.c
M crypto/rcu_internal.h
M crypto/ripemd/rmd_dgst.c
M crypto/ripemd/rmd_local.h
M crypto/ripemd/rmdconst.h
M crypto/riscvcap.c
M crypto/rsa/rsa_acvp_test_params.c
M crypto/rsa/rsa_ameth.c
M crypto/rsa/rsa_asn1.c
M crypto/rsa/rsa_backend.c
M crypto/rsa/rsa_chk.c
M crypto/rsa/rsa_crpt.c
M crypto/rsa/rsa_depr.c
M crypto/rsa/rsa_err.c
M crypto/rsa/rsa_gen.c
M crypto/rsa/rsa_lib.c
M crypto/rsa/rsa_local.h
M crypto/rsa/rsa_meth.c
M crypto/rsa/rsa_mp.c
M crypto/rsa/rsa_none.c
M crypto/rsa/rsa_oaep.c
M crypto/rsa/rsa_ossl.c
M crypto/rsa/rsa_pk1.c
M crypto/rsa/rsa_pmeth.c
M crypto/rsa/rsa_pss.c
M crypto/rsa/rsa_saos.c
M crypto/rsa/rsa_schemes.c
M crypto/rsa/rsa_sign.c
M crypto/rsa/rsa_sp800_56b_check.c
M crypto/rsa/rsa_sp800_56b_gen.c
M crypto/rsa/rsa_x931.c
M crypto/rsa/rsa_x931g.c
M crypto/s390x_arch.h
M crypto/s390xcap.c
M crypto/seed/seed.c
M crypto/seed/seed_cbc.c
M crypto/seed/seed_cfb.c
M crypto/seed/seed_ecb.c
M crypto/seed/seed_local.h
M crypto/seed/seed_ofb.c
M crypto/self_test_core.c
M crypto/sha/keccak1600.c
M crypto/sha/sha256.c
M crypto/sha/sha3.c
M crypto/sha/sha512.c
M crypto/sha/sha_local.h
M crypto/sha/sha_ppc.c
M crypto/sha/sha_riscv.c
M crypto/siphash/siphash.c
M crypto/sleep.c
M crypto/slh_dsa/slh_adrs.c
M crypto/slh_dsa/slh_adrs.h
M crypto/slh_dsa/slh_dsa.c
M crypto/slh_dsa/slh_dsa_hash_ctx.c
M crypto/slh_dsa/slh_dsa_key.c
M crypto/slh_dsa/slh_dsa_key.h
M crypto/slh_dsa/slh_dsa_local.h
M crypto/slh_dsa/slh_fors.c
M crypto/slh_dsa/slh_hash.c
M crypto/slh_dsa/slh_hash.h
M crypto/slh_dsa/slh_hypertree.c
M crypto/slh_dsa/slh_params.c
M crypto/slh_dsa/slh_params.h
M crypto/slh_dsa/slh_wots.c
M crypto/slh_dsa/slh_xmss.c
M crypto/sm2/sm2_crypt.c
M crypto/sm2/sm2_err.c
M crypto/sm2/sm2_key.c
M crypto/sm2/sm2_sign.c
M crypto/sm3/legacy_sm3.c
M crypto/sm3/sm3.c
M crypto/sm3/sm3_local.h
M crypto/sm4/sm4.c
M crypto/sparcv9cap.c
M crypto/sparse_array.c
M crypto/srp/srp_lib.c
M crypto/srp/srp_vfy.c
M crypto/ssl_err.c
M crypto/sslerr.h
M crypto/stack/stack.c
M crypto/store/store_err.c
M crypto/store/store_lib.c
M crypto/store/store_local.h
M crypto/store/store_meth.c
M crypto/store/store_register.c
M crypto/store/store_result.c
M crypto/store/store_strings.c
M crypto/thread/arch.c
M crypto/thread/arch/thread_none.c
M crypto/thread/arch/thread_posix.c
M crypto/thread/arch/thread_win.c
M crypto/thread/internal.c
M crypto/threads_common.c
M crypto/threads_lib.c
M crypto/threads_none.c
M crypto/threads_pthread.c
M crypto/threads_win.c
M crypto/time.c
M crypto/trace.c
M crypto/ts/ts_asn1.c
M crypto/ts/ts_conf.c
M crypto/ts/ts_err.c
M crypto/ts/ts_lib.c
M crypto/ts/ts_local.h
M crypto/ts/ts_req_print.c
M crypto/ts/ts_rsp_print.c
M crypto/ts/ts_rsp_sign.c
M crypto/ts/ts_rsp_verify.c
M crypto/ts/ts_verify_ctx.c
M crypto/txt_db/txt_db.c
M crypto/ui/ui_err.c
M crypto/ui/ui_lib.c
M crypto/ui/ui_local.h
M crypto/ui/ui_null.c
M crypto/ui/ui_openssl.c
M crypto/ui/ui_util.c
M crypto/uid.c
M crypto/vms_rms.h
M crypto/whrlpool/wp_block.c
M crypto/whrlpool/wp_dgst.c
M crypto/x509/by_dir.c
M crypto/x509/by_file.c
M crypto/x509/by_store.c
M crypto/x509/pcy_cache.c
M crypto/x509/pcy_data.c
M crypto/x509/pcy_lib.c
M crypto/x509/pcy_local.h
M crypto/x509/pcy_map.c
M crypto/x509/pcy_node.c
M crypto/x509/pcy_tree.c
M crypto/x509/standard_exts.h
M crypto/x509/t_acert.c
M crypto/x509/t_crl.c
M crypto/x509/t_req.c
M crypto/x509/t_x509.c
M crypto/x509/v3_aaa.c
M crypto/x509/v3_ac_tgt.c
M crypto/x509/v3_addr.c
M crypto/x509/v3_admis.c
M crypto/x509/v3_admis.h
M crypto/x509/v3_akeya.c
M crypto/x509/v3_akid.c
M crypto/x509/v3_asid.c
M crypto/x509/v3_attrdesc.c
M crypto/x509/v3_attrmap.c
M crypto/x509/v3_authattid.c
M crypto/x509/v3_battcons.c
M crypto/x509/v3_bcons.c
M crypto/x509/v3_bitst.c
M crypto/x509/v3_conf.c
M crypto/x509/v3_cpols.c
M crypto/x509/v3_crld.c
M crypto/x509/v3_enum.c
M crypto/x509/v3_extku.c
M crypto/x509/v3_genn.c
M crypto/x509/v3_group_ac.c
M crypto/x509/v3_ia5.c
M crypto/x509/v3_ind_iss.c
M crypto/x509/v3_info.c
M crypto/x509/v3_int.c
M crypto/x509/v3_iobo.c
M crypto/x509/v3_ist.c
M crypto/x509/v3_lib.c
M crypto/x509/v3_ncons.c
M crypto/x509/v3_no_ass.c
M crypto/x509/v3_no_rev_avail.c
M crypto/x509/v3_pci.c
M crypto/x509/v3_pcia.c
M crypto/x509/v3_pcons.c
M crypto/x509/v3_pku.c
M crypto/x509/v3_pmaps.c
M crypto/x509/v3_prn.c
M crypto/x509/v3_purp.c
M crypto/x509/v3_rolespec.c
M crypto/x509/v3_san.c
M crypto/x509/v3_sda.c
M crypto/x509/v3_single_use.c
M crypto/x509/v3_skid.c
M crypto/x509/v3_soa_id.c
M crypto/x509/v3_sxnet.c
M crypto/x509/v3_timespec.c
M crypto/x509/v3_tlsf.c
M crypto/x509/v3_usernotice.c
M crypto/x509/v3_utf8.c
M crypto/x509/v3_utl.c
M crypto/x509/v3err.c
M crypto/x509/x509_acert.c
M crypto/x509/x509_acert.h
M crypto/x509/x509_att.c
M crypto/x509/x509_cmp.c
M crypto/x509/x509_d2.c
M crypto/x509/x509_def.c
M crypto/x509/x509_err.c
M crypto/x509/x509_ext.c
M crypto/x509/x509_local.h
M crypto/x509/x509_lu.c
M crypto/x509/x509_meth.c
M crypto/x509/x509_obj.c
M crypto/x509/x509_r2x.c
M crypto/x509/x509_req.c
M crypto/x509/x509_set.c
M crypto/x509/x509_trust.c
M crypto/x509/x509_txt.c
M crypto/x509/x509_v3.c
M crypto/x509/x509_vfy.c
M crypto/x509/x509_vpm.c
M crypto/x509/x509aset.c
M crypto/x509/x509cset.c
M crypto/x509/x509name.c
M crypto/x509/x509type.c
M crypto/x509/x_all.c
M crypto/x509/x_attrib.c
M crypto/x509/x_crl.c
M crypto/x509/x_exten.c
M crypto/x509/x_ietfatt.c
M crypto/x509/x_name.c
M crypto/x509/x_pubkey.c
M crypto/x509/x_req.c
M crypto/x509/x_x509.c
M crypto/x509/x_x509a.c
M demos/bio/client-arg.c
M demos/bio/client-conf.c
M demos/bio/saccept.c
M demos/bio/sconnect.c
M demos/bio/server-arg.c
M demos/bio/server-cmod.c
M demos/bio/server-conf.c
M demos/cipher/aesccm.c
M demos/cipher/aesgcm.c
M demos/cipher/aeskeywrap.c
M demos/cipher/ariacbc.c
M demos/cms/cms_comp.c
M demos/cms/cms_ddec.c
M demos/cms/cms_dec.c
M demos/cms/cms_denc.c
M demos/cms/cms_enc.c
M demos/cms/cms_sign.c
M demos/cms/cms_sign2.c
M demos/cms/cms_uncomp.c
M demos/cms/cms_ver.c
M demos/digest/BIO_f_md.c
M demos/digest/EVP_MD_demo.c
M demos/digest/EVP_MD_stdin.c
M demos/digest/EVP_MD_xof.c
M demos/encode/ec_encode.c
M demos/encode/rsa_encode.c
M demos/encrypt/rsa_encrypt.c
M demos/encrypt/rsa_encrypt.h
M demos/guide/quic-client-block.c
M demos/guide/quic-client-non-block.c
M demos/guide/quic-multi-stream.c
M demos/guide/quic-server-block.c
M demos/guide/quic-server-non-block.c
M demos/guide/tls-client-block.c
M demos/guide/tls-client-non-block.c
M demos/guide/tls-server-block.c
M demos/http3/ossl-nghttp3-demo-server.c
M demos/http3/ossl-nghttp3-demo.c
M demos/http3/ossl-nghttp3.c
M demos/http3/ossl-nghttp3.h
M demos/kdf/argon2.c
M demos/kdf/hkdf.c
M demos/kdf/pbkdf2.c
M demos/kdf/scrypt.c
M demos/keyexch/ecdh.c
M demos/keyexch/x25519.c
M demos/mac/cmac-aes256.c
M demos/mac/gmac.c
M demos/mac/hmac-sha512.c
M demos/mac/poly1305.c
M demos/pkcs12/pkread.c
M demos/pkey/EVP_PKEY_DSA_keygen.c
M demos/pkey/EVP_PKEY_DSA_paramfromdata.c
M demos/pkey/EVP_PKEY_DSA_paramgen.c
M demos/pkey/EVP_PKEY_DSA_paramvalidate.c
M demos/pkey/EVP_PKEY_EC_keygen.c
M demos/quic/poll-server/quic-server-ssl-poll-http.c
M demos/quic/server/server.c
M demos/signature/EVP_DSA_Signature_demo.c
M demos/signature/EVP_EC_Signature_demo.c
M demos/signature/EVP_EC_Signature_demo.h
M demos/signature/EVP_ED_Signature_demo.c
M demos/signature/rsa_pss_direct.c
M demos/signature/rsa_pss_hash.c
M demos/smime/smdec.c
M demos/smime/smenc.c
M demos/smime/smsign.c
M demos/smime/smsign2.c
M demos/smime/smver.c
M demos/sslecho/main.c
M doc/designs/ddd/ddd-01-conn-blocking.c
M doc/designs/ddd/ddd-02-conn-nonblocking-threads.c
M doc/designs/ddd/ddd-02-conn-nonblocking.c
M doc/designs/ddd/ddd-03-fd-blocking.c
M doc/designs/ddd/ddd-04-fd-nonblocking.c
M doc/designs/ddd/ddd-05-mem-nonblocking.c
M doc/designs/ddd/ddd-06-mem-uv.c
M fuzz/asn1.c
M fuzz/bignum.c
M fuzz/bndiv.c
M fuzz/client.c
M fuzz/cmp.c
M fuzz/decoder.c
M fuzz/driver.c
M fuzz/dtlsclient.c
M fuzz/dtlsserver.c
M fuzz/fuzz_rand.c
M fuzz/fuzzer.h
M fuzz/hashtable.c
M fuzz/ml-dsa.c
M fuzz/ml-kem.c
M fuzz/provider.c
M fuzz/quic-client.c
M fuzz/quic-lcidm.c
M fuzz/quic-server.c
M fuzz/quic-srtm.c
M fuzz/server.c
M fuzz/slh-dsa.c
M fuzz/smime.c
M fuzz/test-corpus.c
M fuzz/v3name.c
M fuzz/x509.c
M include/crypto/aes_platform.h
M include/crypto/aria.h
M include/crypto/asn1.h
M include/crypto/asn1_dsa.h
M include/crypto/asn1err.h
M include/crypto/async.h
M include/crypto/asyncerr.h
M include/crypto/bioerr.h
M include/crypto/bn.h
M include/crypto/bn_dh.h
M include/crypto/bnerr.h
M include/crypto/buffererr.h
M include/crypto/chacha.h
M include/crypto/cmac.h
M include/crypto/cmll_platform.h
M include/crypto/cmperr.h
M include/crypto/cmserr.h
M include/crypto/comperr.h
M include/crypto/conferr.h
M include/crypto/crmferr.h
M include/crypto/cryptlib.h
M include/crypto/cryptoerr.h
M include/crypto/cterr.h
M include/crypto/ctype.h
M include/crypto/decoder.h
M include/crypto/decodererr.h
M include/crypto/des_platform.h
M include/crypto/dh.h
M include/crypto/dherr.h
M include/crypto/dsa.h
M include/crypto/dsaerr.h
M include/crypto/dso_conf.h.in
M include/crypto/ec.h
M include/crypto/ecerr.h
M include/crypto/ecx.h
M include/crypto/encoder.h
M include/crypto/encodererr.h
M include/crypto/err.h
M include/crypto/ess.h
M include/crypto/esserr.h
M include/crypto/evp.h
M include/crypto/evperr.h
M include/crypto/httperr.h
M include/crypto/lhash.h
M include/crypto/lms.h
M include/crypto/lms_sig.h
M include/crypto/lms_util.h
M include/crypto/md32_common.h
M include/crypto/ml_dsa.h
M include/crypto/ml_kem.h
M include/crypto/modes.h
M include/crypto/objectserr.h
M include/crypto/ocsperr.h
M include/crypto/pem.h
M include/crypto/pemerr.h
M include/crypto/pkcs12err.h
M include/crypto/pkcs7.h
M include/crypto/pkcs7err.h
M include/crypto/poly1305.h
M include/crypto/ppc_arch.h
M include/crypto/punycode.h
M include/crypto/rand.h
M include/crypto/rand_pool.h
M include/crypto/randerr.h
M include/crypto/riscv_arch.h
M include/crypto/rsa.h
M include/crypto/rsaerr.h
M include/crypto/security_bits.h
M include/crypto/sha.h
M include/crypto/siphash.h
M include/crypto/siv.h
M include/crypto/slh_dsa.h
M include/crypto/sm2.h
M include/crypto/sm2err.h
M include/crypto/sm4.h
M include/crypto/sm4_platform.h
M include/crypto/sparc_arch.h
M include/crypto/sparse_array.h
M include/crypto/store.h
M include/crypto/storeerr.h
M include/crypto/tserr.h
M include/crypto/types.h
M include/crypto/uierr.h
M include/crypto/x509.h
M include/crypto/x509_acert.h
M include/crypto/x509err.h
M include/crypto/x509v3err.h
M include/internal/asn1.h
M include/internal/bio.h
M include/internal/bio_addr.h
M include/internal/bio_tfo.h
M include/internal/cms.h
M include/internal/common.h
M include/internal/comp.h
M include/internal/conf.h
M include/internal/constant_time.h
M include/internal/core.h
M include/internal/crmf.h
M include/internal/cryptlib.h
M include/internal/dane.h
M include/internal/deprecated.h
M include/internal/der.h
M include/internal/deterministic_nonce.h
M include/internal/dso.h
M include/internal/dsoerr.h
M include/internal/e_os.h
M include/internal/e_winsock.h
M include/internal/encoder.h
M include/internal/endian.h
M include/internal/err.h
M include/internal/ffc.h
M include/internal/fips.h
M include/internal/hashfunc.h
M include/internal/hashtable.h
M include/internal/hpke_util.h
M include/internal/json_enc.h
M include/internal/ktls.h
M include/internal/list.h
M include/internal/mem_alloc_utils.h
M include/internal/namemap.h
M include/internal/nelem.h
M include/internal/numbers.h
M include/internal/o_dir.h
M include/internal/packet.h
M include/internal/packet_quic.h
M include/internal/param_build_set.h
M include/internal/params.h
M include/internal/passphrase.h
M include/internal/priority_queue.h
M include/internal/property.h
M include/internal/propertyerr.h
M include/internal/provider.h
M include/internal/qlog.h
M include/internal/qlog_event_helpers.h
M include/internal/quic_ackm.h
M include/internal/quic_cc.h
M include/internal/quic_cfq.h
M include/internal/quic_channel.h
M include/internal/quic_demux.h
M include/internal/quic_engine.h
M include/internal/quic_error.h
M include/internal/quic_fc.h
M include/internal/quic_fifd.h
M include/internal/quic_lcidm.h
M include/internal/quic_port.h
M include/internal/quic_predef.h
M include/internal/quic_rcidm.h
M include/internal/quic_reactor.h
M include/internal/quic_reactor_wait_ctx.h
M include/internal/quic_record_rx.h
M include/internal/quic_record_tx.h
M include/internal/quic_record_util.h
M include/internal/quic_rx_depack.h
M include/internal/quic_sf_list.h
M include/internal/quic_srt_gen.h
M include/internal/quic_srtm.h
M include/internal/quic_ssl.h
M include/internal/quic_statm.h
M include/internal/quic_stream.h
M include/internal/quic_stream_map.h
M include/internal/quic_thread_assist.h
M include/internal/quic_tls.h
M include/internal/quic_trace.h
M include/internal/quic_tserver.h
M include/internal/quic_txp.h
M include/internal/quic_txpim.h
M include/internal/quic_types.h
M include/internal/quic_vlint.h
M include/internal/quic_wire.h
M include/internal/quic_wire_pkt.h
M include/internal/rcu.h
M include/internal/recordmethod.h
M include/internal/refcount.h
M include/internal/ring_buf.h
M include/internal/rio_notifier.h
M include/internal/safe_math.h
M include/internal/sha3.h
M include/internal/sizes.h
M include/internal/skey.h
M include/internal/sm3.h
M include/internal/sockets.h
M include/internal/ssl.h
M include/internal/ssl3_cbc.h
M include/internal/ssl_unwrap.h
M include/internal/sslconf.h
M include/internal/statem.h
M include/internal/symhacks.h
M include/internal/thread.h
M include/internal/thread_arch.h
M include/internal/thread_once.h
M include/internal/threads_common.h
M include/internal/time.h
M include/internal/tlsgroups.h
M include/internal/to_hex.h
M include/internal/tsan_assist.h
M include/internal/uint_set.h
M include/internal/unicode.h
M include/openssl/aes.h
M include/openssl/asn1.h.in
M include/openssl/asn1err.h
M include/openssl/asn1t.h.in
M include/openssl/async.h
M include/openssl/asyncerr.h
M include/openssl/bio.h.in
M include/openssl/bioerr.h
M include/openssl/blowfish.h
M include/openssl/bn.h
M include/openssl/bnerr.h
M include/openssl/buffer.h
M include/openssl/buffererr.h
M include/openssl/byteorder.h
M include/openssl/camellia.h
M include/openssl/cast.h
M include/openssl/cmac.h
M include/openssl/cmp.h.in
M include/openssl/cmp_util.h
M include/openssl/cmperr.h
M include/openssl/cms.h.in
M include/openssl/cmserr.h
M include/openssl/comp.h.in
M include/openssl/comperr.h
M include/openssl/conf.h.in
M include/openssl/conf_api.h
M include/openssl/conferr.h
M include/openssl/configuration.h.in
M include/openssl/conftypes.h
M include/openssl/core.h
M include/openssl/core_dispatch.h
M include/openssl/core_names.h.in
M include/openssl/core_object.h
M include/openssl/crmf.h.in
M include/openssl/crmferr.h
M include/openssl/crypto.h.in
M include/openssl/cryptoerr.h
M include/openssl/cryptoerr_legacy.h
M include/openssl/ct.h.in
M include/openssl/cterr.h
M include/openssl/decoder.h
M include/openssl/decodererr.h
M include/openssl/des.h
M include/openssl/dh.h
M include/openssl/dherr.h
M include/openssl/dsa.h
M include/openssl/dsaerr.h
M include/openssl/dtls1.h
M include/openssl/e_os2.h
M include/openssl/e_ostime.h
M include/openssl/ebcdic.h
M include/openssl/ec.h
M include/openssl/ecerr.h
M include/openssl/encoder.h
M include/openssl/encodererr.h
M include/openssl/engine.h
M include/openssl/engineerr.h
M include/openssl/err.h.in
M include/openssl/ess.h.in
M include/openssl/esserr.h
M include/openssl/evp.h
M include/openssl/evperr.h
M include/openssl/fips_names.h
M include/openssl/fipskey.h.in
M include/openssl/hmac.h
M include/openssl/hpke.h
M include/openssl/http.h
M include/openssl/httperr.h
M include/openssl/idea.h
M include/openssl/indicator.h
M include/openssl/kdf.h
M include/openssl/kdferr.h
M include/openssl/lhash.h.in
M include/openssl/macros.h
M include/openssl/md2.h
M include/openssl/md4.h
M include/openssl/md5.h
M include/openssl/mdc2.h
M include/openssl/ml_kem.h
M include/openssl/modes.h
M include/openssl/obj_mac.h
M include/openssl/objects.h
M include/openssl/objectserr.h
M include/openssl/ocsp.h.in
M include/openssl/ocsperr.h
M include/openssl/opensslconf.h
M include/openssl/opensslv.h.in
M include/openssl/ossl_typ.h
M include/openssl/param_build.h
M include/openssl/params.h
M include/openssl/pem.h
M include/openssl/pem2.h
M include/openssl/pemerr.h
M include/openssl/pkcs12.h.in
M include/openssl/pkcs12err.h
M include/openssl/pkcs7.h.in
M include/openssl/pkcs7err.h
M include/openssl/posix_time.h
M include/openssl/prov_ssl.h
M include/openssl/proverr.h
M include/openssl/provider.h
M include/openssl/quic.h
M include/openssl/rand.h
M include/openssl/randerr.h
M include/openssl/rc2.h
M include/openssl/rc4.h
M include/openssl/rc5.h
M include/openssl/ripemd.h
M include/openssl/rsa.h
M include/openssl/rsaerr.h
M include/openssl/safestack.h.in
M include/openssl/seed.h
M include/openssl/self_test.h
M include/openssl/sha.h
M include/openssl/srp.h.in
M include/openssl/srtp.h
M include/openssl/ssl.h.in
M include/openssl/ssl2.h
M include/openssl/ssl3.h
M include/openssl/sslerr.h
M include/openssl/sslerr_legacy.h
M include/openssl/stack.h
M include/openssl/store.h
M include/openssl/storeerr.h
M include/openssl/symhacks.h
M include/openssl/thread.h
M include/openssl/tls1.h
M include/openssl/trace.h
M include/openssl/ts.h
M include/openssl/tserr.h
M include/openssl/txt_db.h
M include/openssl/types.h
M include/openssl/ui.h.in
M include/openssl/uierr.h
M include/openssl/whrlpool.h
M include/openssl/x509.h.in
M include/openssl/x509_acert.h.in
M include/openssl/x509_vfy.h.in
M include/openssl/x509err.h
M include/openssl/x509v3.h.in
M include/openssl/x509v3err.h
M ms/applink.c
M ms/uplink.c
M ms/uplink.h
M providers/baseprov.c
M providers/common/bio_prov.c
M providers/common/capabilities.c
M providers/common/der/der_dsa_key.c
M providers/common/der/der_dsa_sig.c
M providers/common/der/der_ec_key.c
M providers/common/der/der_ec_sig.c
M providers/common/der/der_ecx_key.c
M providers/common/der/der_rsa_key.c
M providers/common/der/der_rsa_sig.c
M providers/common/der/der_slh_dsa_key.c
M providers/common/der/der_sm2_key.c
M providers/common/der/der_sm2_sig.c
M providers/common/digest_to_nid.c
M providers/common/include/prov/bio.h
M providers/common/include/prov/der_dsa.h.in
M providers/common/include/prov/der_ec.h.in
M providers/common/include/prov/der_rsa.h.in
M providers/common/include/prov/der_sm2.h.in
M providers/common/include/prov/proverr.h
M providers/common/include/prov/provider_ctx.h
M providers/common/include/prov/provider_util.h
M providers/common/provider_ctx.c
M providers/common/provider_err.c
M providers/common/provider_seeding.c
M providers/common/provider_util.c
M providers/common/securitycheck.c
M providers/common/securitycheck_default.c
M providers/common/securitycheck_fips.c
M providers/defltprov.c
M providers/fips/fips_entry.c
M providers/fips/fipsindicator.c
M providers/fips/fipsprov.c
M providers/fips/include/fips/fipsindicator.h
M providers/fips/include/fipscommon.h
M providers/fips/self_test.c
M providers/fips/self_test.h
M providers/fips/self_test_kats.c
M providers/implementations/asymciphers/rsa_enc.c
M providers/implementations/asymciphers/sm2_enc.c
M providers/implementations/ciphers/cipher_aes.h
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha.h
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha1_etm_hw.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha1_hw.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha256_etm_hw.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha256_hw.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha512_etm_hw.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha_etm.c
M providers/implementations/ciphers/cipher_aes_cbc_hmac_sha_etm.h
M providers/implementations/ciphers/cipher_aes_ccm.c
M providers/implementations/ciphers/cipher_aes_ccm.h
M providers/implementations/ciphers/cipher_aes_ccm_hw.c
M providers/implementations/ciphers/cipher_aes_cfb_hw.c
M providers/implementations/ciphers/cipher_aes_gcm.c
M providers/implementations/ciphers/cipher_aes_gcm.h
M providers/implementations/ciphers/cipher_aes_gcm_hw.c
M providers/implementations/ciphers/cipher_aes_gcm_siv.c
M providers/implementations/ciphers/cipher_aes_gcm_siv.h
M providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c
M providers/implementations/ciphers/cipher_aes_gcm_siv_polyval.c
M providers/implementations/ciphers/cipher_aes_hw.c
M providers/implementations/ciphers/cipher_aes_ocb.c
M providers/implementations/ciphers/cipher_aes_ocb.h
M providers/implementations/ciphers/cipher_aes_ocb_hw.c
M providers/implementations/ciphers/cipher_aes_siv.c
M providers/implementations/ciphers/cipher_aes_siv.h
M providers/implementations/ciphers/cipher_aes_siv_hw.c
M providers/implementations/ciphers/cipher_aes_wrp.c
M providers/implementations/ciphers/cipher_aes_xts.c
M providers/implementations/ciphers/cipher_aes_xts.h
M providers/implementations/ciphers/cipher_aes_xts_hw.c
M providers/implementations/ciphers/cipher_aria.c
M providers/implementations/ciphers/cipher_aria.h
M providers/implementations/ciphers/cipher_aria_ccm.c
M providers/implementations/ciphers/cipher_aria_ccm.h
M providers/implementations/ciphers/cipher_aria_ccm_hw.c
M providers/implementations/ciphers/cipher_aria_gcm.c
M providers/implementations/ciphers/cipher_aria_gcm.h
M providers/implementations/ciphers/cipher_aria_gcm_hw.c
M providers/implementations/ciphers/cipher_aria_hw.c
M providers/implementations/ciphers/cipher_blowfish.c
M providers/implementations/ciphers/cipher_blowfish.h
M providers/implementations/ciphers/cipher_blowfish_hw.c
M providers/implementations/ciphers/cipher_camellia.c
M providers/implementations/ciphers/cipher_camellia.h
M providers/implementations/ciphers/cipher_camellia_hw.c
M providers/implementations/ciphers/cipher_cast.h
M providers/implementations/ciphers/cipher_cast5.c
M providers/implementations/ciphers/cipher_cast5_hw.c
M providers/implementations/ciphers/cipher_chacha20.c
M providers/implementations/ciphers/cipher_chacha20.h
M providers/implementations/ciphers/cipher_chacha20_hw.c
M providers/implementations/ciphers/cipher_chacha20_poly1305.c
M providers/implementations/ciphers/cipher_chacha20_poly1305.h
M providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c
M providers/implementations/ciphers/cipher_cts.c
M providers/implementations/ciphers/cipher_cts.h
M providers/implementations/ciphers/cipher_des.c
M providers/implementations/ciphers/cipher_des.h
M providers/implementations/ciphers/cipher_des_hw.c
M providers/implementations/ciphers/cipher_desx.c
M providers/implementations/ciphers/cipher_desx_hw.c
M providers/implementations/ciphers/cipher_idea.c
M providers/implementations/ciphers/cipher_idea.h
M providers/implementations/ciphers/cipher_idea_hw.c
M providers/implementations/ciphers/cipher_null.c
M providers/implementations/ciphers/cipher_rc2.c
M providers/implementations/ciphers/cipher_rc2.h
M providers/implementations/ciphers/cipher_rc2_hw.c
M providers/implementations/ciphers/cipher_rc4.c
M providers/implementations/ciphers/cipher_rc4.h
M providers/implementations/ciphers/cipher_rc4_hmac_md5.c
M providers/implementations/ciphers/cipher_rc4_hmac_md5.h
M providers/implementations/ciphers/cipher_rc4_hmac_md5_hw.c
M providers/implementations/ciphers/cipher_rc4_hw.c
M providers/implementations/ciphers/cipher_rc5.c
M providers/implementations/ciphers/cipher_rc5.h
M providers/implementations/ciphers/cipher_rc5_hw.c
M providers/implementations/ciphers/cipher_seed.c
M providers/implementations/ciphers/cipher_seed.h
M providers/implementations/ciphers/cipher_seed_hw.c
M providers/implementations/ciphers/cipher_sm4.c
M providers/implementations/ciphers/cipher_sm4.h
M providers/implementations/ciphers/cipher_sm4_ccm.c
M providers/implementations/ciphers/cipher_sm4_ccm.h
M providers/implementations/ciphers/cipher_sm4_ccm_hw.c
M providers/implementations/ciphers/cipher_sm4_gcm.c
M providers/implementations/ciphers/cipher_sm4_gcm.h
M providers/implementations/ciphers/cipher_sm4_gcm_hw.c
M providers/implementations/ciphers/cipher_sm4_hw.c
M providers/implementations/ciphers/cipher_sm4_xts.c
M providers/implementations/ciphers/cipher_sm4_xts.h
M providers/implementations/ciphers/cipher_sm4_xts_hw.c
M providers/implementations/ciphers/cipher_tdes.c
M providers/implementations/ciphers/cipher_tdes.h
M providers/implementations/ciphers/cipher_tdes_common.c
M providers/implementations/ciphers/cipher_tdes_default.c
M providers/implementations/ciphers/cipher_tdes_default_hw.c
M providers/implementations/ciphers/cipher_tdes_hw.c
M providers/implementations/ciphers/cipher_tdes_wrap.c
M providers/implementations/ciphers/ciphercommon.c
M providers/implementations/ciphers/ciphercommon_block.c
M providers/implementations/ciphers/ciphercommon_ccm.c
M providers/implementations/ciphers/ciphercommon_ccm_hw.c
M providers/implementations/ciphers/ciphercommon_gcm.c
M providers/implementations/ciphers/ciphercommon_gcm_hw.c
M providers/implementations/ciphers/ciphercommon_hw.c
M providers/implementations/ciphers/ciphercommon_local.h
M providers/implementations/digests/blake2_impl.h
M providers/implementations/digests/blake2_prov.c
M providers/implementations/digests/blake2b_prov.c
M providers/implementations/digests/blake2s_prov.c
M providers/implementations/digests/digestcommon.c
M providers/implementations/digests/md2_prov.c
M providers/implementations/digests/md4_prov.c
M providers/implementations/digests/md5_prov.c
M providers/implementations/digests/md5_sha1_prov.c
M providers/implementations/digests/mdc2_prov.c
M providers/implementations/digests/null_prov.c
M providers/implementations/digests/ripemd_prov.c
M providers/implementations/digests/sha2_prov.c
M providers/implementations/digests/sha3_prov.c
M providers/implementations/digests/sm3_prov.c
M providers/implementations/digests/wp_prov.c
M providers/implementations/encode_decode/decode_der2key.c
M providers/implementations/encode_decode/decode_epki2pki.c
M providers/implementations/encode_decode/decode_lmsxdr2key.c
M providers/implementations/encode_decode/decode_msblob2key.c
M providers/implementations/encode_decode/decode_pem2der.c
M providers/implementations/encode_decode/decode_pvk2key.c
M providers/implementations/encode_decode/decode_spki2typespki.c
M providers/implementations/encode_decode/encode_key2any.c
M providers/implementations/encode_decode/encode_key2blob.c
M providers/implementations/encode_decode/encode_key2ms.c
M providers/implementations/encode_decode/encode_key2text.c
M providers/implementations/encode_decode/endecoder_common.c
M providers/implementations/encode_decode/ml_common_codecs.c
M providers/implementations/encode_decode/ml_dsa_codecs.c
M providers/implementations/encode_decode/ml_kem_codecs.c
M providers/implementations/exchange/dh_exch.c
M providers/implementations/exchange/ecdh_exch.c
M providers/implementations/exchange/ecx_exch.c
M providers/implementations/exchange/kdf_exch.c
M providers/implementations/include/prov/blake2.h
M providers/implementations/include/prov/ciphercommon.h
M providers/implementations/include/prov/ciphercommon_aead.h
M providers/implementations/include/prov/ciphercommon_ccm.h
M providers/implementations/include/prov/ciphercommon_gcm.h
M providers/implementations/include/prov/decoders.h
M providers/implementations/include/prov/digestcommon.h
M providers/implementations/include/prov/drbg.h
M providers/implementations/include/prov/eckem.h
M providers/implementations/include/prov/ecx.h
M providers/implementations/include/prov/endecoder_local.h
M providers/implementations/include/prov/file_store_local.h
M providers/implementations/include/prov/hmac_drbg.h
M providers/implementations/include/prov/implementations.h
M providers/implementations/include/prov/md5_sha1.h
M providers/implementations/include/prov/ml_common_codecs.h
M providers/implementations/include/prov/ml_dsa_codecs.h
M providers/implementations/include/prov/ml_kem_codecs.h
M providers/implementations/include/prov/mlx_kem.h
M providers/implementations/include/prov/seeding.h
M providers/implementations/include/prov/skeymgmt_lcl.h
M providers/implementations/kdfs/argon2.c
M providers/implementations/kdfs/hkdf.c
M providers/implementations/kdfs/hmacdrbg_kdf.c
M providers/implementations/kdfs/kbkdf.c
M providers/implementations/kdfs/krb5kdf.c
M providers/implementations/kdfs/pbkdf1.c
M providers/implementations/kdfs/pbkdf2.c
M providers/implementations/kdfs/pkcs12kdf.c
M providers/implementations/kdfs/pvkkdf.c
M providers/implementations/kdfs/scrypt.c
M providers/implementations/kdfs/sshkdf.c
M providers/implementations/kdfs/sskdf.c
M providers/implementations/kdfs/tls1_prf.c
M providers/implementations/kdfs/x942kdf.c
M providers/implementations/kem/ec_kem.c
M providers/implementations/kem/ecx_kem.c
M providers/implementations/kem/ml_kem_kem.c
M providers/implementations/kem/mlx_kem.c
M providers/implementations/kem/rsa_kem.c
M providers/implementations/kem/template_kem.c
M providers/implementations/keymgmt/dh_kmgmt.c
M providers/implementations/keymgmt/dsa_kmgmt.c
M providers/implementations/keymgmt/ec_kmgmt.c
M providers/implementations/keymgmt/ecx_kmgmt.c
M providers/implementations/keymgmt/lms_kmgmt.c
M providers/implementations/keymgmt/mac_legacy_kmgmt.c
M providers/implementations/keymgmt/ml_dsa_kmgmt.c
M providers/implementations/keymgmt/ml_kem_kmgmt.c
M providers/implementations/keymgmt/mlx_kmgmt.c
M providers/implementations/keymgmt/rsa_kmgmt.c
M providers/implementations/keymgmt/slh_dsa_kmgmt.c
M providers/implementations/keymgmt/template_kmgmt.c
M providers/implementations/macs/blake2_mac_impl.c
M providers/implementations/macs/blake2b_mac.c
M providers/implementations/macs/cmac_prov.c
M providers/implementations/macs/gmac_prov.c
M providers/implementations/macs/hmac_prov.c
M providers/implementations/macs/kmac_prov.c
M providers/implementations/macs/poly1305_prov.c
M providers/implementations/macs/siphash_prov.c
M providers/implementations/rands/drbg.c
M providers/implementations/rands/drbg_ctr.c
M providers/implementations/rands/drbg_hash.c
M providers/implementations/rands/drbg_hmac.c
M providers/implementations/rands/fips_crng_test.c
M providers/implementations/rands/seed_src.c
M providers/implementations/rands/seed_src_jitter.c
M providers/implementations/rands/seeding/rand_cpu_arm64.c
M providers/implementations/rands/seeding/rand_cpu_x86.c
M providers/implementations/rands/seeding/rand_tsc.c
M providers/implementations/rands/seeding/rand_unix.c
M providers/implementations/rands/seeding/rand_vms.c
M providers/implementations/rands/seeding/rand_vxworks.c
M providers/implementations/rands/seeding/rand_win.c
M providers/implementations/rands/test_rng.c
M providers/implementations/signature/dsa_sig.c
M providers/implementations/signature/ecdsa_sig.c
M providers/implementations/signature/eddsa_sig.c
M providers/implementations/signature/lms_signature.c
M providers/implementations/signature/mac_legacy_sig.c
M providers/implementations/signature/ml_dsa_sig.c
M providers/implementations/signature/rsa_sig.c
M providers/implementations/signature/slh_dsa_sig.c
M providers/implementations/signature/sm2_sig.c
M providers/implementations/skeymgmt/aes_skmgmt.c
M providers/implementations/skeymgmt/generic.c
M providers/implementations/storemgmt/file_store.c
M providers/implementations/storemgmt/file_store_any2obj.c
M providers/implementations/storemgmt/winstore_store.c
M providers/legacyprov.c
M providers/nullprov.c
M ssl/bio_ssl.c
M ssl/d1_lib.c
M ssl/d1_msg.c
M ssl/d1_srtp.c
M ssl/methods.c
M ssl/pqueue.c
M ssl/priority_queue.c
M ssl/quic/cc_newreno.c
M ssl/quic/json_enc.c
M ssl/quic/qlog.c
M ssl/quic/qlog_event_helpers.c
M ssl/quic/quic_ackm.c
M ssl/quic/quic_cfq.c
M ssl/quic/quic_channel.c
M ssl/quic/quic_channel_local.h
M ssl/quic/quic_demux.c
M ssl/quic/quic_engine.c
M ssl/quic/quic_engine_local.h
M ssl/quic/quic_fc.c
M ssl/quic/quic_fifd.c
M ssl/quic/quic_impl.c
M ssl/quic/quic_lcidm.c
M ssl/quic/quic_local.h
M ssl/quic/quic_method.c
M ssl/quic/quic_obj.c
M ssl/quic/quic_obj_local.h
M ssl/quic/quic_port.c
M ssl/quic/quic_port_local.h
M ssl/quic/quic_rcidm.c
M ssl/quic/quic_reactor.c
M ssl/quic/quic_reactor_wait_ctx.c
M ssl/quic/quic_record_rx.c
M ssl/quic/quic_record_shared.c
M ssl/quic/quic_record_shared.h
M ssl/quic/quic_record_tx.c
M ssl/quic/quic_record_util.c
M ssl/quic/quic_rstream.c
M ssl/quic/quic_rx_depack.c
M ssl/quic/quic_sf_list.c
M ssl/quic/quic_srt_gen.c
M ssl/quic/quic_srtm.c
M ssl/quic/quic_sstream.c
M ssl/quic/quic_statm.c
M ssl/quic/quic_stream_map.c
M ssl/quic/quic_thread_assist.c
M ssl/quic/quic_tls.c
M ssl/quic/quic_tls_api.c
M ssl/quic/quic_trace.c
M ssl/quic/quic_tserver.c
M ssl/quic/quic_txp.c
M ssl/quic/quic_txpim.c
M ssl/quic/quic_types.c
M ssl/quic/quic_wire.c
M ssl/quic/quic_wire_pkt.c
M ssl/quic/uint_set.c
M ssl/record/methods/dtls_meth.c
M ssl/record/methods/ktls_meth.c
M ssl/record/methods/recmethod_local.h
M ssl/record/methods/ssl3_cbc.c
M ssl/record/methods/ssl3_meth.c
M ssl/record/methods/tls13_meth.c
M ssl/record/methods/tls1_meth.c
M ssl/record/methods/tls_common.c
M ssl/record/methods/tls_multib.c
M ssl/record/methods/tls_pad.c
M ssl/record/methods/tlsany_meth.c
M ssl/record/rec_layer_d1.c
M ssl/record/rec_layer_s3.c
M ssl/record/record.h
M ssl/record/record_local.h
M ssl/rio/poll_builder.c
M ssl/rio/poll_builder.h
M ssl/rio/poll_immediate.c
M ssl/rio/poll_method.h
M ssl/rio/rio_notifier.c
M ssl/s3_enc.c
M ssl/s3_lib.c
M ssl/s3_msg.c
M ssl/ssl_asn1.c
M ssl/ssl_cert.c
M ssl/ssl_cert_comp.c
M ssl/ssl_cert_table.h
M ssl/ssl_ciph.c
M ssl/ssl_conf.c
M ssl/ssl_init.c
M ssl/ssl_lib.c
M ssl/ssl_local.h
M ssl/ssl_mcnf.c
M ssl/ssl_rsa.c
M ssl/ssl_rsa_legacy.c
M ssl/ssl_sess.c
M ssl/ssl_txt.c
M ssl/statem/extensions.c
M ssl/statem/extensions_clnt.c
M ssl/statem/extensions_cust.c
M ssl/statem/extensions_srvr.c
M ssl/statem/statem.c
M ssl/statem/statem_clnt.c
M ssl/statem/statem_dtls.c
M ssl/statem/statem_lib.c
M ssl/statem/statem_local.h
M ssl/statem/statem_srvr.c
M ssl/t1_enc.c
M ssl/t1_lib.c
M ssl/t1_trce.c
M ssl/tls13_enc.c
M ssl/tls_depr.c
M ssl/tls_srp.c
M test/acvp_test.c
M test/aesgcmtest.c
M test/algorithmid_test.c
M test/asn1_decode_test.c
M test/asn1_dsa_internal_test.c
M test/asn1_encode_test.c
M test/asn1_internal_test.c
M test/asn1_stable_parse_test.c
M test/asn1_string_table_test.c
M test/asn1_time_test.c
M test/asynciotest.c
M test/asynctest.c
M test/bad_dtls_test.c
M test/bftest.c
M test/bio_addr_test.c
M test/bio_base64_test.c
M test/bio_callback_test.c
M test/bio_comp_test.c
M test/bio_core_test.c
M test/bio_dgram_test.c
M test/bio_enc_test.c
M test/bio_memleak_test.c
M test/bio_meth_test.c
M test/bio_prefix_text.c
M test/bio_pw_callback_test.c
M test/bio_readbuffer_test.c
M test/bio_tfo_test.c
M test/bioprinttest.c
M test/bn_internal_test.c
M test/bn_rand_range.h
M test/bntest.c
M test/build_wincrypt_test.c
M test/byteorder_test.c
M test/ca_internals_test.c
M test/casttest.c
M test/cc_dummy.c
M test/cert_comp_test.c
M test/cipher_overhead_test.c
M test/cipherbytes_test.c
M test/cipherlist_test.c
M test/ciphername_test.c
M test/clienthellotest.c
M test/cmactest.c
M test/cmp_asn_test.c
M test/cmp_client_test.c
M test/cmp_ctx_test.c
M test/cmp_hdr_test.c
M test/cmp_msg_test.c
M test/cmp_protect_test.c
M test/cmp_server_test.c
M test/cmp_status_test.c
M test/cmp_vfy_test.c
M test/cmsapitest.c
M test/conf_include_test.c
M test/constant_time_test.c
M test/context_internal_test.c
M test/crltest.c
M test/ct_test.c
M test/ctype_internal_test.c
M test/curve448_internal_test.c
M test/d2i_test.c
M test/danetest.c
M test/decoder_propq_test.c
M test/defltfips_test.c
M test/destest.c
M test/dhtest.c
M test/drbgtest.c
M test/dsa_no_digest_size_test.c
M test/dsatest.c
M test/dtls_mtu_test.c
M test/dtlstest.c
M test/dtlsv1listentest.c
M test/ec_internal_test.c
M test/ecdsatest.c
M test/ecdsatest.h
M test/ecstresstest.c
M test/ectest.c
M test/endecode_test.c
M test/endecoder_legacy_test.c
M test/errtest.c
M test/evp_extra_test.c
M test/evp_extra_test2.c
M test/evp_fetch_prov_test.c
M test/evp_kdf_test.c
M test/evp_libctx_test.c
M test/evp_pkey_dhkem_test.c
M test/evp_pkey_dparams_test.c
M test/evp_pkey_provided_test.c
M test/evp_skey_test.c
M test/evp_test.c
M test/evp_xof_test.c
M test/exdatatest.c
M test/exptest.c
M test/ext_internal_test.c
M test/fake_cipherprov.c
M test/fake_pipelineprov.c
M test/fake_rsaprov.c
M test/fatalerrtest.c
M test/ffc_internal_test.c
M test/filterprov.c
M test/fips_version_test.c
M test/gmdifftest.c
M test/handshake-memfail.c
M test/helpers/cmp_testlib.c
M test/helpers/cmp_testlib.h
M test/helpers/handshake.c
M test/helpers/handshake.h
M test/helpers/handshake_srp.c
M test/helpers/noisydgrambio.c
M test/helpers/pkcs12.c
M test/helpers/pkcs12.h
M test/helpers/pktsplitbio.c
M test/helpers/predefined_dhparams.c
M test/helpers/quictestlib.c
M test/helpers/quictestlib.h
M test/helpers/ssl_test_ctx.c
M test/helpers/ssl_test_ctx.h
M test/helpers/ssltestlib.c
M test/helpers/ssltestlib.h
M test/hexstr_test.c
M test/hmactest.c
M test/hpke_test.c
M test/http_test.c
M test/ideatest.c
M test/igetest.c
M test/json_test.c
M test/keymgmt_internal_test.c
M test/lhash_test.c
M test/list_test.c
M test/lms_test.c
M test/localetest.c
M test/mdc2_internal_test.c
M test/mdc2test.c
M test/mem_alloc_test.c
M test/membio_test.c
M test/memleaktest.c
M test/ml_dsa_test.c
M test/ml_kem_evp_extra_test.c
M test/ml_kem_internal_test.c
M test/modes_internal_test.c
M test/namemap_internal_test.c
M test/nodefltctxtest.c
M test/ocspapitest.c
M test/ossl_store_test.c
M test/p_minimal.c
M test/p_ossltest.c
M test/p_test.c
M test/packettest.c
M test/pairwise_fail_test.c
M test/param_build_test.c
M test/params_api_test.c
M test/params_conversion_test.c
M test/params_test.c
M test/pbelutest.c
M test/pbetest.c
M test/pem_read_depr_test.c
M test/pemtest.c
M test/pkcs12_api_test.c
M test/pkcs12_format_test.c
M test/pkcs7_test.c
M test/pkey_meth_kdf_test.c
M test/pkey_meth_test.c
M test/poly1305_internal_test.c
M test/priority_queue_test.c
M test/property_test.c
M test/prov_config_test.c
M test/provfetchtest.c
M test/provider_default_search_path_test.c
M test/provider_fallback_test.c
M test/provider_internal_test.c
M test/provider_pkey_test.c
M test/provider_status_test.c
M test/provider_test.c
M test/punycode_test.c
M test/quic-openssl-docker/hq-interop/quic-hq-interop-server.c
M test/quic-openssl-docker/hq-interop/quic-hq-interop.c
M test/quic_ackm_test.c
M test/quic_cc_test.c
M test/quic_cfq_test.c
M test/quic_client_test.c
M test/quic_fc_test.c
M test/quic_fifd_test.c
M test/quic_lcidm_test.c
M test/quic_multistream_test.c
M test/quic_newcid_test.c
M test/quic_qlog_test.c
M test/quic_rcidm_test.c
M test/quic_record_test.c
M test/quic_record_test_util.h
M test/quic_srt_gen_test.c
M test/quic_srtm_test.c
M test/quic_stream_test.c
M test/quic_tserver_test.c
M test/quic_txp_test.c
M test/quic_txpim_test.c
M test/quic_wire_test.c
M test/quicapitest.c
M test/quicfaultstest.c
M test/radix/main.c
M test/radix/quic_bindings.c
M test/radix/quic_ops.c
M test/radix/quic_tests.c
M test/radix/terp.c
M test/rand_test.c
M test/rc2test.c
M test/rc4test.c
M test/rc5test.c
M test/rdcpu_sanitytest.c
M test/recordlentest.c
M test/rpktest.c
M test/rsa_complex.c
M test/rsa_mp_test.c
M test/rsa_sp800_56b_test.c
M test/rsa_test.c
M test/rsa_x931_test.c
M test/safe_math_test.c
M test/sanitytest.c
M test/secmemtest.c
M test/servername_test.c
M test/sha_test.c
M test/shlibloadtest.c
M test/simpledynamic.c
M test/simpledynamic.h
M test/siphash_internal_test.c
M test/slh_dsa_test.c
M test/sm2_internal_test.c
M test/sm3_internal_test.c
M test/sm4_internal_test.c
M test/sparse_array_test.c
M test/srptest.c
M test/ssl_cert_table_internal_test.c
M test/ssl_ctx_test.c
M test/ssl_handshake_rtt_test.c
M test/ssl_old_test.c
M test/ssl_test.c
M test/ssl_test_ctx_test.c
M test/sslapitest.c
M test/sslbuffertest.c
M test/sslcorrupttest.c
M test/stack_test.c
M test/strtoultest.c
M test/sysdefaulttest.c
M test/test_test.c
M test/testutil.h
M test/testutil/compare.c
M test/testutil/driver.c
M test/testutil/fake_random.c
M test/testutil/format_output.c
M test/testutil/helper.c
M test/testutil/load.c
M test/testutil/main.c
M test/testutil/options.c
M test/testutil/output.h
M test/testutil/provider.c
M test/testutil/random.c
M test/testutil/stanza.c
M test/testutil/tests.c
M test/testutil/testutil_init.c
M test/testutil/tu_local.h
M test/threadpool_test.c
M test/threadstest.c
M test/threadstest.h
M test/threadstest_fips.c
M test/time_offset_test.c
M test/timing_load_creds.c
M test/tls-provider.c
M test/tls13ccstest.c
M test/tls13encryptiontest.c
M test/tls13groupselection_test.c
M test/tls13secretstest.c
M test/trace_api_test.c
M test/uitest.c
M test/upcallstest.c
M test/user_property_test.c
M test/v3ext.c
M test/v3nametest.c
M test/verify_extra_test.c
M test/versions.c
M test/wpackettest.c
M test/x509_acert_test.c
M test/x509_check_cert_pkey_test.c
M test/x509_internal_test.c
M test/x509_load_cert_file_test.c
M test/x509_memfail.c
M test/x509_test.c
M test/x509_time_test.c
M test/x509aux.c
M util/check-format-test-negatives.c
M util/check-format-test-positives.c
Log Message:
-----------
4.0-POST-CLANG-FORMAT-WEBKIT
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29242)
Commit: b40b673f9958e9b3cc296296092e1d95a1f9c460
https://github.com/openssl/openssl/commit/b40b673f9958e9b3cc296296092e1d95a1f9c460
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M .git-blame-ignore-revs
Log Message:
-----------
add 4.0 clang-format diff to .git-blame-ignore-revs
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/29343)
Commit: 5b0dffa8610a085e937f692754281634aca7b7b8
https://github.com/openssl/openssl/commit/5b0dffa8610a085e937f692754281634aca7b7b8
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M crypto/rand/rand_lib.c
Log Message:
-----------
Disable clang-format around this macro
clang-format sensibly thinks this is an arithmatic operation,
and formats the math. Sadly it does not know we eventually
stringify this behind several other layers of nested macros
and so putting spaces in here is bad.
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29350)
Commit: d54932c9fa4b59e0db8296b91a9392efb9cd897e
https://github.com/openssl/openssl/commit/d54932c9fa4b59e0db8296b91a9392efb9cd897e
Author: Matt Caswell <ma...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M test/evp_extra_test.c
Log Message:
-----------
Fix array formatting in evp_extra_test.c
The reformat did something silly with some of the arrays in evp_extra_test.c
Fix the arrays such that clang-format is still happy.
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29349)
Commit: d6f3733f94fe6414571b080ee22813bba3621dab
https://github.com/openssl/openssl/commit/d6f3733f94fe6414571b080ee22813bba3621dab
Author: Dmitry Misharov <dmi...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M .github/workflows/style-checks.yml
M .pre-commit-config.yaml
R util/check-format-commit.sh
R util/check-format.pl
Log Message:
-----------
add clang-format as a pre-commit hook
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29282)
Commit: 9fb44b527ee3717795609fb876a7a81f8898c623
https://github.com/openssl/openssl/commit/9fb44b527ee3717795609fb876a7a81f8898c623
Author: Neil Horman <nho...@openssl.org>
Date: 2025-12-09 (Tue, 09 Dec 2025)
Changed paths:
M crypto/asn1/a_time_posix.c
Log Message:
-----------
Only write to pdays/psecs if they are not null
We have a few cases in which one of the paramters passed to
ASN1_TIME_diff is null (i.e. the caller doesn't care about the psec
differnce and so passes NULL as that pointer parameter).
However, OPENSSL_gmtime_diff assumes both pointers are valid, and so
writes to them unilaterally resulting in a crash as observed here:
https://github.com/openssl/openssl/pull/29333#issuecomment-3628103959
Check the pointers before writing to them.
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Paul Dale <paul...@oracle.com>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29337)
Commit: 1b035166bdb2d86e718ad51a55caffc8bc9504a7
https://github.com/openssl/openssl/commit/1b035166bdb2d86e718ad51a55caffc8bc9504a7
Author: Helen Zhang <helz...@cisco.com>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M CHANGES.md
M build.info
M crypto/err/openssl.txt
M doc/build.info
M doc/man1/openssl-kdf.pod.in
A doc/man7/EVP_KDF-SNMPKDF.pod
M doc/man7/OSSL_PROVIDER-FIPS.pod
M doc/man7/OSSL_PROVIDER-default.pod
M include/openssl/core_names.h.in
M include/openssl/proverr.h
M include/openssl/self_test.h
M providers/common/provider_err.c
M providers/defltprov.c
M providers/fips/fipsprov.c
M providers/fips/self_test_data.inc
M providers/implementations/include/prov/implementations.h
M providers/implementations/include/prov/names.h
M providers/implementations/kdfs/build.info
A providers/implementations/kdfs/snmpkdf.c
A providers/implementations/kdfs/snmpkdf.inc.in
M test/recipes/30-test_evp.t
A test/recipes/30-test_evp_data/evpkdf_snmp.txt
M util/perl/OpenSSL/paramnames.pm
Log Message:
-----------
Add SNMPKDF implementation
In compliance with SP800-135 and RFC7860
Reviewed-by: Shane Lontis <shane....@oracle.com>
Reviewed-by: Paul Dale <paul...@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/29195)
Commit: 1b0f21f0555cfada3e789c80100df40d1c429800
https://github.com/openssl/openssl/commit/1b0f21f0555cfada3e789c80100df40d1c429800
Author: Dmitry Belyavskiy <bel...@gmail.com>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M apps/enc.c
M apps/include/apps.h
M apps/lib/apps.c
M apps/storeutl.c
M crypto/err/openssl.txt
M crypto/store/store_err.c
M crypto/store/store_lib.c
M crypto/store/store_local.h
M crypto/store/store_result.c
M crypto/store/store_strings.c
M doc/man1/openssl-enc.pod.in
M doc/man1/openssl-storeutl.pod.in
M doc/man3/OSSL_STORE_INFO.pod
M doc/man7/ossl_store-file.pod
M include/openssl/core_object.h
M include/openssl/store.h
M include/openssl/storeerr.h
M providers/implementations/storemgmt/file_store.c
M providers/implementations/storemgmt/file_store_any2obj.c
M test/recipes/20-test_enc.t
A test/recipes/20-test_enc_data/skeyfile.bin
M util/libcrypto.num
Log Message:
-----------
Implementing store support for EVP_SKEY
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Simo Sorce <si...@redhat.com>
(Merged from https://github.com/openssl/openssl/pull/28278)
Commit: d3288746455890ac0b368f56e55ac20fcb0f2479
https://github.com/openssl/openssl/commit/d3288746455890ac0b368f56e55ac20fcb0f2479
Author: Dmitry Belyavskiy <bel...@gmail.com>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M apps/enc.c
M apps/include/apps.h
M apps/lib/apps.c
M doc/man7/provider-decoder.pod
Log Message:
-----------
Document skey decoder
Reviewed-by: Neil Horman <nho...@openssl.org>
Reviewed-by: Simo Sorce <si...@redhat.com>
(Merged from https://github.com/openssl/openssl/pull/28278)
Commit: d70b22bf2df27e02db5b209d2bc42cd97d6a928c
https://github.com/openssl/openssl/commit/d70b22bf2df27e02db5b209d2bc42cd97d6a928c
Author: Dmitry Misharov <dmi...@openssl.org>
Date: 2025-12-10 (Wed, 10 Dec 2025)
Changed paths:
M .pre-commit-config.yaml
Log Message:
-----------
run codespell pre-commit hook on staged files only
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Neil Horman <nho...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29360)
Commit: 21722fe5545cb73d2f3051a3dbae5cd5e30b5de0
https://github.com/openssl/openssl/commit/21722fe5545cb73d2f3051a3dbae5cd5e30b5de0
Author: Dr. David von Oheimb <d...@ddvo.net>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M crypto/cmp/cmp_vfy.c
M doc/man3/OSSL_CMP_CTX_new.pod
Log Message:
-----------
OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR: use new TA(s) for whole transaction (also pkiconf); update doc
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28015)
Commit: e7d5206e892e14fd380e3f04401a47de7c759818
https://github.com/openssl/openssl/commit/e7d5206e892e14fd380e3f04401a47de7c759818
Author: Dr. David von Oheimb <d...@ddvo.net>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M apps/cmp.c
M doc/man1/openssl-cmp.pod.in
Log Message:
-----------
apps/cmp.c: add -ta_in_ip_extracerts permitting non-authenticated trust anchors in IP extracerts according to 3GPP TS 33.310
Fixes #27888
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28015)
Commit: 996d50da8fac4938fd910af96389c1e67ff1cb11
https://github.com/openssl/openssl/commit/996d50da8fac4938fd910af96389c1e67ff1cb11
Author: Carter Thaxton <carter....@gmail.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M crypto/x509/x509_vfy.c
Log Message:
-----------
Fix regression when X509_V_FLAG_CRL_CHECK_ALL is set, while X509_V_FLAG_CRL_CHECK is clear
Fixes #28758
When X509_V_FLAG_CRL_CHECK is not set, the man pages document that X509_V_FLAG_CRL_CHECK_ALL is ignored.
Prior to 3.6.0, this was indeed the case.
In 3.6.0, the behavior changed, and setting X509_V_FLAG_CRL_CHECK_ALL began to imply X509_V_FLAG_CRL_CHECK.
This unfortunately breaks the majority of ruby installations, which relied on the documented behavior.
For consistency, this commit applies the same logic to the new X509_V_FLAG_OCSP_RESP_CHECK and X509_V_FLAG_OCSP_RESP_CHECK_ALL flags,
which are still undocumented as of 3.6.0.
All existing tests continue to pass. They also make the assumption that the xxx_CHECK_ALL flags are irrelevant unless xxx_CHECK is set.
We could add a new test for this regression. I'll leave that to another commit.
CLA: trivial
Reviewed-by: Nikola Pajkovsky <nik...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28797)
(cherry picked from commit cbaf28ce48805f47345f39dc6aaf39e181ab4861)
Commit: 21d4585718a235a412115ca5c2dcdc2fe8932b61
https://github.com/openssl/openssl/commit/21d4585718a235a412115ca5c2dcdc2fe8932b61
Author: Joshua Rogers <MegaM...@users.noreply.github.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M include/internal/ktls.h
Log Message:
-----------
ktls_read_record(): Harden linux recv path
- drop tag subtraction in recv buffer sizing
- enforce MSG_EOR and reject MSG_CTRUNC
- zero prepended header bytes before recvmsg
Signed-off-by: Joshua Rogers <MegaM...@users.noreply.github.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28861)
Commit: 688e4f4a5f5cb8d287ad1efbc0017cf6be628c17
https://github.com/openssl/openssl/commit/688e4f4a5f5cb8d287ad1efbc0017cf6be628c17
Author: Joshua Rogers <MegaM...@users.noreply.github.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M ssl/d1_lib.c
Log Message:
-----------
dtls: fix DTLSv1_listen msg_callback to report HelloVerifyRequest
DTLSv1_listen built the HelloVerifyRequest in wbuf but invoked
msg_callback with buf and DTLS1_RT_HEADER_LENGTH, and version 0.
That caused incorrect logging and could disclose the ClientHello
to write callbacks. Use wbuf and the actual record version for the
record header, and add a second callback that reports the handshake
message bytes. No change to on-wire behavior.
Signed-off-by: Joshua Rogers <MegaM...@users.noreply.github.com>
Reviewed-by: Frederik Wedel-Heinen <fwh.o...@gmail.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28916)
Commit: ba26e3f46b075d44ba673e57d9c81c08f92ef7f0
https://github.com/openssl/openssl/commit/ba26e3f46b075d44ba673e57d9c81c08f92ef7f0
Author: George Wilson <gcwi...@linux.ibm.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M doc/build.info
M doc/man1/openssl.pod
A doc/man3/OPENSSL_ppccap.pod
M doc/man7/openssl-env.pod
Log Message:
-----------
doc/man3: Add OPENSSL_ppccap.pod
This patch adds a man page documenting the OPENSSL_ppccap environment
variable that is analogous to capability environment variable man pages
for other architectures.
Fixes #17046
Signed-off-by: George Wilson <gcwi...@linux.ibm.com>
Reviewed-by: Paul Dale <paul...@oracle.com>
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29230)
Commit: 0f22d746628c0c5d2371dd89652137fbbeed6ed6
https://github.com/openssl/openssl/commit/0f22d746628c0c5d2371dd89652137fbbeed6ed6
Author: Viktor Dukhovni <openss...@dukhovni.org>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M providers/implementations/keymgmt/ml_kem_kmgmt.inc.in
Log Message:
-----------
Fix ML-KEM/ML-DSA macro typo
This is largely cosmetic, since the macro expands to "seed" either way,
but it is best to avoid this type of error.
Reviewed-by: Kurt Roeckx <ku...@roeckx.be>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29313)
Commit: 013e1174df1b3f8a51b393aaa22309dab66d371f
https://github.com/openssl/openssl/commit/013e1174df1b3f8a51b393aaa22309dab66d371f
Author: lan1120 <lan...@huawei.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M providers/implementations/keymgmt/mlx_kmgmt.c
Log Message:
-----------
Fix memory leak in abnormal branch of mlx_kem_dup function
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29318)
Commit: f247d36074353f44596cb941c0a5f929c2e46e67
https://github.com/openssl/openssl/commit/f247d36074353f44596cb941c0a5f929c2e46e67
Author: Viktor Dukhovni <openss...@dukhovni.org>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M crypto/rsa/rsa_gen.c
Log Message:
-----------
The return value of RSA_*_{en,de}crypt() is signed
The functions RSA_(public|private)_(en|de)crypt() return a signed
result, in particular `-1` may be returned on error, so the caller
MUST treat the value as signed.
Reviewed-by: Saša Nedvědický <sas...@openssl.org>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29323)
Commit: 26d138af724961c5f30263c15ae8137d4f86645b
https://github.com/openssl/openssl/commit/26d138af724961c5f30263c15ae8137d4f86645b
Author: Niels Dossche <niels....@ugent.be>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M providers/implementations/keymgmt/ec_kmgmt.c
Log Message:
-----------
Fix memory leak in error path of ec_gen_init()
ec_gen_set_params() can fail after some big numbers have already been
copied over. Those need to be cleaned to avoid a memory leak on failure.
This can be done with ec_gen_cleanup(), which is also consistent in how
the ecx_gen code does it.
Reviewed-by: Dmitry Belyavskiy <bel...@gmail.com>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29335)
Commit: 52cd2a49c53ee6b08a8a76624f2a80f00248d679
https://github.com/openssl/openssl/commit/52cd2a49c53ee6b08a8a76624f2a80f00248d679
Author: Matthias Kraft <Matthia...@ibm.com>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M crypto/bio/bss_dgram.c
Log Message:
-----------
Enable send-/recvmmsg for AIX >= 7.2 and disable SUPPORT_LOCAL_ADDR.
AIX doesn't support this implementation for local addresses. The AF_INET
case is unimplemented when sending. The AF_INET6 case is limited to 110
messages. The limiting factor is currently unclear.
Fixes #29292
Signed-off-by: Matthias Kraft <Matthia...@ibm.com>
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Norbert Pocs <norb...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29334)
Commit: ba4970afb5b60f022126b7fb3ee3c44cb9ceac8c
https://github.com/openssl/openssl/commit/ba4970afb5b60f022126b7fb3ee3c44cb9ceac8c
Author: Bob Beck <be...@openssl.org>
Date: 2025-12-11 (Thu, 11 Dec 2025)
Changed paths:
M .clang-format
M providers/implementations/encode_decode/decode_der2key.c
Log Message:
-----------
Add static_ASN1_SEQUENCE_END to the list of statment macros
This one is pretty special, we should ponder simplifying some of
the clever preprocessor stuff here, but for now..
Reviewed-by: Matt Caswell <ma...@openssl.org>
Reviewed-by: Richard Levitte <lev...@openssl.org>
Reviewed-by: Tomas Mraz <to...@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29359)
Compare: https://github.com/openssl/openssl/compare/8ca421f88193...ba4970afb5b6
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
Reply all
Reply to author
Forward
0 new messages