3174 Commits

Author	SHA1	Message	Date
sftcd	497daff2b9	Add server-side handling of Encrypted Client Hello ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27561)	2025-08-11 17:18:00 +02:00
sftcd	145bb343f8	ECH external APIs ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25663)	2025-08-11 17:18:00 +02:00
Stephen Farrell	7dd60f1f68	ECH build artefacts and a bit of code ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25193)	2025-08-11 17:18:00 +02:00
Eugene Syromiatnikov	14737252a1	util/ctags.sh: tfix in a "set --" call ... Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28059)	2025-08-08 12:22:10 -04:00
Eugene Syromiatnikov	fa9b7b930e	Add array memory allocation routines ... Such routines allow alleviating the need to perform explicit integer overflow check during allocation size calculation and generally make the allocations more semantic (as they signify that a collection of NUM items, each occupying SIZE bytes is being allocated), which paves the road for additional correctness checks in the future. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28059)	2025-08-08 12:22:10 -04:00
GAlvare	7eee9d543e	Fixes for build failures on OS X 10.4 Tiger ... Also added darwin8-ppc-cc and darwin8-ppc64-cc build configurations for handling OS X 10.4 PowerPC specific configuration options, specifically disabling async by default. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27578)	2025-08-08 13:56:02 +02:00
Pauli	85e12cecbb	params: produce an error if a parameter is repeated ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/28163)	2025-08-08 10:33:22 +10:00
Pauli	0c833c46cf	params: add conditional params to the generation script ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/28163)	2025-08-08 10:33:14 +10:00
Eugene Syromiatnikov	d0b69fa74b	util/analyze-contention-log.sh: print status output to stderr ... Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27983)	2025-08-07 11:02:51 -04:00
Eugene Syromiatnikov	99d0d23e05	crypto/threads_pthread: rewrite contention data storage to per-tid ... This eliminates locking during writing out of the lock contation report data, which claws back some of the lost performance degradation imposed by the lock contention reporting instrumentation: [Without -DREPORT_RWLOCK_CONTENTION] ~/dev/perftools/source$ ./evp_fetch 100 Average time per fetch call: 4.502162us ~/dev/perftools/source$ ./evp_fetch 200 Average time per fetch call: 8.224920us [Before] ~/dev/perftools/source$ ./evp_fetch 100 Average time per fetch call: 13.079795us ~/dev/perftools/source$ ./evp_fetch 200 Average time per fetch call: 23.420235us [After] ~/dev/perftools/source$ ./evp_fetch 100 Average time per fetch call: 6.557428us ~/dev/perftools/source$ ./evp_fetch 200 Average time per fetch call: 13.415148us The downside is that it produces a file for each TID, which floods the working directory with debug files, but that mich be an acceptable trade-off. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27983)	2025-08-07 11:02:51 -04:00
Eugene Syromiatnikov	0d6b1f50cb	util/analyze-contention-log: call the bash interpreter with -eu flags ... Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27983)	2025-08-07 11:02:51 -04:00
Eugene Syromiatnikov	8778245052	util/perl/OpenSSL/Test.pm: consistently use 4 spaces for indentation ... While the majority of the file uses 4 spaces for indentation, some parts contain 8-wide tabs. Use the spaces for indentation consistently throughout the file. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28162)	2025-08-06 08:17:05 +10:00
Pauli	39868ab1bf	params: emit an error if a parameter array overflows ... This is in addition to returning an error code. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27923)	2025-07-31 20:21:25 +02:00
Pauli	454119a625	params: revert error checking when params are duplicated ... This is to avoid a change of behaviour even though it is a result of user error. When params are duplicated, all but the first are ignored and no error is returned. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27923)	2025-07-31 20:21:25 +02:00
Pauli	1d221516cd	params: allow param name aliases ... We allowed multiple names for the same parameter in a number of places. This is best dealt with in the generated code. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27923)	2025-07-31 20:21:25 +02:00
Pauli	b196aa8fa0	paramnames: factor out common code after successful match ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27923)	2025-07-31 20:21:25 +02:00
Pauli	d417579e95	params: add support for 'hidden' parameters ... These are in the name decoder and structure but do not appear in the parameter listing. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27923)	2025-07-31 20:21:25 +02:00
Pauli	439f0243c1	params: update param parser generator script to support duplicated parameters ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27923)	2025-07-31 20:20:48 +02:00
Pauli	e44d7cb43a	params: add additional error checking to generated param name parsers ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27923)	2025-07-31 20:19:39 +02:00
Pauli	a7b9fa8665	params: generated decoder functions return an error state on failure ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27923)	2025-07-31 20:19:39 +02:00
Daniel Van Geest	d0899abb1b	Implement KEMRecipientInfo (RFC9629) in CMS ... Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27681)	2025-07-30 11:39:04 +02:00
Norbert Pocs	ead653be8b	find-doc-nits: Check env var documentation ... Check the code (source files and .in files) for undocumented ENV variable names. The variable name should be documented in openssl-env or in a designated man page in the "ENVIRONMENT" section. Resolves: https://github.com/openssl/openssl/issues/28050 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	2f531a742d	Document OPENSSL_MALLOC_SEED environment variable ... Add its mention to doc/man3/OPENSSL_malloc.pod, doc/man7/openssl-env.pod, and util/other.syms. Also, reorder the variable order in doc/man7/openssl-env.pod to a lexicographical one. Complements: 3df5736cf3 "Improve Malloc Failure Test" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	5e34e6a573	util/other.syms: sort OPENSSL_*cap lexicographically, add missing variables ... The list includes OPENSSL_ia32cap, OPENSSL_riscvcap, and OPENSSL_s390xcap, but not OPENSSL_armcap, OPENSSL_ppccap, or OPENSSL_sparcv9cap; fix that. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	70c05fcde5	Remove HARNESS_OSSL_PREFIX manipulation in the test harness ... The aim of HARNESS_OSSL_PREFIX environment variable is to avoid contaminating TAP producer's output with stanzas that can be interpreted by a TAP producer by prefixing them with comment; this can be achieved by processing the output within the runner instead, as it already does for non-standard prefixes; it also has the added benefit of alleviating the need to reset it for the external tests in order to avoid messing with their output checks. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
martin	b1b4b154fd	Add support for TLS 1.3 OCSP multi-stapling for server certs ... Co-authored-by: Michael Krueger Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20945)	2025-07-25 17:24:37 +02:00
Norbert Pocs	d05ac3becd	Fix perl warnings on various scripts ... Resolves: https://github.com/openssl/project/issues/1273 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28046)	2025-07-23 08:59:53 -04:00
Norbert Pocs	6b5540c21c	libcrypto.num: Deprecate EVP_PKEY_ASN1_METHOD related functions ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27727)	2025-07-17 11:25:18 -04:00
Theo Buehler	21f1b677d5	Provide X509_CRL_get0_tbs_sigalg() ... X509_CRL_get0_tbs_sigalg() corresponds to X509_get0_tbs_sigalg() and retrieves the AlgorithmIdentifier inside the TBSCertList which is not currently accessible in any sane way from public API. This PR adds X509_get0_tbs_sigalg() to the public API, documents it, adds a simple regress check so there is coverage and mentions the addition in CHANGES.md. On top of that, fix a typo in .gitignore and clean up some order inconsistencies in X509_get0_signature.pod. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27971)	2025-07-10 14:39:35 +02:00
Neil Horman	b321bf25c8	Fixup non-optional use of IO::Socket::IP ... IO::Socket::IP is an optionally used package in our perl scripts, and a recent change of mine used it unilaterally, causing breakage on older perl installations. Fix it up to use it optionally again, falling back to IO::Socket::INET when needed. Fixes #27940 Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27941)	2025-07-09 12:08:37 +02:00
Neil Horman	2883614772	Update util/analyze-contention-log.sh ... Co-authored-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27912)	2025-07-04 07:25:00 -04:00
Neil Horman	84e719bc2b	Add lock contention log analyzer ... With the introduction of REPORT_RWLOCK_CONTENTION, it would be nice if we could do some quick analysis on it. This script parses the log, and generates a histogram of lock contention events, uniquely identified by the stack trace that caused it, and prints out all unique latency event, sorted from largest (as measured by cumulative latency in that path). Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27912)	2025-07-04 07:25:00 -04:00
Andrew Dinh	74a0ec3c08	Add stream type flags to SSL_accept_stream ... Introduces SSL_ACCEPT_STREAM_UNI and SSL_ACCEPT_STREAM_BIDI flags to SSL_accept_stream, allowing callers to specify whether to accept only unidirectional or bidirectional streams. Returns the first of its type from the queue Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27883)	2025-07-02 20:55:24 -04:00
Pauli	08ca4fdf9f	paramnams: add new line to break long function declaration ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	effba0ee65	change _ettable to _list ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	4b0e0cc84d	params: sort structure fields for repeatability ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	f50e9ef510	params: remove obsolete functionality from param generator script ... With the move to structure based parameter decoding, some of the support functions are now unnecessary and are removed. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	51425094b5	params: update TRIE builder script to emit structs of param pointers ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:17 +10:00
Tomas Mraz	c296e1ce24	Add strlen to symbols allowed on Windows ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27854)	2025-06-19 15:20:57 +02:00
Dr. David von Oheimb	4a3809f705	check-format.pl: prevent false positive on typedef with space and '(' after type name ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27836)	2025-06-16 17:03:47 +02:00
Dr. David von Oheimb	e925b99f94	check-format-test-negatives.c: add 2nd macro indent test and hint on how known false positives are marked ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27836)	2025-06-16 17:03:47 +02:00
Dr. David von Oheimb	f21a8391dd	check-format.pl: prevent reporting "{ 1 stmt }" on "else if" branch unless -1 or --1-stmt option is given ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27836)	2025-06-16 17:03:47 +02:00
Dr. David von Oheimb	560ea7ffbf	check-format.pl: allow block for switch case/default ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27836)	2025-06-16 17:03:47 +02:00
Dr. David von Oheimb	58eb08985c	check-format-test-positives.c slightly improve comment describing the '*@' tags ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27836)	2025-06-16 17:03:47 +02:00
Dr. David von Oheimb	e6476de58d	adapt check-format-test-positives.c for too long lines after limit was relaxed from 80 to 100 ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27836)	2025-06-16 17:03:47 +02:00
Neil Horman	ae404a9b3b	Fix use of IO::Socket::IP on windows 2025 ... Apparently IO::Socket::IP has several odd behaviors on windows 2025, notably indicating that AF_INET6 isn't a supported family when it clearly is. Follow the pattern in determinig the haveIPV6 variable in Proxy.pm, and record if we determine IPv6 availablity with the IP class or the INET6 class and use the same method when testing port binding Fixes project/#1213 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> (Merged from https://github.com/openssl/openssl/pull/27780)	2025-06-06 09:38:09 +02:00
Neil Horman	f78f824c8e	Test randomly selected client port for availabilty in sslrecords test ... Encountered this error in a pr today: https://github.com/openssl/openssl/actions/runs/15418713146/job/43387767612 === Proxy started on port [::1]:56662 Engine "ossltest" set. Using default temp DH parameters ACCEPT [::1]:59189 Server responds on [::1]:59189 Engine "ossltest" set. C0774F02907F0000:error:80000062:system library:BIO_bind:Address already in use:crypto/bio/bio_sock2.c:240:calling bind() C0774F02907F0000:error:10000075:BIO routines:BIO_bind:unable to bind socket:crypto/bio/bio_sock2.c:242: connect:errno=98 === Its occuring because we randomly select a port to use for our client connection in the sslrecords test. Thats usually fine, but sometimes, we get unlucky and pick a port thats already in use. This presents as random failures in our CI on this test. So lets try harden ourselves against it. When creating the client connection, test the randomly selected port by trying to bind to it via a call to IO::Socket::IP->new(). If that fails, try a different port number, until we get one that works. If it works, use that port in the assignment for the clients local port value. Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27752)	2025-06-05 10:05:48 -04:00
Viktor Dukhovni	287bbb28b0	Split arguments taking quotes into account ... CA.pl supports interpolating multiple arguments into the executed commands. Previously these were evaluated by a shell, which supported quoting of values that contain whitespace, backslashes, ... With a shell no longer used (avoid command injection), backwards compatibility requires some similar functionality. The code now handles double and single-quoted strings (shell-style word splitting), but not parameter expansion ($foo remains unexpanded) or command substitution (`cmd` and $(cmd) remain unexpanded). On Windows system(@LIST) does not correctly preserve argv, do our own quoting instead and use system(<$quoted_cmd>). Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27432)	2025-06-04 17:33:48 +02:00
Pauli	973322d672	paramnames: add new function to handle names and types. ... The help generates the ettable table and the TRIE based name decode function. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27747)	2025-06-04 16:48:59 +02:00
Pauli	445e2797e6	add EVP_PKEY_get_security_category to exported symbols ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27571)	2025-05-27 18:01:44 +10:00