4323 Commits

Author	SHA1	Message	Date
Norbert Pocs	45673cec4a	Check return code of BIO_ADDR_rawaddress ... Fixes coverity issue: https://scan5.scan.coverity.com/#/project-view/64471/10222?selectedIssue=1666584 Thank you for the report! Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/28751) (cherry picked from commit 7fb9163586)	2025-10-07 12:34:47 -04:00
Eugene Syromiatnikov	651abe1eb5	apps/storeutl.c: avoid signed integer overflow in indent_printf() ... As two arbitrarily large printf return values can trigger signed integer overflow, rewrite the return value handling to avoid it. Fixes: fb43ddceda "Add a recursive option to 'openssl storeutl'" Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1665428 References: https://github.com/openssl/project/issues/1432 Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28647)	2025-09-25 16:58:34 +02:00
openssl-machine	e66332418f	Copyright year updates ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Release: yes	2025-09-02 13:05:45 +00:00
Pavol Žáčik	39e286bd26	apps/speed.c: Support more signature algorithms ... Some signature algorithms (e.g., ML-DSA-65) cannot be initialized via EVP_PKEY_sign_init, so try also EVP_PKEY_sign_message_init before reporting an error. Fixes #27108. Signed-off-by: Pavol Žáčik <zacik.pa@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28224)	2025-08-20 16:14:09 +02:00
Pavol Žáčik	dab850f499	apps/speed.c: Disable testing of composite signature algorithms ... Creating public key context from name would always fail for composite signature algorithms (such as RSA-SHA256) because the public key algorithm name (e.g., RSA) does not match the name of the composite algorithm. Relates to #27855. Signed-off-by: Pavol Žáčik <zacik.pa@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28224)	2025-08-20 16:14:09 +02:00
Eugene Syromiatnikov	f3a4d05c58	apps, fuzz, providers: use array memory (re)allocation routines ... Co-Authored-by: Alexandr Nedvedicky <sashan@openssl.org> Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28059)	2025-08-08 12:22:10 -04:00
Eugene Syromiatnikov	eea6315408	Eliminate indentation tabs from *.c and *.h files ... While the majority of the sites assumed 8-wide tabs, at least engines/e_capi.c assumed 4-wide; in any case it is better to just follow the code style guide and eliminate them altogether. Some addition changes (namely, curly brackets in apps/crl.c and apps/req.c, and additional whitespace changes in apps/s_client.c and test/provider_pkey_test.c) are made to placate check-format-commit.sh. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28162)	2025-08-06 08:17:05 +10:00
Saurabh Kushwah	eac588ac36	apps/asn1parse.c: correct help text order for -genstr option ... CLA: trivial Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28123)	2025-07-31 20:37:18 +02:00
Michael Baentsch	296f1f6dd8	Remove unnecessary OPENSSL_NO_RSA remnants ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28113)	2025-07-30 18:36:26 +02:00
Daniel Van Geest	d0899abb1b	Implement KEMRecipientInfo (RFC9629) in CMS ... Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27681)	2025-07-30 11:39:04 +02:00
Neil Horman	3c4f009959	Fix NULL check in get_ocsp_resp_from_responder ... We assign an allocation to *sk_resp, but only check for NULL on sk_resp, not the value it points to. Addresses https://scan5.scan.coverity.com/#/project-view/60762/10222?selectedIssue=1659222 Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28101)	2025-07-29 13:40:57 -04:00
Neil Horman	bd1a14bcaf	Set *sk_resp to NULL when freeing. ... Its possible for get_ocsp_resp_from_responder to return OK after having freed *sk_resp without setting the freed pointer to NULL, leading us to set a garbage pointer in other code. Ensure that we set it to NULL after freeing Addresses https://scan5.scan.coverity.com/#/project-view/60762/10222?selectedIssue=1659225 Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28101)	2025-07-29 13:40:57 -04:00
Neil Horman	8ceae5a622	Fix NULL check in bring_oscp_resp_in_correct_order ... We assign an allocated pointer to *sk_resp but only check if sk_resp is NULL when sk_resp is a pointer to a pointer Addresses https://scan5.scan.coverity.com/#/project-view/60762/10222?selectedIssue=1659227 Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28101)	2025-07-29 13:40:57 -04:00
Eugene Syromiatnikov	082a81404c	apps/lib/apps.c: remove HARNESS_OSSL_PREFIX envvar handling ... As the environment variable is no longer used by the test harness, its support can be removed from the openssl command, along with the possible unintended consequences of prefixing the standard output of the openssl command with an arbitrary string set in the environment. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
martin	b1b4b154fd	Add support for TLS 1.3 OCSP multi-stapling for server certs ... Co-authored-by: Michael Krueger Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20945)	2025-07-25 17:24:37 +02:00
Daniel Van Geest	e7d5398aa1	openssl rand command should use the loaded library context ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28075)	2025-07-24 13:26:59 +02:00
Norbert Pocs	af2aaf3271	Deprecate ASN1_METH internal usage ... Some of them are needed and were kept by adding `#include "internal/deprecated"` and some had to be turned off. Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27727)	2025-07-17 11:25:18 -04:00
Norbert Pocs	91d34f408c	openssl: Add option to init sec mem at startup ... Adding env variables OPENSSL_SEC_MEM and OPENSSL_SEC_MEM_MINSIZE, which initializes the secure memory at the beginning of the openssl app. Resolves: https://github.com/openssl/project/issues/786 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28036)	2025-07-16 08:23:38 -04:00
Tomas Mraz	c62cd07d14	apps: Silence warnings on Win64 builds ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27806)	2025-07-02 17:26:26 +02:00
Tomas Mraz	bb86c43fa8	libapps + libcrypto: Silence warnings on Win64 builds ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27806)	2025-07-02 17:26:26 +02:00
Chris	2d978786f3	Remove accidentally left debug statements from ec.c ... CLA: trivial - Cleaned up hardcoded debug statements that were inadvertently left in the open source distribution - No functional changes to the EC key processing logic Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27921)	2025-07-01 20:51:23 +02:00
Jiasheng Jiang	b2e7c4e2ba	apps/openssl.c: Add OPENSSL_free() to avoid memory leak ... Add OPENSSL_free() to release trace_data if trace_data is not NULL but other errors occur to avoid memory leak. Fixes: 682b444f8a ("apps/openssl.c: Adapt to enable tracing output") Signed-off-by: Jiasheng Jiang <jiashengjiangcool@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27911)	2025-07-01 20:48:11 +02:00
Jiasheng Jiang	2fccd17e8f	apps/lib/apps.c: Add check for BIO_new() ... Add checks for the return value of BIO_new() to guarantee successful allocation, consistent with other usages. Fixes: a412b89 ("dup_bio_* and bio_open_* are utility functions and belong in apps.c") Signed-off-by: Jiasheng Jiang <jiashengjiangcool@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27894)	2025-07-01 19:31:54 +02:00
Jakub Zelenka	f3867bb25b	Introduce cms kekcipher option to select cipher for pwri ... This is useful for AEAD ciphers where it is not possible to use AEAD cipher (currently only AES GCM supported) for password recipient info because the same cipher is used for encrypting the password and it is not possible to store tag for this purpose so different cipher (e.g. AES CBC) needs to be selected. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26871)	2025-07-01 19:04:53 +02:00
Ingo Franzki	7bdc0d13d2	speed: Increase MAX_SIG_NUM and fix its usage in loopargs_t fields ... Increase the maximum number of signature algorithms. With the introduction of the SignMessage and VerifyMessage API with OpenSSL 3.4 the providers that support combined digest and sign algorithms register quite a lot more signature algorithms, so the current limit of 111 is hit easily. While at it correct the definitions of the signature fields within the loopargs_t structure to use MAX_SIG_NUM instead of MAX_KEM_NUM. Closes: https://github.com/openssl/openssl/issues/27873 Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27878)	2025-06-26 07:52:45 -04:00
Neil Horman	b6ff559853	Fix exit code for s_time when -new command line switch specified ... When operating with the -new switch in apps/openssl s_time, we neglect to set the exit code properly, and so the app exits with a code of 1 rather than 0 as expected Fixes #27856 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27857)	2025-06-20 14:56:44 -04:00
Bartel Artem	a4c5096d16	genpkey.c: Fix filename copy & paste bug in error output ... Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27789)	2025-06-10 19:55:03 +02:00
Dr. David von Oheimb	ac85974bc3	apps/x509.c: re-add ERR queue printing on errors ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27739)	2025-06-04 17:37:33 +02:00
Viktor Dukhovni	287bbb28b0	Split arguments taking quotes into account ... CA.pl supports interpolating multiple arguments into the executed commands. Previously these were evaluated by a shell, which supported quoting of values that contain whitespace, backslashes, ... With a shell no longer used (avoid command injection), backwards compatibility requires some similar functionality. The code now handles double and single-quoted strings (shell-style word splitting), but not parameter expansion ($foo remains unexpanded) or command substitution (`cmd` and $(cmd) remain unexpanded). On Windows system(@LIST) does not correctly preserve argv, do our own quoting instead and use system(<$quoted_cmd>). Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27432)	2025-06-04 17:33:48 +02:00
Viktor Dukhovni	0b1bdef38e	Avoid shell commandline processing in CA.pl ... The CA.pl script used to build single-string string commandlines to pass to a shell via `system(command_string)`. That was fragile and not a best practice. This PR replaces `system(command_string)` with `system { executable } @argv`, which avoids the shell whenever possible (at least Unix-like systems and Windows). The only question mark is whether some sort of quoting is needed for VMS to preserve the case of commandline arguments even when processes are spawned directly, rather than via the shell. Unfortunately, given the way that some environment variables and command-line options are used to construct the commands to run, the result is still brittle. The CA.pl utility really should be replaced with something better. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27432)	2025-06-04 17:33:48 +02:00
AntonMoryakov	3161f460fa	apps: lib: Prevent potential NULL dereference in init_client() ... apps: lib: Simplify ba_ret handling in init_client() Simplify logic around ba_ret assignment: - Fail early if ba_ret == NULL - Assign directly otherwise, without checking *ba_ret This avoids extra nesting and matches OpenSSL's conventions. CLA: trivial Signed-off-by: Anton Moryakov <ant.v.moryakov@gmail.com> Co-authored-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26783)	2025-05-29 16:37:41 +02:00
JiashengJiang	e0ae801728	apps/cmp.c: Free bio on error to avoid memory leak ... Call BIO_free() to release bio if ASN1_i2d_bio_of() fails, preventing a memory leak. Fixes: 6a3579e190 ("CMP: add support for requesting cert template using genm/genp") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27647)	2025-05-27 19:51:55 +02:00
JiashengJiang	0dc6ea55a1	apps/pkeyutl.c: Add OPENSSL_free() to avoid a memory leak ... If EVP_PKEY_CTX_ctrl_str() fails, the code jumps to 'end' label without freeing passwd, causing a memory leak. Fixes: 9d1bf5f7de ("Add option to read pkeyopts interactively") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27470)	2025-05-27 19:47:17 +02:00
Tomas Mraz	0eb9acc24f	apps/x509.c: Fix the -addreject option adding trust instead of rejection ... Fixes CVE-2025-4575 Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27672)	2025-05-22 09:49:18 +02:00
Dmitriy Denisov	00480f1def	The condition that is never checked has been removed. ... If criterion == OSSL_STORE_SEARCH_BY_KEY_FINGERPRINT, the criterion !=0 condition will be triggered. Found by Linux Verification Center (linuxtesting.org) with SVACE. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27607)	2025-05-19 16:26:14 +02:00
Norbert Pocs	6a6a098bf1	apps/prime.c: Remove unused assignment ... The variable is never read after the assignment. Coverity issue: 1646789 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27636)	2025-05-19 16:23:54 +02:00
Norbert Pocs	0d3f0876ac	prime.c: Remove uneeded if check for NULL value ... This was reported by coverity scan issue 1646789 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27623)	2025-05-15 15:38:10 -04:00
Norbert Pocs	7cc69ec4cf	configutl.c: Resolve possible resource leak of config file ... The coverity detects Resource leak here. It may come to leak when the option is passed multiple times. Resolve coverity scan issue 1646846 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27623)	2025-05-15 15:38:10 -04:00
Norbert Pocs	677ded7547	configutl.c: Remove dead code ... Resolve coverity issue 1646848, 1646847 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27623)	2025-05-15 15:38:10 -04:00
Jeremy Doupe	dca67c0aa1	APPS/x509: add -multi option for outputting all certs found in input ... Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27340)	2025-05-14 12:51:42 +02:00
Dr. David von Oheimb	88777599a6	apps/cms.c: add failure handling for I/O errors of 'BIO_printf(out, ...)' ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27368)	2025-05-14 08:43:21 +02:00
Dr. David von Oheimb	c3da4b584e	apps/cms.c: clarify treatment of 'ret' variable in cms_main() ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27368)	2025-05-14 08:43:20 +02:00
Dr. David von Oheimb	98b6df79fb	apps/cms.c: remove needless ERR_print_errors() calls ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27368)	2025-05-14 08:43:20 +02:00
Dr. David von Oheimb	cc7084a5ee	apps/cms.c: add missing error messages in various error cases ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27368)	2025-05-14 08:43:20 +02:00
Dr. David von Oheimb	1beaf112e5	apps/cms.c: add missing error message on error writing CMS output (ret == 6) ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27368)	2025-05-14 08:43:20 +02:00
Dr. David von Oheimb	35e431ed6d	APPS/cmp.c: fix char encoding of subject, issuer, sender, and recipient DN ... Fixes #27572 Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27592)	2025-05-13 14:08:50 +02:00
Dmitry Belyavskiy	78ca45cef0	Utility for dumping OpenSSL config file ... Based on @neverpanic code` Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27290)	2025-05-08 11:05:42 +10:00
Tomas Mraz	3847b4920a	apps/prime.c: Remove dead code ... Fixes Coverity 1646773 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27524)	2025-05-02 13:39:41 +02:00
Tomas Mraz	573db12079	apps/prime.c: Fix memory leak of a BIGNUM ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27521)	2025-04-29 11:59:29 +02:00
zriback	d6dc0f1cac	Update to use BIO_get_line() with support for multiple primes per in file ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26549)	2025-04-29 14:17:06 +10:00