37012 Commits

All Branches

Search

Author	SHA1	Message	Date
Viktor Dukhovni	60f2a71400	Fix goto label indents to match style ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27175)	2025-03-28 11:37:12 +01:00
Julian Zhu	08c8dd6b8c	RISC-V: Provide optimized SHA-256 implementation using Zbb extension ... Signed-off-by: Julian Zhu <julian.oerv@isrc.iscas.ac.cn> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27011)	2025-03-28 11:22:58 +01:00
Julian Zhu	a41f9135f0	RISC-V: Provide optimized SHA-512 implementation using Zbb extension ... Signed-off-by: Julian Zhu <julian.oerv@isrc.iscas.ac.cn> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27161)	2025-03-28 11:17:35 +01:00
Julian Zhu	f04fdd908c	RISC-V: Add Zbb rori opcode in riscv.pm ... Signed-off-by: Julian Zhu <julian.oerv@isrc.iscas.ac.cn> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27161)	2025-03-28 11:16:18 +01:00
Tomas Mraz	bf4c9b7b66	provider-compatibility.yml: Update the branches ... Fixes regression from 725f55e23 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27177)	2025-03-27 12:18:10 +01:00
Bernd Edlinger	8ed3eee3b4	Fix quic_multistream_test: correct more frame types ... There are a few more critical frame injections that previously created an out-of-diskspace problem and now only a CI test failure. The pattern in the qlog files is always similar to this: {"frame_type":"stop_sending","stream_id":6,"error_code":1152,"length":4}, {"frame_type":"path_challenge","length":9},...{} Note: The stream_id 6 is a OSSL_QUIC_FRAME_TYPE_CRYPTO. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27170)	2025-03-27 12:16:13 +01:00
sashan	7fa51041e4	Use OPENSSL_strdup() for strings freed by OPENSSL_free() ... Things can get messy when application decides to use it's own memory allocation functions using CRYPTO_set_mem_functions(3ossl) Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27163)	2025-03-27 12:03:55 +01:00
Andrew Ioanoviciu	50f945117c	port_init(): Security hardening for token key ... Used RAND_priv_bytes_ex instead of RAND_bytes_ex to guarantee higher isolation for cryptographic keys. Replaced OPENSSL_free with OPENSSL_clear_free to wipe sensitive data and free it. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> (Merged from https://github.com/openssl/openssl/pull/27029)	2025-03-27 10:44:09 +01:00
Viktor Dukhovni	aeb797594b	Report s_client chain cert pkey alg correctly ... In particular provided keys are also supported, and for EC keys we report the group rather than the bit count. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27131)	2025-03-27 10:40:29 +01:00
Kyle Mullen	b7d3c729b1	Update X509_VERIFY_PARAM_set_flags.pod ... Change description of B<X509_V_FLAG_CRL_CHECK_ALL> to reflect its inability to function without B<X509_V_FLAG_CRL_CHECK> being enabled as well. Fixes #27056 (https://github.com/openssl/openssl/issues/27056) CLA: trivial Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27098)	2025-03-27 10:30:40 +01:00
Neil Horman	131fff1b09	Extend backoff period in noisydgram BIO users ... Initially tests that were written which make use of the noisy dgram BIO, were done under the assumption that, despite any packet mangling done by the noisy dgram bio, the connection would still be established. This was initiall guaranteed by configuring the BIO to avoid corrupting/dropping/duplicating/re-injecting the first packet received, thus ensuring that the client and server hello frames would make it to the peer successfully. This implicitly made the assumption that the client and server hellos were contained within a single datagram, which until recently was true. However, with the introduction of ML-KEM keyshares, the above assumption no longer holds. Large ML-KEM keyshares generally expand these TLS messages accross multiple datagrams, and so it is now possible that those initial records can become corrupted/lost etc, leading to unexpected connection failures. Lets fix it by restoring the guarantee that these tests were written under by making the backoff time configurable to a number of frames, and configuring the quic connection objects used in the test to not drop the first two initial frames, once again guaranteeing that the client and server hello arrive at the peer uncorrupted, so that we get a good connection established. Fixes #27103 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27169)	2025-03-26 17:40:56 +01:00
qu3ri	1b61f8e180	bn_mul_words.pod: Fix failures in doc-nits check ... Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26597)	2025-03-26 15:50:18 +01:00
qu3ri	78b1fdf4a1	Moved crypto/bn/README.pod to internal manpages ... The new place is doc/internal/man3/bn_mul_words.pod. Also removed outdated information. Implementing the fix from https://github.com/quictls/quictls/pull/214 Fixes #26399 Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26597)	2025-03-26 15:49:31 +01:00
Neil Horman	4943ac7b88	Update dead links and e-mails our sources ... http://www.openssl.org/~appro/cryptogams/ is 404, update to https://github.com/dot-asm/cryptogams/ And clean up the boiler plate text around it. Replace stray usage of appro@openssl.org with github url. The email in question here is no longer valid, replace it with the corresponding github id for the user. Replace <appro\@fy.chalmers.se> with <https://github.com/dot-asm> Fix lots more dead emails addresses that we missed Remove reference urls that no longer exist. Just delete urls that 404 now, and have no obvious new link. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> (Merged from https://github.com/openssl/openssl/pull/27073)	2025-03-26 15:40:02 +01:00
Chase Killorin	2c8103e468	Removed duplicates in some man pages ... Fixes openssl/openssl#11748 find-doc-nits: Check for duplicate options Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27088)	2025-03-26 15:33:20 +01:00
Andrey Tsygunka	3edb1f09c6	Fix return value of the i2d_ASN1_bio_stream() call ... If the flags argument does not contain the SMIME_STREAM bit, the i2d_ASN1_bio_stream() function always returns 1, ignoring the result of the ASN1_item_i2d_bio() call. Fix the return value to the result of the ASN1_item_i2d_bio() call for this case. CLA: trivial Signed-off-by: Andrey Tsygunka <aitsygunka@yandex.ru> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27106)	2025-03-26 15:27:23 +01:00
Viktor Dukhovni	dc246cec87	In s_client report 'long' certificate sigalg name ... This matches the sigalg output format of X509_signature_print(3). Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27130)	2025-03-26 15:23:04 +01:00
Tomas Mraz	725f55e235	Update provider compatibility CI to run on 3.5 branch ... Also drop 3.1 development branch as it is out of public support now. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27149)	2025-03-26 15:02:52 +01:00
Richard Levitte	a006b0a089	In doc/man7/provider-{en,de}coder.pod, clarify where properties are defined ... Fixes #27126 Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27132)	2025-03-26 13:56:03 +01:00
Bernd Edlinger	ee651fff14	Fix a visual glitch in test_cms.t ... the newline in the newly added subtest names somehow creates another small visual glitch in the test output, that looks like: 80-test_cms.t .. 30/? 80-test_cms.t .. ok Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> (Merged from https://github.com/openssl/openssl/pull/27145)	2025-03-26 19:10:39 +08:00
Jon Ericson	da8de0e8dd	Change documentation to point to new wiki location ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27081)	2025-03-25 20:24:48 +01:00
jay9827342	e5e4cf41c7	Memory leak fix ktls_meth.c ... The OSSL_RECORD_LAYER needs to be properly freed when return code isnt success. Memory leak fix CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27111)	2025-03-25 20:22:23 +01:00
Paul Elliott	b6dceb36e8	Enable AES-GCM unroll8/unroll12 for Neoverse N3/V3 ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27112)	2025-03-25 20:19:14 +01:00
Viktor Dukhovni	681528cbc4	Report IANA sigalg name in s_client ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27128)	2025-03-25 20:06:19 +01:00
Tomas Mraz	69fa61b082	Test EVP_DigestSignInit() with ECDSA and KECCAK-256 hash ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27107)	2025-03-25 20:00:42 +01:00
Tomas Mraz	6708df48d6	Allow ECDSA signing with digests without a NID in default provider ... Also fix ineffective check in DSA signing. Fixes #27084 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27107)	2025-03-25 20:00:42 +01:00
Andrey Tsygunka	8e08f9c5a0	Fix NULL pointer dereference in `asn1_ex_i2c()`, crypto/asn1/tasn_enc.c ... Adds handling of V_ASN1_UNDEF to avoid NULL dereference in case ASN1 structure contains an element of type ASN1_TYPE without initializing its value (i.e. default constructed) CLA: trivial Signed-off-by: Andrey Tsygunka <aitsygunka@yandex.ru> Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27100)	2025-03-25 19:53:49 +01:00
Tomas Mraz	21f4bd986b	Update NEWS.md and CHANGES.md for the 3.5 release ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27152) (cherry picked from commit d6ace599ed)	2025-03-25 15:30:24 +01:00
Tomas Mraz	e5bd7f9110	80-test_cms.t: Fix Provider compatibility CI failures ... Old FIPS providers do not support PQC algorithms. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27147)	2025-03-25 11:28:14 +01:00
Bernd Edlinger	ad684e1a6a	Try to fix endless loops in quic_multistream_test ... The problem seem to be caused by syntax errors due to injected OSSL_QUIC_FRAME_TYPE_PATH_CHALLENGE packets which are too short by 8 bytes. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27089)	2025-03-24 20:20:14 +01:00
Bernd Edlinger	289dcbe008	Upload artifacts despite possible test failures ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27089)	2025-03-24 20:20:14 +01:00
Bernd Edlinger	f346932a15	Do not wrap the python3 in ../../util/wrap.pl ... That is bad, because this script does seem to have issues, because it is itself linked against libcrypto, which causes crashes in enable-asan builds: ASan runtime does not come first in initial library list; you should either link runtime to your application or manually preload it with LD_PRELOAD. ../../util/wrap.pl python3 ../../test/recipes/70-test_quic_multistream_data/verify-qlog.py => 1 not ok 1 - running qlog verification script not ok 2 - check qlog output Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27089)	2025-03-24 20:20:14 +01:00
Bernd Edlinger	9f85a036e3	Try to fix reported qlog issues ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27089)	2025-03-24 20:20:14 +01:00
Frederik Wedel-Heinen	21b170df9f	Adds the concept of thunks to OPENSSL_sk interface ... This allows applications to call functions of correct signature when free'ing OPENSSL_sk items which UBSan complains about. Related to #22896. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27071)	2025-03-24 15:28:34 +01:00
Tomas Mraz	83b11af017	qlog_event_helpers.c: Fix inverted condition ... We want to skip up to PACKET_remaining() and not "at least" PACKET_remaining() bytes. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27138)	2025-03-24 15:22:56 +01:00
slontis	3c1f50ad6f	ML_DSA - Fix bug in OSSL_PKEY_PARAM_SECURITY_BITS getter. ... Reported by @romen It was off by a factor of 8. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27110)	2025-03-21 15:57:31 +11:00
Matt Caswell	95051052b3	Move the Handshake read secret change earlier in the process for QUIC 0-RTT ... On the server side we were changing the handshake rx secret a little late. This meant the application was forced to call SSL_do_handshake() again even if there was nothing to read in order to get the secret. We move it a little earlier int the process to avoid this. Fixes the issue described in: https://github.com/ngtcp2/ngtcp2/pull/1582#issuecomment-2735950083 Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27101)	2025-03-20 20:22:39 +01:00
Daniel Van Geest	c1d27789e9	Fix use of SHAKE as a digest in CMS ... draft-ietf-lamps-cms-sphincs-plus-19 specifies SHAKE as the message digest algorithm for SLH-DSA-SHAKE-* in CMS. SHAKE doesn't have a default digest length, so this adds a SHAKE-specific kludge in CMS. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27087)	2025-03-20 12:20:37 +01:00
Viktor Dukhovni	27b88364e4	Avoid erroneous legacy code path when provided ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27075)	2025-03-20 11:33:23 +01:00
Ankit Kekre	952d9b83b2	apps/cms.c, apps/ocsp.c: Added NULL pointer checks ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27059)	2025-03-20 11:30:57 +01:00
Matt Caswell	207cd5bb97	Fix the use of CCM ciphersuites with QUIC TLS API ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27091)	2025-03-20 11:24:26 +01:00
Matt Caswell	366b2643cb	Add a test for using CCM ciphersuites with QUIC TLS API ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27091)	2025-03-20 11:24:26 +01:00
Matt Caswell	228a26fde4	Always use NULL BIOs when using the QUIC TLS API ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27091)	2025-03-20 11:24:26 +01:00
Matt Caswell	445c0942cd	Test that using the QUIC TLS API does not require BIOs to be set ... When using the QUIC TLS API it does not make sense to require BIOs to be set. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27091)	2025-03-20 11:24:26 +01:00
Matt Caswell	2100cf2ee0	Ensure SSL_get_app_data() continues to work even in SSL_free() ... During SSL_free() we may get a QUIC TLS callback being called to clean up any remaining record data. We should ensure that SSL_get_app_data() continues to work, even in this scenario. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27091)	2025-03-20 11:24:26 +01:00
Matt Caswell	4ad45969b0	Don't decrement the unreleased counter if we failed to release a record ... In a failure situation we may incorrectly decrement the amount of data released. Only decrement the counter if we successfully released. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27091)	2025-03-20 11:24:26 +01:00
Matt Caswell	f2488a567b	Check SSL_get_app_data() from QUIC cb in a failure situation ... Ensure SSL_get_app_data() works even in a failure situation from SSL_free() Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27091)	2025-03-20 11:24:26 +01:00
Matt Caswell	2ebae654d5	Add a test for calling SSL_get_app_data() from QUIC TLS callbacks ... Check that we get the expected app data when using the QUIC TLS callbacks. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27091)	2025-03-20 11:24:26 +01:00
Bernd Edlinger	c658a60aae	Remove workaround for an old ppc64le compiler bug ... Lowering the optimization level is no longer needed, since the old compiler bug from ubuntu-20.04 has been fixed meanwhile. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27033)	2025-03-20 11:17:29 +01:00
Dmitry Misharov	1bf328edf9	correctly mark the release as prerelease ... release must be marked as prerelease if "alpha" or "beta" is in tag name Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27092)	2025-03-20 11:15:16 +01:00