37624 Commits

All Branches

Search

Author	SHA1	Message	Date
Burkov Egor	711c25fbfb	Merge 7593045253 into 296f1f6dd8	2025-07-31 06:54:34 +01:00
Michael Baentsch	296f1f6dd8	Remove unnecessary OPENSSL_NO_RSA remnants ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28113)	2025-07-30 18:36:26 +02:00
Michael Baentsch	fd7fc90346	fuzz/dtlsserver.c: Remove incorrect ifdef guard ... Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28102)	2025-07-30 18:31:47 +02:00
Tomas Mraz	fcb5e20ac7	test_tlsext_status_type(): Avoid leaking of previously allocated data ... Fixes Coverity 1659226, 1659224, 1659223 Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28105)	2025-07-30 18:29:33 +02:00
Ingo Franzki	b9ff440dd6	Only report generic error if provider did not put an error on the error queue ... Commit 72351b0d18 added code to unconditionally put a generic error onto the error stack, if key generation, encryption, decryption, sign, or verify fails to ensure that there is an error entry on the error queue, even if the provider did not itself put a specific error onto the queue. However, this can hide error details if an application just looks at the very last error entry and checks for specific errors. Now, the generic error is always the last entry, and the application won't find the expected error entry, although it would be there as second last entry. This can lead to different application behavior in error situations than before this change. To fix this, only add the generic error entry if the provider did not itself add an error entry onto the queue. That way, there always is an error on the error queue in case of a failure, but no behavior change in case the provider emitted the error entry itself. Closes: https://github.com/openssl/openssl/issues/27992 Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28073)	2025-07-30 18:27:08 +02:00
Ingo Franzki	f77fafd16e	Make ERR_count_to_mark() available to providers via 'in' dispatch array ... Functions like ERR_set_mark(), ERR_clear_last_mark(), and ERR_pop_to_mark() are already passed to the a provider via the 'in' dispatch array of the provider initialization function (although the documentation did not mention them). Also pass ERR_count_to_mark() to the provider the same way, and update the documentation to mention all four functions. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28073)	2025-07-30 18:27:08 +02:00
Eugene Syromiatnikov	f12f8cc035	Fix hanging of test_external_cf_quiche ... The commit "Remove HARNESS_OSSL_PREFIX manipulation in the test harness" forced all the output to be processed by the test harness, which means that any process that keeps the stdout FD open prevents the run() call from finishing, as was the case in the test_external_cf_quiche test that ran quiche server in the background, but retaining the std{in,out,err} descriptors. Avoid that by explicitly redirecting them to a log file. Reported-by: Tomas Mraz <tomas@openssl.org> Fixes: 70c05fcde5 "Remove HARNESS_OSSL_PREFIX manipulation in the test harness" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28125)	2025-07-30 16:04:55 +02:00
Daniel Van Geest	d0899abb1b	Implement KEMRecipientInfo (RFC9629) in CMS ... Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27681)	2025-07-30 11:39:04 +02:00
Anton Moryakov	daa004d484	crypto: evp: fix potential null pointer dereference in EVP_DigestSignUpdate in m_sigver.c ... Static analysis detected that EVP_DigestSign() could lead to null pointer dereference in EVP_DigestSignUpdate() when pctx->pmeth is NULL. The issue occurs in the legacy code path where pmeth is accessed without prior null check. This fix adds a proper null check for pctx->pmeth in the legacy section of EVP_DigestSignUpdate() to prevent the crash when the function is called through EVP_DigestSign() with improperly initialized context. The check is placed in EVP_DigestSignUpdate() rather than EVP_DigestSign() to maintain proper separation of concerns and follow OpenSSL's architectural patterns where lower-level functions handle their own parameter validation. Fixes potential crash in signature operations with legacy providers. CLA: trivial Signed-off-by: Anton Moryakov <ant.v.moryakov@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28095)	2025-07-30 08:55:46 +10:00
Neil Horman	3c4f009959	Fix NULL check in get_ocsp_resp_from_responder ... We assign an allocation to *sk_resp, but only check for NULL on sk_resp, not the value it points to. Addresses https://scan5.scan.coverity.com/#/project-view/60762/10222?selectedIssue=1659222 Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28101)	2025-07-29 13:40:57 -04:00
Neil Horman	bd1a14bcaf	Set *sk_resp to NULL when freeing. ... Its possible for get_ocsp_resp_from_responder to return OK after having freed *sk_resp without setting the freed pointer to NULL, leading us to set a garbage pointer in other code. Ensure that we set it to NULL after freeing Addresses https://scan5.scan.coverity.com/#/project-view/60762/10222?selectedIssue=1659225 Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28101)	2025-07-29 13:40:57 -04:00
Neil Horman	8ceae5a622	Fix NULL check in bring_oscp_resp_in_correct_order ... We assign an allocated pointer to *sk_resp but only check if sk_resp is NULL when sk_resp is a pointer to a pointer Addresses https://scan5.scan.coverity.com/#/project-view/60762/10222?selectedIssue=1659227 Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28101)	2025-07-29 13:40:57 -04:00
Neil Horman	88a1fbb8d1	reduce lock contention when adding objects to ADDED_OBJ hash table ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28081)	2025-07-29 13:23:45 -04:00
Neil Horman	cff8031163	move added creation to happen outside of write lock ... We have a global ADDED_OBJ hashtable, and we check to create it on every object add with the write lock potentially held. move that creation to a RUN_ONCE routine so that its always created before the write lock is held Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28081)	2025-07-29 13:23:38 -04:00
Norbert Pocs	758ca8acf0	unix-Makefile.tmpl: Run find-doc-nits with env var checker too ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Norbert Pocs	ead653be8b	find-doc-nits: Check env var documentation ... Check the code (source files and .in files) for undocumented ENV variable names. The variable name should be documented in openssl-env or in a designated man page in the "ENVIRONMENT" section. Resolves: https://github.com/openssl/openssl/issues/28050 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	dcf009cd89	doc/man1/openssl-rehash.pod.in: document PATH environment variable ... Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	3f633775e4	doc/man7/openssl-env: document HOME environment variable usage ... Seems to be the only place where it is used, as of now. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	2f41923d2d	doc/man7/openssl-env: document OPENSSL_TEST_LIBCTX environment variable ... Complements: e89578be2930 "Test RSA oaep in fips mode" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	1df3a8a80e	doc/man7/openssl-env: OPENSSL_TRACE: tfix ... Fixes: ee0bf38e87 "improve and move text on OPENSSL_TRACE from doc/man1/openssl.pod to doc/man7/openssl-env.pod" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	30740298b6	doc/man7/openssl-env: sort OPENSSL_TRACE categories lexicographically ... There is little reason to preserve the declaration order for the reader. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	10e26ab122	doc/man7/openssl-env: update REF_COUNT OPENSSL_TRACE category description ... It seems that its usage has been changed since the initial mention in 6d594fdf52 "OSSL_trace_set_channel.pod and openssl.pod: fix missing/inconsistent category items". Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	9ccd388664	doc/man7/openssl-env: document QUERY OPENSSL_TRACE category ... Complements: eed43f8a12ef "Add a QUERY trace category" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	62c4633851	doc/man7/openssl-env: document PROVIDER OPENSSL_TRACE category ... Complements: 93296eaaa0e8 "Adding a trace category for PROVIDER calls" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	707f612416	doc/man7/openssl-env: reword the description ... The manual page describes not only environment variables that pertain the library, but some of the applications as well (OPENSSL, OPENSSL_CONFIG, and TSGET are possible examples). Also, the effect of the variables is not limited to the changes in default paths. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	f5fdbb8fff	doc/man7/openssl-env: document which variables are considered security-sensitive ... Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	6de54753c2	doc/man7/openssl-env: document OPENSSL_DEBUG_DECC_INIT environment variable ... Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	133889218e	Document LEGACY_GOST_PKCS12 environment variable ... Add its mention to doc/man7/openssl-env.pod and describe its semantics in doc/man3/PKCS12_gen_mac.pod. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	2f531a742d	Document OPENSSL_MALLOC_SEED environment variable ... Add its mention to doc/man3/OPENSSL_malloc.pod, doc/man7/openssl-env.pod, and util/other.syms. Also, reorder the variable order in doc/man7/openssl-env.pod to a lexicographical one. Complements: 3df5736cf3 "Improve Malloc Failure Test" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	63e526a4d8	doc/man3/OPENSSL_malloc: improve OPENSSL_MALLOC_FAILURES documentation ... Reflect its ability to accept floating point numbers in the failure probability specification. Complements: 3df5736cf3 "Improve Malloc Failure Test" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	1109bc1237	doc/man7/openssl-env.pod: document HARNESS_OSSL_PREFIX environment variable ... For historical purposes. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	e914d23642	doc/man7/openssl-env: sort *_PROXY environment variables, add lowercase variants ... Sort HTTP_PROXY, HTTPS_PROXY, and NO_PROXY in lexicographical order, add mentions of the lowercase variants of the variables (as they are already mentioned in OSSL_HTTP_parse_url(3)), in the same order, despite it is not a lexicographical one, do minimise confusion. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	0afaa27df7	Document SSL_CIPHER environment variable ... It is apparently checked/used by openssl s_time when -cipher option is not set. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	deed2379a7	doc/man7/openssl-env: sort the variables in lexicographical order ... The initial commit that has added the manual page (22bb8c2545 "Document more env var stuff, fix some typo's") had them sorted. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	09fa39899b	doc/man7/openssl-env: sort the capability envvars/links lexicographically ... Put the mentions of OPENSSL_*cap environment variables and man page references in lexicographical order. Also, add an Oxford comma before "and" in the man page references. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	5e34e6a573	util/other.syms: sort OPENSSL_*cap lexicographically, add missing variables ... The list includes OPENSSL_ia32cap, OPENSSL_riscvcap, and OPENSSL_s390xcap, but not OPENSSL_armcap, OPENSSL_ppccap, or OPENSSL_sparcv9cap; fix that. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	082a81404c	apps/lib/apps.c: remove HARNESS_OSSL_PREFIX envvar handling ... As the environment variable is no longer used by the test harness, its support can be removed from the openssl command, along with the possible unintended consequences of prefixing the standard output of the openssl command with an arbitrary string set in the environment. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	70c05fcde5	Remove HARNESS_OSSL_PREFIX manipulation in the test harness ... The aim of HARNESS_OSSL_PREFIX environment variable is to avoid contaminating TAP producer's output with stanzas that can be interpreted by a TAP producer by prefixing them with comment; this can be achieved by processing the output within the runner instead, as it already does for non-standard prefixes; it also has the added benefit of alleviating the need to reset it for the external tests in order to avoid messing with their output checks. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Nikola Pajkovsky	e08b83cbb3	Pairwise check for DH keys import as part of FIPS ... For DH key import, it appears the PCT and assurances are implemented in the source but are not be performed by default. Signed-off-by: Nikola Pajkovsky <nikolap@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28058)	2025-07-29 15:10:02 +02:00
Nikola Pajkovsky	9c09d2076a	Update dh_pub to be pairwise consistent with dh_priv ... Signed-off-by: Nikola Pajkovsky <nikolap@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28058)	2025-07-29 15:10:02 +02:00
Tomas Mraz	1a1c10f5d7	Exchange no-sm2 and no-ssl-trace between on PR and daily jobs ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28106)	2025-07-28 11:15:52 +02:00
Tomas Mraz	981d6776a3	test-ec: Skip SM2 key import test if SM2 is disabled ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28106)	2025-07-28 11:13:06 +02:00
Igor Ustinov	44ef69cffb	Fixed #27506, now the behavior with an empty IDN is the same as with ... an incorrect IDN. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28080)	2025-07-27 12:45:27 +02:00
Alexandr Nedvedicky	d777deffba	- adding a missing file ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28023)	2025-07-27 04:48:28 -04:00
Alexandr Nedvedicky	92330c8f80	- changes suggested by @t8m ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28023)	2025-07-27 04:48:28 -04:00
sashan	a43b926fd2	- fix RFC reference and indentation ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28023)	2025-07-27 04:48:28 -04:00
Sashan	b083613476	Update ssl/quic/quic_ackm.c ... Co-authored-by: Andrew Dinh <andrewd@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28023)	2025-07-27 04:48:28 -04:00
Sashan	4a3c954a0c	Update ssl/quic/quic_ackm.c ... Co-authored-by: Andrew Dinh <andrewd@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28023)	2025-07-27 04:48:28 -04:00
sashan	cdbfacead0	ACK manager must avoid infinite probe time when waiting handshake confirmation ... According to RFC 9002, section 6.2.2.1 the client the client must keep PTO (probe time out) armed if it has not seen HANDSHAKE_DONE quic message from server. Not following RFC spec here may cause the QUIC session to stale during TLS handshake. Fixes openssl/project#1266 Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28023)	2025-07-27 04:48:28 -04:00
Richard Levitte	49f8db5327	Add a test of 'openssl storeutl' with a BER-encoded PKCS#12 file ... The test file (test-BER.p12) was given to us by David von Oheimb Co-Authored-By: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> (Merged from https://github.com/openssl/openssl/pull/28016)	2025-07-26 11:33:56 +02:00