808 Commits

Author	SHA1	Message	Date
Ingo Franzki	f77fafd16e	Make ERR_count_to_mark() available to providers via 'in' dispatch array ... Functions like ERR_set_mark(), ERR_clear_last_mark(), and ERR_pop_to_mark() are already passed to the a provider via the 'in' dispatch array of the provider initialization function (although the documentation did not mention them). Also pass ERR_count_to_mark() to the provider the same way, and update the documentation to mention all four functions. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28073)	2025-07-30 18:27:08 +02:00
Daniel Van Geest	d0899abb1b	Implement KEMRecipientInfo (RFC9629) in CMS ... Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27681)	2025-07-30 11:39:04 +02:00
Eugene Syromiatnikov	3f633775e4	doc/man7/openssl-env: document HOME environment variable usage ... Seems to be the only place where it is used, as of now. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	2f41923d2d	doc/man7/openssl-env: document OPENSSL_TEST_LIBCTX environment variable ... Complements: e89578be2930 "Test RSA oaep in fips mode" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	1df3a8a80e	doc/man7/openssl-env: OPENSSL_TRACE: tfix ... Fixes: ee0bf38e87 "improve and move text on OPENSSL_TRACE from doc/man1/openssl.pod to doc/man7/openssl-env.pod" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	30740298b6	doc/man7/openssl-env: sort OPENSSL_TRACE categories lexicographically ... There is little reason to preserve the declaration order for the reader. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	10e26ab122	doc/man7/openssl-env: update REF_COUNT OPENSSL_TRACE category description ... It seems that its usage has been changed since the initial mention in 6d594fdf52 "OSSL_trace_set_channel.pod and openssl.pod: fix missing/inconsistent category items". Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	9ccd388664	doc/man7/openssl-env: document QUERY OPENSSL_TRACE category ... Complements: eed43f8a12ef "Add a QUERY trace category" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	62c4633851	doc/man7/openssl-env: document PROVIDER OPENSSL_TRACE category ... Complements: 93296eaaa0e8 "Adding a trace category for PROVIDER calls" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	707f612416	doc/man7/openssl-env: reword the description ... The manual page describes not only environment variables that pertain the library, but some of the applications as well (OPENSSL, OPENSSL_CONFIG, and TSGET are possible examples). Also, the effect of the variables is not limited to the changes in default paths. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	f5fdbb8fff	doc/man7/openssl-env: document which variables are considered security-sensitive ... Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	6de54753c2	doc/man7/openssl-env: document OPENSSL_DEBUG_DECC_INIT environment variable ... Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	133889218e	Document LEGACY_GOST_PKCS12 environment variable ... Add its mention to doc/man7/openssl-env.pod and describe its semantics in doc/man3/PKCS12_gen_mac.pod. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	2f531a742d	Document OPENSSL_MALLOC_SEED environment variable ... Add its mention to doc/man3/OPENSSL_malloc.pod, doc/man7/openssl-env.pod, and util/other.syms. Also, reorder the variable order in doc/man7/openssl-env.pod to a lexicographical one. Complements: 3df5736cf3 "Improve Malloc Failure Test" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	1109bc1237	doc/man7/openssl-env.pod: document HARNESS_OSSL_PREFIX environment variable ... For historical purposes. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	e914d23642	doc/man7/openssl-env: sort *_PROXY environment variables, add lowercase variants ... Sort HTTP_PROXY, HTTPS_PROXY, and NO_PROXY in lexicographical order, add mentions of the lowercase variants of the variables (as they are already mentioned in OSSL_HTTP_parse_url(3)), in the same order, despite it is not a lexicographical one, do minimise confusion. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	0afaa27df7	Document SSL_CIPHER environment variable ... It is apparently checked/used by openssl s_time when -cipher option is not set. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	deed2379a7	doc/man7/openssl-env: sort the variables in lexicographical order ... The initial commit that has added the manual page (22bb8c2545 "Document more env var stuff, fix some typo's") had them sorted. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
Eugene Syromiatnikov	09fa39899b	doc/man7/openssl-env: sort the capability envvars/links lexicographically ... Put the mentions of OPENSSL_*cap environment variables and man page references in lexicographical order. Also, add an Oxford comma before "and" in the man page references. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
slontis	bde55d421b	ECX/ED keymanager param getter fixes. ... Fixes #28034 ECX and ED were sharing the same code for the getter, whilst also maintaining seperate gettable tables. The code has been reworked so that common code is shared, and algorithm specific code is seperated out to make this clearer. This fixes: (1) The security category not being in the gettable table for ED (2) The fips indicator for ED. i.e There is no fips indicator for ED (previously there was no gettable, but the get() still tried to return unapproved). Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28039)	2025-07-22 21:08:26 +10:00
Norbert Pocs	23de79343f	Update documentation on EVP_PKEY_ASN1_METHOD deprecation ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27727)	2025-07-17 11:25:18 -04:00
Norbert Pocs	342c0f340c	Update doc on CRYPTO_MEM_SEC(_MINSIZE) ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28036)	2025-07-16 08:23:38 -04:00
slontis	07675d28de	DOC: Fixup FIPS provider documentation. ... SHAKE3 was missing from the list. Also clarified that KECCAK-KMAC is internal. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
slontis	6b5fd48ee4	LMS code review fixups ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
slontis	e6c8110483	Add LMS evp_test using NIST ACVP test data. ... This covers all LMS algorithm parameter sets. The following changes were done to handle the tests: (1) Changed LMS to use OSSL_PKEY_PARAM_PUB_KEY instead of OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY for import/export. (There is no reason to have the encoded form for verify operations). (2) Fixed a bug for W=1 with truncated digests. The checksum was using a value of 8-w, which was off by 1 for this case. A value was added to the ots parameters that represents this value. (3) A check in evp_test for a NID was removed since LMS does not have OIDS (HSS does). (4) the unused PROPERTIES param was removed from the LMS keymanager. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
Pauli	3f0d4ffd33	doc: document the additional LMS self test description ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
slontis	a3b9edcb79	Add LMS documentation ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
slontis	1c2fc7c3e0	Allow SHA256-192 to be used internally in the FIPS provider. ... Created an internal digest table that contains sha256_192. Also moved the KECCAK_KMAC_128/256 entries to this internal table since it is only used by KMAC. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
slontis	c64558ede8	Add LMS public key decoder. ... This uses OSSL_DECODER_CTX_new_for_pkey(). "XDR" can be specified for the input type, and the key type is "LMS" Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
slontis	2a6a2adc8d	Add base code to load a LMS public key. ... This loads a XDR encoded LMS public key. It adds a simple LMS keymanager to import this key. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
Daniel Van Geest	c6a1d8ea74	HKDF updates ... - prevent fixed-digest HKDF from having its digest changed - implement gettable params in HKDF - update fixed-digest HKDF tests Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27247)	2025-07-10 11:14:19 +10:00
Daniel Van Geest	2671a68a27	Add fixed-digest HKDF documentation ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27247)	2025-07-10 11:13:22 +10:00
Michael Baentsch	51ce5499f9	Introduce SSL_OP_SERVER_PREFERENCE to replace SSL_OP_CIPHER_SERVER_PREFERENCE misnomer ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27981)	2025-07-09 12:10:57 +02:00
slontis	b63adfc58a	Update FIPS provider doc to match the current code. ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27902)	2025-07-01 20:47:08 +02:00
Tomas Mraz	08b2042a20	Document that FIPS provider cannot be used by multiple libcryptos ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27702)	2025-05-30 08:08:19 +10:00
Norbert Pocs	3423c30db3	Document EVP_CIPHER failure for missing provider function ... When writing a new CIPHER implementation the OSSL_FUNC_cipher_get_params must be present, otherwise the fetch fails. This behaviour is seen in function evp_cipher_cache_constants@crypto/evp/evp_lib.c. Resolves: #25801 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27696)	2025-05-28 10:33:39 +02:00
Pauli	8f373f11d2	doc: document the security category param for pkeys ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27571)	2025-05-27 18:01:43 +10:00
Dr. David von Oheimb	1146b74a8a	provider-signature.pod: add missing doc of OSSL_FUNC_signature_query_key_types(), fix doc of return types, etc. ... Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27367)	2025-05-20 21:19:34 +02:00
Ariana Ciaschini	4d3ec3d959	doc: OSSL_PROV_PARAM_STATUS is signed integer ... CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26994)	2025-04-29 14:16:40 +02:00
Christian Wansart	9eb2c13432	Typo in TLS introduction ... CLA: trivial Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27455)	2025-04-23 11:21:40 +02:00
Dr. David von Oheimb	7d14d1c46a	provider-signature.pod: fix typos (digeset -> digest) ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27372)	2025-04-18 15:38:41 +01:00
Dr. David von Oheimb	23e3b3c0c5	provider-signature.pod: fix doc of OSSL_SIGNATURE_PARAM_ALGORITHM_ID, describing its relevance ... This provides a fix for the documentation part of #22932. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27372)	2025-04-18 15:38:41 +01:00
Mironenko	ada231523f	Fix OSSL_FUNC_keymgmt_load declaration in man7/provider-keymgmt ... OSSL_FUNC_keymgmt_load prototype declared in man7 does not match the actual OSSL_FUNC_keymgmt_load prototype declared in include/openssl/core_dispatch.h. This commit fixes the prototype in man7. CLA: trivial Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27189)	2025-04-16 09:49:24 +01:00
Matt Caswell	0a16bb7e74	Fix a reference in the OpenSSL guide to QUIC for servers ... One part of the OpenSSL guide suggests we only support clients for QUIC which is no longer true. Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27265)	2025-04-04 10:12:46 +01:00
Richard Levitte	a006b0a089	In doc/man7/provider-{en,de}coder.pod, clarify where properties are defined ... Fixes #27126 Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27132)	2025-03-26 13:56:03 +01:00
Jon Ericson	da8de0e8dd	Change documentation to point to new wiki location ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27081)	2025-03-25 20:24:48 +01:00
Ingo Franzki	05c05d43bf	Doc fix in EVP_PKEY-ML-DSA/KEM.pod files ... Fix the references to OSSL_PROVIDER_add_conf_parameter in the 'SEE ALSO' section. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27077)	2025-03-19 11:47:07 +01:00
ak4153	978e23a472	Fix missing OSSL_FUNC_DIGEST_GET_PARAMS in provider-digest.pod ... Fixes #26626 CLA: trivial Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27009)	2025-03-19 10:41:34 +01:00
Nicola Tuveri	2d50cb660c	docs(provider-base): Add HISTORY note for OSSL_CAPABILITY_TLS_SIGALG_MIN_DTLS (and MAX) ... This commit adds a small note about definitions for `OSSL_CAPABILITY_TLS_SIGALG_MIN_DTLS` and `OSSL_CAPABILITY_TLS_SIGALG_MAX_DTLS` being first added in OpenSSL 3.5. PR #26975 added these definitions for OpenSSL 3.5, but the documentation update omitted a history note for the addition. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27063)	2025-03-18 18:58:55 +01:00
openssl-machine	0c679f5566	Copyright year updates ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes	2025-03-12 13:35:59 +00:00