37624 Commits

All Branches

Search

Author	SHA1	Message	Date
Richard Levitte	1f3af48c31	Fix OSSL_STORE to consider cached info in the EOF check. ... OSSL_STORE_load() called OSSL_STORE_eof() before checking if there is cached OSSL_STORE_INFO to consider. To fix this issue, the cached info check is moved to OSSL_STORE_eof(), as that seems to make most common sense. This solves an issue with PKCS#12 files, where the cached info was never considered because the underlying file IO layer signaled that EOF is reached. Fixes #28010 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> (Merged from https://github.com/openssl/openssl/pull/28016)	2025-07-26 11:33:56 +02:00
Andrew Dinh	9665baf0f9	Update workflows to test msquic with OpenSSL ... Update GitHub Workflows to build msquic with OpenSSL with TLS backend, push to Quay.io, and test with current QUIC interop workflow Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28045)	2025-07-25 12:43:59 -04:00
martin	b1b4b154fd	Add support for TLS 1.3 OCSP multi-stapling for server certs ... Co-authored-by: Michael Krueger Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20945)	2025-07-25 17:24:37 +02:00
AntonMoryakov	c108ead284	sm2: sm2_sign.c: check EC_KEY_get0_private_key() for NULL in sm2_sig_gen() ... Static analysis revealed that sm2_sig_gen() dereferences the return value of EC_KEY_get0_private_key() without checking for NULL. This could lead to a crash if the private key is unset. This patch adds a NULL check and raises ERR_R_PASSED_NULL_PARAMETER if the key is missing. Issue found by static analyzer: > Return value of EC_KEY_get0_private_key() is dereferenced without checking for NULL (11/12 checked) CLA: trivial Signed-off-by: Anton Moryakov <ant.v.moryakov@gmail.com> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27741)	2025-07-25 12:06:54 +02:00
Alen Yan	bd172dd0e1	fix SM2 privatekey decode(PEM format, ECPrivateKey). ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27963)	2025-07-25 09:51:00 +02:00
Daniel Van Geest	e7d5398aa1	openssl rand command should use the loaded library context ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28075)	2025-07-24 13:26:59 +02:00
Jiasheng Jiang	d3e781b764	test/timing_load_creds.c: Add fclose() if error occurs ... Add fclose() if error occurs to release fp. Fixes: 6212fc6814 ("Add a stand-alone "timing" program") Signed-off-by: Jiasheng Jiang <jiashengjiangcool@gmail.com> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28007)	2025-07-24 11:58:36 +02:00
Julian Zhu	c64b6af5e2	LoongArch: Add SHA-512 assembly implementation for better performance on small-size data ... Signed-off-by: Julian Zhu <jz531210@gmail.com> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27904)	2025-07-24 12:02:49 +10:00
Julian Zhu	895f8f6ad1	LoongArch: Add SHA-256 assembly implementation for better performance ... It can get about 25%~ better performance than compiler-generated code (gcc version 15.1.1). Signed-off-by: Julian Zhu <jz531210@gmail.com> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27904)	2025-07-24 12:02:49 +10:00
Dmitry Misharov	d217b49994	--amend ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27467)	2025-07-23 11:22:38 -04:00
Dmitry Misharov	d9044daf1e	replace GitHub Actions in Windows jobs ... Most of the GitHub Actions can be replaced with a couple of commands. This will reduce dependencies bloating and some attacks surface. This commit replaces all GitHub Actions which are not from GitHub and Cygwin for Windows jobs with plain commands. Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27467)	2025-07-23 11:22:38 -04:00
Norbert Pocs	d05ac3becd	Fix perl warnings on various scripts ... Resolves: https://github.com/openssl/project/issues/1273 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28046)	2025-07-23 08:59:53 -04:00
Pauli	499f655337	sm2: add some signing tests. ... Because SM2 uses entropy as part of it's signing process, there were no signing tests under evp_test. This corrects the shortcoming. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27997)	2025-07-23 18:22:53 +10:00
Pauli	d73d40af37	evp_test: add a new global "Test-Entropy" line to allow deterministic `random` input. ... When specified, this directive replaces the public and private DRBGs with a generator that returns the specified bytes. If more bytes are requested than are specified, the generator loops around the supplied bytes to satisfy the request. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27997)	2025-07-23 18:22:53 +10:00
Pauli	7bf4b30bcc	sm2 test: remove unnecessary available in lines ... This test is only run against the default provider so no need to double check this. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27997)	2025-07-23 18:22:53 +10:00
slontis	bde55d421b	ECX/ED keymanager param getter fixes. ... Fixes #28034 ECX and ED were sharing the same code for the getter, whilst also maintaining seperate gettable tables. The code has been reworked so that common code is shared, and algorithm specific code is seperated out to make this clearer. This fixes: (1) The security category not being in the gettable table for ED (2) The fips indicator for ED. i.e There is no fips indicator for ED (previously there was no gettable, but the get() still tried to return unapproved). Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28039)	2025-07-22 21:08:26 +10:00
lanming	5d0c6c52e7	Raise PROV_R_NULL_OUTPUT_BUFFER if shsec is NULL in ml_kem_encapsulate() ... Signed-off-by: lanming <lanming@huawei.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28009)	2025-07-22 11:28:35 +10:00
Dmitry Misharov	b3187ab5a7	Add CODEOWNERS file ... quarckster is the owner of the /.github/workflows/ directory. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28060)	2025-07-21 20:30:51 +02:00
Dmitry Misharov	9ee9a519be	pin GitHub Actions revisions from untrusted vendors ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27181)	2025-07-21 09:56:23 -04:00
Dmitry Misharov	a9a7e017b8	Update container images in OS Zoo CI workflow ... Replace outdated and unsupported distro versions with up-to-date ones. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28049)	2025-07-21 15:23:16 +02:00
Norbert Pocs	c315f98f71	evp_pkey_type: Make base_id_conversion table static ... This commit fixes CI failures (when configured with --strict-warnings) Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28061)	2025-07-18 08:57:16 +02:00
Stanciu, Adrian	055dd1d8bb	Add AES-CFB128 optimizations with Intel AVX-512 and VAES ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26902)	2025-07-17 16:29:57 -04:00
Adrian Stanciu	886396462d	Extract AES CFB implementation to cipher_aes_cfb* ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26902)	2025-07-17 16:29:57 -04:00
Norbert Pocs	b89ab15f13	Add workflow to check perl core modules for 5.10.1 ... The motivation is to notice if we would add a module which is not a core module in the minimal supported perl version. This does not fail on other errors or warnings by perl, but we should clear out those also. Resolves: https://github.com/openssl/project/issues/1269 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28024)	2025-07-17 11:59:19 -04:00
Norbert Pocs	3a90d5f83c	Deprecate ASN1_METH related tests ... ASN1 tests had to be turned off, but the biggest change is the ssl_test_ctx, where the NID resolution does not equal to the old one and a little hack had to be used to make the test work. Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27727)	2025-07-17 11:25:18 -04:00
Norbert Pocs	af2aaf3271	Deprecate ASN1_METH internal usage ... Some of them are needed and were kept by adding `#include "internal/deprecated"` and some had to be turned off. Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27727)	2025-07-17 11:25:18 -04:00
Norbert Pocs	6b5540c21c	libcrypto.num: Deprecate EVP_PKEY_ASN1_METHOD related functions ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27727)	2025-07-17 11:25:18 -04:00
Norbert Pocs	23de79343f	Update documentation on EVP_PKEY_ASN1_METHOD deprecation ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27727)	2025-07-17 11:25:18 -04:00
Norbert Pocs	52d212dd70	Deprecate EVP_PKEY_ASN1_METHOD related function declarations and definitions ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27727)	2025-07-17 11:25:18 -04:00
Norbert Pocs	1bc3191b68	Add deprecation macros for 3.6.0 ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27727)	2025-07-17 11:25:18 -04:00
Norbert Pocs	704a2108ab	providers/implementations/digests/sha3_prov.c optimize ossl_(un)likely ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27961)	2025-07-16 13:07:15 -04:00
Norbert Pocs	682f701985	crypto/params.c optimize ossl_(un)likely ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27961)	2025-07-16 13:07:15 -04:00
Norbert Pocs	340827c819	crypto/init.c optimize ossl_(un)likely ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27961)	2025-07-16 13:07:15 -04:00
Norbert Pocs	e740864976	crypto/threads_pthread.c optimize ossl_(un)likely ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27961)	2025-07-16 13:07:15 -04:00
Norbert Pocs	296e4d3c95	crypto/mem.c optimize ossl_(un)likely ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27961)	2025-07-16 13:07:15 -04:00
Norbert Pocs	d083024b73	crypto/bn/bn_gf2m.c: optimize ossl_(un)likely ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27961)	2025-07-16 13:07:15 -04:00
Norbert Pocs	d1facb4858	include/crypto/md32_common.h: optimize ossl_(un)likely ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27961)	2025-07-16 13:07:15 -04:00
Norbert Pocs	6c9712e6b7	crypto/bn/bn_lib.c: optimize - seems to bring not much benefit ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27961)	2025-07-16 13:07:15 -04:00
Norbert Pocs	112f3afd21	crypto/evp/digest.c: optimize ossl_(un)likely ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27961)	2025-07-16 13:07:15 -04:00
Norbert Pocs	342c0f340c	Update doc on CRYPTO_MEM_SEC(_MINSIZE) ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28036)	2025-07-16 08:23:38 -04:00
Norbert Pocs	91d34f408c	openssl: Add option to init sec mem at startup ... Adding env variables OPENSSL_SEC_MEM and OPENSSL_SEC_MEM_MINSIZE, which initializes the secure memory at the beginning of the openssl app. Resolves: https://github.com/openssl/project/issues/786 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28036)	2025-07-16 08:23:38 -04:00
slontis	ac87f6b3a3	LMS: Coverity Fix 1659010 (Unused Value) ... This was a false positive in a test. The code has been reordered to make the flow clearer. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28030)	2025-07-15 07:53:24 -04:00
slontis	43f4da917a	LMS Coverity fix 1659009 ... Fix deref after free. If ctx->key is already set and the passed in key is NULL then ctx->key should not be set to NULL. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28030)	2025-07-15 07:53:24 -04:00
Caolán McNamara	215167fe7e	const up ERR_str_libraries ... CLA: trivial move this symbol out of the .data section Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28029)	2025-07-15 12:32:27 +10:00
Nikola Pajkovsky	b8cc327660	sec_mem: add note about the perf implications ... Testing secure storage for ml-kem/dsa [1] shows performace penalty when secure storage is enabled. | Threads | baseline usec/handshake | secmem usec/handshake | |---------+-------------------------+-----------------------| | 1 | 586.784756 | 588.306131 | | 2 | 599.537648 | 601.007393 | | 4 | 610.663361 | 613.600663 | | 8 | 649.347376 | 869.693358 | | 16 | 1176.402781 | 2487.335286 | | 32 | 2345.594618 | 5155.747515 | | 64 | 4697.556045 | 11170.627031 | the test shows that sec mem is ok-ish up to the number of available cores, and when the sec mem lock gets contended, performance goes down rapidly. Tested on Apple M4 Pro. [1] https://github.com/openssl/openssl/pull/27625 Signed-off-by: Nikola Pajkovsky <nikolap@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28011)	2025-07-14 10:51:37 -04:00
Nikola Pajkovsky	4337989667	ci: enable lms only on master ... a new config option cannot be enabled globally because the option was not backported to the older versions. Signed-off-by: Nikola Pajkovsky <nikolap@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28019)	2025-07-14 07:20:23 -04:00
Neil Horman	ab021b624f	Add lock contention checking to our pthreads implementation ... Something we're missing in our ability to do performance monitoring and diagnosis in openssl is the ability to check for lock contention. While some tools exist for this (valgrinds drd tool for example), they really only measure the time spent in critical sections, not the instances in which they are contended. For that we need something more specific. This patch introduces the REPORT_RWLOCK_CONTENTION macro. When openssl is built with: ./Configure -rdynamic -fno-omit-frame-pointer -DREPORT_RWLOCK_CONTENTION We can now get output sent to a log file that looks like the following: =============== lock blocked on WRITE for 1001 usec /lib64/libasan.so.8(+0x525e7) [0x7fc5ef4525e7] ../../test/quic_radix_test(CRYPTO_THREAD_write_lock+0x151) [0x79d976] ../../test/quic_radix_test() [0x61e6fb] ../../test/quic_radix_test(test_vprintf_stderr+0x15) [0x61e78d] ../../test/quic_radix_test(test_printf_stderr+0x10f) [0x623ba4] ../../test/quic_radix_test(test_fail_message_prefix+0xf7) [0x62436b] ../../test/quic_radix_test() [0x6243b9] ../../test/quic_radix_test(test_info+0x133) [0x624842] ../../test/quic_radix_test() [0x415aad] ../../test/quic_radix_test() [0x417bad] ../../test/quic_radix_test() [0x41b1a9] ../../test/quic_radix_test() [0x41b2eb] ../../test/quic_radix_test() [0x8071fc] /lib64/libasan.so.8(+0x28ee6) [0x7fc5ef428ee6] /lib64/libc.so.6(+0x711d4) [0x7fc5ef27f1d4] /lib64/libc.so.6(+0xf3cec) [0x7fc5ef301cec] ============== Which tells us when a thread blocked because someone else was already holding the lock, how long it was blocked for, and where the blocking call originated from via its backtrace. I think this should enable us to better determine where our contended locking paths are for a given application, and give us some insight on how to fix them. Currently its linux only (as the backtrace functionality only exists there, and there are few warts (like the need to use a file pointer rather than a bio to record the log, see comments), but I think its enough to give us a useful diagnostic tool to help drive some performance improvements. Fixes openssl/project#1237 Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27884)	2025-07-11 12:38:27 -04:00
Nikola Pajkovsky	8253b58d60	Make the lock in CRYPTO_secure_actual_size a read lock ... there is no operations within critical section that would require write lock. Signed-off-by: Nikola Pajkovsky <nikolap@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28014)	2025-07-11 23:24:01 +10:00
Michael Baentsch	b2ac43b0d8	Add note about use of EVP_PKEY in different libctxs ... Co-authored-by: Shane Lontis <slontis@oracle.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26309)	2025-07-10 14:43:31 +02:00
Tomas Mraz	9a6376dd75	PEM_read_CMS.pod: Correct the deprecation notice ... Fixes #27863 Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27865)	2025-07-10 14:41:00 +02:00