35060 Commits

All Branches

Search

Author	SHA1	Message	Date
Norbert Pocs	8e63e4b42b	s3_lib.c: Use illegal_parameter for failing encapsulation in ml_kem ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27627) (cherry picked from commit e66097fc66)	2025-05-16 11:11:39 +02:00
Norbert Pocs	296525c5a9	s3_lib.c: Handle weak x keys as illegal_parameter alert ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27597) (cherry picked from commit 5da4ea10be)	2025-05-15 10:49:26 +02:00
JiashengJiang	f2b47d138f	test/testutil/testutil_init.c: Add OPENSSL_free() to avoid memory leak ... Free trace_data if error occurs to avoid memory leak. Fixes: d73458d17a ("Add tracing capability in test utilities") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27600) (cherry picked from commit 3818f7779e)	2025-05-13 14:18:18 +02:00
Matt Caswell	e431af11ff	Stop a TLSv1.3 server emitting an unsolicited PSK extension ... If we attempt to accept a connection on an SSL object, and the application has set an SSL_SESSION on that SSL object then we can mistakenly believe that we are resuming and emit an unsolicited PSK extension back to the client. This can especially happen when using SSL_clear() which leaves any SSL_SESSION associated with the SSL object. See https://github.com/openssl/openssl/discussions/27563#discussioncomment-13049352 and https://github.com/openssl/openssl/discussions/24567 Reviewed-by: Todd Short <todd.short@me.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27584) (cherry picked from commit aa8bca2e81)	2025-05-13 14:13:06 +02:00
Dr. David von Oheimb	507015297f	APPS/cmp.c: fix char encoding of subject, issuer, sender, and recipient DN ... Fixes #27572 Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27592) (cherry picked from commit 35e431ed6d)	2025-05-13 14:09:21 +02:00
Pauli	406007f0c0	chacha_poly: fix settable ctx param list ... The settable list used the generic AEAD cipher list which included an extra parameter and omitted the IV length one. The set ctx param call was custom so the errant list didn't directly impact operation. The comment about ignoring OSSL_CIPHER_PARAM_AEAD_MAC_KEY is completely bogus. That parameter isn't accepted either here or by the shared AEAD cipher params. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27534) (cherry picked from commit 1c63382294)	2025-05-09 08:16:54 +10:00
Matt Caswell	241534d75a	Add a test for app data received too early ... Add a test for app data which was received prior to the Finished is read correctly, and that if we continue to read we get the expected result. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Todd Short <todd.short@me.com> (Merged from https://github.com/openssl/openssl/pull/27543) (cherry picked from commit af712a5933) (cherry picked from commit dc95aff539)	2025-05-08 14:19:36 -04:00
Matt Caswell	da07ea6712	Ensure we properly release DTLS buffered app data records ... If we read an app data record before we have read the Finished we buffer it. Once we've read it we need to make sure we've properly released it otherwise we will attempt to read it again (and this time there will be no data in it). Fixes #27316 Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Todd Short <todd.short@me.com> (Merged from https://github.com/openssl/openssl/pull/27543) (cherry picked from commit d459d00f97) (cherry picked from commit 448815dd26)	2025-05-08 14:19:34 -04:00
JiashengJiang	2e7020b4e9	test/bio_comp_test.c: Initialize pointer to avoid undefined behavior ... If the allocation for "original" fails, "result" may be freed without being properly initialized. Since result could hold a random value due to its assignment in do_bio_comp_test(), freeing it without initialization is unsafe and may lead to undefined behavior. Fixes: 12e96a2360 ("Add brotli compression support (RFC7924)") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27569) (cherry picked from commit 4dca928a29)	2025-05-08 13:48:51 +02:00
Matt Caswell	00331d8167	Drop empty app data records in DTLS ... App data records with 0 bytes of payload will confuse callers of SSL_read(). This will cause a successful read and return 0 bytes as read. Unfortunately a 0 return from SSL_read() is considered a failure response. A subsequent call to SSL_get_error() will then give the wrong result. Zero length app data records are actually allowed by the spec, but have never been handled correctly by OpenSSL. We already disallow creating such empty app data records. Since the SSL_read() API does not have a good way to handle this type of read, we simply ignore them. Partial fix for #27316 Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27541) (cherry picked from commit a23d5e20f1)	2025-05-07 14:37:07 +02:00
JiashengJiang	8f32d906f0	crypto/provider_conf.c: Fix possible memory leak ... Assign the return value of ossl_provider_info_add_to_store to added instead of setting it directly to 1, in order to avoid a memory leak caused by entry not being freed if ossl_provider_info_add_to_store() fails. Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27472) (cherry picked from commit 9884f1dc11)	2025-05-07 11:51:48 +02:00
Tobias Brick	87047f45a0	Fix use after free bugs for public_keys and private_keys in evp_test ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27421) (cherry picked from commit 81e8b5a503)	2025-05-05 16:03:42 +02:00
Neil Horman	0c5dc59a1f	Disable unterminated-string-initialization in strict-warnings ... Recently updated to fedora 42, which includes an updated gcc, which triggers a new warning: test/afalgtest.c:44:9: error: initializer-string for array of 'unsigned char' truncates NUL terminator but destination lacks 'nonstring' attribute (18 chars into 17 available) [-Werror=unterminated-string-initialization] 44 | "\x53\x69\x6e\x67\x6c\x65\x20\x62\x6c\x6f\x63\x6b\x20\x6d\x73\x67" The warning occurs because in some locations we create char buffers of length X, and fill it with X bytes of data, truncating the NULL terminator. We could fix it by adding the nonstring attribute, but given that: 1) Adding attributes might impact other platforms that don't understand the attribute. 2) We often create char buffers that don't expect a NULL terminator. 3) Converting the unsigned char arrays to uint8_t, or other types that could be interpreted as non-strings has no impact, only applying the nonstring attribute silences the warning. It seems more sensible to just disable the warning entirely Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27490) (cherry picked from commit d08d77789e)	2025-05-02 13:43:39 +02:00
Tomas Mraz	4f9aaf3397	sslecho: Rename bool to flag to avoid C23 conflict ... Fixes #27516 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27519) (cherry picked from commit 81ce3d3ae8)	2025-04-30 11:50:54 +02:00
Matt Caswell	ee1def031b	Clarify how s_client -ign_eof and -quiet impact command processing ... If -ign_eof -or -quiet are passed to s_client this implicitly turns off command processing (i.e. equivalent to -nocommands). This was stated on the man page in the "CONNECTED COMMANDS" section, but not in the documentation for "-ign_eof" or "-quiet" directly. We state it here as well to make it clearer. Fixes #27443 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27500) (cherry picked from commit 20fb5dcb1e)	2025-04-29 19:34:46 +02:00
Anton Tieleman	3703a5c499	Test+fix handling "wrong" downgrade signals ... This accounts for cases that can only occur when een non-compliant server sends the wrong downgrade signal. (TLS1.1 signal when negotiating TLS1.2 or TLS1.2 signal when negotiating TLS1.0/TLS1.1). According to the TLS1.3 RFC these cases should be rejected: RFC8446, section 4.1.3: TLS 1.3 clients receiving a ServerHello indicating TLS 1.2 or below MUST check that the last 8 bytes are not equal to either of these values. TLS 1.2 clients SHOULD also check that the last 8 bytes are not equal to the second value if the ServerHello indicates TLS 1.1 or below. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27518) (cherry picked from commit 290fd4a0c8)	2025-04-29 19:32:32 +02:00
Anton Tieleman	1ff3ce8252	Repair downgrade tests ... A number of these tests were failing for the wrong reasons. The intention is to verify that the client sends an illegal parameter alert when an unexpected downgrade signal is received. Instead, a number of tests failed because TLS1.1 was not available. The tests are adapted to explicitly check for an illegal parameter alert from the client. Client and server flags are updated to enable TLS1.1 where required and a few tests requiring TLS1.1 were moved to be disabled when TLS1.1 is not available. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27518) (cherry picked from commit 7535f26210)	2025-04-29 19:32:30 +02:00
Tomas Mraz	9034b24d8f	BIO_dump_indent_cb(): Check for negative return from BIO_snprintf() ... In practice this cannot happen but Coverity complains. Fixes Coverity 1646683 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27493) (cherry picked from commit 56c739816f)	2025-04-28 17:29:45 +02:00
Bernd Edlinger	97f4b5ff21	Fix also BIO_printf formatting for INF and NAN ... Avoid infinite loooooooops in %e and %g formatting for +/-INF and make the invalid value at least visible by using '?' as signvalue. Fixes #26973 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27491) (cherry picked from commit b56dd5bfec)	2025-04-28 17:28:27 +02:00
A. Wilcox	6b1646e472	Fix P-384 curve on lower-than-P9 PPC64 targets ... The change adding an asm implementation of p384_felem_reduce incorrectly uses the accelerated version on both targets that support the intrinsics *and* targets that don't, instead of falling back to the generics on older targets. This results in crashes when trying to use P-384 on < Power9. Signed-off-by: Anna Wilcox <AWilcox@Wilcox-Tech.com> Closes: #27350 Fixes: 85cabd94 ("Fix Minerva timing side-channel signal for P-384 curve on PPC") Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27429) (cherry picked from commit 29864f2b0f)	2025-04-25 20:05:08 +02:00
Richard Levitte	f606798efa	Fix BIO_printf formatting for negative numbers formatted with %e ... Some parts of the formatting code assumed that the input number is positive. This is fixed by working on its absolute value. test/bioprinttest.c is amended to test the output of negative numbers as well. Fixes #26973 Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27478) (cherry picked from commit fb555eb7a1)	2025-04-24 16:02:18 +02:00
Ryan Schanzenbacher	ae7f36520a	docs: update OSSL_PARAM_int documentation ... This change adds an example to allow compilation without warnings using compiler options like `-Wincompatible-pointer-types-discards-qualifiers` Code for the example was inspired by libarchive's 9e3a7e4b6c Fixes #20956 Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27157) (cherry picked from commit b83b67fe59)	2025-04-24 14:41:30 +02:00
Christian Wansart	3a687986ad	Typo in TLS introduction ... CLA: trivial Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27455) (cherry picked from commit 9eb2c13432)	2025-04-23 11:22:14 +02:00
Dmitry Misharov	6bb0ad8af7	Replace ilammy/setup-nasm with nasm install from choco ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27462) (cherry picked from commit 1ad186986c)	2025-04-22 15:02:53 +02:00
Norbert Pocs	091e75f40c	Document SSL_CTX_set_min_proto_version defaults ... If the function is not called the settings default to 0. Fixes #10584 Signed-off-by: Norbert Pocs <norbertpocs0@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27410) (cherry picked from commit 871182d29d)	2025-04-18 15:45:15 +01:00
Dr. David von Oheimb	77e6bf0f20	provider-signature.pod: fix typos (digeset -> digest) ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27372) (cherry picked from commit 7d14d1c46a)	2025-04-18 15:41:05 +01:00
Dr. David von Oheimb	fc76ef9108	provider-signature.pod: fix doc of OSSL_SIGNATURE_PARAM_ALGORITHM_ID, describing its relevance ... This provides a fix for the documentation part of #22932. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27372) (cherry picked from commit 23e3b3c0c5)	2025-04-18 15:41:05 +01:00
Pauli	44efa1d88d	test: test for setting hkdf salt to null ... Fixes #27302 Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27305) (cherry picked from commit 727117960c)	2025-04-18 15:34:17 +01:00
Pauli	a501e9df15	hkdf: allow salt to be set to null ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27305) (cherry picked from commit 12eb6c58ff)	2025-04-18 15:34:09 +01:00
Mironenko	8f7f53da4e	Fix OSSL_FUNC_keymgmt_load declaration in man7/provider-keymgmt ... OSSL_FUNC_keymgmt_load prototype declared in man7 does not match the actual OSSL_FUNC_keymgmt_load prototype declared in include/openssl/core_dispatch.h. This commit fixes the prototype in man7. CLA: trivial Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27189) (cherry picked from commit ada231523f)	2025-04-16 09:50:40 +01:00
slontis	598f6c55a4	Fix EVP_PKEY_CTX_dup() so that it copies the keymanager. ... A call to EVP_PKEY_CTX_new() creates a keymgmt pointer internally, but EVP_PKEY_CTX_dup() does not copy this field. Calling EVP_PKEY_derive_set_peer_ex() after EVP_PKEY_CTX_dup() resulted in a segfault because it tried to access this pointer. EVP_PKEY_CTX_dup() has been updated to copy the keymanager (and upref it). Reported by Eamon ODea (Oracle). Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27304) (cherry picked from commit 3c22da7346)	2025-04-15 15:49:35 +01:00
David Benjamin	56806112df	Fix PKCS7_sign and CMS_sign default hash documentation ... Fixes #27291. See issue for details. Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27292) (cherry picked from commit 4f81470afa)	2025-04-15 15:41:10 +01:00
emery	e35bdd3ed6	Updated the change log to include SSLv3 being disabled by default. ... This change was implemented into version 1.1.0 and onward. The last version that had SSLv3 enabled was version 1.0.2h, which is why the addition was made where it is. CLA: trivial Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27289) (cherry picked from commit 6509f18c9f)	2025-04-15 15:37:30 +01:00
Malcolm Hogan	3adda70659	Remove DAYS argument ... This commit removes DAYS from certificate requests to avoid the warning 'Ignoring -days without -x509; not generating a certificate' This argument is not needed with the -new argument. Additionally makes sure $1 is handled when -nodes is not given. Preventing an uninitialized value error when the DAYS argument is removed. Fixes #26595 CLA: trivial Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27277) (cherry picked from commit d890ad2b96)	2025-04-15 15:25:44 +01:00
Andrey Tsygunka	3d371de578	Fix potential NULL pointer dereference in final_maxfragmentlen() ... In the final_maxfragmentlen() function, s->session is checked for NULL after it was dereferenced earlier. So move this NULL check to the top of the function. CLA: trivial Fixes: fa49560451 (Fix handling of max_fragment_length extension for PSK) Signed-off-by: Andrey Tsygunka <aitsygunka@yandex.ru> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> (Merged from https://github.com/openssl/openssl/pull/27272) (cherry picked from commit 28de1f5004)	2025-04-14 15:57:53 +01:00
Bernd Edlinger	fe8f9c9deb	Fix test failures on big endian ARMv9 target ... This fixes a couple of big-endian issues in the assembler code of chacha, SM3 and SM4. Fixes #27197 Tested-by: @zeldin Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27252) (cherry picked from commit 1a81d509a0)	2025-04-14 15:50:16 +01:00
Graham Leggett	69272362bd	ssl/ssl_lib.c: Avoid crash when SSL_CONNECTION is NULL ... Detection for sc == NULL is performed after sc is used. Add the check to the correct place. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27241) (cherry picked from commit 7f6cc862c6)	2025-04-14 15:41:28 +01:00
JiashengJiang	78882cc965	crypto/ui/ui_lib.c: Add OPENSSL_free to avoid memory leaks ... Add OPENSSL_free() if general_allocate_boolean() or general_allocate_string fails to avoid memory leaks. Fixes: a63d5eaab2 ("Add a general user interface API. This is designed to replace things like des_read_password and friends (backward compatibility functions using this new API are provided). The purpose is to remove prompting functions from the DES code section as well as provide for prompting through dialog boxes in a window system and the like.") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27218) (cherry picked from commit 8f06efe234)	2025-04-14 15:22:51 +01:00
Bernd Edlinger	9df1b9dfc7	Fix a visual glitch in test_cmp_http.t ... Kill the shell process after the Mock server is running, to prevent the shell from printing an error message when the Mock server is finally killed. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27144) (cherry picked from commit c45f0dd803)	2025-04-02 19:43:00 +02:00
Neil Horman	fd934b8250	Temporarily disable gost-engine tests in ci ... We need to temporarily disable this as we have a build break in CI: https://github.com/openssl/openssl/actions/runs/14192630435 Its occuring because gost-engine depends on libprov, which requires a minimum version cmake-3.0. The update of github runners to cmake-4.0 causes a bail out as cmake 4.0 no longers supports cmake 3.0 syntax. Libprov is fixed now, but gost-engine needs to update its libprov submodule, and then we need to update the gost-engine submodule. Until thats done (which may take days), we should disable the gost-engine external tests Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27234) (cherry picked from commit db9771b5a0)	2025-04-02 17:25:47 +02:00
Matt Caswell	fa0339b485	Link SSL_get_negotiated_group() and SSL_get0_group_name() in the docs ... If you are intereseted in one you might be interested in the other. Fixes #27137 Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27210) (cherry picked from commit 9eb21877f5)	2025-04-02 08:49:09 +02:00
Benjamin Kaduk	6db6c61131	statem: always save sigalgs during PHA ... We use the same extension-parsing function on server and client for convenience, but while the server might worry about tracking what was previously received and not overwriting it, on the client receiving a request for post-handshake authentication, we always want to use the values from the current extension (and should always have a new session object that we are free to mutate). It is somewhat unclear whether the server also needs the check for a resumed connection; it appears to have been added back in 2015 in commit 062178678f as part of a broad pass to handle extensions on resumption, but without specific documentation of each extension's handling. Fixes: #10370 Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/24651) (cherry picked from commit ddd99d52d3)	2025-04-01 15:12:03 +02:00
slontis	3fb15ea0dd	Fix cpp comment in windows build ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27188) (cherry picked from commit b8860598d2)	2025-04-01 11:53:00 +02:00
slontis	8fdc75777e	Fix Strict c issue in aes_gcm for armv8 ... Reported by David Makepeace Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27203) (cherry picked from commit 0a78595eac)	2025-04-01 11:38:42 +02:00
Neil Horman	83d60ed3dd	Update FIPS-README.md to reflect latest versions ... With our new FIPS provider certification, lets update the FIPS-README to reflect our latest release and fips validated versions Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27178) (cherry picked from commit 50316c18a0)	2025-03-30 15:43:36 -04:00
JiashengJiang	22e2b03a3d	apps/lib/apps.c: Add a check for OPENSSL_strdup() ... Add a check for the return value of OPENSSL_strdup() to guarantee the success of allocation, similar to the other call sites. Fixes: c7d5ea2670 ("Prepare to detect index changes in OCSP responder.") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27172) (cherry picked from commit 930c645e6b)	2025-03-28 11:40:36 +01:00
Kyle Mullen	972d6da077	Update X509_VERIFY_PARAM_set_flags.pod ... Change description of B<X509_V_FLAG_CRL_CHECK_ALL> to reflect its inability to function without B<X509_V_FLAG_CRL_CHECK> being enabled as well. Fixes #27056 (https://github.com/openssl/openssl/issues/27056) CLA: trivial Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27098) (cherry picked from commit b7d3c729b1)	2025-03-27 10:31:54 +01:00
qu3ri	ec561e8410	bn_mul_words.pod: Fix failures in doc-nits check ... Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26597) (cherry picked from commit 1b61f8e180)	2025-03-26 15:51:27 +01:00
qu3ri	c70e8ccb78	Moved crypto/bn/README.pod to internal manpages ... The new place is doc/internal/man3/bn_mul_words.pod. Also removed outdated information. Implementing the fix from https://github.com/quictls/quictls/pull/214 Fixes #26399 Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26597) (cherry picked from commit 78b1fdf4a1)	2025-03-26 15:51:26 +01:00
Andrey Tsygunka	f87cd1f566	Fix return value of the i2d_ASN1_bio_stream() call ... If the flags argument does not contain the SMIME_STREAM bit, the i2d_ASN1_bio_stream() function always returns 1, ignoring the result of the ASN1_item_i2d_bio() call. Fix the return value to the result of the ASN1_item_i2d_bio() call for this case. CLA: trivial Signed-off-by: Andrey Tsygunka <aitsygunka@yandex.ru> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27106) (cherry picked from commit 3edb1f09c6)	2025-03-26 15:28:04 +01:00