779 Commits

Author	SHA1	Message	Date
Daniel Van Geest	d0899abb1b	Implement KEMRecipientInfo (RFC9629) in CMS ... Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27681)	2025-07-30 11:39:04 +02:00
Eugene Syromiatnikov	dcf009cd89	doc/man1/openssl-rehash.pod.in: document PATH environment variable ... Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:11 -04:00
Eugene Syromiatnikov	0afaa27df7	Document SSL_CIPHER environment variable ... It is apparently checked/used by openssl s_time when -cipher option is not set. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28025)	2025-07-29 13:12:10 -04:00
martin	b1b4b154fd	Add support for TLS 1.3 OCSP multi-stapling for server certs ... Co-authored-by: Michael Krueger Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/20945)	2025-07-25 17:24:37 +02:00
slontis	b63adfc58a	Update FIPS provider doc to match the current code. ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27902)	2025-07-01 20:47:08 +02:00
Jakub Zelenka	f3867bb25b	Introduce cms kekcipher option to select cipher for pwri ... This is useful for AEAD ciphers where it is not possible to use AEAD cipher (currently only AES GCM supported) for password recipient info because the same cipher is used for encrypting the password and it is not possible to store tag for this purpose so different cipher (e.g. AES CBC) needs to be selected. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26871)	2025-07-01 19:04:53 +02:00
Samson S. Kolge	27eea04b06	Update pkeyutl documentation for PQC algorithms (Fixes #27415) ... Add examples and documentation for using ML-DSA, ML-KEM, and SLH-DSA algorithms with pkeyutl. This includes information about the context-string option for ML-DSA and examples of encapsulation/decapsulation with ML-KEM. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27424)	2025-06-20 15:48:42 +01:00
Collin Funk	fb6ae00713	doc: fix misspellings of certificate(s) ... CLA: trivial Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27754)	2025-06-05 20:05:30 +10:00
Dr. David von Oheimb	7c6d9da45f	DOC: update references to obsolete RFC 2459 (updated by RFC 5280 and DSA parts taken over by RFC 3370) ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/27734)	2025-06-03 07:27:57 +02:00
Jeremy Doupe	dca67c0aa1	APPS/x509: add -multi option for outputting all certs found in input ... Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27340)	2025-05-14 12:51:42 +02:00
Dmitry Belyavskiy	08616b09e0	configutl documentation ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27290)	2025-05-08 11:05:42 +10:00
Dimitri John Ledkov	995e9489e6	pkcs12: increase macsaltlen from 8 to 16 as per NIST SP 800-132 ... Align PKCS12 PBMAC1 PBKDF2 salt length with PKCS5_DEFAULT_PBE2_SALT_LEN. With this change, newly created PKCS12 PBMAC1 PBKDF2 keystores use mac salt length of 16 bytes by default. This increases interoperability with FIPS implementations which require at least 16 bytes of salt length. Otherwise FIPS implementations fail to to open keystore with invalid salt length errors (unapproved): Mac verify error: invalid password? 80EBD061AD7F0000:error:1C800070:Provider routines:kdf_pbkdf2_set_ctx_params:invalid salt length:providers/implementations/kdfs/pbkdf2.c:293: 80EBD061AD7F0000:error:118C0103:PKCS12 routines:PBMAC1_PBKDF2_HMAC:internal error:crypto/pkcs12/p12_mutl.c:143: 80EBD061AD7F0000:error:1180006D:PKCS12 routines:PKCS12_verify_mac:mac generation error:crypto/pkcs12/p12_mutl.c:324: 80EBD061AD7F0000:error:1C800070:Provider routines:kdf_pbkdf2_set_ctx_params:invalid salt length:providers/implementations/kdfs/pbkdf2.c:293: 80EBD061AD7F0000:error:118C0103:PKCS12 routines:PBMAC1_PBKDF2_HMAC:internal error:crypto/pkcs12/p12_mutl.c:143: 80EBD061AD7F0000:error:1180006D:PKCS12 routines:PKCS12_verify_mac:mac generation error:crypto/pkcs12/p12_mutl.c:324: The compile time constant is made possible to override with a build time define, such that one can revert back to 8 if so is needed for backwards compatibility. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27446)	2025-05-05 16:15:24 +02:00
Matt Caswell	20fb5dcb1e	Clarify how s_client -ign_eof and -quiet impact command processing ... If -ign_eof -or -quiet are passed to s_client this implicitly turns off command processing (i.e. equivalent to -nocommands). This was stated on the man page in the "CONNECTED COMMANDS" section, but not in the documentation for "-ign_eof" or "-quiet" directly. We state it here as well to make it clearer. Fixes #27443 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27500)	2025-04-29 19:34:20 +02:00
Kelsey Mulrooney	bf4c852893	Improve documentation for -cipher option in openssl genpkey ... CLA: trivial Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27260)	2025-04-29 14:18:57 +02:00
zriback	d18526cb94	Add -in option to prime function to allow input from file for primality testing. Update -hex option documentation to reflect use with input and output. ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26549)	2025-04-29 14:17:06 +10:00
Chase Killorin	2c8103e468	Removed duplicates in some man pages ... Fixes openssl/openssl#11748 find-doc-nits: Check for duplicate options Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27088)	2025-03-26 15:33:20 +01:00
openssl-machine	0c679f5566	Copyright year updates ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes	2025-03-12 13:35:59 +00:00
Dr. David von Oheimb	1d3da367ab	minor doc fixes for CMP and HTTP ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26924)	2025-03-04 13:58:37 +01:00
Tomas Mraz	2411f9b662	apps: Escape control characters in DNs by default ... When displaying distinguished names the control characters are escaped by default. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26932)	2025-03-03 09:08:34 +01:00
Dr. David von Oheimb	253a380bdb	doc/, CHANGES, NEWS: add missing entries and fix existing ones when which CMP feature was added ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26908)	2025-02-27 16:58:47 +01:00
Viktor Dukhovni	ddd7ecb04b	Make the KEM operating mode optional ... There is only one operating mode supported for each of RSA, EC and ECX. We should not require an explicit setting for the obvious default. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26872)	2025-02-25 10:58:23 +01:00
Dmitry Belyavskiy	df93d1327a	skeyutl command line utility ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26753)	2025-02-15 18:51:31 +01:00
Dmitry Belyavskiy	00bdee8974	Opaque keys support for the openssl command line ... Support EVP_SKEY object for the `enc` command. Support EVP_SKEYMGMT for the `list` command. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26753)	2025-02-15 18:51:30 +01:00
slontis	7cf5300e6b	dgst commandline support for one shot signing algorithms ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26697)	2025-02-14 18:22:01 +01:00
Viktor Dukhovni	6ab87724e6	Left over doc TODOs ... Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26715)	2025-02-14 10:50:59 +01:00
Viktor Dukhovni	4b1c73d2dd	ML-KEM hybrids for TLS ... - When used as KEMs in TLS the ECDHE algorithms are NOT subjected to HPKE Extract/Expand key derivation. Instead the TLS HKDF is used as usual. - Consequently these KEMs are just the usual ECDHE key exchange operations, be it with the encap ECDH private key unavoidably ephemeral. - A new "MLX" KEM provider is added that supports four hybrids of EC/ECX DH with ML-KEM: * ML-KEM-768 + X25519 * ML-KEM-1024 + X448 * P-256 + ML-KEM-768 * P-384 + ML-KEM-1024 - Support listing of implemented TLS groups. The SSL_CTX_get0_implemented_groups() function and new `openssl list -tls-groups` and `openssl list -all-tls-groups` commands make it possible to determine which groups are implemented by the SSL library for a particular TLS version or range of versions matching an SSL_CTX. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26220)	2025-02-14 10:50:58 +01:00
Viktor Dukhovni	e04a604d0d	Remaining batch of ML-KEM-related doc updates ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26217)	2025-02-14 10:50:57 +01:00
Viktor Dukhovni	63e9a3b1f3	Fix code and docs of pkeyutl en/decapsulation ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26281)	2025-02-14 10:50:57 +01:00
Rajeev Ranjan	0048817523	CMP: add support for central key generation ... - add testcase for central keygen - add documentation Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25132)	2025-01-27 08:56:46 +01:00
Viktor Dukhovni	38a0926528	Support CLI and API setting of provider configuration parameters ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26427)	2025-01-18 03:46:37 +11:00
Job Snijders	2e36bb07b5	Clean up ASN1_STRING comment and improve example in docs ... Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26195)	2025-01-06 20:39:22 +01:00
Jakub Zelenka	894e69e747	Fix CMS encryption with key agreement when originator set ... OpenSSL currently does not support encryption with originator flag so it should fail nicely instead of segfaulting. Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26014)	2025-01-06 11:45:02 +01:00
Dr. David von Oheimb	0a0862969f	openssl-pkeyutl.pod.in: update from SHA-1 to SHA256, fixing default values and examples ... Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25958)	2025-01-06 11:41:03 +01:00
Dr. David von Oheimb	cbb16094c3	openssl-pkeyutl.pod.in: various fixes ... Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25958)	2025-01-06 11:41:03 +01:00
Dr. David von Oheimb	ddae593a92	apps/pkeyutl: Fix checks and documentation regarding -peerkey ... Reviewed-by: Hugo Landau <hlandau@devever.net> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25958)	2025-01-06 11:41:03 +01:00
Peter Juhasz	34ea176abf	Add CMS_NO_SIGNING_TIME flag to CMS_sign(), CMS_add1_signer() ... Previously there was no way to create a CMS SignedData signature without a signing time attribute, because CMS_SignerInfo_sign added it unconditionally. However, there is a use case (PAdES signatures) where this attribute is not allowed, so this commit introduces a new flag to the CMS API that causes this attribute to be omitted at signing time. Also add -no_signing_time option to cms command. Fixes #15777 Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/15783)	2024-12-26 19:33:42 +01:00
Ryan Farley	ffa1cf69aa	openssl-dgst: Document that xoflen is required for shake ... With b911fef216, there is no longer a default xoflen for shake algorithms. Update the manual to reflect this. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26129)	2024-12-13 14:54:18 +01:00
Dr. David von Oheimb	a82c2bf5c9	X509: document non-standard behavior checking EKU extensions in CA and TA certs ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/26142)	2024-12-13 08:26:19 +01:00
Dr. David von Oheimb	012353bdf2	openssl-pkeyutl.pod.in: improve description of -rawin and -digest options ... Fixes #25827 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25831)	2024-11-09 12:06:38 +01:00
Dr. David von Oheimb	26a826c2d1	openssl-pkeyutl.pod.in: add that -sign is default op, update claim on hash needed for -sign/-verify, etc. ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25831)	2024-11-09 12:06:07 +01:00
Matt Caswell	d1669a14d1	Fix the default_md example in the ca docs ... We should not have an example showing the default_md as md5. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25856)	2024-11-05 11:12:33 +00:00
Dr. David von Oheimb	50c0241de2	APPS/pkeyutl: -digest implies -rawin and can only be used with -sign and -verify ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22910)	2024-11-04 10:19:02 +01:00
Dr. David von Oheimb	c7764dacdf	APPS/pkeyutl: improve -rawin usability (implied by Ed25519 and Ed448) and doc ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22910)	2024-11-04 10:18:24 +01:00
Aditya	539b17b658	apps: Change default cipher to aes-256-cbc for req, cms and smime apps ... Update `CHANGES.md` and `NEWS.md`; remove `no-des` guard from req, cms, and smime apps Update MAN pages for default cipher; fix styling by removing braces around single statements Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25839)	2024-11-04 09:56:55 +01:00
Zheyu Shen	1d160dbf39	Fix incorrect openssl-smime doc sample command for encrypt ... Original documented sample command causes error. PEM recipient cert argument needs to go last. CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25829)	2024-11-01 17:27:19 +01:00
Aditya	bca1bb2977	req: Add -cipher option to specify private key encryption cipher ... Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25796)	2024-10-30 11:55:23 +00:00
Tomas Mraz	6bb62ab826	openssl-info.pod.in: Add windowscontext option to synopsis in doc ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/25712)	2024-10-16 20:00:19 +02:00
Richard Levitte	5f3fefe2f3	Add 'openssl info' item for the Windows install context ... This information is already present as an 'openssl version' item. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25694)	2024-10-16 19:29:53 +02:00
slontis	01244adfc6	fipsinstall: Save the 'status indicator' if the FIPS provider is 3.0.X. ... Fixes #23400 The 3.1 FIPS provider no longer writes out the 'status indicator' by default due to changes related to FIPS 140-3 requirements. For Backwards compatability if the fipsinstall detects it is loading a 3.0.X FIPS provider then it will save the 'status indicator' by default. Disclaimer: Using a fipsinstall command line utility that is not supplied with the FIPS provider tarball source is not recommended. This PR deliberately does not attempt to exclude any additional options that were added after 3.0.X. These additional options will be ignored by older providers. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Hugo Landau <hlandau@devever.net> (Merged from https://github.com/openssl/openssl/pull/23689)	2024-10-11 14:52:37 +02:00
Dr. David von Oheimb	ee0bf38e87	improve and move text on OPENSSL_TRACE from doc/man1/openssl.pod to doc/man7/openssl-env.pod ... Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/25540)	2024-10-09 12:11:01 +02:00