5355 Commits

Author	SHA1	Message	Date
openssl-machine	d691c69851	Copyright year updates ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Release: yes	2025-09-30 12:35:36 +00:00
Bob Beck	99f5d8d96c	Correct the documentation for OPENSSL_sk_find ... Since April of 2023 with commit eb0935f, these functions have not sorted the stack if it was not sorted. The documentation was noti changed at the time to reflect this changed behaviour. This corrects the documentation to reflect the current behaviour of these functions Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28578) (cherry picked from commit 07e70f951e)	2025-09-24 12:27:32 +02:00
Richard Levitte	be00136419	Fix OPENSSL_VERSION_NUMBER to always have zero status bits ... The documentation suggested that they were always zero, while the implementation in <openssl/opensslv.h> suggested that it could be 0xf in OpenSSL releases... which (almost) never happened because of a bug in said implementation. Therefore, we solidify that the status bits are indeed always zero, at least in all OpenSSL 3 versions. Resolves: https://github.com/openssl/project/issues/1621 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28603) (cherry picked from commit 60c4feacce)	2025-09-20 09:27:41 +02:00
Grzesiek11	c3d6b57cb7	Fix cipher protocol ID type in docs ... The cipher protocol ID, the return type of SSL_CIPHER_get_protocol_id, is uint16_t and correctly described in docs to be 2 bytes, however the function signature on the same page incorrectly pointed to it being uint32_t, which is 4 bytes. CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28523) (cherry picked from commit 9bdf93776d)	2025-09-18 17:29:23 +02:00
Ritesh Kudkelwar	45314d6943	doc: clarify SSL_SESSION_get0_hostname() DESCRIPTION ... Also refine RETURN VALUES. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28393) (cherry picked from commit 32ec975213)	2025-09-18 17:21:12 +02:00
openssl-machine	c836d8f2b1	Copyright year updates ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes	2025-09-16 12:03:50 +00:00
Dr. David von Oheimb	9b14e14346	OSSL_CALLBACK.pod: add missing info on required return values of callback functions ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28474) (cherry picked from commit 1875bb0fec)	2025-09-11 17:52:18 +02:00
Jakub Jelen	2fbe846146	doc: Add missing commas ... CLA: trivial Signed-off-by: Jakub Jelen <jjelen@redhat.com> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28493) (cherry picked from commit 1199882de6)	2025-09-11 16:03:05 +10:00
Eugene Syromiatnikov	ae09a87326	doc/man3/RAND_load_file.pod: RAND_load_file on non-regular files with bytes=-1 ... Mention that RAND_load_file attempts to read only RAND_DRBG_STRENGTH bytes on non-regular files if the number of bytes to be read is not specified explicitly. Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28379) (cherry picked from commit 0daaf33275)	2025-09-09 20:22:24 +02:00
Eugene Syromiatnikov	c8d905b56c	crypto/rand/randfile.c: avoid signed integer overflow in RAND_load_file ... If a file supplied to RAND_load_file is too big (more than INT_MAX bytes), it is possible to trigger a signer integer overflow during ret calculation. Avoid it by returning early when we are about to hit it on the next iteration. Reported-by: Liu-Ermeng <liuermeng2@huawei.com> Resolves: https://github.com/openssl/openssl/issues/28375 Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28379) (cherry picked from commit 35db6a15d4)	2025-09-09 20:22:23 +02:00
Sergey G. Brester	ecdcc7ba28	openssl-enc.pod.in: We actually use PKCS#7 padding ... PKCS#5 padding is a subset for 8-bytes block ciphers only. CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28359) (cherry picked from commit 4e0c2d02a9)	2025-09-09 11:31:25 +02:00
Viperinius	5601194755	Fix typo in BN_generate_prime docs ... CLA: trivial Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28395) (cherry picked from commit b64ac3cb83)	2025-09-09 11:11:33 +02:00
Ryan Hooper	e7056b5331	doc: Update documentation of SSL_CTX_set_dh_auto() ... Update the documentation of the dh_tmp_auto argument in regards to its behavior when the argument value is 2. Fixes #27606 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28366) (cherry picked from commit 7600608eab)	2025-09-09 11:01:22 +02:00
Norbert Pocs	55f8bb1013	docs: Be case specific with links to man headers ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28356) (cherry picked from commit 56ce30abb7)	2025-09-09 10:29:16 +02:00
Eugene Syromiatnikov	fd44a134fd	doc/man1/openssl-enc.pod.in: document 'k' handling for -bufsize ... Apparently, '-bufsize' option parser can handle the 'k' suffix (and treat is as the value being provided in the multiples of 1024). Document that. Complements: d02b48c63a "Import of old SSLeay release: SSLeay 0.8.1b" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28406)	2025-09-06 10:19:40 -04:00
Eugene Syromiatnikov	96fa1f3284	apps/enc.c: avoid signed integer overflow on bufsize assignment ... The calculated option value, while being long-typed, is not checked for fitting into int-sized bufsize. Avoid overflow by throwing error if it is bigger than INT_MAX and document that behaviour. Fixes: 7e1b748570 "Big apps cleanup (option-parsing, etc)" Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1665149 References: https://github.com/openssl/project/issues/1362 Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28406)	2025-09-06 10:19:40 -04:00
Pauli	b7602f10a8	Document the OSSL_SELF_TEST_TYPE_PCT_IMPORT failure state ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28376) (cherry picked from commit dc442241b2)	2025-08-30 09:23:36 -04:00
Jakub Jelen	b6ff32f746	doc: Fix function name in example code ... CLA: trivial Signed-off-by: Jakub Jelen <jjelen@redhat.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28334) (cherry picked from commit 5ea22d199b)	2025-08-29 11:03:58 -04:00
Eugene Syromiatnikov	0798de99fa	doc/man3/SSL_poll.pod: mention SSL_POLL_EVENT_{EL,IC} in SYNOPSIS ... While the constants are present since the initial commit 2a5ee0a08d "QUIC: Add polling API", they weren't initially documented in c9b0df2250 "QUIC: Add manpage for SSL_poll" (probably due to absence of the QUIC server mode support at the time), and mentioned for the first time in b20f557021 "QUIC: Update SSL_poll documentation", but without the accompanying update of the SYNOPSIS section. Rescind the omission by updating it as well. Complements: b20f557021 "QUIC: Update SSL_poll documentation" Signed-off-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28303) (cherry picked from commit b930ea87df)	2025-08-29 09:34:31 -04:00
Dr. David von Oheimb	4376c9571a	d2i_X509.pod: add missing doc of return value of i2d_ASN1_bio_stream() ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27567)	2025-08-18 18:02:30 +02:00
Nikolas Gauder	71f3205fe4	doc/man3/SSL_CTX_set_domain_flags: fix version in HISTORY section ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28128) (cherry picked from commit 2b618a13cf)	2025-08-11 17:00:58 +02:00
openssl-machine	8f9d7c283e	Copyright year updates ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Release: yes	2025-08-05 12:07:41 +00:00
Ingo Franzki	de13aae14a	Make ERR_count_to_mark() available to providers via 'in' dispatch array ... Functions like ERR_set_mark(), ERR_clear_last_mark(), and ERR_pop_to_mark() are already passed to the a provider via the 'in' dispatch array of the provider initialization function (although the documentation did not mention them). Also pass ERR_count_to_mark() to the provider the same way, and update the documentation to mention all four functions. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28073) (cherry picked from commit f77fafd16e)	2025-07-30 18:27:52 +02:00
Nikola Pajkovsky	f4fb4a65d5	sec_mem: add note about the perf implications ... Testing secure storage for ml-kem/dsa [1] shows performace penalty when secure storage is enabled. | Threads | baseline usec/handshake | secmem usec/handshake | |---------+-------------------------+-----------------------| | 1 | 586.784756 | 588.306131 | | 2 | 599.537648 | 601.007393 | | 4 | 610.663361 | 613.600663 | | 8 | 649.347376 | 869.693358 | | 16 | 1176.402781 | 2487.335286 | | 32 | 2345.594618 | 5155.747515 | | 64 | 4697.556045 | 11170.627031 | the test shows that sec mem is ok-ish up to the number of available cores, and when the sec mem lock gets contended, performance goes down rapidly. Tested on Apple M4 Pro. [1] https://github.com/openssl/openssl/pull/27625 Signed-off-by: Nikola Pajkovsky <nikolap@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28011) (cherry picked from commit b8cc327660)	2025-07-14 11:19:22 -04:00
Michael Baentsch	69aa990775	Add note about use of EVP_PKEY in different libctxs ... Co-authored-by: Shane Lontis <slontis@oracle.com> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26309) (cherry picked from commit b2ac43b0d8)	2025-07-10 14:45:09 +02:00
Tomas Mraz	5484ba4a50	PEM_read_CMS.pod: Correct the deprecation notice ... Fixes #27863 Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27865) (cherry picked from commit 9a6376dd75)	2025-07-10 14:41:44 +02:00
slontis	44df0a37fb	Update FIPS provider doc to match the current code. ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27902) (cherry picked from commit b63adfc58a)	2025-07-01 20:47:23 +02:00
Tomas Mraz	00022bc543	Fix internal documentation of ossl_namemap_num2name() ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/27889) (cherry picked from commit bdb769841a)	2025-07-01 19:11:18 +02:00
openssl-machine	ed2e04f18a	Copyright year updates ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Release: yes	2025-07-01 11:50:25 +00:00
Samson S. Kolge	45444f2470	Update pkeyutl documentation for PQC algorithms (Fixes #27415) ... Add examples and documentation for using ML-DSA, ML-KEM, and SLH-DSA algorithms with pkeyutl. This includes information about the context-string option for ML-DSA and examples of encapsulation/decapsulation with ML-KEM. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27424) (cherry picked from commit 27eea04b06)	2025-06-20 15:49:31 +01:00
noctuelles	5b2a1b6f30	fix: Better documentation on DTLS_set_timer_cb() ... Also more precise description of DTLS timeout mechanism. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27800) (cherry picked from commit 49885aebe7)	2025-06-13 12:49:01 +02:00
Viktor Dukhovni	5f55c57d1e	Allow keygen after dup of minimal PKEY ctx ... It should be possible to repeatedly duplicate a PKEY CTX created via EVP_PKEY_CTX_new_from_name() that has not yet been assigned an "operation" (e.g. via EVP_PKEY_CTX_keygen_init()), and then perform keygen_init() and keygen() on the duplicated copies. When the operation is not yet set, all that's needed is to not try to use the key if one isn't set yet. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27662) (cherry picked from commit 2c74a8d1ef)	2025-06-10 19:44:04 +02:00
Pauli	2d1ce1ddf9	rand: document the EVP_RAND_nonce() return correctly ... Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27766) (cherry picked from commit e81b252a95)	2025-06-09 10:24:42 +02:00
Matt Caswell	8cf3b47e55	Update documentation regarding no_renegotiation handling ... Clarify what happens in the event that a no_renegotiation alert is received. Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27591) (cherry picked from commit 0db6a59ea7)	2025-06-04 17:22:16 +02:00
Richard Levitte	56b7487784	[design] Functions for explicitly fetched signature algorithms ... This design goes into more details what was outlined in the design for [fetching composite (PKEY) algorithms and using them]. It also changes what functionality will be used for this. The design for signature was originally to add modified initializers for DigestSign and DigestVerify, but recent OTC discussions redirected us to have a closer look at EVP_PKEY_sign() and EVP_PKEY_verify(). [fetching composite (PKEY) algorithms and using them]: ./fetching-composite-algorithms.md Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22672) (cherry picked from commit 66454bf8ba)	2025-05-30 11:30:13 +02:00
Tomas Mraz	93cfd87840	Document that FIPS provider cannot be used by multiple libcryptos ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27702) (cherry picked from commit 08b2042a20)	2025-05-30 08:08:42 +10:00
Norbert Pocs	a4e7eccd12	Document EVP_CIPHER failure for missing provider function ... When writing a new CIPHER implementation the OSSL_FUNC_cipher_get_params must be present, otherwise the fetch fails. This behaviour is seen in function evp_cipher_cache_constants@crypto/evp/evp_lib.c. Resolves: #25801 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27696) (cherry picked from commit 3423c30db3)	2025-05-28 10:34:04 +02:00
Dr. David von Oheimb	d977f3c424	provider-signature.pod: add missing doc of OSSL_FUNC_signature_query_key_types(), fix doc of return types, etc. ... Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27367) (cherry picked from commit 1146b74a8a)	2025-05-20 21:20:17 +02:00
Jan Luebbe	db34ae5f14	Fix some typos in the man pages ... Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27590) (cherry picked from commit 8fd0d230fd)	2025-05-19 16:29:40 +02:00
Dr. David von Oheimb	29fb842065	Fix SSL_{set1,add1}_host() handling of host name/IP address and related documentation ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27457) (cherry picked from commit 1eee02d3e7)	2025-05-06 15:11:49 +02:00
Dr. David von Oheimb	30e48f137a	SSL_set1_host.pod: add recommendation to use SSL_{set1,add1}_host() and SSL_set_tlsext_host_name() ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27457) (cherry picked from commit eb909d785f)	2025-05-06 15:11:41 +02:00
Matt Caswell	1ce5dfba02	Clarify how s_client -ign_eof and -quiet impact command processing ... If -ign_eof -or -quiet are passed to s_client this implicitly turns off command processing (i.e. equivalent to -nocommands). This was stated on the man page in the "CONNECTED COMMANDS" section, but not in the documentation for "-ign_eof" or "-quiet" directly. We state it here as well to make it clearer. Fixes #27443 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27500) (cherry picked from commit 20fb5dcb1e)	2025-04-29 19:34:29 +02:00
Nicholas Brink	e781521ab3	Fix POD indentation in OSSL_CMP_CTX_new ... Fixes #27459 Sourced from 0c12a613ef Plus one line of documentation fixes CLA: trivial Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27481) (cherry picked from commit f417a91f2f)	2025-04-28 17:26:15 +02:00
Ryan Schanzenbacher	0813380f2f	docs: update OSSL_PARAM_int documentation ... This change adds an example to allow compilation without warnings using compiler options like `-Wincompatible-pointer-types-discards-qualifiers` Code for the example was inspired by libarchive's 9e3a7e4b6c Fixes #20956 Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27157) (cherry picked from commit b83b67fe59)	2025-04-24 14:41:10 +02:00
Christian Wansart	0d3c38139f	Typo in TLS introduction ... CLA: trivial Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27455) (cherry picked from commit 9eb2c13432)	2025-04-23 11:21:54 +02:00
Norbert Pocs	dabc3ab3d2	Document SSL_CTX_set_min_proto_version defaults ... If the function is not called the settings default to 0. Fixes #10584 Signed-off-by: Norbert Pocs <norbertpocs0@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27410) (cherry picked from commit 871182d29d)	2025-04-18 15:44:36 +01:00
Dr. David von Oheimb	b6087459ce	provider-signature.pod: fix typos (digeset -> digest) ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27372) (cherry picked from commit 7d14d1c46a)	2025-04-18 15:40:08 +01:00
Dr. David von Oheimb	00bc31f372	provider-signature.pod: fix doc of OSSL_SIGNATURE_PARAM_ALGORITHM_ID, describing its relevance ... This provides a fix for the documentation part of #22932. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27372) (cherry picked from commit 23e3b3c0c5)	2025-04-18 15:40:08 +01:00
Mironenko	192ffaca7f	Fix OSSL_FUNC_keymgmt_load declaration in man7/provider-keymgmt ... OSSL_FUNC_keymgmt_load prototype declared in man7 does not match the actual OSSL_FUNC_keymgmt_load prototype declared in include/openssl/core_dispatch.h. This commit fixes the prototype in man7. CLA: trivial Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27189) (cherry picked from commit ada231523f)	2025-04-16 09:50:04 +01:00
David Benjamin	60a4ba9784	Fix PKCS7_sign and CMS_sign default hash documentation ... Fixes #27291. See issue for details. Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27292) (cherry picked from commit 4f81470afa)	2025-04-15 15:40:37 +01:00