37339 Commits

All Branches

Search

Author	SHA1	Message	Date
Collin Funk	fb6ae00713	doc: fix misspellings of certificate(s) ... CLA: trivial Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27754)	2025-06-05 20:05:30 +10:00
Dr. David von Oheimb	ac85974bc3	apps/x509.c: re-add ERR queue printing on errors ... Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27739)	2025-06-04 17:37:33 +02:00
Viktor Dukhovni	287bbb28b0	Split arguments taking quotes into account ... CA.pl supports interpolating multiple arguments into the executed commands. Previously these were evaluated by a shell, which supported quoting of values that contain whitespace, backslashes, ... With a shell no longer used (avoid command injection), backwards compatibility requires some similar functionality. The code now handles double and single-quoted strings (shell-style word splitting), but not parameter expansion ($foo remains unexpanded) or command substitution (`cmd` and $(cmd) remain unexpanded). On Windows system(@LIST) does not correctly preserve argv, do our own quoting instead and use system(<$quoted_cmd>). Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27432)	2025-06-04 17:33:48 +02:00
Viktor Dukhovni	0b1bdef38e	Avoid shell commandline processing in CA.pl ... The CA.pl script used to build single-string string commandlines to pass to a shell via `system(command_string)`. That was fragile and not a best practice. This PR replaces `system(command_string)` with `system { executable } @argv`, which avoids the shell whenever possible (at least Unix-like systems and Windows). The only question mark is whether some sort of quoting is needed for VMS to preserve the case of commandline arguments even when processes are spawned directly, rather than via the shell. Unfortunately, given the way that some environment variables and command-line options are used to construct the commands to run, the result is still brittle. The CA.pl utility really should be replaced with something better. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27432)	2025-06-04 17:33:48 +02:00
Matt Caswell	df5dff26ef	Add a CHANGES.md entry regarding no_renegotiation alert ... Highight the bug being fixed for DTLS users Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27591)	2025-06-04 17:21:42 +02:00
Matt Caswell	0db6a59ea7	Update documentation regarding no_renegotiation handling ... Clarify what happens in the event that a no_renegotiation alert is received. Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27591)	2025-06-04 17:21:42 +02:00
Matt Caswell	7f6e66b048	Test that a no_renegotiation alert is handled correctly ... If we receive a no_renegotiation alert we should abort the connection. We add a test for this. Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27591)	2025-06-04 17:21:42 +02:00
Matt Caswell	e5feca0659	Fix DTLS handling when receiving a no_renegotiation alert ... no_renegotiation is a warning alert sent from the server when it is not prepared to accept a renegotiation attempt. In TLS we abort the connection when we receive one of these - which is a reasonable response. However, in DTLS we incorrectly ignore this and keep trying to renegotiate. We bring the DTLS handling of a no_renegotiation alert into line with how TLS handles this. In versions prior to 3.2 handling of a warning alert in DTLS was mishandled resulting in a failure of the connection, which ends up being the right thing to do "by accident" in the case of "no_renegotiation". From 3.2 this mishandling was fixed, but exposed this latent bug. Fixes #27419 Reviewed-by: Frederik Wedel-Heinen <fwh.openssl@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27591)	2025-06-04 17:21:16 +02:00
Pauli	83fa1b8b94	chacha20_poly1305: use the new name/type code generator ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27747)	2025-06-04 16:48:59 +02:00
Pauli	04e969d1f6	cipher: use the new name/type code generator for ciphers ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27747)	2025-06-04 16:48:59 +02:00
Pauli	973322d672	paramnames: add new function to handle names and types. ... The help generates the ettable table and the TRIE based name decode function. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27747)	2025-06-04 16:48:59 +02:00
Dmitry Misharov	19dfc4672a	ci: remove windows-2019 runner images ... According to https://github.com/actions/runner-images/issues/12045 The Windows 2019 Actions runner image will begin deprecation on 2025-06-01 and will be fully unsupported by 2025-06-30. Jobs using the windows-2019 YAML workflow label should be updated to windows-2022, windows-2025 or windows-latest. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27749)	2025-06-04 16:40:45 +02:00
Andrew Dinh	9bad2b86e8	Reset qtls->local_transport_params_consumed to 0 on SSL_clear() ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27656)	2025-06-03 18:29:21 +02:00
Neil Horman	9a5ac06921	Add test for yielding of write secrets before read ... Test that, in QUIC, we yield write secrets before read secrets Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27732)	2025-06-03 17:06:41 +01:00
Matt Caswell	098cfd216b	Ensure client read app data secret change occurs after write for QUIC ... We don't want read secrets to be issue before write for QUIC, because we want to avoid the situation where we want to ack something we've read but we don't have the write secret yet. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27732)	2025-06-03 17:06:31 +01:00
Matt Caswell	c7f9c4d7d1	Implement explicit storing of the server_finished_hash ... tls13_change_cipher_state was storing the server_finished_hash as a side effect of its operation. This decision is better made by the state machine which actually knows what state we are in. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27732)	2025-06-03 17:06:31 +01:00
Matt Caswell	86e7579262	Ensure client read handshake secret change occurs after write for QUIC ... We don't want read secrets to be issue before write for QUIC, because we want to avoid the situation where we want to ack something we've read but we don't have the write secret yet. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27732)	2025-06-03 17:06:31 +01:00
Matt Caswell	4579a18cf5	Implement explicit storing of the handshake_traffic_hash ... tls13_change_cipher_state was storing the handshake_traffic_hash as a side effect of its operation. This decision is better made by the state machine which actually knows what state we are in. Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27732)	2025-06-03 17:06:31 +01:00
sashan	857156910d	- drop s/-ansi/-std=c99 ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/27659)	2025-06-03 09:02:21 -04:00
Nicky Mouha	a5d1eadde1	Regression test for incorrect HMAC API usage ... Fixes #13210 Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/27692)	2025-06-03 14:32:26 +02:00
Frederik Wedel-Heinen	1c1ce2a6ee	Handle 0 return values from DH key computations as errors ... Returned 0 from ossl_dh_compute_key(), DH_compute_key_padded() and DH_compute_key() needs to be treated as an error. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27673)	2025-06-03 14:26:54 +02:00
Jai S	8a9e0d0f49	Use value barrier for constant_time_cond_swap_* ... Resolves #27497 Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27581)	2025-06-03 14:24:57 +02:00
Dr. David von Oheimb	7c6d9da45f	DOC: update references to obsolete RFC 2459 (updated by RFC 5280 and DSA parts taken over by RFC 3370) ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/27734)	2025-06-03 07:27:57 +02:00
sashan	f426dd1311	initial implementation of http/1.0 server to benchmark OpenSSL QUIC ... stack. The server currently replies with HTTP 200 OK only. It provides text/plain response body. It only accepts GET request with any URI. Any other requests will make server to drop stream/connection. Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27508)	2025-05-31 09:30:12 -04:00
sashan	005f545f64	- fix copyright years ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
sashan	eee2d0610b	- install libtls-dev ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
sashan	f92157d340	- s/libtls/libretls ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
sashan	fa43c8c059	- install libtls ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
sashan	abe1014d0d	- fix typo in github action ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
sashan	f50e069424	- adding rpki test to ci workflow ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:17 -04:00
sashan	1eb79b51e7	- adding rpki-client-portable repository as submodule ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:16 -04:00
sashan	f1305ea551	- rpki external test ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:16 -04:00
sashan	9465cbf68b	add rpki-client external test ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27689)	2025-05-30 13:26:16 -04:00
Daniel Frink	6c3e111016	Add generated cipher implementation files to gitignore ... A commit was merged recently which change ciphercommon.c and cipher_chacha20_poly1305.c to be generated files. The corresponding .c files were not added to the gitignore, so this commit adds them to avoid them being erroneously tracked in the future. Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27715)	2025-05-30 18:15:18 +02:00
Dmitry Belyavskiy	0b968a3572	Cleanup - this constant and functions are no longer in use ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27716)	2025-05-30 18:14:13 +02:00
Norbert Pocs	9ed90fd44c	sslapitest: Add failing test for quic double free ... The double free happened on the EVP_MD object, when we used external quic implementation. This test makes the yield secret callback fail, to make the kdfdigest free path happen. Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27713)	2025-05-30 06:44:38 -04:00
Norbert Pocs	258d3a695e	quic_tls.c: Precede double free on EVP_MD variable ... When external quic implementation is used, the variable is not used and double free happens whe the yield_secret_cb fails. Resolves: #27504 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27713)	2025-05-30 06:44:38 -04:00
Richard Levitte	66454bf8ba	[design] Functions for explicitly fetched signature algorithms ... This design goes into more details what was outlined in the design for [fetching composite (PKEY) algorithms and using them]. It also changes what functionality will be used for this. The design for signature was originally to add modified initializers for DigestSign and DigestVerify, but recent OTC discussions redirected us to have a closer look at EVP_PKEY_sign() and EVP_PKEY_verify(). [fetching composite (PKEY) algorithms and using them]: ./fetching-composite-algorithms.md Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/22672)	2025-05-30 11:30:03 +02:00
Tomas Mraz	08b2042a20	Document that FIPS provider cannot be used by multiple libcryptos ... Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27702)	2025-05-30 08:08:19 +10:00
JiashengJiang	e8deb32af4	test/evp_test.c: Free fetched_digest on error to avoid memory leak ... Call EVP_MD_free() to release fetched_digest if OPENSSL_zalloc() fails, preventing a memory leak. Fixes: 2208ba56eb ("evp_test: Add the missing check after calling OPENSSL_malloc") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27648)	2025-05-29 16:41:37 +02:00
JiashengJiang	00c531a5e3	crypto/property/property.c: Free impl->method to avoid memory leak ... After ossl_method_up_ref() succeeds, impl_free() should be called to free impl->method. Fixes: 860ecfd ("property: check return values from the property locking calls.") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com> Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27564)	2025-05-29 16:39:51 +02:00
AntonMoryakov	3161f460fa	apps: lib: Prevent potential NULL dereference in init_client() ... apps: lib: Simplify ba_ret handling in init_client() Simplify logic around ba_ret assignment: - Fail early if ba_ret == NULL - Assign directly otherwise, without checking *ba_ret This avoids extra nesting and matches OpenSSL's conventions. CLA: trivial Signed-off-by: Anton Moryakov <ant.v.moryakov@gmail.com> Co-authored-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/26783)	2025-05-29 16:37:41 +02:00
operagxoksana	8ad37051e2	README.md: Improve links to GH workflow badges ... CLA: trivial Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27596)	2025-05-29 16:32:54 +02:00
Viktor Dukhovni	005fa3e00e	Note finished state in cipher BIO EOF ... When the cipher BIO encounters a non-retriable EOF (or error), mark the state as "finished", else a subsequent BIO_flush() or attempted read may attempt to finalise the crypto state again, and fail, leading, for example, to users seeing erroneous apparent decryption failure. This is not a new problem, the fix should be backported to all supported releases. It was made more apparent by recent changes to the base64 BIO, which returns a non-retriable EOF when padding is seen at the end of the base64 data, even if the underlying next BIO is "retriable". Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27680)	2025-05-29 16:02:26 +02:00
Neil Horman	864333b455	Attempt to fix occasional failure of quicapi test in ci ... https://github.com/openssl/openssl/actions/runs/15214054228/job/42795224720 the theory I have for the cause of this failure is: 1. qtest_create_quic_connection_ex is called for the client 2. The client is in blocking mode, so we fall into the conditional on line 512 3. We create the server thread on line 519, which is non-blocking 4. The scheduler in the failing case, lets the server run ahead of the client 5. Server thread enters qtest_create_quic_connection_ex and iterates steps 6-9 in the do_while loop starting on line 530 6. Server calls qtest_add_time 7. Server calls ossl_quic_tserver_tick 8. Server calls ossl_quic_tserver_is_term_any, received NULL return 9. Server calls qtest_wait_for_timeout 10. Eventually qtest_wait_for_timeout returns zero, adn the server jumps to the error label, returning zero to globservret, and the thread exits 11. Client thread regains the cpu, and attempts to call SSL_connect, which fails, as the server is no longer listening 12. We fall into the error case on line 556, and SSL_get_error returns SSL_ERROR_SSL, which causes clienterr to get set to 1 13. We exit the do{} while loop on line 581, and do the TEST_true check on line 593. The server having exited wait_for_thread returns true, but globserverret is still zero from step 10 above, and so the test fails I can't prove this is the case, as the test only appears to fail in CI, and we can't dump verbose logging there, lest we affect the timing of the tests, so this is just a theory, but it seems to fit the observations we have. Attempting to fix this, by creating a thread interlock with a condition variable that blocks the server from ticking the quic reactor until such time as the client is about to call SSL_connect to prevent the race condition Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27704)	2025-05-29 05:41:32 -04:00
Norbert Pocs	3423c30db3	Document EVP_CIPHER failure for missing provider function ... When writing a new CIPHER implementation the OSSL_FUNC_cipher_get_params must be present, otherwise the fetch fails. This behaviour is seen in function evp_cipher_cache_constants@crypto/evp/evp_lib.c. Resolves: #25801 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27696)	2025-05-28 10:33:39 +02:00
JiashengJiang	e0ae801728	apps/cmp.c: Free bio on error to avoid memory leak ... Call BIO_free() to release bio if ASN1_i2d_bio_of() fails, preventing a memory leak. Fixes: 6a3579e190 ("CMP: add support for requesting cert template using genm/genp") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27647)	2025-05-27 19:51:55 +02:00
Tomas Mraz	0873cd1b68	OSSL_CMP_MSG_http_perform(): Remove extraneous %s from debug log print ... Also add missing ":" to another log print. Fixes #27634 Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/27635)	2025-05-27 19:50:41 +02:00
JiashengJiang	9882d389df	crypto/pkcs7/pk7_smime.c: Add BIO_free() to avoid memory leak ... Add BIO_free() to free tmpout if OPENSSL_malloc() fails to avoid memory leak. Fixes: 8e70485 ("RT3955: Reduce some stack usage") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27631)	2025-05-27 19:49:07 +02:00
JiashengJiang	0dc6ea55a1	apps/pkeyutl.c: Add OPENSSL_free() to avoid a memory leak ... If EVP_PKEY_CTX_ctrl_str() fails, the code jumps to 'end' label without freeing passwd, causing a memory leak. Fixes: 9d1bf5f7de ("Add option to read pkeyopts interactively") Signed-off-by: JiashengJiang <jiasheng@purdue.edu> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27470)	2025-05-27 19:47:17 +02:00