openssl/util
Viktor Dukhovni bcff020c36 Refactor sigalg handling
- The default sigalg list now puts ML-DSA-65 first, then ML-DSA-87
  and then ML-DSA-44.  (87 vs. 44 Subject to bikeshedding).

- The mintls and maxtls versions are now taken into account for
  both built-in and provided algorithms.

- Some algorithms have a separate TLSv1.2-specific name for future
  reporting via openssl-list(1).

- ML-DSA aside, any new provided algorithms go at the end of the
  default list (backwards-compatible inclusion).

- The built-in algorithms now also have min/max DTLS versions.
  Though the provider TLS-SIGALG capability was extended to also report
  the DTLS version range, the minimum supported DTLS is 1.3, which we
  don't yet have, so it is not yet possible to add DTLS sigalgs via a
  provider

- The TLS 1.3 brainpool sigalgs got their correct IANA names, with
  the legacy names as purported TLS 1.2 alternatives, but since
  these are for TLS 1.3 and up those names are for matching only,
  the reported value will still be the 1.3 name.

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26975)
2025-03-09 23:19:37 +01:00
..
perl Refactor sigalg handling 2025-03-09 23:19:37 +01:00
platform_symbols Allow use of socketpair, WSASocketA 2025-02-17 11:27:32 -05:00
add-depends.pl Update copyright year 2022-05-03 13:34:51 +01:00
build.info Adds a new demo blocking QUIC server for use with the existing demo QUIC clients 2025-02-17 11:27:33 -05:00
c-compress-test.pl FIPS module checksums: add scripts and Makefile rule 2021-05-04 11:32:16 +02:00
cavs-to-evptest.pl Add the NIST CAVS test vectors for CCM 2019-05-23 10:49:54 +01:00
check-format-commit.sh fix: util/check-format-commit.sh - fix ending check 2024-10-30 11:41:55 +00:00
check-format-test-negatives.c Copyright year updates 2024-09-05 09:35:49 +02:00
check-format-test-positives.c check-format.pl: improve whitespace reporting on <op>= 2022-09-02 21:32:46 +02:00
check-format.pl check-format.pl: do checks regarding statement/block after for() also on {OSSL_,}LIST_FOREACH{,_*} 2024-09-24 22:19:12 +02:00
check-malloc-errs Following the license change, modify the boilerplates in util/, tools/ 2018-12-06 14:17:23 +01:00
checkplatformsyms.pl Create a rudimentary symbol scanning script 2023-11-01 16:32:26 +01:00
ck_errf.pl Create provider errors and use them 2019-04-19 09:31:54 +01:00
copy.pl Following the license change, modify the boilerplates in util/, tools/ 2018-12-06 14:17:23 +01:00
ctags.sh Fix new typos found by codespell 2023-06-18 16:53:09 +10:00
dofile.pl configdata.pm.in, util/dofile.pl: Make a HERE document stricter. 2020-10-27 10:17:19 +01:00
echo.pl always use the same perl in $PATH 2021-09-02 12:55:39 +10:00
engines.num Change the build of engines to use ordinal files for symbol export 2018-10-05 08:22:42 +02:00
err-to-raise Simplify util/err-to-raise 2020-11-18 11:40:52 +01:00
find-doc-nits Big and little-endian load and store support 2025-01-14 12:14:54 +00:00
find-unused-errs Following the license change, modify the boilerplates in util/, tools/ 2018-12-06 14:17:23 +01:00
fips-checksums.sh always use the same perl in $PATH 2021-09-02 12:55:39 +10:00
fix-deprecation always use the same perl in $PATH 2021-09-02 12:55:39 +10:00
fix-includes Update copyright year 2020-04-23 13:55:52 +01:00
fix-includes.sed CRYPTO: split cipher_platform.h into algorithm specific headers 2019-12-19 13:31:29 +01:00
help.pl Add "make help" option 2023-03-06 08:00:58 +11:00
indent.pro Removes record_queue struct which is no longer useful. 2024-02-16 16:33:14 +01:00
lang-compress.pl util: update FIPS checksumming script to be more aggressive with whitespace 2021-06-03 11:56:21 +10:00
libcrypto.num x509: allow SAN URIs to contain userinfo 2025-03-04 17:30:34 +01:00
libssl.num Added new API to enable 0-RTT for 3rd party QUIC stacks. 2025-02-21 12:01:30 +01:00
markdownlint.rb Adjust mdl configuration 2023-10-24 17:34:07 +01:00
merge-err-lines Add merge-err-lines script 2019-09-19 09:27:38 -04:00
missingcrypto-internal.txt STORE: Move the built-in 'file:' loader to become an engine module 2020-09-03 17:48:32 +02:00
missingcrypto.txt Make the provider context available to encoders 2025-01-21 17:19:07 +11:00
missingcrypto111.txt Implementation of the RFC 9579, PBMAC1 in PKCS#12 - documentation 2024-08-07 10:00:16 +02:00
missingmacro.txt BIO_s_dgram: add documentation and hazard warnings 2022-12-15 06:32:45 +00:00
missingmacro111.txt Document some SSL DH related functions/macros 2020-11-18 14:14:53 +00:00
missingssl-internal.txt Initialize files that declare internal symbols 2020-04-11 15:51:43 +02:00
missingssl.txt Document the SSL_set_session_secret_cb() function 2024-05-06 10:44:22 +02:00
missingssl111.txt Adjust all util/missing*.txt to include the section number 2019-12-21 22:53:54 +01:00
mk-fipsmodule-cnf.pl kdfs: implement key length check in X9.42 2024-09-30 20:03:49 +02:00
mkbuildinf.pl Fix buildinf.h generation for space and backslash 2025-01-10 11:56:38 +01:00
mkdef.pl Copyright year updates 2024-04-09 13:43:26 +02:00
mkdir-p.pl Update copyright year 2021-04-08 13:04:41 +01:00
mkerr.pl Copyright year updates 2024-09-05 09:35:49 +02:00
mkinstallvars.pl Copyright year updates 2024-09-05 09:35:49 +02:00
mknum.pl Ensure ordinals are created during release process 2021-06-29 09:51:30 +10:00
mkpod2html.pl Fix util/mkpod2html.pl to call pod2html with absolute paths 2021-09-21 11:05:53 +02:00
mkrc.pl util/mkrc.pl: Make sure FILEVERSION and PRODUCTVERSION have four numbers 2020-11-17 13:18:16 +01:00
mktar.sh Fix treatment of BUILD_METADATA 2022-12-08 07:01:33 +01:00
opensslwrap.sh util/opensslwrap.sh: adjust to define OPENSSL_MODULES as well 2019-07-15 16:14:35 +02:00
other-internal.syms Suppress errors about undocumented asn1_d2i_read_bio 2021-02-22 12:11:38 +00:00
other.syms rename new_pending_ssl to new_pending_conn 2025-02-17 11:27:33 -05:00
providers.num Add provider module infrastructure 2019-03-11 20:40:13 +01:00
shlib_wrap.sh.in Add explicit support in util/shlib_wrap.sh.in for NonStop DLL loading. 2021-03-30 19:08:32 +02:00
su-filter.pl Following the license change, modify the boilerplates in util/, tools/ 2018-12-06 14:17:23 +01:00
update_abi_check.sh Update ci and ABI xml files to validate function parameters 2023-11-15 11:08:17 +01:00
withlibctx.pl Perl util to do with_libctx renaming 2020-10-01 09:23:05 +01:00
wrap.pl.in jitter: add a new provider containing a jitter entropy source alone 2024-07-31 14:44:51 +10:00
write-man-symlinks write-man-symlinks: Write relative symlinks not absolute 2021-05-25 17:14:09 +02:00