openssl/.gitattributes, branch master

CI: retry environment steps before failing the job

2026-10-21T17:07:49Z

The VS2013 toolchain image pull, the cross-compile apt installs and the DJGPP PPA fail transiently and turn a push red with nothing in the log about the change. Try each up to three times, 30 seconds apart. When all attempts fail, report it as an environment failure in an error annotation and the job summary, so it is not mistaken for a test failure. Assisted-by: Claude:claude-opus-5-5 Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky Merge-date: Wed Oct 21 17:07:51 2026 Merged-from: https://github.com/openssl/openssl/pull/33198

More polish and renamed codec tests

2025-02-14T09:50:58Z

Reviewed-by: Shane Lontis Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/26569)

ML-KEM encoder and decoder tests

2025-02-14T09:50:58Z

Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26512)

Flexible encoders for ML-DSA

2025-02-14T09:46:04Z

- Same UX as ML-KEM. The main ASN.1 private key syntax is the one from Russ Housley's post on the LAMPS list, subsequently amended to tag the seed instead of the key (each of the three parameter sets will have a fixed size for the `expandedKey`): ML-DSA-PrivateKey ::= CHOICE { seed [0] IMPLICIT OCTET STRING SIZE (32), expandedKey OCTET STRING SIZE (2560 | 4032 | 4896) both SEQUENCE { seed OCTET STRING SIZE (32), expandedKey OCTET STRING SIZE (2560 | 4032 | 4896) } } Reviewed-by: Shane Lontis Reviewed-by: Tim Hudson Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26638)

.ctags.d is previous, include it in our tarballs

2024-04-17T16:41:59Z

This is a simple change of .gitattributes, so our tarballs continue to be a reproducible output of a util/mktar.sh (i.e. git archive with no other funny business). Fixes #24090 Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/24156)

Remove the external BoringSSL test

2021-03-26T13:24:06Z

Fixes #14424 Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/14682)

TEST: Make our test data binary

2020-11-24T10:01:58Z

Our test data (test/data.txt and test/data2.txt) are text files, but declaring them binary means that there will be no line ending transformation done on them. This is necessary for testing on non-Unix platforms, where certain tests could otherwise give results that don't match expected results. Fixes #13474 Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/13477)

Do not export the submodules gost-engine

2020-11-04T13:09:25Z

Remove gost-engine from the distribution tarball. Signed-off-by: Hu Keping Reviewed-by: Richard Levitte Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/13301)

Developer scripts: Release script

2020-04-21T08:11:41Z

The old release script that exists in another repository has aged, and risks becoming messy beyond maintainability if it's made to deal with multiple OpenSSL version schemes. A solution, which has been seen in other projects, is to have the release script as part of the versioned source tree, and ensure it's adapted for the ongoing version scheme in that source tree. This introduces dev/, a directory of OpenSSL developer "stuff". We may expand it with other practical scripts to easy development setup and other similar things that developers may need. For now, it's the release script dev/release.sh, with auxilliary files in dev/release-aux/. The script is self describing, the manual is available by running the command `./dev/release.sh --manual`. The dev/ directory shall never appear in a source distribution. Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/11516)

Don't export the submodules 'boringssl', 'krb5' and 'pyca-cryptography'

2018-11-24T17:40:31Z

Reviewed-by: Matthias St. Pierre (Merged from https://github.com/openssl/openssl/pull/7696)