openssl, branch feature/evp_skey

Correct fixed cert validity end date in oqsprovider testing

2025-08-28T08:44:51Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28350)

Fix `VC-WIN64-CLANGASM-ARM` target

2025-08-26T10:05:28Z

This was broken for Windows ARM64 in #22949 The comments were in the wrong format, and a define check of `_M_ARM64` was missed in places Reviewed-by: Neil Horman Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27958)

params: add features to param parser generator

2025-08-23T03:31:25Z

Support BN as an available type. If a param name is repeated, use the extra fields for the first not the last. Include the parameter name in a comment in the generated parser. This Fixes #28257 Reviewed-by: Dmitry Belyavskiy Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/28273)

dh: add FIPS 140-3 PCT on key generation

2025-08-22T19:03:01Z

According to FIPS 140-3 IG 10.3.A Additonal Comment 1, a PCT shall be performed. Signed-off-by: Nikola Pajkovsky Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Reviewed-by: Tim Hudson Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/28280)

fix(pkcs12): prevent PKCS7 memleak in p12_npas.c

2025-08-22T16:51:27Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Reviewed-by: Paul Dale Reviewed-by: Shane Lontis Reviewed-by: Todd Short (Merged from https://github.com/openssl/openssl/pull/28292)

Add design doc for rfc4514 DN output format

2025-08-22T16:43:18Z

Reviewed-by: Saša Nedvědický Reviewed-by: Tomas Mraz Reviewed-by: Todd Short (Merged from https://github.com/openssl/openssl/pull/28104)

crypto\cms\cms_kem.c: Add ASN1_TYPE_free when EVP_CIPHER_param_to_asn1() fails

2025-08-22T15:39:45Z

Signed-off-by: Nachel72 CLA: trivial Reviewed-by: Hugo Landau Reviewed-by: Tomas Mraz Reviewed-by: Todd Short (Merged from https://github.com/openssl/openssl/pull/28210)

Fix null pointer check in pkey_dh_derive to ensure both keys are set

2025-08-22T15:21:38Z

CLA: trivial Reviewed-by: Matt Caswell Reviewed-by: Paul Dale Reviewed-by: Shane Lontis Reviewed-by: Todd Short (Merged from https://github.com/openssl/openssl/pull/28259)

Fix: Check for wrong object. The converted sc should be checked instead of the original s

2025-08-22T15:06:25Z

Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale Reviewed-by: Shane Lontis Reviewed-by: Todd Short (Merged from https://github.com/openssl/openssl/pull/28248)

Ignore generated assembler files for cpuid functions

2025-08-22T14:44:07Z

The architecture-specific code to detect CPU features at runtime is generated from Perl Assembler. Modify the ignore pattern to match the generated .S files for all architectures. Signed-off-by: Holger Dengler Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale Reviewed-by: Todd Short (Merged from https://github.com/openssl/openssl/pull/28318)