openssl, branch openssl-3.0

Provider compat CI: Force copy of fips.so and fipsmodule.cnf

2026-09-07T18:17:39Z

If the target branch is >4.0 the destination files can be read-only. Reviewed-by: Eugene Syromiatnikov Reviewed-by: Norbert Pocs Merge-date: Mon Sep 7 18:16:30 2026 Merged-from: https://github.com/openssl/openssl/pull/32662 (cherry picked from commit e80b14876a69a758d2eb2a916937d846cba3967b)

Do not advertise OPENSSL_INIT_LOAD_CONFIG in optsdone too soon

2026-09-07T08:40:59Z

If there was no explicit call to OPENSSL_init_crypto before starting threading, it would result in a race between loading the config in one thread, and attempting to use features dependent on the config, e.g., providers in other threads. The first thread that gets into OPENSSL_init_crypto would start loading the config and set `loading` to 1 The same thread may re-enter the function recursively and should do nothing, but it would actually update `optsdone` with OPENSSL_INIT_LOAD_CONFIG, even though the loading has not finished yet. This commit fixes the issue by masking the opts bit out if we re-enter OPENSSL_init_crypto. Assisted-by: Claude:claude-opus-4.8 (cherry picked from commit d115fd05e3986e90db18776ad49103fadccbe52f) Reviewed-by: Eugene Syromiatnikov Reviewed-by: Dmitry Belyavskiy MergeDate: Mon Sep 7 08:37:37 2026 (Merged from https://github.com/openssl/openssl/pull/32660) (cherry picked from commit 95f41f0ee0eafe1a694ae4607a18679f63b8299e)

Document application defined security callbacks

2026-09-03T09:31:12Z

Assisted-by: Claude:claude-opus-4-8 Reviewed-by: Andrew Dinh Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Neil Horman Merge-date: Thu Sep 3 09:30:40 2026 Merged-from: https://github.com/openssl/openssl/pull/31917 (cherry picked from commit fe927d455c36e18aec731b45514220915e30c2f0)

Fix memory leak in load_key_certs_crls() when add/push fails

2026-09-03T09:17:25Z

When X509_add_cert() or sk_X509_CRL_push() failed, the cert or CRL from OSSL_STORE was not freed. Free on failure to avoid a leak. Issue #30364 Fixes: 6d382c74b375 "Use OSSL_STORE for load_{,pub}key() and load_cert() in apps/lib/apps.c" Fixes: d7fcee3b3b5fa "OSSL_HTTP_parse_url(): add optional port number return parameter and strengthen documentation" Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky (cherry picked from commit 9ac29bc8579dd9632bd50900675ff7900f5f7ef1) Reviewed-by: David von Oheimb Reviewed-by: Nikola Pajkovsky Merge-date: Thu Sep 3 09:17:33 2026 Merged-from: https://github.com/openssl/openssl/pull/30927

doc: correct pkcs12 passin and passout descriptions

2026-09-01T14:11:19Z

The pkcs12 documentation incorrectly says that -passin is used to encrypt output private keys. The implementation uses -passin for input and -passout for output, with direction-specific roles depending on -export. Describe both options explicitly and link -passout to the shared passphrase-options documentation. Assisted-by: Codex:gpt-5.6-sol Reviewed-by: Richard Levitte Reviewed-by: Jakub Zelenka Merge-date: Tue Sep 1 14:10:54 2026 Merged-from: https://github.com/openssl/openssl/pull/32315 (cherry picked from commit 2c5f67b894e4f0703ab23262800897b81586651a)

TLS 1.3: Apply the cap to the lifetime hint in the session

2026-09-01T13:48:23Z

Commit 5a85e41 added a 7 day cap on the TLSv1.3 ticket lifetime as required by RFC 9846, but applied it to a local variable after the value had already been stored in the session and after its last use, so it had no effect. The uncapped value was still returned by SSL_SESSION_get_ticket_lifetime_hint() and used by the client when deciding whether to offer the ticket for resumption. Apply the cap to the lifetime hint in the session. - RFC 9846 4.7.1: Servers MUST NOT use any value greater than 604800 seconds (7 days). The value of zero indicates that the ticket should be discarded immediately. Clients MUST NOT use tickets for longer than 7 days after issuance, regardless of the ticket_lifetime, and MAY delete tickets earlier based on local policy. Fixes #32244 Reviewed-by: Tom Cosgrove Reviewed-by: Richard Levitte Reviewed-by: Mounir Idrassi Merge-date: Tue Sep 1 13:47:48 2026 Merged-from: https://github.com/openssl/openssl/pull/32240 (cherry picked from commit 66985198d23337651f48c3affbdc7564bcdb903a)

remove redundant checks

2026-09-01T00:11:04Z

Reviewed-by: Richard Levitte Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/32560)

test: cover non-legacy cipher parameter decoders

2026-09-01T00:11:04Z

Check parameter metadata exposed by common, CTS, multiblock and TDES cipher implementations. Assisted-by: ChatGPT:gpt-5.6Sol Reviewed-by: Richard Levitte Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/32560)

aes-ctr-hmac: add range checking on AAD

2026-09-01T00:11:04Z

Also correct parameter type from unsigned integer to octet string. This triggers fuzzing failures. Assisted-by: ChatGPT:gpt-5.6Sol Reviewed-by: Richard Levitte Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/32560)

Fix EVP_CIPHER_CTX leak in BIO_f_cipher() on BIO_dup_chain()

2026-08-31T10:07:25Z

BIO_dup_chain() builds each duplicate BIO via BIO_new(), which for a cipher BIO runs enc_new() and allocates a fresh EVP_CIPHER_CTX. The BIO_CTRL_DUP handler then allocated a second context and overwrote the pointer, orphaning (and leaking) the enc_new() allocation, one leaked EVP_CIPHER_CTX per duplicated cipher BIO. Reuse the context that enc_new() already allocated by copying into it, mirroring the digest filter (bio_md.c). This also removes the redundant allocation and its failure path. Add a regression test that dup is an initialized cipher BIO and frees it, exercising the leak path so it is caught under a leak sanitizer. Fixes #31803 Reviewed-by: Jakub Zelenka Reviewed-by: Neil Horman Reviewed-by: Andrew Dinh MergeDate: Sat Aug 29 12:47:08 2026 (Merged from https://github.com/openssl/openssl/pull/31854) (cherry picked from commit ff542b6de282b903d296e7a53c3bd3f495e3a7d3)