openssl, branch openssl-3.1

Keep the provided peer EVP_PKEY in the EVP_PKEY_CTX too

2025-03-14T08:51:40Z

Reviewed-by: Tim Hudson Reviewed-by: Dmitry Belyavskiy Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/26976) (cherry picked from commit 2656922febfc36f6b44cff1c363917685633b4c5)

Updated SSL_SESSION_get0_hostname() documentation to be consistent with the function

2025-03-05T18:13:25Z

CLA: trivial Reviewed-by: Matt Caswell Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/26559) (cherry picked from commit 8d6fd6142b0b55ce029df6d7b63dda5f7cb8ce54)

compiler-zoo.yml: Switch to ubuntu-22.04 where possible

2025-03-04T15:53:03Z

And drop the rest. The ubuntu-20.04 CI runners are discontinued. Reviewed-by: Tim Hudson Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/26971) (cherry picked from commit 4e9b542868890428f0294a4ce53fcde68c1fcaf7)

Update doc README URLs

2025-03-03T08:41:24Z

This updates the openssl documentation link to the one currently in use, and removes the standards.txt section as that URL leads to the normal documentation page and there is no "standards" page in the openssl documentation site. CLA: trivial Reviewed-by: Tim Hudson Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26759) (cherry picked from commit da44eb2901bd541f86547d814f45ab305b918611)

Fix hashsum files in release assets

2025-03-03T08:34:23Z

We use the coreutils format since 3.4.0. Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26907) (cherry picked from commit 808a0861716e6dd5e1c9f08cebec93084f028fd8)

Fix libctx passing for CMS PWRI use

2025-03-03T08:27:21Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26937) (cherry picked from commit 5045712d3dbe6abdfffcb4f518c67409ec85535e)

Encoder : Fix floating pointer when OSSL_ENCODER_to_data() is called

2025-02-28T12:57:48Z

twice. Fixes #26862 This only happens when using the FIPS provider, since it needs to export the key. Reviewed-by: Tim Hudson Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz Reviewed-by: Viktor Dukhovni (Merged from https://github.com/openssl/openssl/pull/26891) (cherry picked from commit c2f4d7aae1c7c726eb1f8226d3d454dfd9754758)

Tolerate 3.5+ FIPS providers in kem_rsa_params test

2025-02-26T11:30:37Z

Reviewed-by: Tom Cosgrove Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26909) (cherry picked from commit 23cdc7732867e15cbf6de75fe734b5d3d49f7507)

add_uris_recursive(): Avoid OSSL_STORE_INFO leak on error

2025-02-25T14:51:19Z

Fixes #26480 Reviewed-by: Tim Hudson Reviewed-by: Viktor Dukhovni (Merged from https://github.com/openssl/openssl/pull/26511) (cherry picked from commit be5965acad7a1c45e49411bcf4abad99d106a7c1)

Fix potential leak in error path in cert_response()

2025-02-25T14:49:20Z

get1_cert_status() returns an object that must be freed, but the error path does not do that. Fix it by adding a call to X509_free() in the error path. Reviewed-by: Viktor Dukhovni Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26513) (cherry picked from commit 56160f173d055486357b7a315ab4e9579b2538d5)