openssl, branch openssl-3.2

doc: Discuss calling X509_verify_cert in cert_verify_callback

2025-11-24T18:23:05Z

Using SSL_CTX_set_cert_verify_callback but still calling X509_verify_cert is useful if applications want to dynamically configure the X509_STORE_CTX, or postprocess the result, in a way that does not quite fit the somewhat unpredictable behavior of the SSL_CTX_set_verify callback. (In my experience, applications rarely realize it is called multiple times. It's also too late at that point to reconfigure the X509_STORE_CTX as verification has already started.) There is one note in the docs that the callback needs to stash the verify result with X509_STORE_CTX_set_error, but it is not immediately obvious that X509_verify_cert will do so, or that it is the built-in behavior. Add a paragraph discussing this. Reviewed-by: Tim Hudson Reviewed-by: Viktor Dukhovni Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28960) (cherry picked from commit 069181d7f39beaae22bfa67bcba3c5fe93acafd4)

doc/man3/X509_STORE_get0_param.pod: mention how to free the returned objects

2025-11-24T18:14:56Z

It is not entirely obvious from the description how the objects returned by X509_STORE_get1_all_certs() are supposed to be freed, explicitly mention the relevant call, and provide a reference to DEFINE_STACK_OF(3). Signed-off-by: Eugene Syromiatnikov Reviewed-by: Norbert Pocs Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/29016)

asn1: clear error mark on success in asn1_d2i_read_bio

2025-11-24T18:12:16Z

Balance ERR_set_mark by calling ERR_clear_last_mark on the success path. Prevents a stale mark from skewing later error handling. Signed-off-by: Joshua Rogers Reviewed-by: Matt Caswell Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28882) (cherry picked from commit 7f015c909ee3480a59d4fe828c3da22c7a55a2f4)

crypto/bio/bss_acpt: reset accept_sock and b->num after close in ACPT_S_LISTEN failures

2025-11-24T14:21:03Z

On BIO_listen or BIO_sock_info failure we close the socket but leave accept_sock and b->num pointing at the old fd. Later cleanup can double close. Set both to INVALID_SOCKET immediately after BIO_closesocket. Signed-off-by: Joshua Rogers Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28904) (cherry picked from commit 1c4f7b10358b79a0b33619187caa2b7e3bdb6e7a)

Correct information about the default value of the -md parameter

2025-11-21T13:51:17Z

of the openssl cms command. Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/29175) (cherry picked from commit 2a7b058429938e40e20882a80bc5d2f426b145b8)

doc/man3/OPENSSL_malloc.pod: mention rationale for OPENSSL_cleanse()

2025-11-21T13:37:18Z

It was not entirely clear from the sole description, what is the reason for preferring OPENSSL_cleanse() over memset(). Add a note about situations in which OPENSSL_cleanse() should be chosen. Signed-off-by: Eugene Syromiatnikov Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Richard Levitte Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29174) (cherry picked from commit 768468f40e810ceef00b1c3b7cac05beaa1d8f8c)

DOC: fix description of '-self_test_oninstall'

2025-11-21T13:34:43Z

CLA: trivial Reviewed-by: Paul Dale Reviewed-by: Eugene Syromiatnikov (Merged from https://github.com/openssl/openssl/pull/29168) (cherry picked from commit 978cb1f9d1fb895f51feeee4cf700cf07a063e01)

rand_lib.c: Use ERR_LIB_RAND with RAND_R errors

2025-11-21T13:17:23Z

Use ERR_LIB_RAND when reporting RAND_R_ALREADY_INSTANTIATED from RAND_set_DRBG_type() and RAND_set_seed_source_type() so the error message references the RAND subsystem instead of CRYPTO. Fixes #29039 CLA: trivial Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29109) (cherry picked from commit e7251fa1a92bcb1fda1dad7f7e2e3ed2c0056e27)

bio_ok.c: Fixed undefined identifier 'SIZE_MAX'

2025-11-19T15:01:15Z

This fixes the following compilation error on HP-UX: ``` 11:07:19 crypto/evp/bio_ok.c: In function 'block_in': 11:07:19 crypto/evp/bio_ok.c:579: error: 'SIZE_MAX' undeclared (first use in this function) 11:07:19 crypto/evp/bio_ok.c:579: error: (Each undeclared identifier is reported only once 11:07:19 crypto/evp/bio_ok.c:579: error: for each function it appears in.) ``` Signed-off-by: Lars Erik Wik CLA: trivial Reviewed-by: Paul Dale Reviewed-by: Norbert Pocs Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28793) (cherry picked from commit 695a5aaf0bb04bc2f2d395987f121c1ec41d3b3e)

Fixes for NonStop builds on 3.4 to handle OS platform header file changes

2025-11-18T18:11:33Z

This changes handles the introduction of _POSIX_VERSION into the NonStop x86 header files that tricks OpenSSL into thinking that ucontext.h is available. Build a workaround in timing_load_creds.c on NonStop for lack of rusage. This simulates getrusage() that is not available on NonStop. Fixes #28498 Fixes #29023 Signed-off-by: Randall S. Becker Reviewed-by: Richard Levitte Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29106) (cherry picked from commit 249c506bb85b1056c28f701a8ea163cb96c1d743)