openssl, branch openssl-3.3.0-beta1

Prepare for release of 3.3 beta 1

2024-03-29T14:07:20Z

Reviewed-by: Neil Horman Release: yes

make update

2024-03-29T14:07:20Z

Reviewed-by: Neil Horman Release: yes

Copyright year updates

2024-03-29T14:05:51Z

Reviewed-by: Neil Horman Release: yes

Update CHANGES.md and NEWS.md with changes that have occurred since 3.2

2024-03-29T13:13:06Z

Release: yes Reviewed-by: Hugo Landau Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/23998)

Fix threadstest wrapping again

2024-03-26T14:43:17Z

Stochastic failures in the RCU test on MACOSX are occuring. Due to beta release, disabling this test on MACOSX until post 3.3 release Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/23967) (cherry picked from commit 1967539e212c17139dc810096da987c8100b1ba2)

Update gost-engine submodule to fix the CI

2024-03-26T14:09:51Z

Reviewed-by: Richard Levitte Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/23773) (cherry picked from commit e7d5d61b66ee5a1d0827b3c92dc4d484fb9c91fe)

apps/req,crl: exit with 1 on verification failure

2024-03-26T14:09:49Z

Fixes #23771 Reviewed-by: Richard Levitte Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/23773) (cherry picked from commit 6af739b79ba50bd42ac8934747ab5c8b996f16b6)

Add NULL check before accessing PKCS7 encrypted algorithm

2024-03-25T17:27:02Z

Printing content of an invalid test certificate causes application crash, because of NULL dereference: user@user:~/openssl$ openssl pkcs12 -in test/recipes/80-test_pkcs12_data/bad2.p12 -passin pass: -info MAC: sha256, Iteration 2048 MAC length: 32, salt length: 8 PKCS7 Encrypted data: Segmentation fault (core dumped) Added test cases for pkcs12 bad certificates Reviewed-by: Bernd Edlinger Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/23632) (cherry picked from commit a4cbffcd8998180b98bb9f7ce6065ed37d079d8b)

Replace size_t with int and add the check for the EVP_MD_get_size()

2024-03-25T16:51:45Z

Replace the type of "digest_size" with int to avoid implicit conversion when it is assigned by EVP_MD_get_size(). Moreover, add the check for the "digest_size". Fixes: 29ce1066bc ("Update the demos/README file because it is really old. New demos should provide best practice for API use. Add demonstration for computing a SHA3-512 digest - digest/EVP_MD_demo") Signed-off-by: Jiasheng Jiang Reviewed-by: Matt Caswell Reviewed-by: Kurt Roeckx Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/23924) (cherry picked from commit 87e747000fef07c9ec43877bc5e9f2ca34f76a3b)

Replace unsigned with int

2024-03-25T16:46:25Z

Replace the type of "digest_length" with int to avoid implicit conversion when it is assigned by EVP_MD_get_size(). Otherwise, it may pass the following check and cause the integer overflow error when EVP_MD_get_size() returns negative numbers. Signed-off-by: Jiasheng Jiang Reviewed-by: Matt Caswell Reviewed-by: Tom Cosgrove Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/23922) (cherry picked from commit f13ddaab69def0b453b75a8f2deb80e1f1634f42)