openssl, branch openssl-3.5.2TLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=openssl-3.5.22025-08-05T12:09:26ZPrepare for release of 3.5.22025-08-05T12:09:26Zopenssl-machineopenssl-machine@openssl.org2025-08-05T12:09:26Zurn:sha1:0893a62353583343eb712adef6debdfbe597c227
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Release: yes
make update2025-08-05T12:09:25Zopenssl-machineopenssl-machine@openssl.org2025-08-05T12:09:25Zurn:sha1:436e1997ba66e05fc2af58b6c5a985181e3f9829
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Release: yes
Copyright year updates2025-08-05T12:07:41Zopenssl-machineopenssl-machine@openssl.org2025-08-05T12:07:41Zurn:sha1:8f9d7c283ed5e13dacb481085240eac1a9876328
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Release: yes
Revert "Pairwise check for DH keys import as part of FIPS"2025-07-31T18:42:06ZNikola Pajkovskynikolap@openssl.org2025-07-30T07:21:29Zurn:sha1:fc567161803231e10b878e0454931b45f5bb6d8f
Not needed anymore. It's handled in the 'ec (fips): add PCT for key import'
This reverts commit e08b83cbb3b853ae9dc364c32d927405172918ac.
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28122)
(cherry picked from commit b20da2328018107414fe896e59e7d4d6c8af8174)
dh: add extra argument to ossl_dh_check_pairwise2025-07-31T18:42:05ZPaulippzgs1@gmail.com2025-07-30T06:50:03Zurn:sha1:eea841edd6c60ec6b22428192c288cf5e98954ea
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28122)
(cherry picked from commit 1afc4e8baa3226ea6edb643180246201968d8958)
dh: add FIPS 140-3 PCT on key import.2025-07-31T18:42:04ZPaulippzgs1@gmail.com2025-01-30T23:38:28Zurn:sha1:566f7c918849f1ab8a3d8a4a17adca351c306a84
This is mandated by FIPS 140-3 IG 10.3.A additional comment 1
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28122)
(cherry picked from commit db969c3ab08240cf9652cb621fbf1936d056464c)
fips: add DH PCT name2025-07-31T18:42:03ZPaulippzgs1@gmail.com2025-01-30T23:16:17Zurn:sha1:b8ebde18e4718883dd98bf01685963ea79fa5fc7
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28122)
(cherry picked from commit 88a13095667228c2361361c97704ea992d837ade)
changes: add note about PCT on key import to the FIPS provider2025-07-31T18:42:01ZPaulippzgs1@gmail.com2025-01-29T01:41:59Zurn:sha1:e27488a519290d82955e8015cb03ff223d039838
This is mandated by FIPS 140-3 IG 10.3.A additional comment 1.
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28122)
(cherry picked from commit 32ff539daf83cccc15a159fe214cac66acc80fec)
rsa (fips): add PCT for key import2025-07-31T18:40:13ZPaulippzgs1@gmail.com2025-01-29T00:31:33Zurn:sha1:4a1924a867248757440c3d9f82c3307debf18400
FIPS 140-3 IG 10.3.A additional comment 1 mandates a PCT on key import.
Fixes #26572
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28122)
(cherry picked from commit 57230da2bd0be6b219cec2995832034b1e09e0e9)
ec (fips): add PCT for key import2025-07-31T18:40:12ZPaulippzgs1@gmail.com2025-01-29T00:16:54Zurn:sha1:5a7adf4ec136311b1a6c79a3f057bfd7a7d4cd5b
FIPS 140-3 IG 10.3.A additional comment 1 mandates a PCT on key import.
Fixes #26572
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28122)
(cherry picked from commit a177798e0b8f3c7ff66b2a609924aafeb66b8b12)