openssl/apps/ca.c, branch dependabot/github_actions/actions/setup-python-7

Convert internal use of ASN1_STRING_set and ASN1_STRING_length

2026-07-18T13:01:13Z

to use their non-deprecated replacements. For "pretty-printing" applications and test code that use a length and require an int, size_t lengths are simply cast to an int. For writes and protocol level things size_t lengths are checked against INT_MAX and take the error path if the returned value is too large to be used for a funciton that takes an integer length. Reviewed-by: Milan Broz Reviewed-by: Norbert Pocs MergeDate: Sat Jul 18 13:01:19 2026 (Merged from https://github.com/openssl/openssl/pull/31194)

apps: remove atoi() calls.

2026-04-13T09:29:19Z

Related to #8216 Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Frederik Wedel-Heinen MergeDate: Mon Apr 13 09:30:21 2026 (Merged from https://github.com/openssl/openssl/pull/30476)

ca.c: Partially revert incorrect simplification of string check

2026-03-18T13:31:30Z

Fixes 25c2ada89 Fixes Coverity 1688667 Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tom Cosgrove Reviewed-by: Neil Horman MergeDate: Wed Mar 18 13:32:01 2026 (Merged from https://github.com/openssl/openssl/pull/30460)

Clean up asn1/ca.c

2026-03-16T11:26:47Z

Collapse a bunch of type calls down to a local variable Fixes: 29974 Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz MergeDate: Mon Mar 16 11:27:08 2026 (Merged from https://github.com/openssl/openssl/pull/30397)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

Coverity complains X509_REQ_set_subject_name() return value

2026-03-02T13:02:56Z

is ignored. Resolves: https://scan5.scan.coverity.com/#/project-view/62622/10222?selectedIssue=1201538 Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Nikola Pajkovsky Reviewed-by: Neil Horman MergeDate: Mon Mar 2 13:03:03 2026 (Merged from https://github.com/openssl/openssl/pull/30193)

Make ASN1_STRING opaque

2026-02-25T10:12:51Z

This laudable goal, should it land, will be followed with an issue raised to eat our own dogfood and find every file with added to it in this commit, and change to the appropriate accessors, which should be possible in most places we aren't actually implementing things that change the values Fixes: https://github.com/openssl/openssl/issues/29860 Reviewed-by: Neil Horman Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Wed Feb 25 10:14:57 2026 (Merged from https://github.com/openssl/openssl/pull/29862)

Constify X509_NAME

2026-02-25T09:56:17Z

There are still a few casts away from const where things do not actually end up mutating the object, we'll deal with that later. Part of #28654 and #29117 Fixes openssl/project#1781 Reviewed-by: Neil Horman Reviewed-by: Paul Dale Reviewed-by: Norbert Pocs MergeDate: Wed Feb 25 09:58:35 2026 (Merged from https://github.com/openssl/openssl/pull/29468)

X509V3_set_nconf(): Improve error handling using this function, mostly in apps/

2026-02-21T13:59:44Z

Reviewed-by: Tomas Mraz Reviewed-by: Viktor Dukhovni (Merged from https://github.com/openssl/openssl/pull/16998)

Const correct time parameter for X509_cmp_time(), X509_time_adj() and X509_time_adj_ex().

2026-02-20T16:36:37Z

Fixes #21371 Reviewed-by: Eugene Syromiatnikov Reviewed-by: David von Oheimb Reviewed-by: Dmitry Belyavskiy Reviewed-by: Neil Horman MergeDate: Fri Feb 20 16:36:52 2026 (Merged from https://github.com/openssl/openssl/pull/30020)