openssl/apps/dgst.c, branch dependabot/github_actions/actions/setup-python-7

apps/dgst: avoid EXIT_* helper returns and format changes

2026-06-15T14:32:25Z

Return plain status codes from helper paths instead of EXIT_* and apply formatting updates to keep style consistent. Reviewed-by: Norbert Pocs Reviewed-by: Frederik Wedel-Heinen MergeDate: Mon Jun 15 14:32:31 2026 (Merged from https://github.com/openssl/openssl/pull/30563)

apps: remove atoi() calls.

2026-04-13T09:29:19Z

Related to #8216 Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Frederik Wedel-Heinen MergeDate: Mon Apr 13 09:30:21 2026 (Merged from https://github.com/openssl/openssl/pull/30476)

Use mmap for pkeyutl -rawin and dgst one-shot input

2026-03-27T16:25:31Z

When using openssl pkeyutl -rawin or openssl dgst for one-shot sign/verify (e.g. Ed25519, Ed448), file input is now read via mmap() on Unix where supported, avoiding a full buffer allocation and copy. Large files are supported without doubling memory use; on failure of the mmap path we do not fall back to the buffer path. - Add app_mmap_file() in apps/lib/apps.c: stat/open/mmap/close, tri-state return (1 mapped, 0 size zero, -1 error). Parameter err_bio avoids shadowing global bio_err (-Wshadow). - apps/pkeyutl.c and apps/dgst.c: use app_mmap_file(); single exit for mmap path in pkeyutl; dgst includes apps.h first for _FILE_OFFSET_BITS; do_fp_oneshot_sign returns EXIT_SUCCESS/EXIT_FAILURE like do_fp(); no fallback when mmap attempted but fails. - pkeyutl mmap/buffer path: pass filesize to EVP_DigestVerify and EVP_DigestSign (review suggestion, avoids casting buf_len). - Error messages: per-file messages for stat/size (dgst, pkeyutl); CHANGES.md "Unix-like" and "16 MB" (documentation style). - Centralize _FILE_OFFSET_BITS and mmap includes in apps/include/apps.h. - Tests: pkeyutl/dgst oneshot from file, no-fallback regression tests; use srctop_dir for test paths; stderr patterns for mmap errors. - Docs: man pages and CHANGES.md. CI fixes: return failure from dgst one-shot sign when mmap fails; treat non-regular paths as mmap errors in app_mmap_file() and pkeyutl; reject directories before mmap. Addresses review feedback from DDvO, npajkovsky, and vdukhovni (PR #30429). Fixes #11677 Co-authored-by: Viktor Dukhovni Co-authored-by: David von Oheimb Reviewed-by: David von Oheimb Reviewed-by: Viktor Dukhovni Reviewed-by: Paul Dale MergeDate: Fri Mar 27 16:25:33 2026 (Merged from https://github.com/openssl/openssl/pull/30429)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

Removing some more EVP_get_smtbysmth calls

2026-02-20T17:05:14Z

Reviewed-by: Paul Dale Reviewed-by: Simo Sorce (Merged from https://github.com/openssl/openssl/pull/30026)

Cleanup of printing in apps

2026-02-13T15:05:36Z

Don't use BIO_printf() where BIO_puts() will do. Reviewed-by: Paul Dale Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz MergeDate: Fri Feb 13 15:05:38 2026 (Merged from https://github.com/openssl/openssl/pull/29677)

EVP_get_digestbynid/EVP_get_cipherbynid turns into...

2026-02-12T18:22:52Z

a wrapper around EVP_MD_fetch/EVP_CIPHER_fetch when engines are not supported anymore. Let's remove the fallbacks that don't do anything useful Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Reviewed-by: Simo Sorce Reviewed-by: Shane Lontis MergeDate: Thu Feb 12 18:22:57 2026 (Merged from https://github.com/openssl/openssl/pull/29969)

Report truncation in oneshot `openssl dgst -sign`

2026-01-26T19:37:35Z

Previously input was silently truncated at 16MB, now if the input is longer than limit, an error is reported. The bio_to_mem() apps helper function was changed to return 0 or 1, and return the size of the result via an output size_t pointer. Fixes CVE-2025-15469 Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz MergeDate: Mon Jan 26 19:37:41 2026

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

apps/: Remove "-keyform engine"

2025-12-04T12:31:06Z

Resolves: https://github.com/openssl/project/issues/1354 Signed-off-by: Norbert Pocs Reviewed-by: Matt Caswell Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Dmitry Belyavskiy Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov (Merged from https://github.com/openssl/openssl/pull/29305)