openssl/apps/include, branch openssl-3.4.5

3.4-POST-CLANG-FORMAT-WEBKIT

2025-12-09T13:48:07Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Norbert Pocs (Merged from https://github.com/openssl/openssl/pull/29260)

Copyright year updates

2025-09-30T12:46:35Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Release: yes

apps: remove chopup_args()

2025-09-08T19:19:57Z

The last (and only?) user has been removed in commit eca471391378 "APPS: Drop interactive mode in the 'openssl' program". Complements: eca471391378 "APPS: Drop interactive mode in the 'openssl' program" Signed-off-by: Eugene Syromiatnikov Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28441) (cherry picked from commit 3f77491cb336df843984139fbb6fb16f47daf876)

Copyright year updates

2024-09-05T07:35:49Z

Reviewed-by: Neil Horman Release: yes

Fix typos found by codespell

2024-06-24T13:09:11Z

Reviewed-by: Paul Dale Reviewed-by: Kurt Roeckx (Merged from https://github.com/openssl/openssl/pull/24691)

CMP: add support for genm with crlStatusList and genp with crls

2024-05-01T12:58:35Z

Introduce the capability to retrieve and update Certificate Revocation Lists (CRLs) in the CMP client, as specified in section 4.3.4 of RFC 9483. To request a CRL update, the CMP client can send a genm message with the option -infotype crlStatusList. The server will respond with a genp message containing the updated CRL, using the -infoType id-it-crls. The client can then save the CRL in a specified file using the -crlout parameter. Co-authored-by: Rajeev Ranjan Reviewed-by: Todd Short Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/23768)

apps: ca,req,x509: Add explicit start and end dates options

2024-04-09T18:13:31Z

- Added options `-not_before` (start date) and `-not-after` (end date) for explicit setting of the validity period of a certificate in the apps `ca`, `req` and `x509` - The new options accept time strings or "today" - In app `ca`, use the new options as aliases of the already existing options `-startdate` and `-enddate` - When used in apps `req` and `x509`, the end date must be >= the start date, in app `ca` end date < start date is also accepted - In any case, `-not-after` overrides the `-days` option - Added helper function `check_cert_time_string` to validate given certificate time strings - Use the new helper function in apps `ca`, `req` and `x509` - Moved redundant code for time string checking into `set_cert_times` helper function. - Added tests for explicit start and end dates in apps `req` and `x509` - test: Added auxiliary functions for parsing fields from `-text` formatted output to `tconversion.pl` - CHANGES: Added to new section 3.4 Signed-off-by: Stephan Wurm Reviewed-by: David von Oheimb Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/21716)

Add option `SSL_OP_PREFER_NO_DHE_KEX`, allowing the server to prefer non-dhe psk key exchange over psk with dhe (config file option `PreferNoDHEKEX`, server option `prefer_no_dhe_kex`).

2023-11-24T15:08:04Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/22794)

"foo * bar" should be "foo *bar"

2023-09-11T08:15:30Z

Found by running the checkpatch.pl Linux script to enforce coding style. Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/21468)

Copyright year updates

2023-09-07T08:59:15Z

Reviewed-by: Richard Levitte Release: yes