openssl/apps/include, branch openssl-3.5.6

Copyright year updates

2026-04-07T12:24:29Z

Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Apr 7 12:24:30 2026 Release: yes

cmp_vfy.c,doc/,test/: when trying to use cached CMP message sender cert, no more check its revocation and chain

2026-03-25T10:56:11Z

Reviewed-by: Neil Horman Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/28973) (cherry picked from commit 525a4f1efbab0d3c2aff59ab8e671b8d9f35ddee)

Copyright year updates

2026-01-27T13:40:51Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Tue Jan 27 13:40:52 2026 Release: yes

Report truncation in oneshot `openssl dgst -sign`

2026-01-26T19:38:37Z

Previously input was silently truncated at 16MB, now if the input is longer than limit, an error is reported. The bio_to_mem() apps helper function was changed to return 0 or 1, and return the size of the result via an output size_t pointer. Fixes CVE-2025-15469 Reviewed-by: Saša Nedvědický Reviewed-by: Tomas Mraz MergeDate: Mon Jan 26 19:38:42 2026

3.5-POST-CLANG-FORMAT-WEBKIT

2025-12-09T09:40:50Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29262)

apps: remove chopup_args()

2025-09-08T19:18:43Z

The last (and only?) user has been removed in commit eca471391378 "APPS: Drop interactive mode in the 'openssl' program". Complements: eca471391378 "APPS: Drop interactive mode in the 'openssl' program" Signed-off-by: Eugene Syromiatnikov Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28441) (cherry picked from commit 3f77491cb336df843984139fbb6fb16f47daf876)

Copyright year updates

2025-03-12T13:35:59Z

Reviewed-by: Neil Horman Reviewed-by: Matt Caswell Release: yes

CMP: add support for central key generation

2025-01-27T07:56:46Z

- add testcase for central keygen - add documentation Reviewed-by: David von Oheimb Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25132)

Support CLI and API setting of provider configuration parameters

2025-01-17T16:46:37Z

Reviewed-by: Matt Caswell Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/26427)

genpkey: Avoid leaving empty file if encryption passphrase does not match

2025-01-15T12:26:41Z

Fixes #25440 Reviewed-by: Hugo Landau Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26081)