openssl/apps/include, branch openssl-4.0.0

Copyright year updates

2026-04-14T12:02:10Z

Reviewed-by: Neil Horman Reviewed-by: Matt Caswell MergeDate: Tue Apr 14 12:02:16 2026 Release: yes

cmp_vfy.c,doc/,test/: when trying to use cached CMP message sender cert, no more check its revocation and chain

2026-03-25T09:55:38Z

Reviewed-by: Neil Horman Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/28973) (cherry picked from commit 525a4f1efbab0d3c2aff59ab8e671b8d9f35ddee)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

Added -expected-rpks s_client/server option

2026-02-28T09:14:40Z

Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz MergeDate: Sat Feb 28 09:17:23 2026 (Merged from https://github.com/openssl/openssl/pull/30089)

Make ASN1_STRING opaque

2026-02-25T10:12:51Z

This laudable goal, should it land, will be followed with an issue raised to eat our own dogfood and find every file with added to it in this commit, and change to the appropriate accessors, which should be possible in most places we aren't actually implementing things that change the values Fixes: https://github.com/openssl/openssl/issues/29860 Reviewed-by: Neil Horman Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Wed Feb 25 10:14:57 2026 (Merged from https://github.com/openssl/openssl/pull/29862)

X509V3_set_nconf(): Improve error handling using this function, mostly in apps/

2026-02-21T13:59:44Z

Reviewed-by: Tomas Mraz Reviewed-by: Viktor Dukhovni (Merged from https://github.com/openssl/openssl/pull/16998)

Const correct time parameter for X509_cmp_time(), X509_time_adj() and X509_time_adj_ex().

2026-02-20T16:36:37Z

Fixes #21371 Reviewed-by: Eugene Syromiatnikov Reviewed-by: David von Oheimb Reviewed-by: Dmitry Belyavskiy Reviewed-by: Neil Horman MergeDate: Fri Feb 20 16:36:52 2026 (Merged from https://github.com/openssl/openssl/pull/30020)

Report truncation in oneshot `openssl dgst -sign`

2026-01-26T19:37:35Z

Previously input was silently truncated at 16MB, now if the input is longer than limit, an error is reported. The bio_to_mem() apps helper function was changed to return 0 or 1, and return the size of the result via an output size_t pointer. Fixes CVE-2025-15469 Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz MergeDate: Mon Jan 26 19:37:41 2026

apps/lib/apps.c: fix load_certs_multifile() and load_certstore() w.r.t. password source vs. actual password

2026-01-07T11:56:15Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Norbert Pocs Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/28477)

Add no-ssl3 back as a no-op

2025-12-23T15:54:08Z

Reviewed-by: Neil Horman Reviewed-by: Viktor Dukhovni Reviewed-by: Paul Yang Reviewed-by: Saša Nedvědický (Merged from https://github.com/openssl/openssl/pull/29338)