openssl/apps/s_server.c, branch dependabot/github_actions/actions/setup-python-7

Eliminate unnecessary whitespace before a quoted newline

2026-07-08T10:10:54Z

Found by running the checkpatch.pl Linux script to enforce coding style. Reviewed-by: Kurt Roeckx Reviewed-by: Neil Horman Reviewed-by: Norbert Pocs Reviewed-by: Eugene Syromiatnikov MergeDate: Wed Jul 8 10:11:22 2026 (Merged from https://github.com/openssl/openssl/pull/31860)

apps/s_server.c: fix SSL object leak on rpk_enable() failure

2026-07-01T12:03:34Z

In www_body() and rev_body(), con = SSL_new(ctx) is called before rpk_enable(con), but ownership of con is transferred to ssl_bio only later by BIO_set_ssl(..., BIO_CLOSE). If rpk_enable() fails, the code jumps to err: before that transfer without freeing con, leaking the SSL object. Add SSL_free(con) before goto err in both rpk_enable() failure paths, matching the adjacent SSL_set_session_id_context() and BIO_new_socket() error paths. sv_body() is unaffected because its err: block already frees con. The global rpk_files is not leaked. Its lifetime is managed by s_server_main(), which frees it in the end cleanup block. Resolves: https://github.com/openssl/openssl/issues/31769 Reviewed-by: Matt Caswell Reviewed-by: Eugene Syromiatnikov MergeDate: Wed Jul 1 12:04:13 2026 (Merged from https://github.com/openssl/openssl/pull/31789)

Use %zu for printing size_t values

2026-06-15T19:24:36Z

Reviewed-by: Neil Horman Reviewed-by: Richard Levitte Reviewed-by: Milan Broz MergeDate: Mon Jun 15 19:24:43 2026 (Merged from https://github.com/openssl/openssl/pull/31454)

apps: fix printf formats according to param types

2026-06-01T06:57:22Z

inttypes.h is also used for more accurate compatibility with all platforms, as it is the more correct choice according to C standard. Signed-off-by: Herman Semenoff Reviewed-by: Paul Dale Reviewed-by: Eugene Syromiatnikov MergeDate: Mon Jun 1 06:58:23 2026 (Merged from https://github.com/openssl/openssl/pull/30969)

apps/.c,doc/man1/.pod.in: fix doc and error output of cert_store vs. chain_store/verify_store and PEM format

2026-06-01T04:57:07Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Mon Jun 1 04:57:15 2026 (Merged from https://github.com/openssl/openssl/pull/25683)

apps/lib/tlssrp_depr.c: fix leak of vb in set_up_srp_verifier_file()

2026-05-13T07:20:47Z

set_up_srp_verifier_file() allocates srp_callback_parm->vb via SRP_VBASE_new(). If SRP_VBASE_init() fails, vb must be freed before returning. Additionally, add SRP_VBASE_free() to the end: cleanup path in s_server.c so that vb is also freed on normal program exit. Solves https://github.com/openssl/openssl/issues/30362 Fixes #30362 Signed-off-by: huanghuihui0904 <625173@qq.com> Reviewed-by: Eugene Syromiatnikov Reviewed-by: Matt Caswell MergeDate: Wed May 13 07:20:48 2026 (Merged from https://github.com/openssl/openssl/pull/30434)

Deprecate the X509_check_{email,host,ip,ip_asc} family of functions

2026-05-11T00:05:22Z

Our own documentation for quite some time has indicated that you should call X509_verify_cert() instead of using these. Actually deprecate them and make apps not use the now deprecated functions. Resolves: https://github.com/openssl/project/issues/1899 References: https://github.com/openssl/project/issues/1897 Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov Reviewed-by: Norbert Pocs MergeDate: Mon May 11 00:08:33 2026 (Merged from https://github.com/openssl/openssl/pull/30403)

apps: Move PATH_MAX define out of the win32 block

2026-04-26T11:35:27Z

The PATH_MAX define is needed on HURD which is now skipped since it is winthin the _WIN32 block. Move the PATH_MAX check+define outside of the _WIN32 block. Fixes: a2e5848d9d11 "s_client and s_server options for ECH" Signed-off-by: Sebastian Andrzej Siewior Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz MergeDate: Sun Apr 26 11:35:52 2026 (Merged from https://github.com/openssl/openssl/pull/30520)

apps : enforce command-line parameter checking.

2026-04-13T09:30:19Z

Improve 'verify' option help messages. integer value parsing formats are: - 'n' is any integer - 'N' is a non-negative integer (i.e. value >= 0) - 'p' is a positive integer (i.e. value > 0) Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Frederik Wedel-Heinen MergeDate: Mon Apr 13 09:30:22 2026 (Merged from https://github.com/openssl/openssl/pull/30476)

apps: remove atoi() calls.

2026-04-13T09:29:19Z

Related to #8216 Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Frederik Wedel-Heinen MergeDate: Mon Apr 13 09:30:21 2026 (Merged from https://github.com/openssl/openssl/pull/30476)