openssl/apps, branch feature/engineremoval

apps: Remove opt_legacy_okay function

2025-12-04T12:32:18Z

The function used to check for ENGINEs to determine if a legacy code path is available, but it makes no sense to keep it after the ENGINE removal, as the legacy path will always fail. Signed-off-by: Norbert Pocs Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Reviewed-by: Saša Nedvědický (Merged from https://github.com/openssl/openssl/pull/29146)

Remove engine.h includes for internal code.

2025-12-04T12:32:18Z

This should no be used anywhere, as typedef for ENGINE is in types.h. Only apps should include this header for compatibility stubs. Signed-off-by: Milan Broz Reviewed-by: Norbert Pocs Reviewed-by: Saša Nedvědický (Merged from https://github.com/openssl/openssl/pull/29232)

apps/: Remove "-keyform engine"

2025-12-04T12:31:06Z

Resolves: https://github.com/openssl/project/issues/1354 Signed-off-by: Norbert Pocs Reviewed-by: Matt Caswell Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/28384)

apps/: Remove engines

2025-12-04T12:31:05Z

Signed-off-by: Norbert Pocs Reviewed-by: Matt Caswell Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/28384)

Remove openssl engine command

2025-12-04T12:31:05Z

This patch removes apps/engine.c and associated man pages. Resolves: https://github.com/openssl/project/issues/1370 Signed-off-by: Milan Broz Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Matt Caswell Reviewed-by: Richard Levitte Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28481)

Change hexdump width to a multiple of 8 bytes

2025-12-03T16:45:15Z

10, 15 and 18 seem quite unnatural byte counts in the context of hex dumps. Standardize on 24 bytes for signatures (to stay within the 80 characters limit) and 16 bytes for everything else. Adjust all test cert dumps to match the new output format. Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29266)

APPS/load_key_certs_crls(): prevent mem leaks on error w.r.t. any leftover credentials

2025-12-03T15:01:43Z

Reviewed-by: Richard Levitte Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28005)

Fix apps/progs.pl to be slightly less fragile

2025-12-03T13:40:56Z

In particular fix the regex magic to be tolerant of different ways of formatting a main program. My past life had forgotten this magic 14 years ago when we converted it to just a table of commands in the forks. https://www.youtube.com/watch?v=mWbbjvYmN8A Reviewed-by: Saša Nedvědický Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29241)

fix(x509.c): Fixed regression of openssl x509 -checkend return values

2025-12-01T10:46:49Z

Fixes #28928 Also adds functionality to -checkend to account for -multi behaviour. Man page and unit tests updated accordingly. Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29155)

apps/lib/log.c: Add check for BIO_new()

2025-12-01T10:30:00Z

Add check for the return value of BIO_new() to avoid potential NULL pointer dereference. Fixes: 8a2ec00d7f ("apps/lib/http_server.{c,h}: clean up logging and move it to log.{c,h}") Signed-off-by: Jiasheng Jiang Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27918)