openssl/apps, branch master

apps/lib/cmp_mock_srv.c: Fix NULL dereference of ASN1_INTEGER in refcert_cmp()

2026-10-24T09:42:53Z

The issuer and the serialNumber are independently OPTIONAL in a CertTemplate. A component absent from the request cannot confirm a match with the reference cert, and ASN1_INTEGER_cmp() does not accept NULL, so require each component the reference cert has to be present in the request and to be equal. Fixes: 66be663b64e0 "cmp_mock_srv.c: Add missing OldCertID check for 'kur' cert update requests" References: b971d4198def "CMP mock server: add -ref_cert option and corresponding ossl_cmp_mock_srv_set1_refCert()" Reviewed-by: Dmitry Belyavskiy Reviewed-by: Mounir Idrassi Reviewed-by: Eugene Syromiatnikov Merge-date: Sat Oct 24 09:44:19 2026 Merged-from: https://github.com/openssl/openssl/pull/33071

apps/ocsp.c: fail on invalid response times

2026-10-19T13:37:49Z

Propagate OCSP_check_validity() failures through print_ocsp_summary(), so the command returns a nonzero exit status for stale responses. Add a request-aware regression test using the existing signed fixtures. Resolves: https://github.com/openssl/openssl/issues/32367 References: 639bb581ce5b "apps/ocsp: Return non zero exit code with invalid certID" References: https://github.com/openssl/openssl/issues/7151 Co-Authored-by: Mounir Idrassi Assisted-by: OpenAI Codex:GPT-5 Assisted-by: OpenAI Codex:GPT-6 Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Mounir Idrassi Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov Merge-date: Mon Oct 19 13:41:13 2026 Merged-from: https://github.com/openssl/openssl/pull/32600

apps/s_server.c: fix BIO leak in ech_load_dir() on read failure

2026-10-09T19:55:14Z

When loading ECH keys from a directory (-ech_dir or -ech_noretry_dir), ech_load_dir() allocated a BIO via BIO_new_file(), but only freed it on the success path. If a file was readable, yet OSSL_ECHSTORE_read_pem() failed, the continue skipped BIO_free_all(), leaking the BIO. OSSL_ECHSTORE_read_pem() does not take ownership of the caller-supplied BIO. It pushes and pops its own internal buffer BIO, so the caller remains responsible for freeing the file BIO in all cases. Fix this by making the BIO local to each loop iteration and freeing it in the failure branch as well as the success branch. This also avoids carrying a dangling BIO pointer from one loop iteration to the next. Verified with Valgrind against a directory containing invalid ECH PEM files: definitely lost: 0 bytes, previously leaked 128 bytes per failing file. Resolves: https://github.com/openssl/openssl/issues/31770 Fixes: a2e5848d9d11 "s_client and s_server options for ECH" Reviewed-by: Daniel Kubec Reviewed-by: Andrew Dinh Reviewed-by: Eugene Syromiatnikov Merge-date: Fri Oct 9 19:55:28 2026 Merged-from: https://github.com/openssl/openssl/pull/31790

apps: set cookie callbacks on s_server SNI context

2026-10-06T14:46:47Z

s_server only installed the DTLS and stateless cookie callbacks on its main SSL_CTX. When -servername matched, the connection was switched to the second context before the cookie was generated, so a DTLS 1.2 client sending that name failed the handshake with a cookie generation callback failure instead of getting a HelloVerifyRequest. Install the callbacks on the SNI context as well and cover the case with a (D)TLSv1.2 server name handshake in the TLSProxy message test. Assisted-by: Claude:claude-fable-5-1 Reviewed-by: Matt Caswell Reviewed-by: Mounir Idrassi Reviewed-by: Tomas Mraz Merge-date: Tue Oct 6 14:46:55 2026 Merged-from: https://github.com/openssl/openssl/pull/33093

apps/x509.c: don't load extensions if no -extfile/-extensions/"extensions" opt

2026-10-05T10:09:53Z

The documentation says "If neither of the options are given, an attempt is made to open the default configuration file [..] If the unnamed section [..] of the file does not list an B variable, no extensions are added"; however, an attempt was made to load extensions in that case. Avoid that by using non-NULL extsect as a guard for do_EXT_REQ_add_nconf() and do_EXT_REQ_add_nconf() calls (which also avoids passing NULL as an "%s" format qualifier argument to BIO_printf() calls in case of load failure). Fixes: 84419e373ac1 "Improved handling of AKID/SKID extensions in CSRs and certs" Signed-off-by: Eugene Syromiatnikov Reviewed-by: Neil Horman Reviewed-by: Jakub Zelenka Reviewed-by: Bob Beck Reviewed-by: Viktor Dukhovni Merge-date: Mon Oct 5 10:09:56 2026 Merged-from: https://github.com/openssl/openssl/pull/33083

Dealing with symmetric keys in pkcs12 command-line utility

2026-09-29T18:33:41Z

This is a follow-up to #30937 Assisted-by: Claude Opus 4.6 Reviewed-by: Mounir Idrassi Reviewed-by: Simo Sorce MergeDate: Tue Sep 29 18:34:13 2026 (Merged from https://github.com/openssl/openssl/pull/32978)

apps/x509: Fix new output detection for -key signing

2026-09-25T11:07:28Z

The signing-only option validation runs before load_key(), so privkey is always NULL when determining newout. Consequently, -key or -signkey alone does not identify re-signing an input certificate or signing an -x509toreq output. Signing options are rejected, and the default extensions section is not loaded. Check privkeyfile at this stage, which records that the option was supplied. Keep the later privkey check unchanged because the key has been loaded by then. Add tests for the validation guard, re-signing options, and certificate and request extensions. Fixes #32150 Assisted-by: pi:kimi-k3 Reviewed-by: Tomas Mraz Reviewed-by: Jakub Zelenka Merge-date: Fri Sep 25 11:07:32 2026 Merged-from: https://github.com/openssl/openssl/pull/32151

apps/server.c: Do not declare use_sendfile and use_zc_sendfile without ktls

2026-09-17T14:04:53Z

It is unused otherwise. Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky Merge-date: Thu Sep 17 14:05:04 2026 Merged-from: https://github.com/openssl/openssl/pull/32821

apps: fix dsa app exit status on option parsing errors

2026-09-16T08:48:52Z

The dsa app set ret to 0 before printing the option parsing error, resulting in a successful exit status for invalid options. All other apps keep the initial error status in this case, so drop the errant assignment to make dsa fail as expected. Assisted-by: Claude:claude-fable-5 Reviewed-by: Richard Levitte Reviewed-by: Daniel Kubec Merge-date: Wed Sep 16 08:48:56 2026 Merged-from: https://github.com/openssl/openssl/pull/32590

Fix a memory leak in apps/ocsp.c issuer

2026-09-15T16:28:50Z

Reviewed-by: Shane Lontis Reviewed-by: Paul Dale Reviewed-by: Paul Yang Merge-date: Tue Sep 15 16:28:52 2026 Merged-from: https://github.com/openssl/openssl/pull/32807