openssl/apps, branch openssl-3.1

Replace snprintf with BIO_snprintf

2025-02-18T15:24:41Z

Updated snprintf to BIO_snprintf for consistency with previous changes. #24008 CLA: trivial Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26749) (cherry picked from commit aa6b7ac875a79ef2ef5376dfe79ce8402b702724)

Copyright year updates

2025-02-11T14:40:50Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Release: yes

s_socket: naccept: close listening socket after accepting clients

2025-01-22T08:20:57Z

When `-naccept` is passed (i.e with `s_server`), the listening socket remains open while handling client, even after `naccept` is supposed to reach `0`. This is caused to to the decrementation of `naccept` and closing of the socket happening a little too late in the `do_server` function. Signed-off-by: Nadav Tasher Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26228) (cherry picked from commit 113c12ee8cee2be232a361da277a2ab48807eeed)

speed: Pass IV to EVP_CipherInit_ex for -evp runs with non-AEAD ciphers

2025-01-13T10:48:03Z

Some (non-AEAD) ciphers require an IV to be used. Always pass a (dummy) IV when setting the key. It is ignored by ciphers that do not use an IV. Commit 607a46d003f472d4bce646f3df6e85725094d68a corrected the use of AEAD ciphers, but removed the IV from being passed to EVP_CipherInit_ex() for non-AEAD ciphers. Fixes: https://github.com/openssl/openssl/commit/607a46d003f472d4bce646f3df6e85725094d68a Signed-off-by: Ingo Franzki Reviewed-by: Dmitry Belyavskiy Reviewed-by: Hugo Landau Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26346) (cherry picked from commit b8028d489037033a6eaa02b11755e5be0e688523)

Fix memory leaks from missing checks of return value from sk_OPENSSL_STRING_push()

2025-01-09T14:24:41Z

Reviewed-by: Saša Nedvědický Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26238) (cherry picked from commit d48874ab477be0fa3df11bfcc38c043b8f7ab8e2)

Fix CMS encryption with key agreement when originator set

2025-01-06T10:47:42Z

OpenSSL currently does not support encryption with originator flag so it should fail nicely instead of segfaulting. Reviewed-by: Hugo Landau Reviewed-by: David von Oheimb Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26014) (cherry picked from commit 894e69e747a93a1f166891f5f029b78c68088f50)

Fix originator cert leak in cms app

2025-01-06T10:46:00Z

Reviewed-by: Hugo Landau Reviewed-by: David von Oheimb Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26014) (cherry picked from commit 24dd635efff48a24daf1e38a256550253225a28e)

openssl-pkeyutl.pod.in: improve description of -rawin and -digest options

2024-11-26T21:35:29Z

Fixes #25827 Reviewed-by: Tomas Mraz Reviewed-by: Viktor Dukhovni Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/25913) (cherry picked from commit e26d56d2198fd4a0f7fbd62471a30af05539e38d)

apps/speed.c: Fix the benchmarking for AEAD ciphers

2024-11-13T16:29:26Z

Fixed the benchmarking for the evp aead interface for ccm, gcm, ocb, and siv, where decryption fails when executing `openssl speed -evp aes-128-ccm -decrypt` and `openssl speed -evp aes-128-gcm -decrypt`. Reviewed-by: Tom Cosgrove Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25907)

Fix ambiguous output of Signature Algorithms

2024-10-28T04:54:50Z

Signature Algorithms are printed in a SIG+HASH format. In some cases this is ambiguous like brainpool and RSA-PSS. And the name of ed25519 and ed448 must be spelled in lower case, so that the output can be used as a -sigalgs parameter value. Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25797) (cherry picked from commit f30d6ba455e06572250e75132045eedde5d1daf0)