openssl/crypto/http, branch openssl-3.5.6

Copyright year updates

2026-04-07T12:24:29Z

Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Apr 7 12:24:30 2026 Release: yes

Fix CONNECT request for IPv6 targets in OSSL_HTTP_proxy_connect

2026-03-24T17:32:25Z

When server contains a bare IPv6 address, OSSL_HTTP_proxy_connect() must wrap it in square brackets for the CONNECT request line (e.g., CONNECT [::1]:443 HTTP/1.0). Also handle the case where the server string already includes brackets (as returned by OSSL_HTTP_parse_url). Fixes: 29f178bddfdb ("Generalize the HTTP client so far implemented mostly in crypto/ocsp/ocsp_ht.c") Reviewed-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz MergeDate: Tue Mar 24 17:32:06 2026 (Merged from https://github.com/openssl/openssl/pull/30384) (cherry picked from commit b721a59fef180311d62a932c2d5be8a83942cbbe)

Fix OSSL_parse_url userinfo scan past authority

2026-03-11T10:23:13Z

Reviewed-by: Paul Dale Reviewed-by: Norbert Pocs MergeDate: Wed Mar 11 10:22:54 2026 (Merged from https://github.com/openssl/openssl/pull/30319) (cherry picked from commit 7aedbb34d01cc3dca6218bad454d795c09ba89e7)

OSSL_HTTP_REQ_CTX_nbio(): check for clear Content-Type mismatch

2026-03-05T18:04:38Z

Fixes #29748 Reviewed-by: David von Oheimb Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Thu Mar 5 18:04:24 2026 (Merged from https://github.com/openssl/openssl/pull/29829) (cherry picked from commit 465fd32d3374a7197107ebd9ad09f8844a7d496d)

Fix legitimate spelling errors

2025-12-21T08:18:02Z

Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29461)

3.5-POST-CLANG-FORMAT-WEBKIT

2025-12-09T09:40:50Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29262)

http_client.c: make sure to raise error 404 (also in case of further errors like content type mismatch)

2025-10-15T12:52:46Z

Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/28895) (cherry picked from commit 5aaf9746f649d15b3ad006acdc6a958819acc536)

use_proxy(): Add missing terminating NUL byte

2025-09-29T10:04:19Z

Fixes CVE-2025-9232 There is a missing terminating NUL byte after strncpy() call. Issue and a proposed fix reported by Stanislav Fort (Aisle Research). Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (cherry picked from commit 6bca15039e99d37ce3a3564eb862a3b1ff40e63d)

Fix URL parsing to handle missing ports and ISO 8601 timestamps in paths

2025-04-23T09:27:19Z

Reviewed-by: David von Oheimb Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26303) (cherry picked from commit 56910e7211363de26d3975635f4968c55de08eb6)

Copyright year updates

2025-03-12T13:35:59Z

Reviewed-by: Neil Horman Reviewed-by: Matt Caswell Release: yes