openssl/demos, branch openssl-3.4.5

3.4-POST-CLANG-FORMAT-WEBKIT

2025-12-09T13:48:07Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Norbert Pocs (Merged from https://github.com/openssl/openssl/pull/29260)

Copyright year updates

2025-09-30T12:46:35Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Release: yes

demos/certs: properly handle "$@"

2025-09-08T20:56:58Z

There is little reason $@ should be used unquoted; also, "$@" should be used instead of $* in order to pass the script arguments to a function. Fixes: bcd92754d56a "demos: fix cert scripts" Fixes: 79b184fb4b65 "Extend certificate creation examples to include CRL generation and sample" Signed-off-by: Eugene Syromiatnikov Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28407)

Fix: Add free to avoid memory leak.

2025-08-29T12:36:51Z

Reviewed-by: Saša Nedvědický Reviewed-by: Paul Yang Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28289) (cherry picked from commit f9afb3a07eb72428b98e3e31384380564a236700)

Fix RSA key size validation in EVP_PKEY_RSA_keygen demo

2025-08-11T14:46:31Z

The validation was checking the default 'bits' value (4096) instead of the parsed 'bits_i' from the command line arguments, allowing invalid key sizes to bypass the 512-bit minimum. CLA: trivial Reviewed-by: Matt Caswell Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/28139) (cherry picked from commit c79e1b212a616b8dca194a77e7698b886000fcb0)

demos/cms/cms_denc.c: Add check for BIO_new_file()

2025-07-01T17:35:47Z

Add check for the return value of BIO_new_file(). Fixes: 1728756 ("Detached encrypt/decrypt example, fix decrypt sample.") Signed-off-by: Jiasheng Jiang Reviewed-by: Paul Dale Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27897) (cherry picked from commit 881ff0c225356a0f28bd55cea5a4c5204b7b7b8a)

demos/cms/cms_ddec.c: Replace "in" with "dcont" to correctly check the success of BIO_new_file()

2025-07-01T17:33:43Z

Replace "in" with "dcont" to properly check the return value of BIO_new_file(). Fixes: 1728756 ("Detached encrypt/decrypt example, fix decrypt sample.") Signed-off-by: Jiasheng Jiang Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27896) (cherry picked from commit 8a7545607e872ccaff3018e2cd201cce65e615ec)

Copyright year updates

2025-07-01T11:55:48Z

Reviewed-by: Matt Caswell Reviewed-by: Neil Horman Release: yes

Avoid potential double close of client_skt in sslecho

2025-06-20T14:45:00Z

The server_running variable is declared as volatile and some comments in the code are mentioning about implementing CTRL+C handler in the future. In the client handling loop, the client_skt is closed at the end of the loop if server_running is true. If (future) CTRL+C handler changes server_running to false at this time. The next accept will not happen and the exit clean up code will close client_skt for the second time. This patch fixes this potential double close by setting client_skt back to -1 after closing it. Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/27405) (cherry picked from commit 48e3fe08639d84bd557c0d5248f5600f2fb1f7de)

demos/bio/sconnect.c: Free ssl_bio on error to avoid memory leak

2025-05-19T14:22:45Z

Call BIO_free() to release ssl_bio if an error occurs before BIO_push(), preventing a memory leak. Fixes: 396e720965 ("Fix certificate validation for IPv6 literals in sconnect demo") Signed-off-by: JiashengJiang Reviewed-by: Tom Cosgrove Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27639) (cherry picked from commit 55d8d859797e8229bc499bbc7c3c76821b654682)