openssl/doc/build.info, branch dependabot/github_actions/actions/setup-python-7

Add documentation for NAME_CONSTRAINTS_check

2026-06-24T13:03:52Z

We document which names and name constraints will be evaluated as well as the limits that will be placed on the evauluation on a per certificate basis. We call out in the BUGS section that the RFC 5280 requires a byte per byte match of name constraints unless the higher level protocol has defines a different matching method for wildcards. This "deferall of specification" and corresponding lack of specification by upper level protocols means that across implementations encountering the default behaviour is to be expected, and that therefore relying on excluded names to constrain signers in a PKI from signing wildcards is ill advised. This is then cross referenced in the documentation for X509_verify_cert and the maximum possible comparisons which can be forces in a certificate validtion noted in the BUGS section of X509_verify_cert. Fixes: https://github.com/openssl/openssl/issues/30706 Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky MergeDate: Wed Jun 24 13:03:54 2026 (Merged from https://github.com/openssl/openssl/pull/31334)

Added the EVP_EC_affine2oct() helper function

2026-05-06T16:46:51Z

This function converts affine coordinates of an EC point to an octet string conforming to Sec. 2.3.4 of the SECG SEC 1 ("Elliptic Curve Cryptography") standard. Reviewed-by: Matt Caswell Reviewed-by: Simo Sorce Reviewed-by: Tomas Mraz MergeDate: Wed May 6 16:47:57 2026 (Merged from https://github.com/openssl/openssl/pull/30597)

Doc: Add documentation for existing Hybrid ML_KEM algorithms used by

2026-05-04T11:51:09Z

TLS1.3. Reviewed-by: Eugene Syromiatnikov Reviewed-by: Viktor Dukhovni Reviewed-by: Neil Horman MergeDate: Mon May 4 11:51:12 2026 (Merged from https://github.com/openssl/openssl/pull/30037)

Document ASN1_BIT_STRING functions

2026-04-15T12:25:44Z

Signed-off-by: Norbert Pocs Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky MergeDate: Wed Apr 15 12:25:45 2026 (Merged from https://github.com/openssl/openssl/pull/30690)

Add IKEV2KDF implementation

2026-03-24T17:21:19Z

In compliance with RFC7296 and SP800-135 Reviewed-by: Neil Horman Reviewed-by: Shane Lontis Reviewed-by: Paul Dale MergeDate: Tue Mar 24 17:21:21 2026 (Merged from https://github.com/openssl/openssl/pull/30121)

Adds documentation of X509V3_EXT_print and X509V3_EXT_print_fp.

2026-03-19T09:20:05Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman MergeDate: Thu Mar 19 09:20:07 2026 (Merged from https://github.com/openssl/openssl/pull/29996)

Document ECDH over SM2 key exchange.

2026-02-21T13:24:21Z

Reviewed-by: Tim Hudson Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz Reviewed-by: Paul Yang MergeDate: Sat Feb 21 13:26:15 2026 (Merged from https://github.com/openssl/openssl/pull/29953)

ECH build artefacts and a bit of code

2026-02-20T16:40:25Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/25193)

Make ERR_STATE opaque and remove related deprecated functions

2026-02-13T16:11:07Z

ERR_get_state(), ERR_remove_state() and ERR_remove_thread_state() and useless SYS_F_ macros are removed. Fixes #4654 Reviewed-by: Eugene Syromiatnikov Reviewed-by: Dmitry Belyavskiy Reviewed-by: Neil Horman MergeDate: Sat Feb 14 23:07:56 2026 (Merged from https://github.com/openssl/openssl/pull/30005)

doc: rename .pod.in files that don't use templating to .pod

2026-02-13T14:49:29Z

These man page source files only used the output_do_not_edit_headers() template function, which just generates a comment. Since they don't use any meaningful templating, rename them from .pod.in to .pod and remove the template line and build.info generation rules. Files renamed: - openssl-asn1parse.pod.in -> openssl-asn1parse.pod - openssl-cmds.pod.in -> openssl-cmds.pod - openssl-fipsinstall.pod.in -> openssl-fipsinstall.pod - openssl-info.pod.in -> openssl-info.pod - openssl-sess_id.pod.in -> openssl-sess_id.pod - openssl-version.pod.in -> openssl-version.pod - openssl-configutl and openssl-errstr .pod.in Fixes #27760 Co-Authored-By: Claude Opus 4.5 Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Dmitry Belyavskiy MergeDate: Fri Feb 13 14:50:16 2026 (Merged from https://github.com/openssl/openssl/pull/29838)