openssl/fuzz, branch master

fuzz: assert invariants in bignum fuzzers and fix with no-stdio

2026-10-19T11:23:52Z

Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Dmitry Belyavskiy Reviewed-by: Eugene Syromiatnikov Merge-date: Mon Oct 19 11:24:07 2026 Merged-from: https://github.com/openssl/openssl/pull/33160

fuzz: add missing stdio.h include for PQ fuzzers

2026-10-19T11:23:38Z

Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Dmitry Belyavskiy Reviewed-by: Eugene Syromiatnikov Merge-date: Mon Oct 19 11:24:06 2026 Merged-from: https://github.com/openssl/openssl/pull/33160

Add support for Java keytool PKCS#12 files with symmetric secret keys

2026-09-24T07:25:11Z

Introduce PKCS12_PARSE_CTX opaque context for PKCS12_parse_ex(), replacing the growing parameter list pattern. Add PKCS12_decrypt_secretbag() for decrypting secret bags and PKCS12_SAFEBAG_get1_skey() for converting decrypted PKCS8 data to EVP_SKEY, following the existing private key pattern (PKCS12_decrypt_skey_ex + EVP_PKCS82PKEY_ex). Assisted-by: Claude Opus 4.6 Reviewed-by: Mounir Idrassi Reviewed-by: Simo Sorce MergeDate: Thu Sep 24 07:34:22 2026 (Merged from https://github.com/openssl/openssl/pull/30937)

Add id-aes OID to OpenSSL object database

2026-09-24T07:25:11Z

This is the base AES OID used by Java keytool when storing generic AES symmetric keys in PKCS#12 files. Reviewed-by: Mounir Idrassi Reviewed-by: Simo Sorce MergeDate: Thu Sep 24 07:34:21 2026 (Merged from https://github.com/openssl/openssl/pull/30937)

hashtable.c: Use previously unused variables to avoid warning

2026-09-17T14:04:53Z

Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky Merge-date: Thu Sep 17 14:05:02 2026 Merged-from: https://github.com/openssl/openssl/pull/32821

Remove unused static variables to suppress new clang warning

2026-09-17T14:04:53Z

There were unused static variables in bn_lib.c, ssl_init.c, (dtls)client.c, (dtls)server.c, quic-client/server.c, dtlsssllistenertest.c Reviewed-by: Eugene Syromiatnikov Reviewed-by: Nikola Pajkovsky Merge-date: Thu Sep 17 14:05:01 2026 Merged-from: https://github.com/openssl/openssl/pull/32821

Update corpora submodule

2026-09-15T14:59:52Z

Reviewed-by: Jakub Zelenka Reviewed-by: Milan Broz Merge-date: Tue Sep 15 15:00:02 2026 Merged-from: https://github.com/openssl/openssl/pull/32342

Add cms_verify fuzzer

2026-09-15T14:59:52Z

Fuzz CMS_verify() with CMS_NO_SIGNER_CERT_VERIFY to exercise signature verification without requiring trusted certificate store. Motivated by : CVE-2026-45447 which affects PKCS7_verify(), and add coverage for similar CMS_verify(). Assisted-by: ChatGPT:gpt-5.6 Reviewed-by: Jakub Zelenka Reviewed-by: Milan Broz Merge-date: Tue Sep 15 15:00:01 2026 Merged-from: https://github.com/openssl/openssl/pull/32342

Copyright year updates

2026-09-09T13:12:46Z

Reviewed-by: Daniel Kubec Reviewed-by: Eugene Syromiatnikov Merge-date: Wed Sep 9 13:12:46 2026 Release: yes

fuzz/x509v3.c: drop a dead store of cert

2026-08-31T05:16:30Z

Setting cert to NULL before assinging another X509_new() result to it is unnecessary, as was pointed out by Coverity. Drop the dead store. Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1700563 Complements: 9da88ee430a0 "Add X509V3_EXT_add_nconf fuzzer" Signed-off-by: Norbert Pocs Reviewed-by: Paul Dale Reviewed-by: Nikola Pajkovsky Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov Merge-date: Mon Aug 31 05:19:12 2026 Merged-from: https://github.com/openssl/openssl/pull/32576