openssl/include, branch openssl-3.4.3

Copyright year updates

2025-09-30T12:46:35Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Release: yes

Fix OPENSSL_VERSION_NUMBER to always have zero status bits

2025-09-20T07:29:25Z

The documentation suggested that they were always zero, while the implementation in suggested that it could be 0xf in OpenSSL releases... which (almost) never happened because of a bug in said implementation. Therefore, we solidify that the status bits are indeed always zero, at least in all OpenSSL 3 versions. Resolves: https://github.com/openssl/project/issues/1621 Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28603) (cherry picked from commit 60c4feacce6faf0e98167dc2ab2a1c2e85882049)

Correct the synthetisized OPENSSL_VERSION_NUMBER

2025-08-13T04:10:33Z

The last hex digit always became 0x0L, even of OPENSSL_VERSION_PRE_RELEASE was the empty string. Resolves: https://github.com/openssl/openssl/issues/28227 Reviewed-by: Paul Yang Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/28230) (cherry picked from commit ba2c314a60d9f42d1d2e63ea0f791cc04e03005b)

Remove OSSL_CRYPTO_ALLOC attribute from CRYPTO_*dup routines

2025-08-12T19:03:40Z

The __attribute__((malloc)) is for functions that return new memory, and "the memory [returned by the function] has undefined content", which is a property that doesn't hold for the *dup functions (the same reason it doesn't apply to realloc). Fixes: e1035957eba1 "OSSL_CRYPTO_ALLOC attribute introduction proposal." Signed-off-by: Eugene Syromiatnikov Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/28220) (cherry picked from commit 85bba74789f82daca7482a9274c6d02843fb2dbb)

- changes suggested by @t8m

2025-07-27T09:01:39Z

Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28023) (cherry picked from commit 92330c8f80e4dbfc45b7718d9ed526f196daba0a)

ACK manager must avoid infinite probe time when waiting handshake confirmation

2025-07-27T09:01:35Z

According to RFC 9002, section 6.2.2.1 the client the client must keep PTO (probe time out) armed if it has not seen HANDSHAKE_DONE quic message from server. Not following RFC spec here may cause the QUIC session to stale during TLS handshake. Fixes openssl/project#1266 Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28023) (cherry picked from commit cdbfacead0d07ed47fa1087d633acf6f6399aa2c)

fix SM2 privatekey decode(PEM format, ECPrivateKey).

2025-07-25T07:51:21Z

Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27963) (cherry picked from commit bd172dd0e1b76116402534aa4bb5c89d039e7762)

Copyright year updates

2025-07-01T11:55:48Z

Reviewed-by: Matt Caswell Reviewed-by: Neil Horman Release: yes

Nit: macro parameters should always be parenthesised in expressions

2025-06-21T22:24:58Z

Affected macros: ossl_likely and ossl_unlikely Reviewed-by: Tim Hudson Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/27862) (cherry picked from commit cdd01b5e0734b0324251b32a8edd97f42ba90429)

Remove _strlen31

2025-06-06T08:08:13Z

This function is old and fairly broken. Code archeology in our git tree hasn't revealed why it was creted (though it may have possibly been to support older win32 systems that couldn't do 64 bit integers properly, like windows 95/98). There seems to be no good reason to keep it around, and given that it has potentially serious side effects, lets just remove it. Fixes #27761 Reviewed-by: Paul Dale Reviewed-by: Richard Levitte Reviewed-by: Tom Cosgrove Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27763) (cherry picked from commit b0d363a2cb039eac2908b7cb00b395235373193e)