openssl/ssl/ssl_conf.c, branch dependabot/github_actions/actions/setup-python-7

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

SSL_CONF_FLAG: Prevent setting both CMDLINE and FILE flags

2026-02-03T09:39:56Z

The `SSL_CONF_CTX_set_flags` function did not prevent setting both `SSL_CONF_FLAG_CMDLINE` and `SSL_CONF_FLAG_FILE` flags, which is an invalid combination. This commit adds a check to prevent this and updates the documentation to clarify that only one of these flags can be set. A new test case is also added to verify the correct behavior. Fixes https://github.com/openssl/openssl/issues/15508 Reviewed-by: Matt Caswell Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Tue Feb 3 09:40:04 2026 (Merged from https://github.com/openssl/openssl/pull/29752)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

Ignore RecordPadding option in config file for QUIC objects

2025-11-21T13:28:15Z

QUIC connections always pad data at the packet level during packet encryption, and so have no ability to do padding at the record level. We want to be able to inform the user of this condition when applications call SSL_set_block_padding_ex directly by returning an error, we have no idea of what kind of SSL objects are created when the config file is written. As such, silently ignore this config file option when QUIC objects are created. Fixes #28953 Reviewed-by: Saša Nedvědický Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28992)

Introduce SSL_OP_SERVER_PREFERENCE to replace SSL_OP_CIPHER_SERVER_PREFERENCE misnomer

2025-07-09T10:10:57Z

Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27981)

Add SSL_CTX_set_ec_point_formats() and SSL_set_ec_point_formats()

2025-04-14T13:56:40Z

The internal fields and implementation for configuration of this parameter already existed, but was not exposed. This change adds simple setters to allow configuration of this field. Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/26990)

Copyright year updates

2025-03-12T13:35:59Z

Reviewed-by: Neil Horman Reviewed-by: Matt Caswell Release: yes

libssl: Move SSL object unwrapping macros to separate header

2025-02-17T16:27:32Z

Reviewed-by: Matt Caswell Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/23334)

Fix configuring provider certificate algs via config file

2025-02-11T17:36:21Z

A crash could occur when attempting to configure a certificate via a config file, where the algorithm for the certificate key was added dynamically via a provider. Reviewed-by: Viktor Dukhovni Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/26663)

Fix memleaks in cmd_RecordPadding()

2024-11-13T11:00:26Z

Free the internal copy of parameter `value` on each early exit. Fixes #25906 Signed-off-by: Holger Dengler Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25926)