openssl/ssl/ssl_mcnf.c, branch dependabot/github_actions/actions/setup-python-7

ssl: Fix ssl_do_config to clean up errors on success with ERR_set_mark

2026-04-16T11:24:48Z

ssl_do_config() could leave stale errors on the error stack even on success, so that later error checking operations could mistakenly surface these errors. Use ERR_set_mark()/ERR_pop_to_mark() to cleanly discard errors when the function succeeds or when system config errors are non-fatal. Fixes #30760 Co-authored-by: Brandon Allard Reviewed-by: Matt Caswell Reviewed-by: Dmitry Belyavskiy MergeDate: Thu Apr 16 11:24:56 2026 (Merged from https://github.com/openssl/openssl/pull/30765)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

ssl_do_config(): Check for NULL name argument

2025-12-05T16:28:32Z

Fixes 0c2a196af8ab9c12da27 Fixes Coverity issue 1675312 Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29306)

CONF: Add support for configurations per OSSL_LIB_CTX

2025-12-03T13:15:51Z

Add support for configurations per OSSL_LIB_CTX and fix cross-context overrides. Fixes #19248 Fixes #19243 Co-authored-by: Matt Caswell Reviewed-by: Nikola Pajkovsky Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29145)

Copyright year updates

2024-09-05T07:35:49Z

Reviewed-by: Neil Horman Release: yes

Set SSL_CONF_FLAG_SHOW_ERRORS when conf_diagnostics is enabled

2024-05-09T07:20:58Z

Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/24275)

Make conf_diagnostics apply also to the SSL conf errors

2024-05-09T07:20:25Z

Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/24275)

Consolidate raising errors in SSL_CONF_cmd()

2023-12-19T11:03:02Z

Reviewed-by: Neil Horman Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/23048)

Always apply all configuration settings from the ssl section

2023-12-19T11:03:02Z

Even if some configuration entry is incorrect, do not skip the remaining ones. Fixes #20789 Reviewed-by: Neil Horman Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/23048)

SSL: refactor all SSLfatal() calls

2020-11-11T11:12:23Z

Since SSLfatal() doesn't take a function code any more, we drop that argument everywhere. Also, we convert all combinations of SSLfatal() and ERR_add_data() to an SSLfatal_data() call. Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/13316)