openssl/ssl/ssl_rsa.c, branch dependabot/github_actions/actions/setup-python-7TLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=dependabot%2Fgithub_actions%2Factions%2Fsetup-python-72026-06-30T10:47:03ZSSL_OP_SECOP is dead code2026-06-30T10:47:03ZBob Beckbeck@openssl.org2026-05-22T12:37:24Zurn:sha1:c25e1c4b78a8c3186eb2df52232a1995fee7814e
Nothing set the "vfy" parameters in any of these functions to anything but 0.
Remove the parameter and stage things related to SSL_OP_SECOP to go away in the
future.
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Norbert Pocs <norbertp@openssl.org>
MergeDate: Tue Jun 30 10:47:07 2026
(Merged from https://github.com/openssl/openssl/pull/31271)
SSL_use_cert_and_key NPE with provided keys2026-04-11T19:03:25ZViktor Dukhovniopenssl-users@dukhovni.org2026-04-04T14:19:07Zurn:sha1:535d51511832d8566be198449b6abd3e2d614255
SSL_use_cert_and_key(3) dereferenced a NULL SSL_CTX pointer
via ssl_cert_lookup_by_pkey() when the private key type was
not one of the builtin ones, but was provider-based.
Bug introduced in Postfix 3.2 (commit ee58915cfd9).
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
MergeDate: Sat Apr 11 19:04:12 2026
(Merged from https://github.com/openssl/openssl/pull/30683)
4.0-POST-CLANG-FORMAT-WEBKIT2025-12-09T07:28:19ZBob Beckbeck@openssl.org2025-12-09T07:08:07Zurn:sha1:2fab90bb5e1937f1c2125eab144f7f6c39e70087
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Nikola Pajkovsky <nikolap@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29242)
Fix the abnormal branch memory leak in ssl_set_cert_and_key function2025-09-23T14:36:23Zlan1120lanming@huawei.com2025-09-19T10:45:30Zurn:sha1:e7f88391867dd71dc0ef37646f497411bea5350c
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28619)
libssl: Silence warnings on Win64 builds2025-07-02T15:26:26ZTomas Mraztomas@openssl.org2025-06-17T09:13:35Zurn:sha1:abdbad370cdf6afb8ab6504fee200c4a8a84d3a8
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27806)
Copyright year updates2025-03-12T13:35:59Zopenssl-machineopenssl-machine@openssl.org2025-03-12T13:35:59Zurn:sha1:0c679f556669e32499a827a081afe3bcf973c9ad
Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Release: yes
Adds missing checks of return from XXX_up_ref().2025-02-18T15:32:59ZFrederik Wedel-Heinenfrederik.wedel-heinen@dencrypt.dk2024-12-28T09:13:48Zurn:sha1:00fbc969885a5721bc1b732f795fd8c09835b44f
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26294)
libssl: Move SSL object unwrapping macros to separate header2025-02-17T16:27:32ZHugo Landauhlandau@openssl.org2024-01-11T08:36:15Zurn:sha1:bf55326752eb213d01c88c8d644b341fb01e1dd1
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23334)
Check file name for not being NULL before opening it2024-09-26T18:35:26ZЗишан Мирзаzmirza@tutanota.de2024-09-13T22:24:24Zurn:sha1:3ef1b7426b05c18419ba0eb6495ec761c91834c1
Fixes #24416
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25458)
Copyright year updates2023-09-07T08:59:15ZMatt Caswellmatt@openssl.org2023-09-07T08:59:15Zurn:sha1:da1c088f599af3755aaeed1c447a39621ef12e1f
Reviewed-by: Richard Levitte <levitte@openssl.org>
Release: yes