openssl/ssl/t1_trce.c, branch dependabot/github_actions/actions/setup-python-7

Add TLS 1.3 SignatureScheme definitions for SLH-DSA

2026-06-23T16:29:43Z

In accordance with [1]. [1] https://datatracker.ietf.org/doc/html/draft-reddy-tls-slhdsa-02 Resolves: https://github.com/openssl/project/issues/1945 Signed-off-by: Eugene Syromiatnikov Reviewed-by: Bob Beck Reviewed-by: Neil Horman MergeDate: Tue Jun 23 16:30:01 2026 (Merged from https://github.com/openssl/openssl/pull/31248)

ssl/t1_trce.c: use macros from tlssigalgs.h, reorder accordingly

2026-06-23T16:29:43Z

The macro definitions for the SignatureScheme values and names are available "include/internal/tlssigalgs.h" (contrary to what comment says), use them and also order the items in the order they are present in the header file. Signed-off-by: Eugene Syromiatnikov Reviewed-by: Bob Beck Reviewed-by: Neil Horman MergeDate: Tue Jun 23 16:29:59 2026 (Merged from https://github.com/openssl/openssl/pull/31248)

Use %zu for printing size_t values

2026-06-15T19:24:36Z

Reviewed-by: Neil Horman Reviewed-by: Richard Levitte Reviewed-by: Milan Broz MergeDate: Mon Jun 15 19:24:43 2026 (Merged from https://github.com/openssl/openssl/pull/31454)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

Added -expected-rpks s_client/server option

2026-02-28T09:14:40Z

Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz MergeDate: Sat Feb 28 09:17:23 2026 (Merged from https://github.com/openssl/openssl/pull/30089)

Support for RFC8998 curveSM2 + hybrid

2026-02-21T13:24:20Z

This adds support for the "sm2sig_sm3" TLS 1.3 signature algorithm, the "curveSM2" key exchange group (ECDH over SM2) and the associated post-quantum/traditional (PQ/T) hybrid "curveSM2MLKEM768" key exchange. The default key agreement group list is expanded to add two additional PQ groups, immediately after X25519MLKEM768. These are the P-256-based SecP256r1MLKEM768 and the SM2-based curveSMMLKEM768. Neither of the new groups is a default client keyshare group, these would only come into play after a server HRR, if for some reason X25519MLKEM768 is not supported by the server, X25519 is not then the server's most preferred group, and the server supports and prefers one of these of X25519. Reviewed-by: Tim Hudson Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz Reviewed-by: Paul Yang MergeDate: Sat Feb 21 13:26:07 2026 (Merged from https://github.com/openssl/openssl/pull/29953)

ECH client side

2026-02-20T16:40:25Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/26011)

Add TLS1.3 ciphersuites from RFC8998

2026-02-19T15:11:05Z

This adds TLS_SM4_GCM_SM3 and TLS_SM4_CCM_SM3 as defined in RFC 8998. Fixes openssl/project#1871 Signed-off-by: Milan Broz Reviewed-by: Viktor Dukhovni Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Reviewed-by: Neil Horman MergeDate: Thu Feb 19 15:11:15 2026 (Merged from https://github.com/openssl/openssl/pull/30028)

Use defined TLS cipher suite names in SSL trace

2026-02-18T16:01:11Z

This should use #define strings instead of duplication. Not everything is defined, though. Fixes openssl/project#1875 Co-Authored-By: Claude Opus 4.6 Extended Signed-off-by: Milan Broz Reviewed-by: Viktor Dukhovni Reviewed-by: Neil Horman Reviewed-by: Matt Caswell MergeDate: Wed Feb 18 16:01:18 2026 (Merged from https://github.com/openssl/openssl/pull/30042)

Remove support for SSLv3

2025-12-23T15:54:06Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Reviewed-by: Viktor Dukhovni (Merged from https://github.com/openssl/openssl/pull/29338)