openssl/test/cmp_client_test.c, branch openssl-3.6

test/cmp_client_test.c: add RR tests with issuer or serialNumber missing

2026-10-24T10:03:10Z

Issuer and serialNumber are independently OPTIONAL in a CertTemplate, and the library hands them to the process_rr callback separately. The OpenSSL CMP client always sends both, so the mock server has never been exercised with an RR that carries only one of them. Assisted-by: Claude:claude-fable-5-1 Reviewed-by: Dmitry Belyavskiy Reviewed-by: Mounir Idrassi Reviewed-by: Eugene Syromiatnikov Merge-date: Sat Oct 24 09:44:20 2026 Merged-from: https://github.com/openssl/openssl/pull/33071 (cherry picked from commit a752594ed84476fbb516b0f43e15de513dcd4a14)

Add test for CVE-2026-75805

2026-09-29T11:03:43Z

Signed-off-by: Norbert Pocs Reviewed-by: Milan Broz Reviewed-by: Tomas Mraz Merge-date: Tue Sep 29 11:03:48 2026

OSSL_CMP_SRV_process_request(): fix wrong handling of aborted polling transaction

2026-08-27T07:51:43Z

The check for acceptable response body types during polling should only be done when we are in an active transaction. Also fix missing parentheses in test/cmp_client_test.c, which had prevented reporting failure. Reviewed-by: Andrew Dinh Reviewed-by: Eugene Syromiatnikov MergeDate: Thu Aug 27 07:25:02 2026 (Merged from https://github.com/openssl/openssl/pull/28988) (cherry picked from commit 3ad285003e55e1600c7ed591fcd7e36d1208cae2)

cmp_client_test.c: fix partly too generous total_timeout limit for IR session with polling

2026-06-17T07:38:25Z

This backports #31111 Reviewed-by: Norbert Pocs Reviewed-by: Nikola Pajkovsky Reviewed-by: Eugene Syromiatnikov MergeDate: Wed Jun 17 07:38:42 2026 (Merged from https://github.com/openssl/openssl/pull/31456)

Copyright year updates

2026-04-07T12:15:45Z

Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Apr 7 12:15:46 2026 Release: yes

cmp_client_test.c: disable KUR_bad_pkiConf_protection

2026-03-26T16:21:22Z

This is a workaround for an issue that lead to fuzz-checker CI failures; the preliminary solution is to disable the inessential test case test_exec_KUR_bad_pkiConf_protection. References: https://github.com/openssl/openssl/pull/28973 Fixes: 525a4f1efbab "cmp_vfy.c,doc/,test/: when trying to use cached CMP message sender cert, no more check its revocation and chain" Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Thu Mar 26 16:21:35 2026 (Merged from https://github.com/openssl/openssl/pull/30567)

cmp_vfy.c,doc/,test/: when trying to use cached CMP message sender cert, no more check its revocation and chain

2026-03-26T16:17:47Z

Reviewed-by: Neil Horman Reviewed-by: Paul Dale Reviewed-by: Eugene Syromiatnikov MergeDate: Thu Mar 26 16:18:23 2026 (Merged from https://github.com/openssl/openssl/pull/28973)

3.6-POST-CLANG-FORMAT-WEBKIT

2025-12-09T08:00:43Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29245)

cmp_client_test.c: relax tight timeout value in test_exec_IR_ses_poll_no_timeout()

2025-04-09T10:29:06Z

Fixes #27165 Reviewed-by: Bernd Edlinger Reviewed-by: Tom Cosgrove Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/27249)

Copyright year updates

2025-03-12T13:35:59Z

Reviewed-by: Neil Horman Reviewed-by: Matt Caswell Release: yes