openssl/test/evp_skey_test.c, branch dependabot/github_actions/actions/setup-python-7

Fix broken hex data by reformatting

2026-06-03T07:46:03Z

The clang format broke some data in hexadecimal format. To make the tool obedient, the trailing comma needs to be removed, then it interpretes the data differently and therefore does not reformat it. The format can then be changed to the correct form. Fixes: https://github.com/openssl/project/issues/1959 Signed-off-by: Norbert Pocs Reviewed-by: Milan Broz Reviewed-by: Eugene Syromiatnikov MergeDate: Wed Jun 3 07:46:14 2026 (Merged from https://github.com/openssl/openssl/pull/31350)

evp_skey_test.c: Add test for EVP_SKEY_to_provider cross-provider transfer

2026-04-08T10:27:01Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Frederik Wedel-Heinen MergeDate: Wed Apr 8 10:27:04 2026 (Merged from https://github.com/openssl/openssl/pull/30650)

evp_skey_test.c: Add test for EVP_SKEY_to_provider same-provider path

2026-04-08T10:27:01Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Frederik Wedel-Heinen MergeDate: Wed Apr 8 10:27:03 2026 (Merged from https://github.com/openssl/openssl/pull/30650)

Enforce mandatory cipher get_params at dispatch parse

2026-03-16T11:21:48Z

Reject provider ciphers that lack get_params when unpacking the dispatch table in evp_cipher_from_algorithm(), failing with EVP_R_INVALID_PROVIDER_FUNCTIONS instead of later with EVP_R_CACHE_CONSTANTS_FAILED. Revert the optional-functions sentence in provider-cipher.pod to "All other functions are optional." so the doc does not imply only get_params, newctx, and freectx are required; a consistent encrypt/decrypt set is also required as described in the prior paragraph. Move test_cipher_no_getparams from evp_skey_test.c to evp_fetch_prov_test.c and add fake_cipherprov.c to the evp_fetch_prov_test build. Drop the redundant newctx/freectx/get_params line from the evp_cipher_from_algorithm() comment. Fixes #19110 Made-with: Cursor Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Matt Caswell MergeDate: Mon Mar 16 11:22:05 2026 (Merged from https://github.com/openssl/openssl/pull/30383)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

Add test to check SKEYMGMT interfaces

2025-04-25T16:51:58Z

Signed-off-by: Simo Sorce Reviewed-by: Dmitry Belyavskiy Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27483)

Copyright year updates

2025-03-12T13:35:59Z

Reviewed-by: Neil Horman Reviewed-by: Matt Caswell Release: yes

EVP_SKEY_get_raw_key => EVP_SKEY_get0_raw_key

2025-02-21T16:58:41Z

Reviewed-by: Paul Dale Reviewed-by: Tim Hudson Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26832)

Allow import of unknown keys via generic type

2025-02-15T17:51:31Z

This allows to use SKEY even w/o a specific skey managment available, however it bears the risk of allowing users to mispell the key type and not see the error of their ways until they expect a specific provider to pick this up and fail. Signed-off-by: Simo Sorce Reviewed-by: Tomas Mraz Reviewed-by: Tim Hudson Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/26753)

Add generic secret skeymgmt provider, skey abstraction and default skeymgmt

2025-02-15T17:51:30Z

This commits adds an actual skey wrapper structure and skeymgmt implementation for the default provider This allows to use fallbacks for any SKEY operation, and to use it for keys that do not have a specific purpose and cipher-suite associated to it. Add a test with a key type that does not have skey support (DES), to show that the fallback works. Add raw skey test Signed-off-by: Simo Sorce Signed-off-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz Reviewed-by: Tim Hudson Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/26753)