openssl/test, branch openssl-3.2

Fixes for NonStop builds on 3.4 to handle OS platform header file changes

2025-11-18T18:11:33Z

This changes handles the introduction of _POSIX_VERSION into the NonStop x86 header files that tricks OpenSSL into thinking that ucontext.h is available. Build a workaround in timing_load_creds.c on NonStop for lack of rusage. This simulates getrusage() that is not available on NonStop. Fixes #28498 Fixes #29023 Signed-off-by: Randall S. Becker Reviewed-by: Richard Levitte Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29106) (cherry picked from commit 249c506bb85b1056c28f701a8ea163cb96c1d743)

Add negative test for PKCS12_SAFEBAG_get0_bag*() functions

2025-11-14T17:32:31Z

Reviewed-by: Paul Dale Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/29128) (cherry picked from commit 930a9502d15aabde8c774ebf45834c2c135047c0)

Test invalid out of range character handling in UTF8_getc()

2025-11-14T08:19:05Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Norbert Pocs (Merged from https://github.com/openssl/openssl/pull/29119) (cherry picked from commit 3595339b6901d9880282168eca75773080969c38)

Properly error out when AEAD Algorithms are used with Encrypted Data

2025-11-10T19:42:27Z

Encrypted Data does not support AEAD algorithms. If you wish to use AEAD algorithms you will have to use a CMS_AuthEnvelopedData structure. Therefore, when AEAD algorithms are used with CMS_EncryptedData_set1_key will now return an error. Fixes: #28607 Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28711) (cherry picked from commit 86344acb02eb3718b0491b9915846667c55c95ff)

Rename SSL_CERT_LOOKUP.nid to pkey_nid

2025-10-30T18:09:26Z

Hopefully, this will help further clarify the intent of this SSL_CERT_LOOKUP field to future developer. Reviewed-by: Viktor Dukhovni Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29027) (cherry picked from commit 96459b12aa094ea35c71263422d2f101ea724351)

Fix Memory leak in CMS_EncryptedData_set1_key

2025-10-01T15:49:39Z

When CMS_EncryptedData_set1_key is called repeatedly it will leak data on the second call. This was because cms->d.encryptedData was already set and needed to be cleared before the call to M_ASN1_new_of. Fixes: #28606 Reviewed-by: Shane Lontis Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28668) (cherry picked from commit 7de825efa26d136c7bb118156190437bdcf130b7)

Copyright year updates

2025-09-30T13:03:21Z

Reviewed-by: Neil Horman Reviewed-by: Saša Nedvědický Release: yes

Add test for using KRB5KDF with erroneous key size

2025-09-26T16:55:03Z

Reviewed-by: Neil Horman Reviewed-by: Tim Hudson Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/28663) (cherry picked from commit c18b6968cc1824bd3280cffa914093bba85dff3f)

test/wpackettest.c: remove bogus cleanup() in test_WPACKET_quic_vlint_random()

2025-09-25T15:00:38Z

In the beginning of the iteration, pkt is not initialised yet, so there is no need to clean it up on RAND_bytes() failure. Replace "return cleanup(&pkt)" with plain "return 0". Fixes: 416d0a638c16 "QUIC wire format support" Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1665422 References: https://github.com/openssl/project/issues/1432 Signed-off-by: Eugene Syromiatnikov Reviewed-by: Paul Dale Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/28648) (cherry picked from commit 68f7f1295a77b5ca3b37b71a4079d7fe26bcd1c3)

Fix EVP_PKEY_can_sign() handling of NULL from query_operation_name()

2025-09-25T13:29:10Z

EVP_PKEY_can_sign() assumed query_operation_name(OSSL_OP_SIGNATURE) always returns a non-NULL string. According to the documentation, query_operation_name() may return NULL, in which case EVP_KEYMGMT_get0_name() should be used as a fallback. Fixes #27790 Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28641) (cherry picked from commit 0c2d67f417a2c2e0a63272e8d7753489b4958c0b)