CHANGES.md, NEWS.md: update for 4.1.0-alpha1

4.1.0-alpha1 CHANGES.md includes the following:
 * (Summarily) DTLS 1.3 changes
 * https://github.com/openssl/openssl/pull/27604
   "Implement partial verification for CMS with multiple signatures"
 * https://github.com/openssl/openssl/pull/28450
   "Add mandoc output support for manpages"
 * https://github.com/openssl/openssl/pull/28954
   "Add EVP_KDF_CTX_get0_kdf and EVP_KDF_CTX_get1_kdf"
 * https://github.com/openssl/openssl/pull/29043
   "CMP: add `-nonmatched_error_nonces` / `OSSL_CMP_OPT_NONMATCHED_ERROR_NONCES` option"
 * https://github.com/openssl/openssl/pull/29611
   "ppc64le: Optimized MLDSA NTT, supports p8 and above architectures."
 * https://github.com/openssl/openssl/pull/29664
   "QUIC: Make more transport parameters configurable"
 * https://github.com/openssl/openssl/pull/30007
   "Add Ed25519 Cert. Support for DTLS 1.2"
 * https://github.com/openssl/openssl/pull/30121
   "Add IKEV2KDF implementation"
 * https://github.com/openssl/openssl/pull/30160
   "Add AVX2 optimized assembly for ML-DSA NTT"
 * https://github.com/openssl/openssl/pull/30212
   "Improve disabled features configuration and list command"
 * https://github.com/openssl/openssl/pull/30225
   "dtls: buffer early CCS to handle UDP reorder"
 * https://github.com/openssl/openssl/pull/30233
   "x509: add EXFLAG_DUPLICATE with cheap O(1) duplicate extension check"
 * https://github.com/openssl/openssl/pull/30303
   "Implement RFC 8701 GREASE for TLS ClientHello"
 * https://github.com/openssl/openssl/pull/30335
   "Deprecate EVP_CIPHER_CTX_get_num() and EVP_CIPHER_CTX_set_num()."
 * https://github.com/openssl/openssl/pull/30339
   "fips: Bring back FIPS_mode() as a define"
 * https://github.com/openssl/openssl/pull/30403
   "Deprecate the X509_check family of functions."
 * https://github.com/openssl/openssl/pull/30427
   "Add CTLOG_STORE_add0_log() to add CTLOGs to a store programmatically"
 * https://github.com/openssl/openssl/pull/30429
   "ISSUE-11677: Use memory-mapped files for `pkeyutl -rawin` and `dgst`"
 * https://github.com/openssl/openssl/pull/30446
   "Fix broken Run-checker daily CI"
 * https://github.com/openssl/openssl/pull/30559
   "Fix certificate read from stdin on Windows"
 * https://github.com/openssl/openssl/pull/30597
   "Added helper to initialize EC key using affine coordinates"
 * https://github.com/openssl/openssl/pull/30639
   "Disable tickets when SSL_OP_NO_TICKET and SSL_SESS_CACHE_OFF are set"
 * https://github.com/openssl/openssl/pull/30655
   "ISSUE-30432: register dsa_with_SHA384 and dsa_with_SHA512 with sha384/sha512 and d…"
 * https://github.com/openssl/openssl/pull/30670
   "Improve execution time of RAND_get_rand_method with atomics instead of an rwlock"
 * https://github.com/openssl/openssl/pull/30692
   "Deprecate ASN1_BIT_STRING_set()"
 * https://github.com/openssl/openssl/pull/30709
   "ppc64le: Optimized MLKEM NTT, supports p8 (ISA 2.07) and above architectures."
 * https://github.com/openssl/openssl/pull/30788
   "Unit testing framework with use of cmocka"
 * https://github.com/openssl/openssl/pull/30812
   "Vectorize (inverse) NTT in ML-DSA"
 * https://github.com/openssl/openssl/pull/30853
   "Deprecate the ASN1_BIT_STRING name related functions."
 * https://github.com/openssl/openssl/pull/30871
   "Add memory failure function level testing"
 * https://github.com/openssl/openssl/pull/30902
   "AES CBC decrypt implementation with VAES-512"
 * https://github.com/openssl/openssl/pull/30940
   "Improve EC key point format handling"
 * https://github.com/openssl/openssl/pull/30961
   "Map rsaesOaep SubjectPublicKeyInfo to RSA"
 * https://github.com/openssl/openssl/pull/30964
   "Provide ASN1_STRING_new_not_owned"
 * https://github.com/openssl/openssl/pull/30967
   "Unicode codepoints fit in 32 bit values. "
 * https://github.com/openssl/openssl/pull/31001
   "Make include files guarded and self-contained."
 * https://github.com/openssl/openssl/pull/31090
   "ML-DSA: AVX512VL SHAKE x4 integration"
 * https://github.com/openssl/openssl/pull/31192
   "Test apps s_time with new -testmode option"
 * https://github.com/openssl/openssl/pull/31194
   "Prepare a now opaque ASN1_STRING for the size_t rapture."
 * https://github.com/openssl/openssl/pull/31269
   "Elbrus2000 (e2k) architecture support"
 * https://github.com/openssl/openssl/pull/31162
   "aarch64: Add support for Armv9.4-A GCS in assembly"
 * https://github.com/openssl/openssl/pull/31445
   "Switch to Net::Curl in tsget.pl"
 * https://github.com/openssl/openssl/pull/31601
   "Drop Windows CE support."
 * https://github.com/openssl/openssl/pull/31640
   "Deprecate BIO_snprintf, and switch to snprintf/vsnprintf with c99 semantics"
 * https://github.com/openssl/openssl/pull/31795
   "Add -n option to openssl-rand to not output the trailing newline"
 * https://github.com/openssl/openssl/pull/31913
   "Drop Windows-on-Itanium (VC-WIN64I) support."
 * https://github.com/openssl/openssl/pull/31939
   "rand: honour explicitly configured seed source in provider callbacks"
 * https://github.com/openssl/openssl/pull/31964
   "PSK: Fix server and client session id context handling (Initial commits from #31925)"
 * https://github.com/openssl/openssl/pull/31982
   "Stop consulting the subject DN by default in X509 name checks"
 * https://github.com/openssl/openssl/pull/31988
   "Restore Visual Studio 2013 build compatibility"
 * https://github.com/openssl/openssl/pull/31990
   "CMS/PKCS7: use EVP_CIPHER_fetch() for SMIMECapabilities"
 * https://github.com/openssl/openssl/pull/32032
   "Reject TLS 1.3 early data when PSK ciphersuite differs"
 * https://github.com/openssl/openssl/pull/32181
   "Fix memory leaks in x509v3 config handling"
 * https://github.com/openssl/openssl/pull/32202
   "TLS 1.3: Suppress early_data on PSK ticket age mismatch"
 * https://github.com/openssl/openssl/pull/32242
   "Stop CMS and PKCS7 abusing ASN.1 internals"
 * https://github.com/openssl/openssl/pull/32389
   "Remove the F5 ClientHello-padding workaround"
 * https://github.com/openssl/openssl/pull/32401
   "PSK: Fix ALPN handling"
 * https://github.com/openssl/openssl/pull/32491
   "Fix SSL_listen_ex() so peeled connections can complete the handshake"
 * https://github.com/openssl/openssl/pull/32536
   "Convert cipher OSSL_PARAM handling to generated trie decoders"
 * https://github.com/openssl/openssl/pull/32644
   "Add metadata support to EVP_SKEY objects"

4.1.0-alpha1 NEWS.md includes the following:
 * (Summarily) DTLS 1.3 changes
 * https://github.com/openssl/openssl/pull/29611
   "ppc64le: Optimized MLDSA NTT, supports p8 and above architectures."
 * https://github.com/openssl/openssl/pull/30121
   "Add IKEV2KDF implementation"
 * https://github.com/openssl/openssl/pull/30160
   "Add AVX2 optimized assembly for ML-DSA NTT"
 * https://github.com/openssl/openssl/pull/30303
   "Implement RFC 8701 GREASE for TLS ClientHello"
 * https://github.com/openssl/openssl/pull/30446
   "Fix broken Run-checker daily CI"
 * https://github.com/openssl/openssl/pull/30709
   "ppc64le: Optimized MLKEM NTT, supports p8 (ISA 2.07) and above architectures."
 * https://github.com/openssl/openssl/pull/30812
   "Vectorize (inverse) NTT in ML-DSA"
 * https://github.com/openssl/openssl/pull/30902
   "AES CBC decrypt implementation with VAES-512"
 * https://github.com/openssl/openssl/pull/31090
   "ML-DSA: AVX512VL SHAKE x4 integration"
 * https://github.com/openssl/openssl/pull/31269
   "Elbrus2000 (e2k) architecture support"
 * https://github.com/openssl/openssl/pull/31445
   "Switch to Net::Curl in tsget.pl"
 * https://github.com/openssl/openssl/pull/31601
   "Drop Windows CE support."
 * https://github.com/openssl/openssl/pull/31640
   "Deprecate BIO_snprintf, and switch to snprintf/vsnprintf with c99 semantics"
 * https://github.com/openssl/openssl/pull/31913
   "Drop Windows-on-Itanium (VC-WIN64I) support."

Signed-off-by: Eugene Syromiatnikov <[email protected]>
Reviewed-by: Jakub Zelenka <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
Merge-date: Wed Sep  9 11:10:39 2026
Merged-from: https://github.com/openssl/openssl/pull/32758

0 files changed, 0 insertions, 0 deletions