aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* Provider compat CI: Force copy of fips.so and fipsmodule.cnfopenssl-3.0Tomas Mraz2026-09-071-2/+2
* Do not advertise OPENSSL_INIT_LOAD_CONFIG in optsdone too soonPavol Žáčik2026-09-071-3/+11
* Document application defined security callbacksTim Perry2026-09-031-9/+102
* Fix memory leak in load_key_certs_crls() when add/push failsherbenderbler2026-09-031-6/+15
* doc: correct pkcs12 passin and passout descriptionsMounir IDRASSI2026-09-011-3/+8
* TLS 1.3: Apply the cap to the lifetime hint in the sessionDaniel Kubec2026-09-011-1/+1
* remove redundant checksPauli2026-09-011-3/+0
* test: cover non-legacy cipher parameter decodersPauli2026-09-011-0/+71
* aes-ctr-hmac: add range checking on AADPauli2026-09-011-3/+31
* Fix EVP_CIPHER_CTX leak in BIO_f_cipher() on BIO_dup_chain()Mounir IDRASSI2026-08-312-3/+23
* providers: check OSSL_DECODER_CTX_set_construct_data() return valueNorbert Pocs2026-08-311-1/+2
* docs: fix doubled words in man pages and design docszaveshaa2026-08-276-7/+7
* ocsp: Reject update times X509_cmp_time() cannot compareMounir IDRASSI2026-08-272-5/+68
* Restore the check for missing IV param in evp_cipher_asn1_to_param_exBernd Edlinger2026-08-274-3/+42
* update cms_pwri_kek_oob.der blob to use a 16 byte IV valueBernd Edlinger2026-08-271-0/+0
* .github/workflows: add openssl-4.0 and openssl-3.6 to CIMilan Broz2026-08-271-1/+13
* doc: clarify X509_NAME_ENTRY get_object/get_data memory semanticskovan2026-08-271-6/+6
* CI: skip rejection-path test under fuzzing buildsDaniel Kubec2026-08-271-0/+11
* Prepare for 3.0.23openssl-machine2026-08-253-3/+11
* Prepare for release of 3.0.22openssl-3.0.22openssl-machine2026-08-253-4/+4
* make updateopenssl-machine2026-08-252-31/+31
* Copyright year updatesopenssl-machine2026-08-2568-68/+68
* CHANGES.md, NEWS.md: update for 3.0.22Eugene Syromiatnikov2026-08-252-1/+147
* CHANGES.md, NEWS.md: reorder HollowByte change log record, add missing periodEugene Syromiatnikov2026-08-252-15/+16
* CHANGES.md: rephrase TLS 1.3 ticket lifetime cap change log recordEugene Syromiatnikov2026-08-251-9/+6
* ssl/record: lower the DTLS unprocessed_rcds queue limitMatt Caswell2026-08-243-7/+19
* Avoid full read buffer allocation when buffering DTLS recordsMatt Caswell2026-08-243-31/+87
* Fix heap buffer overflow (8-byte OOB write) in AES-WRAP-PAD unwrapDaniel Kubec2026-08-241-1/+8
* Add test for CVE-2026-63072Daniel Kubec2026-08-242-3/+103
* Fix unbounded cert cache growth in cmpNeil Horman2026-08-241-1/+14
* Add a test for restricting growth in cmp cert cacheNeil Horman2026-08-243-2/+359
* Fix Remote NULL deref in ossl_cmp_calc_protection() via crafted protectionAlgDaniel Kubec2026-08-221-1/+1
* Add test for CVE-2026-63076Daniel Kubec2026-08-221-0/+33
* cms: fix AuthEnvelopedData authAttrs tags and verify them as AEAD AADJakub Zelenka2026-08-217-5/+136
* file_store_any2obj.c: validate blob length before allocationAbel Thomas2026-08-211-4/+2
* test: cover CCM empty Final without a payload UpdateMounir IDRASSI2026-08-211-0/+184
* CCM: authenticate empty Final when payload Update is skippedMounir IDRASSI2026-08-211-3/+12
* Fix get_cert_by_subject_ex() to gracefully handle broken symlinks (but not on...Dr. David von Oheimb2026-08-191-13/+23
* Add tests for empty AEAD EVP_Cipher() finalizationMounir IDRASSI2026-08-191-0/+120
* Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADsBilly Brumley2026-08-192-7/+24
* Fix system resource leak in TerminalSocket()YZL0v3ZZ2026-08-191-0/+2
* Reject DSA parameters where N exceeds 512Simo Sorce2026-08-181-0/+7
* pkcs7: use PKCS7_get_octet_string in PKCS7_stream signed armAbel Thomas2026-08-182-1/+46
* README-FIPS: clarify provider and library cross-version compatibilityAnton Arapov2026-08-181-2/+8
* doc: FIPS provider is compatible with releases from 3.0 onwardsAnton Arapov2026-08-181-3/+6
* Fix ASN1_TYPE memory leak in asn1_multi()Greensi72026-08-141-1/+4
* cms: clear temporary key buffers on failureunjuno2026-08-143-5/+12
* Deal with riscv64 qemu-user stderr noiseViktor Dukhovni2026-08-131-0/+4
* .github/workflows: remove openssl-3.1, openssl-3.2 and openssl-3.3 from CI jobsMilan Broz2026-08-121-13/+1
* storemgmt: Validate msblob length before buffer allocationLoganaden Velvindron2026-08-121-0/+6