aboutsummaryrefslogtreecommitdiffstats
path: root/fuzz
Commit message (Collapse)AuthorAgeFilesLines
* Add OSSL_ECHSTORE_read_echconfiglist fuzzerGreensi72026-07-232-0/+104
| | | | | | | | | | | | | | | Fuzz OSSL_ECHSTORE_read_echconfiglist with raw fuzzer input in stage 1. Then fixup the starting bytes to reach deeper code withotu relying only on corpus. Fixup is done for binary encoding only (not base64). Assisted-by: ChatGPT:gpt-5.5 Reviewed-by: Milan Broz <[email protected]> Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Norbert Pocs <[email protected]> MergeDate: Thu Jul 23 13:57:54 2026 (Merged from https://github.com/openssl/openssl/pull/32021)
* quic: report SRTM entry match status via an output argumentNikola Pajkovsky2026-07-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | Coverity (CID 1696969, CHECKED_RETURN) flagged the ignored return value of ossl_quic_srtm_remove() in ch_enqueue_retire_conn_id(). The return value could not be usefully checked because 0 was overloaded to mean both "no matching entry" and a genuine internal failure (alloc_failed or an lhash consistency error). Give the return value a single meaning (1 on success, 0 on internal error) and report whether a matching entry was found through a new uint8_t *match output argument, which may be NULL if the caller does not need it. Resolved: https://scan5.scan.coverity.com/#/project-view/65138/10222?selectedIssue=1696969 Signed-off-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Bob Beck <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Neil Horman <[email protected]> MergeDate: Tue Jul 21 09:24:45 2026 (Merged from https://github.com/openssl/openssl/pull/31974)
* Integrate mfail functionality to fuzz testsJakub Zelenka2026-07-152-94/+165
| | | | | | | | | | | | | | Run the fuzz corpora under mfail in addition to the normal path, so the existing inputs also exercise malloc-failure handling. The fuzz.pl harness sizes the mfail runs to a time budget and, on a leak, bisects down to the exact file and injection point. Adds a budgeted asan/ubsan CI job to run it. Assisted-by: Claude:claude-opus-4-6 Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> MergeDate: Wed Jul 15 16:01:43 2026 (Merged from https://github.com/openssl/openssl/pull/30944)
* Fix fuzz test to handle memory failuresJakub Zelenka2026-07-1526-399/+471
| | | | | | | | | | It also fixes related memory leaks and removes extensive asserts that should not be present in fuzzy tests. Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> MergeDate: Wed Jul 15 16:01:42 2026 (Merged from https://github.com/openssl/openssl/pull/30944)
* fuzz/provider.c: check evp##_up_ref return value in collect_##evpEugene Syromiatnikov2026-07-021-2/+5
| | | | | | | | | | | | | | | Coverity has reported an unchecked result of an evp##_up_ref call that is checked elsewhere. Rewrite the collect routine to try to do the up_ref first, and then call free if push doesn't succeed. Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1695451 Resolves: https://scan5.scan.coverity.com/#/project-view/65248/10222?selectedIssue=1695454 Fixes: f3b988dc2951 "Add provider fuzzer" Reviewed-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Paul Dale <[email protected]> MergeDate: Thu Jul 2 07:26:22 2026 (Merged from https://github.com/openssl/openssl/pull/31792)
* Fix broken hex data by reformattingNorbert Pocs2026-06-032-4990/+626
| | | | | | | | | | | | | | | | The clang format broke some data in hexadecimal format. To make the tool obedient, the trailing comma needs to be removed, then it interpretes the data differently and therefore does not reformat it. The format can then be changed to the correct form. Fixes: https://github.com/openssl/project/issues/1959 Signed-off-by: Norbert Pocs <[email protected]> Reviewed-by: Milan Broz <[email protected]> Reviewed-by: Eugene Syromiatnikov <[email protected]> MergeDate: Wed Jun 3 07:46:14 2026 (Merged from https://github.com/openssl/openssl/pull/31350)
* Fix clang-format: remove leading space from err labelOwenSanzas2026-03-111-1/+1
| | | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> MergeDate: Wed Mar 11 20:58:54 2026 (Merged from https://github.com/openssl/openssl/pull/30331)
* Remove unnecessary comments and extra blank lineOwenSanzas2026-03-111-3/+0
| | | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> MergeDate: Wed Mar 11 20:58:51 2026 (Merged from https://github.com/openssl/openssl/pull/30331)
* Remove unnecessary caps in key/iv initialization loopsOwenSanzas2026-03-111-2/+2
| | | | | | | | | | | Drop the `&& i < 16` and `&& i < 8` guards that were carried over from the original fixed-size arrays. The loops now fill the entire heap-allocated buffer, with values wrapping naturally via unsigned char. Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> MergeDate: Wed Mar 11 20:58:49 2026 (Merged from https://github.com/openssl/openssl/pull/30331)
* Refactor do_evp_cipher error paths to use goto errOwenSanzas2026-03-111-38/+20
| | | | | | | | | | Initialize key, iv, and ctx to NULL at declaration and consolidate all cleanup into a single err label, as suggested by @npajkovsky. Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> MergeDate: Wed Mar 11 20:58:47 2026 (Merged from https://github.com/openssl/openssl/pull/30331)
* fuzz/provider.c: fix API call order in do_evp_cipher and do_evp_mdOwenSanzas2026-03-111-7/+43
| | | | | | | | | | | | | | | | | | | | | | | Both do_evp_cipher() and do_evp_md() call the parameter-setting function (EVP_CIPHER_CTX_set_params / EVP_MD_CTX_set_params) before initializing the algorithm context (EVP_EncryptInit_ex2 / EVP_DigestInit_ex2). Since the context has no algorithm associated at that point, set_params always returns 0 and the function early-returns, making the cipher and digest paths dead code (~20% of all fuzzer inputs). Fix by swapping the call order so the context is initialized first. Additionally, heap-allocate key/iv buffers sized to the cipher's actual key and IV length, since some ciphers (e.g. DES-EDE3-OFB) require buffers larger than the previous fixed 16/8-byte arrays. Fixes #30281 Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> MergeDate: Wed Mar 11 20:58:44 2026 (Merged from https://github.com/openssl/openssl/pull/30331)
* Copyright year updatesopenssl-machine2026-03-104-4/+4
| | | | | | | Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Eugene Syromiatnikov <[email protected]> MergeDate: Tue Mar 10 14:37:54 2026 Release: yes
* Removes fixed version TLS methods.Frederik Wedel-Heinen2026-02-242-2/+2
| | | | | | | | | | | | Fixes #28343 Reviewed-by: Kurt Roeckx <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Neil Horman <[email protected]> MergeDate: Tue Feb 24 21:19:39 2026 (Merged from https://github.com/openssl/openssl/pull/30128)
* update fuzz/corpora submoduleNikola Pajkovsky2026-01-191-0/+0
| | | | | | | | Signed-off-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Norbert Pocs <[email protected]> Reviewed-by: Kurt Roeckx <[email protected]> (Merged from https://github.com/openssl/openssl/pull/29670)
* Add an OID for "id-alg-hss-lms-hashsig"slontis2026-01-131-1/+2
| | | | | | | | Reviewed-by: Dmitry Belyavskiy <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> MergeDate: Tue Jan 13 10:13:35 2026 (Merged from https://github.com/openssl/openssl/pull/29599)
* fuzz/cmp.c: Correct the usages of BIO_new()Jiasheng Jiang2026-01-121-1/+14
| | | | | | | | | | | | | | | Use BIO_free() to free "in" if error occurs to avoid memory leak. Moreover, add check for "out" to avoid NULL pointer dereference. Also replace OPENSSL_assert with return. Fixes: e599d0a ("Add CMP fuzzing to fuzz/cmp.c, including a couple of helpers in crypto/cmp/") Signed-off-by: Jiasheng Jiang <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Frederik Wedel-Heinen <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> MergeDate: Mon Jan 12 18:40:14 2026 (Merged from https://github.com/openssl/openssl/pull/27920)
* Add PKCS12 fuzzerHeath Dutton🕴️2026-01-122-2/+82
| | | | | | Reviewed-by: Kurt Roeckx <[email protected]> Reviewed-by: Paul Dale <[email protected]> (Merged from https://github.com/openssl/openssl/pull/29572)
* fuzz/provider.c: Add check for OPENSSL_malloc() to avoid potential NULL ↵Jiasheng Jiang2026-01-101-0/+73
| | | | | | | | | | | | | | pointer dereference Add check for the return value of OPENSSL_malloc() to avoid potential NULL pointer dereference. Fixes: f3b988d ("Add provider fuzzer") Signed-off-by: Jiasheng Jiang <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Frederik Wedel-Heinen <[email protected]> Reviewed-by: Neil Horman <[email protected]> (Merged from https://github.com/openssl/openssl/pull/27868)
* Update documentation using enable-ssl3 Configure flagsAndrew Dinh2025-12-231-6/+4
| | | | | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Viktor Dukhovni <[email protected]> (Merged from https://github.com/openssl/openssl/pull/29338)
* 4.0-POST-CLANG-FORMAT-WEBKIT4.0-POST-CLANG-FORMAT-WEBKITBob Beck2025-12-0925-744/+5376
| | | | | | | Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Nikola Pajkovsky <[email protected]> (Merged from https://github.com/openssl/openssl/pull/29242)
* Reduce Max number of commands handled per fuzzer pass in quic-lcidm.Neil Horman2025-10-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | We've gotten a few recent reports of a hang in the quic-lcidm fuzzer: https://issues.oss-fuzz.com/issues/448510502 It looks pretty straightforward (I think). The fuzzer input buffer is used in this particular case to randomly issue commands to the lcidm hash table (add/delete/query/flush/etc). The loop for the command processing (based on the input buffer), is limited to 10k commands. However the fuzzer will on occasion provide very large buffers (500k) which easily saturate that limit. If the input buffer happens to do something like get biased toward mostly additions, we wind up with a huge hashtable that has to constantly grow and rehash, which we've seen leads to timeouts in the past. Most direct fix I think here, given that this is something of an artificial failure in the fuzzer, is to simply clamp the command limit more. Fixes openssl/project#1664 Reviewed-by: Kurt Roeckx <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28724)
* hashtable: add option to disable RCU locksNikola Pajkovsky2025-10-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | a new config option _no_rcu_ is added into HT_CONFIG. When _no_rcu_ is set then hashtable can be guarded with any other locking primitives, and behives as ordinary hashtable. Also, all the impact of the atomics used internally to the hash table was mitigated. RCU performance # INFO: @ test/lhash_test.c:747 # multithread stress runs 40000 ops in 40.779656 seconds No RCU, guarded with RWLOCK # INFO: @ test/lhash_test.c:747 # multithread stress runs 40000 ops in 36.976926 seconds Signed-off-by: Nikola Pajkovsky <[email protected]> Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Neil Horman <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28677)
* Add util/codespell-check.sh and run itBob Beck2025-09-262-4/+4
| | | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Richard Levitte <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28639)
* Copyright year updatesopenssl-machine2025-09-0219-19/+19
| | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Saša Nedvědický <[email protected]> Release: yes
* Fix failure checking on rcu_read_lockNeil Horman2025-08-091-1/+2
| | | | | | | | | | | | | | | | | | | | | | during memfail testing: https://github.com/openssl/openssl/actions/runs/16794088536/job/47561223902 We get lots of test failures in ossl_rcu_read_lock. This occurs because we have a few cases in the read lock path that attempt mallocs, which, if they fail, trigger an assert or a silent failure, which isn't really appropriate. We should instead fail gracefully, by informing the caller that the lock failed, like we do for CRYPTO_THREAD_read_lock. Fortunately, these are all internal apis, so we can convert ossl_rcu_read_lock to return an int indicating success/failure, and fail gracefully during the test, rather than hitting an assert abort. Fixes openssl/project#1315 Reviewed-by: Paul Yang <[email protected]> Reviewed-by: Dmitry Belyavskiy <[email protected]> Reviewed-by: Paul Dale <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28195)
* apps, fuzz, providers: use array memory (re)allocation routinesEugene Syromiatnikov2025-08-082-2/+2
| | | | | | | | | | | Co-Authored-by: Alexandr Nedvedicky <[email protected]> Signed-off-by: Eugene Syromiatnikov <[email protected]> Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Neil Horman <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28059)
* fuzz/dtlsserver.c: Remove incorrect ifdef guardMichael Baentsch2025-07-301-3/+0
| | | | | | | Reviewed-by: Kurt Roeckx <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/28102)
* Implement KEMRecipientInfo (RFC9629) in CMSDaniel Van Geest2025-07-301-0/+2
| | | | | | | | | | | | | | | | | Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/27681)
* Add HKDF algorithms with fixed digests.Daniel Van Geest2025-07-101-0/+3
| | | | | | | | | | | | | | | Add HKDF-SHA256, HKDF-SHA384 and HKDF-SHA512 which are versions of HKDF that have the digest pre-set. The digest cannot be changed for contexts of these types. RFC 8619 defines algorithm identifiers for these combinations. These algorithm identifiers will be used in future features, e.g. KEMRecipientInfo. Reviewed-by: Shane Lontis <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Paul Dale <[email protected]> (Merged from https://github.com/openssl/openssl/pull/27247)
* fuzz: Silence warnings on Win64 buildsTomas Mraz2025-07-0223-48/+49
| | | | | | Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Neil Horman <[email protected]> (Merged from https://github.com/openssl/openssl/pull/27806)
* Add return check to BIO_new, SSL_CTX_new and EVP_PKEY_newicy172025-06-201-1/+10
| | | | | | Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Matt Caswell <[email protected]> (Merged from https://github.com/openssl/openssl/pull/27829)
* Copyright year updatesopenssl-machine2025-03-122-2/+2
| | | | | | Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Release: yes
* fix slh-dsa incorrect prediction of result codeNeil Horman2025-02-251-1/+1
| | | | | | | | | | | | | | | | | The slh_dsa fuzzer predicts failure in EVP_message_sign_init in the event we pass a context_string param of more than 255 bytes. That makes for an accurate prediction, but only if we actually create the param. augment the setting of exepct_rc_init to be determined not only by our allocation of a > 255 byte message, but also on selector bit 1, which determines if we create the parameter at all. Fixes https://oss-fuzz.com/testcase-detail/4807793999937536 Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Paul Dale <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26884)
* fix: add OOM handler for x509 fuzz testBurkov Egor2025-02-251-0/+4
| | | | | | | | CLA: trivial Reviewed-by: Tom Cosgrove <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26830)
* separate intval into separate variable in OSSL_PARAMSNeil Horman2025-02-221-5/+5
| | | | | | | | | | construction of int params holds a pointer to an int rather than an int value, so we need to use separate variables when constructing separate int params. Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Tim Hudson <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26851)
* Fix slh-dsa fuzzer on invalid param inputsNeil Horman2025-02-221-1/+16
| | | | | | | | | | | | | | | | | | oss-fuzz issue: https://issues.oss-fuzz.com/issues/397734693 Fails because the fuzzer occasionaly provides inputs which drives the fuzzer to create an octet-string for the context_string param which violates the 255 byte constraint documented on that parameter. Fix it by detecting that condition, expecting failure in the call to EVP_sign_message_init, and bailing out when it occurs. Fixes openssl/project#1109 Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Tim Hudson <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26851)
* Initial slh-dsa fuzzerNeil Horman2025-02-182-0/+611
| | | | | | | | | | | | | | | Current preforms the following operations 1) Generates arbitrary key pairs 2) Generates key pairs with parameters (both correct and incorrect) based on fuzzer input buffer 3) Exports and re-imports keys, confirming validity 4) Preforms Sign and Verify operations with optional parameters based on fuzzer input buffer Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26708)
* Add quic-server fuzz test. Also update fuzz corpora submodule.Andrew Dinh2025-02-172-2/+268
| | | | | | Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Neil Horman <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26514)
* Simplify the QUIC time override handlingMatt Caswell2025-02-171-1/+1
| | | | | | | | | | Centralise the storage of the override in the QUIC_ENGINE rather than in the QUIC_CONNECTION. We can now set the override on any type of QUIC SSL object as needed. Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Viktor Dukhovni <[email protected]> (Merged from https://github.com/openssl/openssl/pull/25457)
* Add an initial ML-DSA fuzzerAndrew Dinh2025-02-153-0/+696
| | | | | | | | | | | | | | | | Add an initial version of an ML-DSA fuzzer. Exercises various ML-DSA appropriate APIs. Currently it is able to randomly: 1. Attempt to create raw public private keys of various valid and invalid sizes 2. Generate legitimate keys of various sizes using the keygen api 3. Perform sign/verify operations using real generated keys 4. Perform digest sign/verify operations using real generated keys 5. Do an export and import of a key using todata/fromdata 6. Do a comparison of two equal and unequal keys Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26685)
* Update corpora to include ml-kem seed corpusNeil Horman2025-02-142-38/+19
| | | | | | Reviewed-by: Viktor Dukhovni <[email protected]> Reviewed-by: Tim Hudson <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26657)
* Add an inital ML-KEM fuzzerNeil Horman2025-02-142-0/+705
| | | | | | | | | | | | | | | | | | | | | | | Add an inital version of an ML-KEM fuzzer. Exercises various ML-KEM appropriate apis, as a fuzzer does. Currently it is able to randomly: 1) Attempt to create raw public private keys of various valid and invalid sizes 2) Generate legitimate keys of various sizes using the keygen api 3) Preform encap/decap operations using real generated keys 4) Do a shared secret derivation using 2 keys 5) Do an export and import of a key using todata/fromdata 6) Do a comparison of two equal and unequal keys Its not much to start, but it should be fairly extensible Reviewed-by: Viktor Dukhovni <[email protected]> Reviewed-by: Tim Hudson <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26657)
* Check returns of sk_X509_CRL_push and handle appropriately.Frederik Wedel-Heinen2025-01-241-2/+2
| | | | | | Reviewed-by: Dmitry Belyavskiy <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26234)
* Tweak case of [fs] variant letter in SLH-DSA algorithmsViktor Dukhovni2025-01-111-24/+24
| | | | | | Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Tim Hudson <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26359)
* Check returns of various sk_*_push functionsFrederik Wedel-Heinen2025-01-081-4/+3
| | | | | | | | | | | | Check returns of sk_POLICY_MAPPING_push, sk_GENERAL_NAME_push, sk_ACCESS_DESCRIPTION_push, sk_X509_push, sk_X509_NAME_push, sk_OPENSSL_CSTRING_push, sk_SCT_push, sk_DIST_POINT_push, sk_OSSL_CMP_CRLSTATUS_push, sk_ASN1_UTF8STRING_push and sk_ASN1_OBJECT_push and handle appropriately. Reviewed-by: Saša Nedvědický <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26240)
* Some PQ-related CSOR OIDsViktor Dukhovni2025-01-071-1/+34
| | | | | | | | Reviewed-by: Tim Hudson <[email protected]> Reviewed-by: Paul Dale <[email protected]> Reviewed-by: Matt Caswell <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/26321)
* feat: add TCG / platform certificate OIDsJonathan M. Wilbur2024-09-051-0/+130
| | | | | | Reviewed-by: Viktor Dukhovni <[email protected]> Reviewed-by: Tomas Mraz <[email protected]> (Merged from https://github.com/openssl/openssl/pull/25312)
* Copyright year updatesTomas Mraz2024-09-057-7/+7
| | | | | Reviewed-by: Neil Horman <[email protected]> Release: yes
* fix: alias auditEntity OIDJonathan M. Wilbur2024-08-261-2/+1
| | | | | | | Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Matt Caswell <[email protected]> (Merged from https://github.com/openssl/openssl/pull/24754)
* feat: support auditIdentity X.509v3 extensionJonathan M. Wilbur2024-08-261-0/+1
| | | | | | | Reviewed-by: Tomas Mraz <[email protected]> Reviewed-by: Neil Horman <[email protected]> Reviewed-by: Matt Caswell <[email protected]> (Merged from https://github.com/openssl/openssl/pull/24754)
generated by cgit (git 2.51.2) at 2026-10-25 16:06:06 +0100