11 Pull requests opened by 8 people

• Add an server example.

  #24749 opened Jun 27, 2024

• The issue has been discovered by libFuzzer running on provider target.

  #24753 opened Jun 27, 2024

• feat: support the auditIdentity X.509v3 extension

  #24754 opened Jun 27, 2024

• Check sk_X509_value result before dereference

  #24760 opened Jun 28, 2024

• feat: Support the userNotice X.509v3 extension

  #24761 opened Jun 28, 2024

• x_attrib.c: Fix print_hex() function

  #24771 opened Jul 1, 2024

• Clarify elliptic curve docs for s_client/s_server

  #24774 opened Jul 1, 2024

• fuzz/decoder.c: Lower the limits on key checks

  #24781 opened Jul 2, 2024

• read lock store on ossl_method_store_do_all

  #24782 opened Jul 2, 2024

• os-zoo.yml: Cleanup unnecessary -Wno-switch-default

  #24787 opened Jul 3, 2024

• Fix incorrect sentence

  #24790 opened Jul 3, 2024

14 Issues closed by 6 people

• nmake test hang on test_comp without error

  #10393 closed Jul 4, 2024

• Open

  #24783 closed Jul 2, 2024

• add default cases to switch statements

  #24751 closed Jul 2, 2024

• issue with libssl with 3x version and authentication error with 1.1.1c version when deploying through aws codebuild,

  #24773 closed Jul 1, 2024

• May be an infinite loop occurs during the ossl_rsa_fips186_4_gen_prob_primes()?

  #24775 closed Jul 1, 2024

• [BUG] asn1_time_test started failing on NonStop as of 3.2

  #24767 closed Jul 1, 2024

• OSSL_PARAM_locate called ~500 times per session. is it ok?

  #22923 closed Jun 29, 2024

• -Werror missing from many unit tests

  #24757 closed Jun 28, 2024

• memory leak in OPENSSL_config

  #24729 closed Jun 27, 2024

• Provider activation can fail if HAVE_ATOMICS defined

  #22933 closed Jun 27, 2024

• TYPE_free() does not document that TYPE_free(NULL) does nothing

  #24675 closed Jun 27, 2024

• Forward port fixups from https://github.com/openssl/openssl/pull/24630 to master branch

  #24670 closed Jun 27, 2024

• OS Zoo CI currently broken

  #24739 closed Jun 27, 2024

• `apps/openssl.cnf` default is to not enforce TLS. Should default to: enforce TLS

  #24731 closed Jun 27, 2024

11 Issues opened by 11 people

• Performance degradation after OpenSSL 3.0.14 uptake

  #24789 opened Jul 3, 2024

• support OSSL_IMPLEMENT_GETAUXVAL for arm/ppc/s390x on musl libc on linux

  #24786 opened Jul 3, 2024

• Consider caching algorithmic improvement

  #24785 opened Jul 3, 2024

• have method to encode addition trust conditional for root certificates

  #24784 opened Jul 3, 2024

• OpenSSL 3.0.13 can't decrypt file encrypted with OpenSSL 1.1.1

  #24772 opened Jul 1, 2024

• Could OpenSSL send alerts when DTLS is over sctp?

  #24769 opened Jul 1, 2024

• Investigate Clusterfuzz heap buffer overflow

  #24768 opened Jun 29, 2024

• error during make : For bug reporting instructions, please see: <file:https:///usr/share/doc/gcc-13/README.Bugs>. ar: providers/common/der/libdefault-lib-der_rsa_sig.o: No such file or directory make[1]: *** [Makefile:22733: providers/libdefault.a] Error 1 make[1]: Leaving directory '/home/alexandre/Téléchargements/openssl' make: *** [Makefile:3731 : build_sw] Erreur 2

  #24766 opened Jun 29, 2024

• want to install openssl

  #24752 opened Jun 27, 2024

• The EVP_PKEY_derive() does not returns maximum size of the output buffer for ECDH with X963KDF

  #24750 opened Jun 27, 2024

• Use of RSA_test_flags generates Segmentation fault

  #24747 opened Jun 27, 2024

112 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• add ech-api.md

  #24738 commented on Jul 2, 2024 • 101 new comments

• read OPENSSLDIR from registry

  #24450 commented on Jul 1, 2024 • 26 new comments

• Fips indicator cb

  #24623 commented on Jul 4, 2024 • 24 new comments

• Deprecate SXNET, some old NETSCAPE data types (PR 15464)

  #16549 commented on Jul 3, 2024 • 6 new comments

• add support for TLS 1.3 OCSP multi-stapling for server certs

  #20945 commented on Jul 2, 2024 • 6 new comments

• Latent bugs due to slight misuse of CRYPTO_THREAD locking APIs

  #24517 commented on Jul 2, 2024 • 5 new comments

• Support dtls 1.3 downgrade mechanism

  #23320 commented on Jun 28, 2024 • 5 new comments

• Use the new hashtable for core_namemap

  #24504 commented on Jul 3, 2024 • 5 new comments

• Tsan data race between sa_doall and ossl_sa_set

  #24672 commented on Jul 3, 2024 • 4 new comments

• Add/design SSL_writev

  #20918 commented on Jun 28, 2024 • 4 new comments

• Add config option to limit MDs used in signatures

  #19084 commented on Jun 30, 2024 • 3 new comments

• `req` app: `-addext` option does not combine with other options adding X.509v3 extensions

  #11169 commented on Jul 4, 2024 • 3 new comments

• Client side cert validation by default

  #15216 commented on Jul 2, 2024 • 3 new comments

• TLS 1.0/1.1 and DTLS 1.0 formally deprecated

  #15335 commented on Jul 2, 2024 • 3 new comments

• SSL_new() fails for QUIC and OPENSSL_THREADS_NONE

  #22982 commented on Jun 27, 2024 • 3 new comments

• Allow MinGW build to use BCryptGenRandom like MSVC build [master]

  #13882 commented on Jul 3, 2024 • 2 new comments

• apps: Enable TCP Keepalive for Clients

  #17289 commented on Jul 3, 2024 • 2 new comments

• [design] Functions for explicitly fetched signature algorithms

  #22672 commented on Jul 3, 2024 • 2 new comments

• Fix possible double-free in pkcs7 add_attribute function

  #22721 commented on Jul 3, 2024 • 2 new comments

• DTLS 1.3: Update epochs when changing key and cipher state

  #23229 commented on Jun 28, 2024 • 2 new comments

• Separate winsock.h inclusion, add more direct includes

  #14344 commented on Jul 3, 2024 • 2 new comments

• X509: Add support for directly checking leaf cert EKU

  #14218 commented on Jul 3, 2024 • 2 new comments

• DTLS 1.3: Refactor some dtls msg header parsing

  #24607 commented on Jun 28, 2024 • 2 new comments

• Replace and Deprecate TS_VERIFY_CTX Functions and Add Documentation

  #24701 commented on Jul 2, 2024 • 2 new comments

• How to deprecate command options?

  #10956 commented on Jun 27, 2024 • 2 new comments

• [3.4] 70-test_quic_tserver.t transient failure on NonStop in thread model

  #24561 commented on Jun 30, 2024 • 2 new comments

• The performance of Haproxy drops a lot when using OpenSSL 3.0 for higher number of threads

  #23388 commented on Jun 27, 2024 • 2 new comments

• Append check for funcrion ossl_quic_rxfc_on_retire()

  #24646 commented on Jul 1, 2024 • 2 new comments

• Move CMP outside libcrypto

  #18588 commented on Jul 4, 2024 • 1 new comment

• Improve post-2038 compatibility of time_t usage

  #17778 commented on Jun 30, 2024 • 1 new comment

• [WIP] Test with various crypto engines

  #16749 commented on Jul 3, 2024 • 1 new comment

• providers: SM2 support ECDH

  #16588 commented on Jul 3, 2024 • 1 new comment

• Prevent Clang from emitting atomic libcalls

  #16584 commented on Jul 3, 2024 • 1 new comment

• Fixes #24545: Allow shared iOS builds

  #24649 commented on Jul 3, 2024 • 1 new comment

• Add NULL checks to public digest APIs

  #15653 commented on Jul 3, 2024 • 1 new comment

• [WIP] APPS: break out a number of routines from apps/lib/apps.c, and clean up test/build.info

  #15342 commented on Jul 3, 2024 • 1 new comment

• [WIP] Add RedHat keyfile-corpus as an external test

  #15188 commented on Jul 3, 2024 • 1 new comment

• WIP: ERR: clean up and extend error printing, unify with cmp_util.c

  #14280 commented on Jul 3, 2024 • 1 new comment

• Correct check_chain() on X509_V_FLAG_X509_STRICT (-x509_strict option)

  #13832 commented on Jul 3, 2024 • 1 new comment

• x509_vfy.c: Make chain building more intuitive, flexible, and complete

  #13748 commented on Jul 3, 2024 • 1 new comment

• Provide clarification of the necessary names of provided algorithms

  #20422 commented on Jul 1, 2024 • 1 new comment

• add Apple universal libraries build configuration.

  #24330 commented on Jul 4, 2024 • 1 new comment

• Design document of using opaque object as symmetric key

  #21573 commented on Jul 1, 2024 • 1 new comment

• Add PKCS12_check_version API

  #22087 commented on Jul 1, 2024 • 1 new comment

• Add EDDSA FIPS self tests.

  #22112 commented on Jul 2, 2024 • 1 new comment

• Fix an issue where a dtls 1.3 server keeps sending NewSessionTickets

  #22402 commented on Jun 30, 2024 • 1 new comment

• Add RSA_PKCS1_WITH_TLS_PADDING support for legacy

  #22566 commented on Jun 29, 2024 • 1 new comment

• Update EVP_PKEY_decapsulate.pod

  #24302 commented on Jul 1, 2024 • 1 new comment

• Deprecate `SSL_get_peer_certificate()`

  #24296 commented on Jun 28, 2024 • 1 new comment

• Fix error handling in ASN1_mbstring_ncopy

  #23165 commented on Jul 1, 2024 • 1 new comment

• Grammar/Typo Fixes

  #24145 commented on Jul 3, 2024 • 1 new comment

• fix error: relocation truncated to fit: R_RISCV_JAL against symbol `AES_set_encrypt_key'.

  #23617 commented on Jun 27, 2024 • 1 new comment

• Change fipsinstall so that it saves the 'status indicator' by default

  #23689 commented on Jul 1, 2024 • 1 new comment

• get_cert_by_subject : backward compatibility

  #24002 commented on Jul 4, 2024 • 1 new comment

• Unable to run asm code on OpenBSD (arm64)

  #24137 commented on Jun 30, 2024 • 1 new comment

• WIP: bn/bn_mont.c: make BN_MONT_CTX_set constant-time.

  #7718 commented on Jun 28, 2024 • 1 new comment

• fuzzer-additions: Safety check when parsing fuzzer arguments and an e…

  #7454 commented on Jun 28, 2024 • 1 new comment

• WIP: NOTES.WIN: Add a section on import libraries

  #7450 commented on Jun 28, 2024 • 1 new comment

• Support ZUC and 128-EEA3 algorithm

  #6886 commented on Jun 28, 2024 • 1 new comment

• Added BN_count_low_zero_bits method

  #6148 commented on Jun 28, 2024 • 1 new comment

• Fix fibre stack to prevent memory corruption if stack overflows.

  #6017 commented on Jun 28, 2024 • 1 new comment

• [WIP, Parked] Configure: rethink target resolving, take 2

  #4854 commented on Jun 28, 2024 • 1 new comment

• WIP: Access OPENSSL_ia32cap_P via 32-bit words

  #2215 commented on Jun 28, 2024 • 1 new comment

• Add X509_STORE_CTX_set0_store()

  #2187 commented on Jun 28, 2024 • 1 new comment

• Add support for asynchronous session lookup

  #1588 commented on Jun 28, 2024 • 1 new comment

• Attempt to address charset handling issues

  #1518 commented on Jun 28, 2024 • 1 new comment

• Add 'copy' and 'move' Configuration Values for DNS Subject Alternative Names

  #341 commented on Jun 28, 2024 • 1 new comment

• Add options for setting start, end dates and signtime in openssl command

  #205 commented on Jun 28, 2024 • 1 new comment

• `openssl x509 -text` output can contain control characters

  #15254 commented on Jul 1, 2024 • 1 new comment

• Fill in public key info from private key info?

  #16267 commented on Jul 1, 2024 • 1 new comment

• Performance measurements

  #16791 commented on Jun 30, 2024 • 1 new comment

• memory leak SSL_connect 3.2.x

  #24564 commented on Jun 30, 2024 • 1 new comment

• PSK mode without DHE never reached

  #20129 commented on Jun 29, 2024 • 1 new comment

• X509: inconsistent treatment of trust anchors on strict chain checking

  #20256 commented on Jun 29, 2024 • 1 new comment

• Adding a config option in openssl.cnf to enable SHA-1 signature creation and verification

  #17662 commented on Jun 27, 2024 • 1 new comment

• Support additional (new) threading models on NonStop

  #24175 commented on Jun 27, 2024 • 1 new comment

• Severe efficiency degradation of credential loading in comparison to 1.1.1

  #18814 commented on Jun 27, 2024 • 1 new comment

• `SSL_get_ex_data_X509_STORE_CTX_idx` does not respect `OSSL_LIB_CTX`

  #24732 commented on Jun 27, 2024 • 1 new comment

• Handle unused parameters in a systematic way

  #12654 commented on Jul 3, 2024 • 1 new comment

• WIP: Additional tests for CVE-2020-1967

  #11600 commented on Jul 3, 2024 • 1 new comment

• ASYNC: Remove funcargs copy of async function

  #11341 commented on Jul 4, 2024 • 1 new comment

• s_client: fix -starttls irc

  #11327 commented on Jul 3, 2024 • 1 new comment

• Remove potential usage of CRT object across DLL boundaries

  #10298 commented on Jul 3, 2024 • 1 new comment

• WIP: Bitflag based TLS Signature Algorithm Processing

  #10185 commented on Jul 3, 2024 • 1 new comment

• WIP: Template fipsprov

  #10124 commented on Jul 3, 2024 • 1 new comment

• WIP: util/find-doc-nits: enhance to find option inconsistencies between sections

  #10076 commented on Jul 3, 2024 • 1 new comment

• WIP: Cryptofuzz tests integration

  #9956 commented on Jul 3, 2024 • 1 new comment

• WIP: Remove warnings as Errors on win32 builds

  #9942 commented on Jul 3, 2024 • 1 new comment

• WIP: rsa/rsa_ossl.c: make non-smooth RSA constant-time.

  #7719 commented on Jun 28, 2024 • 1 new comment

• WIP: Fix keyCertSign checks

  #7918 commented on Jun 28, 2024 • 1 new comment

• allow num_supp to be 0 in tls1_shared_group

  #8115 commented on Jun 28, 2024 • 1 new comment

• Introduce OPENSSL_INIT_NO_PINSHARED and pinshared-nodelete options.

  #8420 commented on Jun 28, 2024 • 1 new comment

• WIP: Make most perl script have a common style

  #8525 commented on Jun 28, 2024 • 1 new comment

• Documentation update to reflect changes to RAND_METHOD and BIO_set_cipher

  #8668 commented on Jul 3, 2024 • 1 new comment

• Return from computational exception signal handler

  #8908 commented on Jul 3, 2024 • 1 new comment

• Add no-store configuration option for UEFI

  #9206 commented on Jul 3, 2024 • 1 new comment

• s_server: Support reading HTTP request from early data

  #16055 commented on Jul 3, 2024 • 0 new comments

• Remove zlib-dynamic config option (PR 15650)

  #16544 commented on Jul 3, 2024 • 0 new comments

• Updates DTLSv1_listen to support DTLS 1.3 client hellos.

  #22985 commented on Jun 27, 2024 • 0 new comments

• Deprecated BIO_f_zlib (PR 15625)

  #16545 commented on Jul 3, 2024 • 0 new comments

• Deprecate SSL_COMP_xxx API (PR 16547)

  #16547 commented on Jul 3, 2024 • 0 new comments

• DTLS 1.3: Fix and check uses of SSL3_HM_HEADER_LENGTH for dtls connections

  #24430 commented on Jun 27, 2024 • 0 new comments

• Use 64-bit connection epoch for dtls1.3 and do not allow it to wrap.

  #23553 commented on Jun 27, 2024 • 0 new comments

• riscv: Fix cpuid_obj asm checks for sm4/sm3

  #24486 commented on Jul 3, 2024 • 0 new comments

• Support Encrypted Client Hello (formerly known as ESNI)

  #7482 commented on Jun 28, 2024 • 0 new comments

• DTLS 1.3

  #13900 commented on Jun 28, 2024 • 0 new comments

• Base 64 decoding truncation

  #24728 commented on Jun 28, 2024 • 0 new comments

• Dtls13 encrypt sequence numbers

  #23511 commented on Jun 27, 2024 • 0 new comments

• Add OIDs used by Wi-SUN

  #23428 commented on Jul 1, 2024 • 0 new comments

• DTLS 1.3: ACK records handling

  #24699 commented on Jun 27, 2024 • 0 new comments

• Implement functionality for direct use of composite signature algorithms

  #23416 commented on Jul 3, 2024 • 0 new comments

• Save frame pointer in sha1.

  #9603 commented on Jul 3, 2024 • 0 new comments