5 Releases published by 1 person

• openssl-3.5.1 OpenSSL 3.5.1

  published Jul 1, 2025

• openssl-3.4.2 OpenSSL 3.4.2

  published Jul 1, 2025

• openssl-3.3.4 OpenSSL 3.3.4

  published Jul 1, 2025

• openssl-3.2.5 OpenSSL 3.2.5

  published Jul 1, 2025

• openssl-3.0.17 OpenSSL 3.0.17

  published Jul 1, 2025

14 Pull requests opened by 10 people

• Implements: #27827 - RFC 8449 Record Size Limit for TLS

  #27916 opened Jun 27, 2025

• apps/lib/log.c: Add check for BIO_new()

  #27918 opened Jun 27, 2025

• demos/bio/sconnect.c: Add check for BIO_new()

  #27919 opened Jun 27, 2025

• fuzz/cmp.c: Correct the usages of BIO_new()

  #27920 opened Jun 27, 2025

• Use generated parameter parsing for KDFs

  #27923 opened Jun 30, 2025

• Fix provider encoder dispatch validation

  #27925 opened Jul 1, 2025

• Fixup non-optional use of IO::Socket::IP

  #27941 opened Jul 1, 2025

• Allow overlength strings

  #27942 opened Jul 1, 2025

• test/ml_kem_internal_test.c: Add EVP_MD_free() in the error path to a…

  #27946 opened Jul 2, 2025

• Add CI for backports to be run when respective branch label is set

  #27947 opened Jul 2, 2025

• If we have explictly specified propquery, we refetch digests for ML-KEM

  #27949 opened Jul 2, 2025

• Fix: Unsafe Text Processing Function Could Corrupt Data in apps/rehash.c

  #27952 opened Jul 3, 2025

• Fix `VC-WIN64-CLANGASM-ARM` target

  #27958 opened Jul 3, 2025

• Optimize with ossl un likely coveralls approach

  #27961 opened Jul 3, 2025

12 Issues closed by 7 people

• openssl 3.5 dev still reporting openssl-3.5.1-dev

  #27945 closed Jul 2, 2025

• Command Injection in /usr/lib/ssl/misc/CA.pl script

  #27526 closed Jul 1, 2025

• openssl crash SIGSEGV SEGV_MAPERR at ossl_sa_doall_arg

  #21527 closed Jul 1, 2025

• Facing memory allocation fail due to large amount of memory requested for HashTable in PEI phase while RSA context creation.

  #27831 closed Jun 30, 2025

• $SSLKEYLOGFILE log file should be created with 0600 permissions

  #27890 closed Jun 30, 2025

• c_rehash script does not check openssl executable correctly

  #27891 closed Jun 30, 2025

• Support building with external toolchain on Darwin

  #27922 closed Jun 29, 2025

• test_quic_multistream test failure on OS X 10.4 PowerPC when running on a G4

  #27356 closed Jun 28, 2025

• crypto/threads_pthread.c: compilation fails on RHEL 6 and SLES 11

  #26711 closed Jun 28, 2025

• Should the perl time:peice requirement be documented in CHANGES?

  #27187 closed Jun 28, 2025

• https://openssl-library.org/source/old doesn't link recent release including the 3.5 alpha/beta

  #27164 closed Jun 27, 2025

• Support setting parameters for a provider

  #17182 closed Jun 27, 2025

6 Issues opened by 6 people

• TLS 1.3 sends signature algorithm Server and Client behavior are inconsistent

  #27959 opened Jul 3, 2025

• Homebrew issue!

  #27950 opened Jul 2, 2025

• New mandatory test dependency on perl module IO::Socket::IP

  #27940 opened Jul 1, 2025

• C23 changes semantics for function declarators without prototypes

  #27938 opened Jul 1, 2025

• OpenSSL refuses to work with Certutil, IIS, and Microsoft Edge, and Remote Desktop

  #27928 opened Jul 1, 2025

• [bn] [riscv] Implement Montgomery multiplication assembly optimization for RV64GC

  #27926 opened Jul 1, 2025

52 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Add lock contention checking to our pthreads implementation

  #27884 commented on Jul 3, 2025 • 31 new comments

• Add lock contention log analyzer

  #27912 commented on Jul 3, 2025 • 18 new comments

• LMS verify

  #27885 commented on Jul 2, 2025 • 12 new comments

• Add SM2 implementation in generic riscv64 asm

  #25918 commented on Jul 2, 2025 • 8 new comments

• Enforce RFC5280 extension rules in CRL app and check for duplicate X509v3 extensions

  #27520 commented on Jun 30, 2025 • 8 new comments

• add note about EVP_PKEY in different libctxs

  #26309 commented on Jul 3, 2025 • 6 new comments

• Add NIST security categories for symmetric ciphers and digests

  #27612 commented on Jul 4, 2025 • 4 new comments

• Use secure memory allocation for PQC private key storage areas

  #27625 commented on Jul 3, 2025 • 3 new comments

• Initial attempt deprecating EVP_PKEY_ASN1_METHOD

  #27727 commented on Jul 3, 2025 • 2 new comments

• crypto/slh_dsa/slh_hash.c: Add check for EVP_MD_get_size()

  #27900 commented on Jul 3, 2025 • 1 new comment

• fix termination of `openssl speed` in both fips and non-fips

  #27872 commented on Jul 1, 2025 • 1 new comment

• Implement AES CFB128 with Intel AES-NI and VAES

  #26902 commented on Jul 1, 2025 • 1 new comment

• Add NULL dereference precondition in quic_post_write

  #27851 commented on Jun 27, 2025 • 1 new comment

• feat(x509): add -certopt ext_oid to show OIDs for known extensions

  #27201 commented on Jul 3, 2025 • 0 new comments

• feat: print platform certificate attributes

  #26606 commented on Jun 28, 2025 • 0 new comments

• fips: improve ecdsa_keygen_pairwise_test()

  #26108 commented on Jul 3, 2025 • 0 new comments

• fips: in RSA KEM always call rsa key check with protect 1

  #26061 commented on Jul 1, 2025 • 0 new comments

• fips: improve PCT for DH

  #25863 commented on Jun 28, 2025 • 0 new comments

• Fix incorrectly presented authorityCertIssuer

  #27370 commented on Jul 3, 2025 • 0 new comments

• Swich the logic to skip ARGON2 EVP tests to PREFIX rather than SUFFIX.

  #27402 commented on Jul 3, 2025 • 0 new comments

• Add URI Validation to x509v3

  #27448 commented on Jul 3, 2025 • 0 new comments

• ECH both sides now

  #27561 commented on Jul 2, 2025 • 0 new comments

• Add vectored io api: SSL_writev

  #27768 commented on Jun 30, 2025 • 0 new comments

• crypto/evp/signature.c: enable `openssl speed ML-DSA-{44,65,87} SLH-D…

  #27853 commented on Jul 1, 2025 • 0 new comments

• ktls: move ktls_enable() within ktls_start()

  #27908 commented on Jun 28, 2025 • 0 new comments

• SSL_poll() should re-issue SSL_shutdown() when object is

  #27909 commented on Jun 28, 2025 • 0 new comments

• Windows ARM64 crash on stack corruption when compiled in release

  #27030 commented on Jun 27, 2025 • 0 new comments

• installation failing with 3.0.16 openssl version on rocky8

  #26893 commented on Jun 27, 2025 • 0 new comments

• When I make install openssl 3.4.0 On MacOS 11 command “make HARNESS_JOBS=40 test TESTS=-test_afalg” report Error

  #26868 commented on Jun 27, 2025 • 0 new comments

• [Regression] Subtest 13.15-test_rsapss.t fails on NonStop ia64 under SPT threading

  #26737 commented on Jun 27, 2025 • 0 new comments

• [BUG] Build Breakage at 3.3.3 for PUT Model on NonStop

  #26721 commented on Jun 27, 2025 • 0 new comments

• On OS X 10.6 & 10.7 test_ocsp_cert_chain fails

  #27358 commented on Jun 29, 2025 • 0 new comments

• OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR settable with openssl cmp client

  #27888 commented on Jun 30, 2025 • 0 new comments

• Memory leaks in legacy provider loading/unloading

  #27378 commented on Jun 30, 2025 • 0 new comments

• 04-test_bio_dgram.t hangs on AIX PPC64

  #27899 commented on Jul 1, 2025 • 0 new comments

• The performance of Haproxy drops a lot when using OpenSSL 3.0 for higher number of threads

  #23388 commented on Jul 1, 2025 • 0 new comments

• Weird openssl speed behaviour

  #27855 commented on Jul 1, 2025 • 0 new comments

• Android support for devices with 16k pages

  #26913 commented on Jul 1, 2025 • 0 new comments

• OpenSSL 3.x EVP_PKEY_get_id returns incorrect value when loading a SM2 public key

  #26782 commented on Jul 2, 2025 • 0 new comments

• OPENSSL_init_crypto succeeds after failed provider activation even with CONF_MFLAGS_IGNORE_RETURN_CODES not set.

  #26995 commented on Jul 3, 2025 • 0 new comments

• ML-KEM digest fetching

  #27743 commented on Jul 3, 2025 • 0 new comments

• X509: Add support for directly checking leaf cert EKU

  #14218 commented on Jul 3, 2025 • 0 new comments

• Fix time_t arithmetic after 2038

  #17701 commented on Jul 1, 2025 • 0 new comments

• Improve post-2038 compatibility of time_t usage

  #17778 commented on Jul 1, 2025 • 0 new comments

• Fix BSAES operation when configured -DOPENSSL_AES_CONST_TIME

  #17993 commented on Jul 1, 2025 • 0 new comments

• Add client-side session caching

  #19687 commented on Jun 29, 2025 • 0 new comments

• Add Reproducible Error Injection (rebased)

  #21668 commented on Jul 1, 2025 • 0 new comments

• fix: restore missing --help in Configure, clean up output and show enabled/disabled flags, warn user of possible incorrect usage

  #22621 commented on Jul 4, 2025 • 0 new comments

• get_cert_by_subject : backward compatibility

  #24002 commented on Jun 30, 2025 • 0 new comments

• Enable RFC 7919 FFDHE groups for TLS 1.2 server

  #24551 commented on Jul 4, 2025 • 0 new comments

• DTLSv1.3 ack records

  #25119 commented on Jul 4, 2025 • 0 new comments

• Add threading support to the FIPS provider.

  #25537 commented on Jul 1, 2025 • 0 new comments