All pull requests

Pull requests

• Explicitly block a small set of intermediates

  #3688·torben-hansen opened Oct 23, 2026Contributor·

  ·
  4

• [ci] fix: Make s_client TLS 1.1 integration tests self-contained

  #3687·justsmth opened Oct 23, 2026Contributor·

  ·
  4

• Zeroise on Windows for all build mode types

  #3684·torben-hansen opened Oct 22, 2026Contributor·

  ·
  2

• delocate: handle .set aliases inside relro sections

  #3681·justsmth opened Oct 22, 2026Contributor·

  ·
  2

• Fix PKCS12 password prompt test isolation on OpenBSD

  #3680·justsmth opened Oct 22, 2026Contributor·

  ·
  4

• [FIPS 4.x] Keep AArch64 Curve25519 tables in the macOS integrity boundary

  #3676·nebeid opened Oct 20, 2026Contributor·

  ·
  2

• [FIPS 2026-06] Keep AArch64 Curve25519 tables in the macOS integrity boundary

  #3677·nebeid opened Oct 20, 2026Contributor·

  ·
  3

• Route SSLBuffer and ERR allocations through custom allocators

  #3675·nhatnghiho opened Oct 20, 2026Contributor·

  ·
  13

• Add overflow checks to a2i/PEM/name/TXT_DB parsers

  #3673·sgmenda opened Oct 19, 2026Contributor·

  ·
  4

  

• Pin RFC 6125 CN-fallback behavior for duplicate SANs

  #3668·sgmenda opened Oct 19, 2026Contributor·

  ·
  2

  

• Freeze mainline ABI against AWS-LC-FIPS 5 until 6.0.0

  #3667·WillChilds-Klein opened Oct 19, 2026Contributor·

  ·
  2

• tool-openssl: add password-based key derivation to openssl enc

  #3665·PlasmaIntec opened Oct 16, 2026Contributor·8 tasks·

  ·
  26

• tool-openssl: add openssl rand subcommand

  #3664·PlasmaIntec opened Oct 16, 2026Contributor·5 tasks·

  ·
  23

• cmake: drop forcing Win7 target for mingw-w64 gcc builds

  #3660·vszakats opened Oct 15, 2026Contributor·

  ·

• Make NEON SHA3 assembler probe robust to -march overrides in CFLAGS

  #3655·justsmth opened Oct 13, 2026Contributor·

  ·
  3

• Reject critical CRL distribution points when CRL checking is disabled

  #3652·nhatnghiho opened Oct 12, 2026Contributor·

  ·
  2

• Normalize trailing dot in email name constraints

  #3650·nhatnghiho opened Oct 12, 2026Contributor·

  ·
  6

• [FIPS 5 Backport] CLI and Semantic Versioning backport

  #3647·justsmth opened Oct 10, 2026Contributor·

  ·
  3

• Add opt-in TLS 1.3 ticket flushing during the handshake

  #3646·justsmth opened Oct 10, 2026Contributor·

  ·
  6

• Harden ChaCha20-Poly1305 EVP_CIPHER state handling

  #3644·justsmth opened Oct 9, 2026Contributor·

  ·
  11

• fix(console): pass correct buffer size to WideCharToMultiByte

  #3641·dougch opened Oct 9, 2026Contributor·

  ·
  2

• Preserve the TLS 1.3 cipher policy when a cipher setter fails

  #3638·justsmth opened Oct 9, 2026Contributor·

  ·
  7

• Hold HPKE key and context buffers out of line

  #3637·WillChilds-Klein opened Oct 8, 2026Contributor·

  ·
  17

• feat(tool-openssl): add x509 -serial/-addtrust/-trustout

  #3636·spwalgren opened Oct 8, 2026Contributor·

  ·
  26

• feat(tool-openssl): add ocsp command

  #3635·spwalgren opened Oct 8, 2026Contributor·

  ·
  16