openbsd/src/lib/libcrypto, branch master

Add FIPS 180-4 references for SHA-256 constants.

2026-04-25T05:47:03+00:00

Simplify PKCS7_get_issuer_and_serial()

2026-04-24T15:10:20+00:00

The i variable is unused. Likewise for the first assignment to ri. Instead of an incomplete check that idx is in range, which still results in a NULL deref if idx < 0, check if ri is not NULL before accessing, as sk_value() checks the index correctly. ok jsing kenjiro

mlkem: use instead of "mlkem.h"

2026-04-20T08:14:29+00:00

patch from portable

ec_pmeth: fix 20yo comment: outlen -> keylen

2026-04-20T04:26:12+00:00

Prior to this we substring matched and allowed a leading .

2026-04-13T17:04:23+00:00

on a SAN DNSname constraint. This is not correct, as with a DNSname constraint, it may exacly match or match zero or more additional components on the front of the candidte to match. Spotted by Haruto Kimura ok tb@ kenjiro@

Bump LibreSSL version for the release

2026-04-08T05:30:20+00:00

ok deraadt

Rename labellen to label_len

2026-04-07T13:16:41+00:00

Requested by jsing, ok beck

Fix NULL deref for malformed OAEP parameters in CMS decryption

2026-04-07T13:15:29+00:00

This converts rsa_cms_decrypt() to use X509_ALGOR_get0() and fixes a NULL deref when a parameter is (invalidly) omitted similar to the fix in ec/ec_ameth.c r1.66 from a couple years back. There is currently an XXX annotating a hairy leak due to trying to be smart and stealing the parameters from the oaep object. Instead, just make a copy of the label string and free it in the exit path. The diff adds an error for labellen == 0 since that is an invalid encoding of pSpecifiedEmpty (see RFC 8017) -- per the DER the default must be omitted. This way we avoid a malloc(0) implementation-defined behavior. This minor issue was assigned CVE-2026-28390 by OpenSSL and was reported by too many to list. The fix is my own. It is similar to OpenSSL's fix only because I rewiewed theirs and suggested an improvement or two. This is the last of the "security fixes" in today's OpenSSL release that "affect" LibreSSL. All the other bugs were already fixed a few years back or we didn't have the code/bugs in the first place. ok beck jsing

Refactor and fix ocsp_find_signer_sk()

2026-04-07T13:02:50+00:00

Instead of reaching deep inside the OCSP_BASICRESP and ignoring its semantics and then try to untangle things in ocsp_find_signer_sk(), pass the OCSP_BASICRESP and use OCSP_resp_get0_id() which has the logic built in. Avoids a crash if you call OCSP_basic_verify() after OCSP_BASICRESP_new() without OCSP_basic_sign(). This cannot happen on a deserialized OCSP object. Prompted by a report by Kamil Frankowicz, Jan Kaminski, Bartosz Michalowski. ok jsing

Add a few to-do items to the crl_cb()

2026-04-07T12:52:19+00:00

Prompted by the "fix" fighting symptoms of misdesign in Delta CRL processing rather than addressing the root cause. Probably the best fix is to remove support for Indirect CRLs and Delta CRLs outright. ok jsing