openbsd/src/usr.bin/openssl, branch masterA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=master2026-03-19T20:28:46+00:00openssl speed: whitespace tweak2026-03-19T20:28:46+00:00tb2026-03-19T20:28:46+00:00urn:sha1:b1196d61eed2da0efb664d4b7f6347181cd227d6openssl speed: add benchmarking support for ML-KEM2026-03-18T21:50:24+00:00kenjiro2026-03-18T21:50:24+00:00urn:sha1:82f203504202bf0d907e6a786382a70909be7a4f
Add support for benchmarking ML-KEM key encapsulation mechanisms to
openssl speed. The following operations are measured:
- key generation
- encapsulation
- decapsulation
Two parameter sets are supported:
mlkem768
mlkem1024
The benchmark can be invoked using the following options:
mlkem run all ML-KEM benchmarks
mlkem768 run ML-KEM-768 benchmarks
mlkem1024 run ML-KEM-1024 benchmarks
Results are reported similarly to other public key algorithms, showing
time per operation and operations per second. Machine-readable output
(-mr) support is also added for ML-KEM.
ok tb
openssl.1: remove mention of OPENSSL_EC_BIN_PT_COMP2026-03-14T06:06:48+00:00tb2026-03-14T06:06:48+00:00urn:sha1:3183bd44f38dbaac9a703955b746944e68f7aa47
The need for this compile time option enabling point compression for
binary curves despite patent issues has been removed in openssl 1.0.0
(released in 2010).
[It's really difficult to count the number of bad ideas in the above.]
openssl x509: Remove legacy call to OBJ_create()2026-02-08T22:33:14+00:00kenjiro2026-02-08T22:33:14+00:00urn:sha1:d60e25f216aa14981cbcae98be231b0146e7ff2f
The OID 2.99999.3 is not required for x509 output handling and
is not referenced elsewhere. Remove the OBJ_create() call.
ok tb jsing
openssl x509: send -text output to the file specified by -out2026-02-08T22:25:16+00:00kenjiro2026-02-08T22:25:16+00:00urn:sha1:fbe52a57d923d0b51fc6d79f9ebda770455b831f
In the x509 command, `-text` output is not written to the file specified
by `-out`, whereas in other OpenSSL/LibreSSL subcommands it is.
With this change, STDout is removed, and `-text` output is written
entirely to the file specified by `-out`, making the behavior consistent
with other subcommands.
Fix https://github.com/libressl/portable/issues/1228
ok tb jsing
Implement s_client starttls protocol sieve.2026-02-01T08:45:31+00:00martijn2026-02-01T08:45:31+00:00urn:sha1:9d653fe05875a7749100f123952b96016a687b23
OK on previous diff concept sthen@
Suggestions, feedback and OK current diff tb@
openssl asn1pars: move tmplen next to tmpbuf2026-01-31T09:01:09+00:00tb2026-01-31T09:01:09+00:00urn:sha1:72dd855fafeb3d340672b9815b04ddd4d851c5d4openssl asn1pars: avoid a few unnecessary casts2026-01-31T08:59:38+00:00tb2026-01-31T08:59:38+00:00urn:sha1:849e792a41a5662d201463e53b735b17ae516afa
If str is a const unsigned char * rather than a char *, we can get away
with a single cast and do not need to cast away const either. Reduce the
scope of tmpbuf and ctmpbuf (now p) while there.
ok kenjiro
openssl: list SHA-3 digests in help output2026-01-02T00:14:24+00:00kenjiro2026-01-02T00:14:24+00:00urn:sha1:17255ba650aa0774866aa85ba1d21ef0e5086566
Register sha3-{224,256,384,512} as dgst commands so they appear in
openssl help. Without this, SHA-3 support is easy to miss and looks
unsupported from the command line.
ok tb jsing
openssl dgst: drop unused cfg.m2026-01-02T00:05:48+00:00kenjiro2026-01-02T00:05:48+00:00urn:sha1:cc0e69463fbcbb26a7b75c96c0bb1e89ba54dbdf
Remove an unused intermediate EVP_MD pointer and assign digests
directly to cfg.md.
ok tb joel