Commit Graph

Select branches

Hide Pull Requests

a10

a10s

a9

c10

c10-beta

c10s

c8

c8-beta

c8s

c9

c9-beta

c9s

#1

changed/a10/openssl-3.2.2-16.el10_0.alma.1

changed/a10s/openssl-3.2.2-10.el10.alma.1

changed/a10s/openssl-3.2.2-12.el10.alma.1

changed/a10s/openssl-3.2.2-13.el10.alma.1

changed/a10s/openssl-3.2.2-14.el10.alma.1

changed/a10s/openssl-3.2.2-15.el10.alma.1

changed/a10s/openssl-3.2.2-16.el10.alma.1

changed/a10s/openssl-3.2.2-3.el10.alma.1

changed/a10s/openssl-3.2.2-7.el10.alma.1

changed/a10s/openssl-3.5.0-1.el10.alma.1

changed/a10s/openssl-3.5.0-2.el10.alma.1

changed/a10s/openssl-3.5.0-3.el10.alma.1

changed/a10s/openssl-3.5.0-4.el10.alma.1

changed/a10s/openssl-3.5.0-6.el10.alma.1

changed/a10s/openssl-3.5.0-8.el10.alma.1

changed/a10s/openssl-3.5.1-1.el10.alma.1

changed/a10s/openssl-3.5.1-3.el10.alma.1

changed/a9/openssl-3.0.7-27.el9.alma.1

imports/c10-beta/openssl-3.2.2-12.el10

imports/c10/openssl-3.2.2-16.el10_0

imports/c10s/openssl-3.2.2-10.el10

imports/c10s/openssl-3.2.2-12.el10

imports/c10s/openssl-3.2.2-13.el10

imports/c10s/openssl-3.2.2-14.el10

imports/c10s/openssl-3.2.2-15.el10

imports/c10s/openssl-3.2.2-16.el10

imports/c10s/openssl-3.2.2-3.el10

imports/c10s/openssl-3.2.2-7.el10

imports/c10s/openssl-3.5.0-1.el10

imports/c10s/openssl-3.5.0-2.el10

imports/c10s/openssl-3.5.0-3.el10

imports/c10s/openssl-3.5.0-4.el10

imports/c10s/openssl-3.5.0-6.el10

imports/c10s/openssl-3.5.0-8.el10

imports/c10s/openssl-3.5.1-1.el10

imports/c10s/openssl-3.5.1-3.el10

imports/c8-beta/openssl-1.1.1c-1.el8

imports/c8-beta/openssl-1.1.1c-12.el8

imports/c8-beta/openssl-1.1.1g-12.el8_3

imports/c8-beta/openssl-1.1.1g-9.el8

imports/c8-beta/openssl-1.1.1k-4.el8

imports/c8-beta/openssl-1.1.1k-5.el8_5

imports/c8-beta/openssl-1.1.1k-7.el8_6

imports/c8-beta/openssl-1.1.1k-9.el8

imports/c8/openssl-1.1.1c-15.el8

imports/c8/openssl-1.1.1c-2.el8_1.1

imports/c8/openssl-1.1.1g-11.el8

imports/c8/openssl-1.1.1g-12.el8_3

imports/c8/openssl-1.1.1g-15.el8_3

imports/c8/openssl-1.1.1k-12.el8_9

imports/c8/openssl-1.1.1k-14.el8_6

imports/c8/openssl-1.1.1k-4.el8

imports/c8/openssl-1.1.1k-5.el8_5

imports/c8/openssl-1.1.1k-6.el8_5

imports/c8/openssl-1.1.1k-7.el8_6

imports/c8/openssl-1.1.1k-9.el8_7

imports/c8s/openssl-1.1.1g-11.el8

imports/c8s/openssl-1.1.1g-12.el8_3

imports/c8s/openssl-1.1.1g-9.el8

imports/c8s/openssl-1.1.1k-1.el8

imports/c8s/openssl-1.1.1k-4.el8

imports/c8s/openssl-1.1.1k-5.el8_5

imports/c8s/openssl-1.1.1k-7.el8_6

imports/c8s/openssl-1.1.1k-9.el8

imports/c9-beta/openssl-3.0.0-0.beta2.7.el9

imports/c9-beta/openssl-3.0.0-4.el9

imports/c9-beta/openssl-3.0.0-5.el9

imports/c9-beta/openssl-3.0.0-6.el9

imports/c9-beta/openssl-3.0.1-20.el9_0

imports/c9-beta/openssl-3.0.1-41.el9_0

imports/c9-beta/openssl-3.0.1-5.el9

imports/c9-beta/openssl-3.0.7-24.el9

imports/c9-beta/openssl-3.0.7-27.el9

imports/c9-beta/openssl-3.0.7-5.el9

imports/c9-beta/openssl-3.2.2-6.el9

imports/c9-beta/openssl-3.2.2-6.el9_5

imports/c9/openssl-3.0.1-20.el9_0

imports/c9/openssl-3.0.1-23.el9_0

imports/c9/openssl-3.0.1-41.el9_0

imports/c9/openssl-3.0.1-43.el9_0

imports/c9/openssl-3.0.1-47.el9_1

imports/c9/openssl-3.0.7-16.el9_2

imports/c9/openssl-3.0.7-17.el9_2

imports/c9/openssl-3.0.7-24.el9

imports/c9/openssl-3.0.7-25.el9_3

imports/c9/openssl-3.0.7-27.el9

imports/c9/openssl-3.0.7-28.el9_4

imports/c9/openssl-3.0.7-6.el9_2

imports/c9/openssl-3.2.2-6.el9_5

imports/c9/openssl-3.2.2-6.el9_5.1

Mono Color

• 2d7e345d72 Redefine sslarch for x86_64_v2 arch changed/a10s/openssl-3.5.1-3.el10.alma.1 a10s Eduard Abdullin 2025-07-29 18:20:40 +0000
• 28538f622d Fix Requires/Provides to fix default install of fips providers imports/c10s/openssl-3.5.1-3.el10 c10s Simo Sorce 2025-07-23 06:10:27 -0400
• d431b4407c Add custom define to disable symbol versioning in downstream patched code Simo Sorce 2025-07-17 09:43:10 -0400
• 6b623cae3c Add a openssl-fips-provider package Simo Sorce 2025-07-14 12:04:17 -0400
• e014d8a609 Temporarily disable SLH-DSA FIPS self tests Simo Sorce 2025-07-15 12:34:51 -0400
• b7e6529771 Fix Requires/Provider to fix default install of fips providers c9s Simo Sorce 2025-07-23 06:10:27 -0400
• 79196c588d Add custom define to disable symbol versioning in downstream patched code Simo Sorce 2025-07-17 09:43:10 -0400
• 4e910fb1a7 Fix Release version and chengelog Simo Sorce 2025-07-16 11:02:46 -0400
• eb7847ee25 Temporarily disable SLH-DSA FIPS self tests Simo Sorce 2025-07-15 12:34:51 -0400
• fd23d267e8 Add a openssl-fips-provider package Simo Sorce 2025-07-14 12:04:17 -0400
• 12e10e275a Fix for plan names to import George Pantelakis 2025-07-04 13:31:09 +0200
• ed94729646 Redefine sslarch for x86_64_v2 arch changed/a10s/openssl-3.5.1-1.el10.alma.1 Eduard Abdullin 2025-07-02 02:37:33 +0000
• 5a270afcee Rebasing to OpenSSL 3.5.1 Dmitry Belyavskiy 2025-07-01 16:33:14 +0200
• 98cf25a4c0 Rebasing to OpenSSL 3.5.1 imports/c10s/openssl-3.5.1-1.el10 Dmitry Belyavskiy 2025-07-01 16:33:14 +0200
• c1b604447f Redefine sslarch for x86_64_v2 arch changed/a10s/openssl-3.5.0-8.el10.alma.1 Eduard Abdullin 2025-06-06 02:39:31 +0000
• 5a68570dd4 rebuilt imports/c10s/openssl-3.5.0-8.el10 Dmitry Belyavskiy 2025-06-05 15:50:22 +0200
• d13b9c5c36 rebuilt Dmitry Belyavskiy 2025-06-05 11:59:49 +0200
• f6ada2a5d3 Redefine sslarch for x86_64_v2 arch changed/a10s/openssl-3.5.0-6.el10.alma.1 Eduard Abdullin 2025-06-05 02:34:26 +0000
• 1d401560ac rebuilt imports/c10s/openssl-3.5.0-6.el10 Dmitry Belyavskiy 2025-06-04 17:43:35 +0200
• ea4218d43c Make hybrid MLKEM work with our FIPS provider (3.0.7) Dmitry Belyavskiy 2025-06-03 17:30:09 +0200
• 36bf905365 Compact patches for better maintainability Dmitry Belyavskiy 2025-06-03 17:22:18 +0200
• 1e7815b2cf Make hybrid MLKEM work with our FIPS provider (3.0.7) Dmitry Belyavskiy 2025-06-03 17:30:09 +0200
• 0367bee51d Compact patches for better maintainability Dmitry Belyavskiy 2025-06-03 17:22:18 +0200
• 74b93665b4 Redefine sslarch for x86_64_v2 arch changed/a10s/openssl-3.5.0-4.el10.alma.1 Eduard Abdullin 2025-05-23 02:38:19 +0000
• 63b528e647 Fix UEFI builds on double function definitions imports/c10s/openssl-3.5.0-4.el10 Dmitry Belyavskiy 2025-05-22 13:30:46 +0200
• 751b9399fc Fix regressions caused by rebase to OpenSSL 3.5 Dmitry Belyavskiy 2025-05-22 12:59:35 +0200
• 062693b2b8 Fix regressions caused by rebase to OpenSSL 3.5 Dmitry Belyavskiy 2025-05-22 12:59:35 +0200
• 13de65a2dd Redefine sslarch for x86_64_v2 arch changed/a10s/openssl-3.5.0-3.el10.alma.1 Eduard Abdullin 2025-05-15 02:53:32 +0000
• 56dce390b5 Redefine sslarch for x86_64_v2 arch changed/a10/openssl-3.2.2-16.el10_0.alma.1 a10 Eduard Abdullin 2025-05-14 15:55:37 +0000
• 94ef9b1e80 import UBI openssl-3.2.2-16.el10 imports/c10/openssl-3.2.2-16.el10_0 c10 eabdullin 2025-05-14 15:55:28 +0000
• d791b13cf1 Enable sslkeylog support Dmitry Belyavskiy 2025-05-14 11:48:09 +0200
• 36af632032 Restore RHEL9-style indicators defines Dmitry Belyavskiy 2025-05-14 11:41:03 +0200
• 431532b994 Expose settable params for EVP_SKEY Dmitry Belyavskiy 2025-05-14 11:38:56 +0200
• 1d113921da pkeyutl ecdsa signature with sha1 shouldn't work by default Dmitry Belyavskiy 2025-05-14 11:36:32 +0200
• 6af659130e Fix openssl speed running in FIPS mode Dmitry Belyavskiy 2025-05-14 11:33:54 +0200
• dc0e1f27f5 Fix UEFI builds imports/c10s/openssl-3.5.0-3.el10 Dmitry Belyavskiy 2025-05-14 12:54:07 +0200
• f911c21296 Enable sslkeylog support Dmitry Belyavskiy 2025-05-14 11:48:09 +0200
• 4b761c8ea2 Restore RHEL9-style indicators defines Dmitry Belyavskiy 2025-05-14 11:41:03 +0200
• 154d1831cd Expose settable params for EVP_SKEY Dmitry Belyavskiy 2025-05-14 11:38:56 +0200
• 1934b43ef1 pkeyutl ecdsa signature with sha1 shouldn't work by default Dmitry Belyavskiy 2025-05-14 11:36:32 +0200
• b5cbb03855 Fix openssl speed running in FIPS mode Dmitry Belyavskiy 2025-05-14 11:33:54 +0200
• 3717faa9f1 PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9 Dmitry Belyavskiy 2025-05-09 13:45:26 +0200
• 58aefe30f2 OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9 Dmitry Belyavskiy 2025-05-02 16:46:23 +0200
• c38d293785 Redefine sslarch for x86_64_v2 arch changed/a10s/openssl-3.5.0-2.el10.alma.1 Eduard Abdullin 2025-04-18 02:42:59 +0000
• cad2bb93ac Update depencency on crypto-policies imports/c10s/openssl-3.5.0-2.el10 Dmitry Belyavskiy 2025-04-17 10:57:14 +0200
• 1d120570ad Redefine sslarch for x86_64_v2 arch changed/a10s/openssl-3.5.0-1.el10.alma.1 Eduard Abdullin 2025-04-17 02:42:05 +0000
• 74174e6c12 plans: migrate gating to fmf format George Pantelakis 2025-04-16 17:01:10 +0200
• c2ed103d24 plans: migrate gating to fmf format c8s George Pantelakis 2025-04-16 17:03:39 +0200
• 06ffd03349 plans: update the CI plan with the correct plan names imports/c10s/openssl-3.5.0-1.el10 George Pantelakis 2025-04-16 16:58:23 +0200
• b0cff60812 Rebasing OpenSSL to 3.5 Dmitry Belyavskiy 2025-04-16 13:28:56 +0200
• 296ae60f11 Rebasing OpenSSL to 3.5 Dmitry Belyavskiy 2025-04-10 17:48:19 +0200
• e530f5c8f7 Redefine sslarch for x86_64_v2 arch changed/a10s/openssl-3.2.2-16.el10.alma.1 Eduard Abdullin 2025-02-18 17:46:53 +0300
• fb8a97e51d Fix segfault on printing the temp key from s_client when connection is not established Dmitry Belyavskiy 2025-02-12 14:59:33 +0100
• f784b47db4 RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797) Dmitry Belyavskiy 2025-02-12 14:58:19 +0100
• 5946116ede RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797) Dmitry Belyavskiy 2025-02-12 13:15:51 +0100
• 0928a21cd9 import UBI openssl-3.2.2-6.el9_5.1 imports/c9/openssl-3.2.2-6.el9_5.1 c9 eabdullin 2025-02-11 20:41:35 +0000
• ef76bdc634 Merge branch 'c10s' into a10s changed/a10s/openssl-3.2.2-15.el10.alma.1 eabdullin 2025-02-04 13:52:58 +0300
• 7840be76de Load system default cipher string from crypto-policies configuration file imports/c10s/openssl-3.2.2-16.el10 Dmitry Belyavskiy 2025-01-29 21:36:05 +0100
• d6a9e4cbb6 Fix timing side-channel in ECDSA signature computation (CVE-2024-13176) Dmitry Belyavskiy 2025-01-29 18:34:26 +0100
• 34e41ff200 Get rid of checking /etc/crypto-policies/back-ends/openssl.config imports/c10s/openssl-3.2.2-15.el10 Dmitry Belyavskiy 2025-01-24 16:45:56 +0100
• a4086ec177 Locally configured providers should not interfere with openssl build-time tests Dmitry Belyavskiy 2025-01-24 16:37:44 +0100
• e5573d1b8d Ensure correct fips.so checksum calculation Dmitry Belyavskiy 2025-01-08 16:44:29 +0100
• 9a7c320d2c Print key exchange group for hybrid PQC Dmitry Belyavskiy 2025-01-02 16:40:47 +0100
• bdb28e8ff0 Fix pkcs12 command line segfault Dmitry Belyavskiy 2025-01-24 17:35:54 +0100
• 5fae31daba - Fix providers no_cache behavior Dmitry Belyavskiy 2025-01-24 17:34:42 +0100
• 8d05945dc2 Change to the ci tmt plan George Pantelakis 2024-12-09 11:47:16 +0100
• fee9e80345 Merge branch 'c10s' into a10s changed/a10s/openssl-3.2.2-14.el10.alma.1 eabdullin 2024-12-06 16:37:58 +0300
• b876ef4126 import RHEL 10 Beta openssl-3.2.2-12.el10 imports/c10-beta/openssl-3.2.2-12.el10 c10-beta eabdullin 2024-11-20 13:46:01 +0000
• 606ecb94d8 import UBI openssl-3.2.2-6.el9_5 imports/c9/openssl-3.2.2-6.el9_5 eabdullin 2024-11-12 10:39:48 +0000
• 8b5d84e945 Bump release for October 2024 mass rebuild: imports/c10s/openssl-3.2.2-14.el10 Troy Dawson 2024-10-29 08:53:09 -0700
• 994352a698 Merge branch 'c10s' into a10s changed/a10s/openssl-3.2.2-13.el10.alma.1 eabdullin 2024-10-21 11:59:34 +0300
• 936c0664b3 Ship dummy(empty) openssl/engine.h imports/c10s/openssl-3.2.2-13.el10 Dmitry Belyavskiy 2024-10-17 17:11:29 +0200
• d735cdb5ac import UBI openssl-1.1.1k-14.el8_6 c8 imports/c8/openssl-1.1.1k-14.el8_6 eabdullin 2024-10-09 12:32:02 +0000
• b45135d084 import CS openssl-3.2.2-6.el9 imports/c9-beta/openssl-3.2.2-6.el9_5 imports/c9-beta/openssl-3.2.2-6.el9 c9-beta eabdullin 2024-09-30 15:08:11 +0000
• 4dcec3609d import UBI openssl-3.0.7-28.el9_4 imports/c9/openssl-3.0.7-28.el9_4 eabdullin 2024-09-18 20:26:14 +0000
• 69b026356f Backport openssl: SSL_select_next_proto buffer overread from 3.2 Maurizio Barbaro 2024-09-16 14:06:09 +0200
• 00066ba275 Merge branch 'c10s' into a10s changed/a10s/openssl-3.2.2-12.el10.alma.1 eabdullin 2024-09-09 11:55:14 +0300
• 979f6ecb70 Rebuild Dmitry Belyavskiy 2024-09-05 10:38:14 +0200
• edf5bf79a4 Fix CVE-2024-6119: Possible denial of service in X.509 name checks imports/c10s/openssl-3.2.2-12.el10 Dmitry Belyavskiy 2024-09-04 11:47:44 +0200
• 0808e4b669 Fix CVE-2024-6119: Possible denial of service in X.509 name checks Dmitry Belyavskiy 2024-09-04 11:24:27 +0200
• d26c2f3483 Merge pull request 'Fix Possible DOS in X.509 name checks (CVE-2024-6119)' (#1) from jonathan/openssl:a9 into a9 changed/a9/openssl-3.0.7-27.el9.alma.1 a9 Andrew Lukoshko 2024-09-03 17:13:26 +0000
• 95ff7a66ab Fix Possible DOS in X.509 name checks (CVE-2024-6119) Jonathan Wright 2024-09-03 09:36:43 -0500
• 16d731ff99 Merge branch 'c10s' into a10s changed/a10s/openssl-3.2.2-10.el10.alma.1 eabdullin 2024-09-02 23:25:52 +0300
• 8bdb45e21d Fix CVE-2024-5535 Clemens Lang 2024-08-21 17:08:30 +0200
• f3cb03b52a Fix CVE-2024-5535 Clemens Lang 2024-08-21 17:08:30 +0200
• 57fda30988 Resolve SAST package scan results imports/c10s/openssl-3.2.2-10.el10 Dmitry Belyavskiy 2024-08-14 19:25:12 +0200
• fdd1e62fc4 Speedup SSL_add_{file,dir}_cert_subjects_to_stack Dmitry Belyavskiy 2024-08-14 13:03:07 +0200
• 83382cc2a0 Enable KTLS, temporary disable KTLS tests Dmitry Belyavskiy 2024-08-14 13:02:00 +0200
• e6422e7346 Fix typo in the patch numeration Dmitry Belyavskiy 2024-08-14 12:58:10 +0200
• 656cb62647 Support key encapsulation/decapsulation in openssl pkeyutl command Dmitry Belyavskiy 2024-08-14 11:43:38 +0200
• 8fc2d48423 Use PBMAC1 by default when creating PKCS#12 files in FIPS mode Dmitry Belyavskiy 2024-08-14 11:36:06 +0200
• 299b43d420 An interface to create PKCS #12 files in FIPS compliant way Dmitry Belyavskiy 2024-08-09 14:19:59 +0200
• a44bf0f715 Fix the gating test names George Pantelakis 2024-08-07 15:40:45 +0200
• ce2e7dc60e An interface to create PKCS #12 files in FIPS compliant way Dmitry Belyavskiy 2024-08-07 10:57:04 +0200
• 2954111db7 Merge branch 'c10s' into a10s changed/a10s/openssl-3.2.2-7.el10.alma.1 eabdullin 2024-07-26 15:45:51 +0300
• b9e5116278 - Redefine sslarch for x86_64_v2 arch changed/a10s/openssl-3.2.2-3.el10.alma.1 eabdullin 2024-07-26 15:43:42 +0300
• 7d3d9af0c8 SHA-1 signature shouldn't work in normal mode imports/c10s/openssl-3.2.2-7.el10 Dmitry Belyavskiy 2024-07-10 11:43:37 +0200
• 09b4e34fcf Disallow SHA1 at SECLEVEL2 in OpenSSL Dmitry Belyavskiy 2024-07-10 10:50:30 +0200
• 6084652840 Do not install ENGINE headers, man pages, and define OPENSSL_NO_ENGINE Dmitry Belyavskiy 2024-07-01 16:51:41 +0200
• 68e0354892 configure basic gating on RHEL-10 George Pantelakis 2024-06-28 14:04:09 +0200