Search

Pull requests

• Restore x86_64 ChaCha20-Poly1305 optimization for short TLS records

  approval: donebranch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1
  #33138·idrassi opened Oct 7, 2026Contributor·

  ·
  1

• mkerr: derive reason descriptions before writing state

  approval: review pendingbranch: masterbranch: 4.1severity: fips change
  #33101·idrassi opened Oct 5, 2026Contributor·1 task done·

  ·

• ssl: include ECDHE-PSK in EC point format handling

  approval: review pendingbranch: masterbranch: 4.1tests: presenttriaged: bug
  #33094·idrassi opened Oct 4, 2026Contributor·1 task done·

  ·

• X509: preserve earlier errors during CApath certificate lookup

  approval: review pendingbranch: masterbranch: 4.1
  #32909·idrassi opened Sep 22, 2026Contributor·1 task done·

  ·
  1

• cms: check recipient key lengths during staged decryption

  approval: review pendingbranch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1tests: presenttriaged: bug
  #32893·idrassi opened Sep 20, 2026Contributor·2 tasks done·

  ·
  1

  2

• Fix AES-CBC-HMAC multiblock crash and hang on short record lanes

  approval: review pendingbranch: masterbranch: 3.4branch: 3.5branch: 3.6branch: 4.0branch: 4.1severity: fips changetests: presenttriaged: bug
  #32818·idrassi opened Sep 14, 2026Contributor·1 task done·

  ·
  1

• Fix unintended context reset in EVP_PKEY_fromdata_settable()

  approval: review pendingbranch: masterbranch: 3.4branch: 3.5branch: 3.6branch: 4.0branch: 4.1severity: fips change
  #32805·idrassi opened Sep 12, 2026Contributor·2 tasks done·

  ·
  1

• ECH: reset per-handshake state on SSL connection reuse

  approval: review pendingbranch: masterbranch: 4.0branch: 4.1tests: presenttriaged: bug
  #32801·idrassi opened Sep 11, 2026Contributor·2 tasks done·

  ·
  1

  2

• Reject invalid extensions on directly trusted certificates

  approval: review pendingbranch: masterbranch: 4.0branch: 4.1
  #32796·idrassi opened Sep 11, 2026Contributor·1 task done·

  ·

• Fix ChaCha20-Poly1305 AAD handling after empty EVP_Cipher() call

  approval: review pendingbranch: masterbranch: 3.4branch: 3.5branch: 3.6branch: 4.0branch: 4.1tests: presenttriaged: bug
  #32753·idrassi opened Sep 9, 2026Contributor·1 task done·

  ·
  1

• Fix GCM empty EVP_Cipher() calls and OCB NULL output handling

  approval: review pendingbranch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1severity: fips change
  #32743·idrassi opened Sep 8, 2026Contributor·1 task done·

  ·
  1

  7

• Cleanse private DER on PKCS#8 setup failure

  approval: review pendingbranch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1
  #32714·idrassi opened Sep 7, 2026Contributor·

  ·

• CT: handle negative returns when loading a log store

  approval: ready to mergebranch: masterbranch: 4.1triaged: bug
  #32704·idrassi opened Sep 6, 2026Contributor·1 of 4 tasks·

  ·
  1

  6

• x509: filter get1 certificate and CRL results by name

  approval: review pendingbranch: masterbranch: 4.0branch: 4.1severity: fips change
  #32659·idrassi opened Sep 3, 2026Contributor·1 task done·

  ·
  5

• [4.0] Fix SSL_listen_ex() so peeled connections can complete the handshake

  approval: review pendingbranch: 4.0
  #32655·idrassi opened Sep 3, 2026Contributor·2 tasks done·

  ·
  2

• Keep pending client credentials out of cached sessions

  approval: donebranch: masterbranch: 4.1severity: regressiontests: presenttriaged: bug
  #32638·idrassi opened Sep 2, 2026Contributor·1 task done·

  ·

  · 4.1.0 final blocker
  30

• x509: Refresh CRL caches after signing

  approval: review pendingbranch: masterbranch: 4.1tests: presenttriaged: bug
  #32545·idrassi opened Aug 27, 2026Contributor·2 tasks done·

  ·
  1

  5

• QUIC: check both incoming default stream candidates

  approval: review pendingbranch: mastertests: presenttriaged: bug
  #32468·idrassi opened Aug 24, 2026Contributor·2 tasks done·

  ·
  11

• QUIC: pass the user SSL to custom session ID callbacks

  approval: review pendingbranch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1tests: presenttriaged: bug
  #32361·idrassi opened Aug 14, 2026Contributor·1 task done·

  ·
  1

  4

• ssl: fail session ID generation when cache locking fails

  approval: review pendingbranch: mastertests: presenttriaged: bug
  #32359·idrassi opened Aug 14, 2026Contributor·1 task done·

  ·
  1

  1

  

• apps: fix password source lines being split into unintended passwords

  approval: review pending
  #32316·idrassi opened Aug 12, 2026Contributor·1 task done·

  ·
  11

• Fix TLS 1.3 client alerts after early data (regression)

  approval: review pending
  #32301·idrassi opened Aug 11, 2026Contributor·1 task done·

  ·
  1

• Fix no-cache refcounting in the ENCODER/DECODER/STORE_LOADER fetch paths

  approval: review pending
  #32144·idrassi opened Aug 3, 2026Contributor·1 task done·

  ·
  3

• Fix SSL_poll() multi-reactor cleanup deadlock

  approval: review pendingbranch: masterbranch: 3.5branch: 3.6branch: 4.0branch: 4.1tests: presenttriaged: bug
  #32137·idrassi opened Aug 1, 2026Contributor·1 task done·

  ·
  1

  2

• test: make SSL_poll abort regression deterministic

  approval: review pending
  #32120·idrassi opened Jul 30, 2026Contributor·1 task done·

  ·
  2