All pull requests

Pull requests

• 20261023-smallstack-and-uninited-var-fixes

  #11887·douzzer opened Oct 24, 2026Contributor·

  ·
  3

  

• Prevent cert modification in callbacks

  #11886·padelsbach opened Oct 23, 2026Contributor·1 of 4 tasks·

  ·
  11

  

• Fix dos due to keyupdate flood

  #11884·twcook86 opened Oct 23, 2026Contributor·1 of 4 tasks·

  ·
  6

  

• linuxkm: skip pre-6.3 FIPS ECDSA self-test on -ELIBBAD as well as -EN…

  #11883·kaleb-himes opened Oct 23, 2026Contributor·4 tasks·

  ·
  2

  

• 20261023-rng-nits

  #11882·douzzer opened Oct 23, 2026Contributor·

  ·
  2

  

• Check for offloaded RNG in rng_epoch_test

  #11881·padelsbach opened Oct 23, 2026Contributor·4 tasks·

  ·
  2

  

• Fix explicit curve key poisoning of FP_ECC cache

  #11880·holtrop-wolfssl opened Oct 23, 2026Contributor·4 tasks·

  ·
  2

  

• zephyr: build the FIPS v5 boundary

  #11879·jackctj117 opened Oct 23, 2026Contributor·4 tasks·

  ·
  15

  

• Fix PKCS#11 key handling in keygen, store and free

  #11877·Frauschi opened Oct 23, 2026Member·2 of 4 tasks·

  ·
  14

  

• Fix PKCS#11 builds and check PKCS#11 attribute value reads

  #11876·Frauschi opened Oct 23, 2026Member·1 of 4 tasks·

  ·
  12

  

• Keep CA restrictions when restoring the persisted cert cache

  #11875·sameehj opened Oct 23, 2026Contributor·1 of 4 tasks·

  ·
  8

  

• Check CA ExtKeyUsage for issuers from the CertManager

  #11873·sameehj opened Oct 23, 2026Contributor·1 of 4 tasks·

  ·
  5

  

• Fix EGD response reads and clear full entropy buffer

  #11872·ageprocpp opened Oct 23, 2026Contributor·1 of 4 tasks·

  ·
  5

  

• TLS: free the X25519 non-blocking context of a hybrid key share

  #11871·Arpan0995 opened Oct 23, 2026Contributor·4 tasks·

  ·
  2

  

• harden downgrade path for ECH

  #11870·sebastian-carpenter opened Oct 22, 2026Contributor·1 of 4 tasks·

  ·
  3

  

• Add support for printing ED448/25519 keys.

  #11869·kareem-wolfssl opened Oct 22, 2026Contributor·1 of 4 tasks·

  ·
  1

  3

  

• Fenrir 14263: fix port parsing in BIO_new_accept

  #11868·aidankeefe2022 opened Oct 22, 2026Member·

  ·
  9

  

• update to default session ticket callback available

  #11867·JacobBarthelmeh opened Oct 22, 2026Contributor·

  ·
  2

  

• Reject key generation for id and label keys a device declines

  #11866·Frauschi opened Oct 22, 2026Member·

  ·
  5

  

• error-crypt.h: include types.h in library builds for frozen v6 sources

  Maintenance Item
  #11863·kaleb-himes opened Oct 22, 2026Contributor·4 tasks·

  ·
  2

  

• Shrink the wc_GetErrorString() lookup table

  #11861·michael-membrowse opened Oct 22, 2026Contributor·

  ·
  4

  

• Add keygen crypto callback for Ed448

  #11860·Frauschi opened Oct 22, 2026Member·

  ·
  2

  

• Build out-of-tree CI configs with -Werror and the full warning set

  #11859·Frauschi opened Oct 22, 2026Member·

  ·
  5

  

• Fix brainpool group and version downgrade handling for TLS 1.3, DTLS 1.3 and ECH

  #11857·Frauschi opened Oct 22, 2026Member·

  ·
  29

  

• Fail SSL_CTRL_CHAIN when a chain certificate cannot be added

  #11856·ohki-saito opened Oct 22, 2026·1 of 4 tasks·

  ·
  6