What's Changed

• Bump aws-ls-sys to 0.41 by @joshgodsiff in #2640
• Add brainpoolP224r1 and brainpoolP224t1 NID constants by @sfarestam-iproov in #2642
• x509: add minimal support for CRL building by @DavidFontaineOcd in #2538
• add mldsa.h to the boringssl bindgen by @reaperhulk in #2650
• Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @alex in #2652
• Fix verify_mode() panic on unmodeled verify mode bits by @alex in #2651
• Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #2653
• Release openssl 0.10.81 and openssl-sys 0.9.117 by @reaperhulk in #2655

New Contributors

• @joshgodsiff made their first contribution in #2640
• @sfarestam-iproov made their first contribution in #2642
• @DavidFontaineOcd made their first contribution in #2538

Full Changelog: openssl-v0.10.80...openssl-v0.10.81

What's Changed

• Bump aws-ls-sys to 0.41 by @joshgodsiff in #2640
• Add brainpoolP224r1 and brainpoolP224t1 NID constants by @sfarestam-iproov in #2642
• x509: add minimal support for CRL building by @DavidFontaineOcd in #2538
• add mldsa.h to the boringssl bindgen by @reaperhulk in #2650
• Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @alex in #2652
• Fix verify_mode() panic on unmodeled verify mode bits by @alex in #2651
• Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #2653
• Release openssl 0.10.81 and openssl-sys 0.9.117 by @reaperhulk in #2655

New Contributors

• @joshgodsiff made their first contribution in #2640
• @sfarestam-iproov made their first contribution in #2642
• @DavidFontaineOcd made their first contribution in #2538

Full Changelog: openssl-sys-v0.9.116...openssl-sys-v0.9.117

What's Changed

• Prefer Homebrew openssl@4 and stop looking for openssl@1.1 by @alex in #2633
• Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-padding by @alex in #2638
• Release openssl 0.10.80 and openssl-sys 0.9.116 by @alex in #2639

Full Changelog: openssl-v0.10.79...openssl-v0.10.80

What's Changed

• Prefer Homebrew openssl@4 and stop looking for openssl@1.1 by @alex in #2633
• Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-padding by @alex in #2638
• Release openssl 0.10.80 and openssl-sys 0.9.116 by @alex in #2639

Full Changelog: openssl-sys-v0.9.115...openssl-sys-v0.9.116

What's Changed

• Bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #2610
• Try to fix OpenSSL 1.1.0l download by @botovq in #2614
• Require &mut BigNumContextRef for EcPointRef mul/invert by @alex in #2615
• Fix UB in EcGroupRef::generator on groups without a generator by @alex in #2617
• Replace use libc::*; with targeted imports in openssl-sys by @alex in #2618
• Add PKeyRef::is_a and KeyType for name-based key identification by @reaperhulk in #2619
• Add PKey::{public,private}_key_from_raw_bytes_ex by @reaperhulk in #2620
• Bump MSRV to 1.80 by @reaperhulk in #2622
• Drop once_cell in favor of std::sync::{LazyLock, OnceLock} by @reaperhulk in #2623
• Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import by @reaperhulk in #2621
• parallelize more builds in CI for cold caches by @reaperhulk in #2625
• Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction by @reaperhulk in #2626
• Fix process abort when verify/PSK callbacks fire after SSL_CTX swap by @alex in #2624
• Bind OSSL_PARAM_modified and use it for seed_into by @reaperhulk in #2628
• Add PkeyCtxRef::set_context_string for ML-DSA by @reaperhulk in #2629
• Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders by @alex in #2631
• Fix output buffer overflow for AES key-wrap-with-padding ciphers by @alex in #2630
• Release openssl 0.10.79 and openssl-sys 0.9.115 by @reaperhulk in #2632

Full Changelog: openssl-v0.10.78...openssl-v0.10.79

What's Changed

• Bump actions/cache from 5.0.4 to 5.0.5 by @dependabot[bot] in #2610
• Try to fix OpenSSL 1.1.0l download by @botovq in #2614
• Require &mut BigNumContextRef for EcPointRef mul/invert by @alex in #2615
• Fix UB in EcGroupRef::generator on groups without a generator by @alex in #2617
• Replace use libc::*; with targeted imports in openssl-sys by @alex in #2618
• Add PKeyRef::is_a and KeyType for name-based key identification by @reaperhulk in #2619
• Add PKey::{public,private}_key_from_raw_bytes_ex by @reaperhulk in #2620
• Bump MSRV to 1.80 by @reaperhulk in #2622
• Drop once_cell in favor of std::sync::{LazyLock, OnceLock} by @reaperhulk in #2623
• Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import by @reaperhulk in #2621
• parallelize more builds in CI for cold caches by @reaperhulk in #2625
• Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction by @reaperhulk in #2626
• Fix process abort when verify/PSK callbacks fire after SSL_CTX swap by @alex in #2624
• Bind OSSL_PARAM_modified and use it for seed_into by @reaperhulk in #2628
• Add PkeyCtxRef::set_context_string for ML-DSA by @reaperhulk in #2629
• Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders by @alex in #2631
• Fix output buffer overflow for AES key-wrap-with-padding ciphers by @alex in #2630
• Release openssl 0.10.79 and openssl-sys 0.9.115 by @reaperhulk in #2632

Full Changelog: openssl-sys-v0.9.114...openssl-sys-v0.9.115

What's Changed

• Fix Suite B flag assignments in verify.rs by @alex in #2592
• Use cvt_p for OPENSSL_malloc error handling by @alex in #2593
• Mark BIO_get_mem_data on AWS-LC to be unsafe by @alex in #2594
• Set timeout for package installation step by @alex in #2595
• Panic in Crypter::new when IV is required but not provided by @alex in #2596
• openssl 4 support by @reaperhulk in #2591
• Avoid panic for overlong OIDs by @botovq in #2598
• Fix dangling stack pointer in custom extension add callback by @alex in #2599
• Add support for LibreSSL 4.3.x by @botovq in #2603
• fix inverted bounds assertion in AES key unwrap by @reaperhulk in #2604
• Reject oversized length returns from password callback trampoline by @alex in #2605
• Validate callback-returned lengths in PSK and cookie trampolines by @alex in #2607
• Error for short out in MdCtxRef::digest_final() by @botovq in #2608
• Check derive output buffer length on OpenSSL 1.1.x by @alex in #2606
• Release openssl v0.10.78 and openssl-sys v0.9.114 by @alex in #2609

Full Changelog: openssl-v0.10.77...openssl-v0.10.78

What's Changed

• Fix Suite B flag assignments in verify.rs by @alex in #2592
• Use cvt_p for OPENSSL_malloc error handling by @alex in #2593
• Mark BIO_get_mem_data on AWS-LC to be unsafe by @alex in #2594
• Set timeout for package installation step by @alex in #2595
• Panic in Crypter::new when IV is required but not provided by @alex in #2596
• openssl 4 support by @reaperhulk in #2591
• Avoid panic for overlong OIDs by @botovq in #2598
• Fix dangling stack pointer in custom extension add callback by @alex in #2599
• Add support for LibreSSL 4.3.x by @botovq in #2603
• fix inverted bounds assertion in AES key unwrap by @reaperhulk in #2604
• Reject oversized length returns from password callback trampoline by @alex in #2605
• Validate callback-returned lengths in PSK and cookie trampolines by @alex in #2607
• Error for short out in MdCtxRef::digest_final() by @botovq in #2608
• Check derive output buffer length on OpenSSL 1.1.x by @alex in #2606
• Release openssl v0.10.78 and openssl-sys v0.9.114 by @alex in #2609

Full Changelog: openssl-sys-v0.9.113...openssl-sys-v0.9.114

What's Changed

• CI: Hash-pin all action usage, avoid credential persistence in actions/checkout by @woodruffw in #2587
• Bump aws-lc-sys to 0.39 by @goffrie in #2588
• md_ctx: enable sign/verify/reset on BoringSSL, LibreSSL, and AWS-LC by @alex in #2589
• Release openssl v0.10.77 and openssl-sys v0.9.113 by @alex in #2590

New Contributors

• @woodruffw made their first contribution in #2587

Full Changelog: openssl-v0.10.76...openssl-v0.10.77

What's Changed

• CI: Hash-pin all action usage, avoid credential persistence in actions/checkout by @woodruffw in #2587
• Bump aws-lc-sys to 0.39 by @goffrie in #2588
• md_ctx: enable sign/verify/reset on BoringSSL, LibreSSL, and AWS-LC by @alex in #2589
• Release openssl v0.10.77 and openssl-sys v0.9.113 by @alex in #2590

New Contributors

• @woodruffw made their first contribution in #2587

Full Changelog: openssl-sys-v0.9.112...openssl-sys-v0.9.113