v1.49.1

What's Changed

• FIPS Integrity Hash Tooling by @skmcgrail in #2296
• Add more build options to match callback build by @andrewhop in #2279
• Add req to OpenSSL CLI tool by @smittals2 in #2284
• Turn on better logging for EC2 test framework by @andrewhop in #2298

Full Changelog: v1.49.0...v1.49.1

v1.49.0

What's Changed

• Revert "Allow constructed strings in BER parsing (#2015)" by @samuel40791765 in #2278
• Add the rehash utility to the openssl CLI tool by @smittals2 in #2258
• Documentation on service indicator by @justsmth in #2281
• Update patches in Ruby CI by @samuel40791765 in #2233
• Reject DSA trailing garbage in EVP layer, add test cases by @skmcgrail in #2289
• Add support for verifying PKCS7 signed attributes by @samuel40791765 in #2264
• Add support for more SSL BIO functions by @samuel40791765 in #2273
• Wire-up rust-openssl into GitHub CI (for the time being) by @skmcgrail in #2291
• Adding detection of out-of-bound pre-bound memory read to AES-XTS tests. by @nebeid in #2286
• AES: Add function pointer trampoline to avoid delocator issue by @hanno-becker in #2294
• Bump mysql CI to 9.2.0 by @samuel40791765 in #2161
• Cherrypick hardening DSA param checks from BoringSSL by @smittals2 in #2293

Full Changelog: v1.48.5...v1.49.0

v1.48.5

What's Changed

• GitHub CI job to verify tags are on expected branches by @justsmth in #2170
• ci: Nix flake and devShell by @dougch in #2189
• s2n-bignum build should use boringssl_prefix_symbols_asm.h by @justsmth in #2265
• Prepare AWS-LC v1.48.5 by @justsmth in #2274

Full Changelog: v1.48.4...v1.48.5

v1.48.4

What's Changed

• Make AWS_LC_fips_failure_callback optional in builds with AWSLC_FIPS_FAILURE_CALLBACK by @andrewhop in #2266
• Prepare for release v.1.48.4 by @andrewhop in #2271

Full Changelog: v1.48.3...v1.48.4

v1.48.3

What's Changed

• Use unsigned return type for BN_get_minimal_width and word size tests by @torben-hansen in #2260
• Revert removal of "PEM_X509_INFO_write_bio" by @smittals2 in #2226
• Remove no-op register move from ChaCha20_ctr32_ssse3_4x by @nebeid in #2234
• Fix aws-lc-rs CI test when symbols removed by @justsmth in #2262
• Add x4 batched SHAKE128 and SHAKE256 APIs by @manastasova in #2247
• Fix aws-lc-rs CI test (again) by @justsmth in #2268
• Minor build fixes for CMake and libssl on x86 by @skmcgrail in #2267
• Update shard_gtest to unset environment variables once all the tests are done by @andrewhop in #2270
• Prepare v1.48.3 by @skmcgrail in #2269

Full Changelog: v1.48.2...v1.48.3

v1.48.2

What's Changed

• Add public wrapper to internal bn_minimal_width function by @smittals2 in #2245
• Add LibRdKafka to our CI by @smittals2 in #2225
• Adding no-op X509_TRUST_cleanup for select application compatibility by @kingstjo in #2257
• Remove unused CMake options for break tests by @andrewhop in #2249
• Update EVP_PKEY ED keygen to use an internal function that can return the result of the PWCT by @andrewhop in #2256
• Added ML-DSA to break-kat framework by @jakemas in #2253
• Add CMAC benchmark for AWS-LC by @andrewhop in #2218
• Update internal IANA values of PQ SupportedGroups by @alexw91 in #2235
• Add missing algorithms to benchmark by @nhatnghiho in #2056
• Update patch for Postgres by @samuel40791765 in #2232
• Revert BIO_get_mem_data back to macro by @skmcgrail in #2261
• Add IbmTpm to our CI by @smittals2 in #2231

New Contributors

• @kingstjo made their first contribution in #2257

Full Changelog: v1.48.1...1.48.2

v1.48.1

What's Changed

• Move OCSP ASN1 type functions to public header by @skmcgrail in #2239
• Make BIO_get_mem_data a function again by @skmcgrail in #2246
• Prepare v1.48.1 by @skmcgrail in #2252

Full Changelog: v1.48.0...v1.48.1

v1.48.0

What's Changed

• Remove BORINGSSL_FIPS_BREAK_FFC_DH by @andrewhop in #2216
• Increase required CMake version to 3.5 by @andrewhop in #2219
• Coverity Fix by @smittals2 in #2236
• Check pagesize is non-negative in AES-XTS test by @nebeid in #2237
• Don't 'dllexport' Windows symbols on static build by @justsmth in #2238
• Update to using Clang 18 on Windows by @justsmth in #2240
• Enforce FIPS callback is only enabled for static builds by @andrewhop in #2241
• Migrate last batch of jobs by @nhatnghiho in #2214
• Prepare for release v.1.48.0 by @andrewhop in #2248

Full Changelog: v1.47.0...v1.48.0

v1.47.0

What's Changed

• Modify SSL to inherit ciphersuites from SSL_CTX at initialization by @smittals2 in #2198
• Avoid duplicated definition of standalone test executable variables by @torben-hansen in #2212
• Migrate 3rd batch of CI jobs by @nhatnghiho in #2183
• SHAKE Incremental Byte Squeezes && EVP_ Tests by @manastasova in #2155
• Add guidance around certificate auto-chaining in TLS by @skmcgrail in #2205
• Add utility for querying and comparing the BORINGSSL_bcm_text_hash by @skmcgrail in #2217
• Move Ed25519ph into module boundary by @skmcgrail in #2186
• Add support to define a callback for FIPS test failures instead of aborting the process by @andrewhop in #2162
• Add SSL_CTX_use_cert_and_key by @smittals2 in #2163
• Update ABI Diff Action to work correctly on push events by @skmcgrail in #2188
• Use AWSLC_SOURCE_DIR and AWSLC_BINARY_DIR by @justsmth in #2208
• Reset DTLS1_BITMAP without resorting to memset by @skmcgrail in #2223
• Integration test for libssh2 by @justsmth in #2222
• Fix out-of-bound (OOB) input read in AES-XTS Decrypt in AVX-512 implementation by @nebeid in #2227
• Integration test for libgit2 by @justsmth in #2215
• Add support to export ML-DSA key-pairs in seed format by @jakemas in #2194
• Bump version, preparing for release v1.47.0 by @nebeid in #2229

Full Changelog: v1.46.1...v1.47.0

v1.46.1

What's Changed

• Improve tool-openssl compatability for x509 and verify subcommands by @skmcgrail in #2196
• Refactor AWS_LC_FIPS_failure to always exist by @andrewhop in #2200
• Add pq-tls interop test with BoringSSL by @chockalingamc in #2199
• Fix C++98 compatibility in our header files by @samuel40791765 in #2193
• Enable RSA keygen becnhmarks by default by @andrewhop in #2206
• Update pairwise consistency test failures to support gracefully continiung by @andrewhop in #2201
• Simplify IsFlag check logic by @skmcgrail in #2209
• Remove access() call from Snapsafe detection by @smittals2 in #2197
• Prepare release v1.46.1 by @smittals2 in #2210

Full Changelog: v1.46.0...v1.46.1