What's Changed
- Bump urllib3 from 2.6.0 to 2.6.3 in /tests/ci by @dependabot[bot] in #2932
- Add weekly automated check for outdated third-party test vectors by @sgmenda in #2933
- Enable Hybrid PQ KeyShares by default by @alexw91 in #2531
- Remove AVX conditional from cmake script by @torben-hansen in #2958
- openssl-ca command implementation for self-sign certificates by @skmcgrail in #2937
- Initial Framework for Using Doxygen to Document Public Header Files by @m271828 in #2908
- Move md4 out of FIPS module by @torben-hansen in #2956
- Fix image-build-windows workflow to only push on workflow_call and workflow_dispatch by @skmcgrail in #2961
- Remove FIPS counter framework and other tidying up by @torben-hansen in #2947
- Model Device Farm CI Resources in CDK by @skmcgrail in #2965
- Adds a new randomness generation API by @torben-hansen in #2963
- Migrate Android Testing to GitHub Actions by @skmcgrail in #2969
- Ensure pkcs7 checks ASN1_TYPE->type by @skmcgrail in #2968
- Fix checkout logic for android-omnibus by @skmcgrail in #2970
- Add missing env vars to check-vectors workflow step by @sgmenda in #2962
- Shorten Windows Build Directory Path by @skmcgrail in #2974
- Bump mysql cluster version by @WillChilds-Klein in #2967
- Integrate Wycheproof ML-DSA test vectors by @sgmenda in #2973
- Simplify FIPS conditional in top-level build script by @torben-hansen in #2976
- Fix aws-lc-rs CI job by @justsmth in #2966
- Add method to get type of ML-DSA instance configured under EVP PKEY by @torben-hansen in #2980
- Nmap build needs liblinear by @justsmth in #2985
- Disable SLP vectorizer for FIPS shared library builds on GCC 14+ by @geedo0 in #2977
- Update Wycheproof ECDSA test vectors and fix workflow typo by @sgmenda in #2972
- Address some CMake findings by @skmcgrail in #2979
- Bump bytes from 1.7.1 to 1.11.1 in /tests/ci/lambda by @dependabot[bot] in #2983
- Support GCC 4.8 for aarch64 by @justsmth in #2964
- Free potential memory before assigning new pointer by @torben-hansen in #2989
- Add PyOpenSSL integration test by @WillChilds-Klein in #2992
- Ensure index argument is not negative in ASN1_BIT_STRING_set_bit by @torben-hansen in #2987
- Ensure no overflow in signed output length in do_buf by @torben-hansen in #2988
- Remove redundant CPython 3.9 integration test by @WillChilds-Klein in #2996
- Ensure public key is set before verifying through ML-DSA verify by @torben-hansen in #2990
- Correct CCM nids in object definition by @torben-hansen in #2991
- Address Reported Bug Findings by @skmcgrail in #3000
- Fix CI: gcc-4.8 by @justsmth in #3011
- Fix Windows CI: use
cd /din run_windows_tests.bat to handle cross-drive paths by @justsmth in #3012 - Fix OPENSSL_memchr per C23 by @justsmth in #3008
- Fix argument order in
hmac_copyby @justsmth in #3014 - Miscellaneous CI improvements by @skmcgrail in #2978
- Fix CI: mariadb by @justsmth in #3015
- Update Ubuntu 24:04 image compiler verification by @skmcgrail in #3017
- Support WASM/Emscripten by @justsmth in #2959
- Generate Rust Bindings by @justsmth in #2999
Full Changelog: v1.67.0...v1.68.0