What's Changed
- Shard WASM gtests across runner CPUs by @justsmth in #3524
- Retry failed rndr register read a bounded number of times by @torben-hansen in #3475
- Add a reader for the system crypto-policies OpenSSL back-end by @WillChilds-Klein in #3502
- Export the crypto-policies reader and add its CI job by @WillChilds-Klein in #3527
- fix: restore alloc-size >= ivlen invariant in legacy AES-GCM SET_IVLEN by @dougch in #3466
- fix: declare FIPS service-indicator funcs in curve25519.c by @dougch in #3514
- Add context length guard in ML-DSA ACVP siggen by @spwalgren in #3538
- Add EVP_PKEY_check and EVP_PKEY_public_check for KEMs by @jakemas in #2709
- Return process exit codes from openssl CLI tool entry points by @justsmth in #3536
- Prevent tests from creating temporary files in the source tree by @justsmth in #3498
- Seed cipher lists and version bounds from the system crypto policy by @WillChilds-Klein in #3503
- Improve verify and x509 CLI compatibility by @justsmth in #3548
- Add pkcs12 import subcommand to the CLI by @justsmth in #3532
- Reject non-canonical Ed25519 public keys in the nohw decoder by @justsmth in #3457
- Bump the github-actions group with 8 updates by @dependabot[bot] in #3550
- Quote shell arguments in tool tests by @justsmth in #3499
- Fix SIGPIPE race in linkage checks by @justsmth in #3551
- Add EVP_add_cipher as a compatibility no-op by @justsmth in #3554
- Prepare 5.10.0 by @justsmth in #3553
New Contributors
- @spwalgren made their first contribution in #3538
Full Changelog: v5.9.0...v5.10.0