What's Changed
- test: parallel testsuite runs failed due to reused filenames by @adrien-n in #469
- Fix static analysis (Infer) complains by @yanovich in #462
- Added support for raw public key export and import by @arx11 in #453
- Added missing buffer cleanses for some sensitive buffers by @arx11 in #454
- Added support for magma-ctracpkm-omac by @arx11 in #455
- Implement provider interface to support GOST TLS 1.3 by @VladGud in #482
- fix misleading slash by @chipitsine in #485
- Реализация сборки Docker образов для GOST Engine by @kaperusov in #487
- Fix OpenSSL 3.6 compatibility and update gost-engine NID handling by @VladGud in #489
- Fix GitHub CI: hard-pin OpenSSL to tag openssl-3.6.0 by @VladGud in #490
- Update certificate for tls 1.3 tests against infotecs by @Mironenko in #494
- add
openssl-devel-enginedependency for F43+ by @oooo-ps in #511 - Separate gost89, gosthash, gosthash2012 modules and fix incorrect alignment in gosthash2012 causing potential SEGFAULT by @Mironenko in #514
- Introduce standalone gost_digest adaptor for provider by @Mironenko in #515
- Fix a memory leak in test-digest introduced by 8afa92a by @Mironenko in #516
- Extract kexp15, kimp15, kdftree2012_256 and tlstree implementations into a separate module by @Mironenko in #517
- Decouple gost_omac_acpkm from gost_grasshopper by @Mironenko in #519
- Introduce intermediate digest/MAC API and use it in the engine and provider by @Mironenko in #520
- refactor: use EVP_MAC in gost_tls12_additional_kdftree by @VladGud in #522
- Refactor prov-cipher to avoid using deprecated ENGINE/EVP_CIPHER_meth APIs by @Mironenko in #523
- Fix static analysis warnings for GOST_cipher_ctx_iv_length returning -1 by @Mironenko in #525
- Enable building the provider with OpenSSL 4.0 by @Mironenko in #526
- Add PKCS#12 RFC 9337 / RFC 9548 GOST-native support by @ilya-maltsev in #527
- engine: add static GOST engine support with explicit OpenSSL binding by @legale in #535
- ci: temporarily disable x86 task by @chipitsine in #533
- provider hash-then-sign support by @GauriSpears in #536
- Add hash-then-sign test by @GauriSpears in #537
- Fix CMS CTR-ACPKM decrypt after ASN.1 parameter reinit by @rostislaved in #528
- cmake: disable shell-based PKCS#12 tests on MSVC by @chipitsine in #540
- Fix Coverity capture and PKCS#12 parity test by @chipitsine in #542
- test_pkcs12_rfc9337: check HMAC result and init MAC buffer by @chipitsine in #543
- [BUG][FIX] Add termination entry to function pointer array by @PROGrand in #544
- Free cached groups during provider teardown by @chipitsine in #546
New Contributors
- @adrien-n made their first contribution in #469
- @arx11 made their first contribution in #453
- @VladGud made their first contribution in #482
- @kaperusov made their first contribution in #487
- @Mironenko made their first contribution in #494
- @oooo-ps made their first contribution in #511
- @ilya-maltsev made their first contribution in #527
- @legale made their first contribution in #535
- @GauriSpears made their first contribution in #536
- @rostislaved made their first contribution in #528
- @PROGrand made their first contribution in #544
Full Changelog: v3.0.3...v3.0.5