v1.41.0

What's Changed

• Allow constructed strings in BER parsing by @WillChilds-Klein in #2015
• Fix python 3.13 patch by @WillChilds-Klein in #2026
• Update aws-lc-nginx.patch by @robvanoostenrijk in #2023
• Fix segfault in PKCS7 test by @justsmth in #2025
• Expose BN_set_flags as a no-op by @samuel40791765 in #2021
• Ran minimise_corpora.sh by @justsmth in #2024
• Fix strongSwan CI by @geedo0 in #2028
• Coverity fixes for P173127397 by @skmcgrail in #2014
• Add ML-DSA-44 and ML-DSA-87 to PQDSA API by @jakemas in #2009
• strdup is not C99 by @justsmth in #2008
• Fix CI issues with ML-DSA by @jakemas in #2031
• Upstream merge 2024 11 18 by @skmcgrail in #2012
• Fix perl handling of paths w/ spaces by @justsmth in #2005
• Revert "Trim some redundant Arm feature detection files" by @knightjoel in #1979
• Only abort when RSA PWCT fail in FIPS by @samuel40791765 in #2020
• Move PQDSA to FIPS module by @jakemas in #2032
• Implement PKCS7_verify, update PKCS7_sign by @WillChilds-Klein in #1993
• Add AWS-LC-FIPS v3.0 policy docs by @justsmth in #2043
• Initialize arrays as arrays by @justsmth in #2042
• Add blowfish names to EVP_CIPHER API by @WillChilds-Klein in #2041
• Use SHA256 as default digest for OCSP signing by @samuel40791765 in #2038
• Allow build on Solaris by @psumbera in #2035
• Deprecate recently added PKCS7 functions by @WillChilds-Klein in #2039
• Prevent accidental null dereference by @torben-hansen in #2046
• Link to NIST website by @justsmth in #2045
• Added FIPS 204 documentation, cleanse intermediate values by @jakemas in #2017
• Switch ML-DSA to use AWS-LC SHA3 by @jakemas in #2001
• Update FIPS v3.0 draft security policy by @justsmth in #2047

New Contributors

• @robvanoostenrijk made their first contribution in #2023
• @psumbera made their first contribution in #2035

Full Changelog: v1.40.0...v1.41.0