v1.40.0

What's Changed

• Added CRL tool to CLI by @smittals2 in #1976
• Allow ASN1_get_object to parse indefinite and universal by @justsmth in #1994
• Expose a bit of lhash/conf for Ruby by @samuel40791765 in #1987
• Addition of generic NIST-DSA PKEY and ASN1 to support ML-DSA by @jakemas in #1963
• Implement PKCS7_dataInit and PKCS7_dataFinal by @WillChilds-Klein in #1816
• Minor improvement to DSA (ASN1) + DSA Tests by @justsmth in #1990
• Test cleanup by @justsmth in #2000
• Add internal APIs for ML-DSA by @jakemas in #1999
• [EC] Unify scalar_mul_base point for ec_nistp curves by @dkostic in #2003
• Add Clang 19 to CI by @justsmth in #1998
• Adding the OpenSSL s_client tool by @smittals2 in #1959
• [EC] Unify scalar_mul_public for ec_nistp curves by @dkostic in #2004
• Implement PKCS7_encrypt and PKC7_decrypt by @WillChilds-Klein in #1996
• Upstream merge 2024-11-11 by @andrewhop in #1985
• Adding -verify and expanding -x509 options for our OpenSSL tool by @smittals2 in #1951
• Fail FIPS rsa_keygen_pubexp on change by @justsmth in #2016
• Document TLS Server Renegotiation Behavior by @skmcgrail in #2018
• [EC] Use s2n-bignum point doubling for P-384 and P-521 by @dkostic in #2011
• Prepare for v1.40.0 release by @smittals2 in #2019

Full Changelog: v1.39.0...v1.40.0