openssl-tls-knowledge-patch

# OpenSSL and TLS Knowledge Patch Use this skill to design, migrate, debug, build, or secure software that depends on OpenSSL, libssl, libcrypto, the OpenSSL CLI, native QUIC, or Linux kernel TLS. ## Reference index | Reference | Topics | | --- | --- | | [CLI, configuration, and PKI](references/cli-config-and-pki.md) | Configuration loading and diagnostics, command behavior, certificate and request workflows, CMP | | [Migration and compatibility](references/migration-and-compatibility.md) | Removed and deprecated APIs, opaque types, build/platform changes, API policy, TLS-library integration tradeoffs | | [Providers, cryptography, and FIPS](references/providers-crypto-and-fips.md) | Provider configuration, EVP and digest changes, PQC, opaque symmetric keys, random generation, FIPS behavior and installation | | [TLS and QUIC](references/tls-and-quic.md) | TLS behavior, groups and key shares, ECH, native and external-stack QUIC, stream and BIO contracts | | [Linux kernel TLS](references/kernel-tls.md) | Record boundaries, ancillary data, key updates, zero-copy, record-size limits, observability | | [Security advisories and patch floors](references/security.md) | CVEs, affected configurations, branch-specific minimum fixes, operational mitigations | ## Start here 1. Identify the exact runtime, headers, provider modules, and branch patch release; do not infer capabilities from the `openssl` executable alone. 2. Check [security.md](references/security.md) before debugging sur...