crypto/openssl: update to 3.5.8This is a security bugfix release. Please see the related merge commitfor more details.Maintainer note: `quic_ackm.h`'s conflict was resolved by taking the upst
crypto/openssl: update to 3.5.8This is a security bugfix release. Please see the related merge commitfor more details.Maintainer note: `quic_ackm.h`'s conflict was resolved by taking the upstream version of the file verbatim.Conflicts: crypto/openssl/include/internal/quic_ackm.hMFC after: 3 daysMerge commit '248da023ae5ea7292930ac5d715d88b87e2e6f46'
show more ...
MFV: openssl 3.5.7This change is a security release which resolves several issues with OpenSSL 3.5,the highest severity issue being ranked "High". Users are strongly encouraged toupdate to this r
MFV: openssl 3.5.7This change is a security release which resolves several issues with OpenSSL 3.5,the highest severity issue being ranked "High". Users are strongly encouraged toupdate to this release.More information about the release (from a high level) can be found inthe release notes [1].1. https://github.com/openssl/openssl/blob/openssl-3.5.7/NEWS.mdAll conflicts were resolved with `--theirs`, taking the release diffover the local diff; the conflicts occurred due to preemptive securityfixes applied by so@ in e508c343.MFC after: 3 days (the important security issues have beenpreemptively addressed)Merge commit '3a71a35ad9dad0e5d2cad8efecc8ba9d57c42d43'Conflicts: crypto/openssl/include/internal/quic_channel.h crypto/openssl/ssl/quic/quic_channel_local.h crypto/openssl/ssl/quic/quic_rx_depack.c crypto/openssl/test/cmsapitest.c crypto/openssl/test/evp_extra_test.c
MFV: crypto/openssl: update to 3.5.6This change brings in version 3.5.6 of OpenSSL, which featuresseveral security fixes (the highest of which is a MEDIUM severityissue), as well as some miscella
MFV: crypto/openssl: update to 3.5.6This change brings in version 3.5.6 of OpenSSL, which featuresseveral security fixes (the highest of which is a MEDIUM severityissue), as well as some miscellaneous feature updates.Please see the release notes [1] for more details.PS Apologies for the confusing merge commits -- I was testing out anew automated update process and failed to catch the commit messageissues until after I pushed the change.1. https://github.com/openssl/openssl/blob/openssl-3.5.6/NEWS.mdMFC after: 1 day (the security issues warrant a quick backport).Merge commit 'ab5fc4ac933ff67bc800e774dffce15e2a541e90'
openssl: import 3.5.5This change adds OpenSSL 3.5.5 from upstream [1].The 3.5.5 artifact was been verified via PGP key [2] and by SHA256 checksum [3].This is a security release, but also contai
openssl: import 3.5.5This change adds OpenSSL 3.5.5 from upstream [1].The 3.5.5 artifact was been verified via PGP key [2] and by SHA256 checksum [3].This is a security release, but also contains several bugfixes. All ofthe CVE-worthy issues have already been addressed on the targetbranch(es), so the net-result is that this is a bugfix release.More information about the release (from a high level) can be found inthe release notes [4].MFC after: 1 week1. https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz2. https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz.asc3. https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz.sha2564. https://github.com/openssl/openssl/blob/openssl-3.5.5/NEWS.mdMerge commit '808413da28df9fb93e1f304e6016b15e660f54c8'
crypto/openssl: remove autogenerated filesThese files contain build host paths and other configuration detailsthat can be regenerated via the standard vendor import process. Don'tclutter up the F
crypto/openssl: remove autogenerated filesThese files contain build host paths and other configuration detailsthat can be regenerated via the standard vendor import process. Don'tclutter up the FreeBSD tree with these files.Add the paths to .gitignore to prevent them from accidentally beingadded in a future update.MFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D53044
crypto/openssl: update generated files to match 3.5.4 artifactsMFC with: 046c625e9382Fixes: 046c625e9382 ("crypto/openssl: update to 3.5.4")Reported by: Herbert J. Skuhra <herbert@gojira.at>
crypto/openssl: update component to 3.5.3This change updates the sources for crypto/openssl. The subsequentcommit will update the build artifacts to match the 3.5.3 release.More details about th
crypto/openssl: update component to 3.5.3This change updates the sources for crypto/openssl. The subsequentcommit will update the build artifacts to match the 3.5.3 release.More details about the update can be found in the related vendor branchcommits.MFC after: 1 weekMerge commit 'aed904c48f330dc76da942a8ee2d6eef9d11f572'
crypto/openssl: make vendor imports easier/less error proneThis change adds a custom BSD makefile containing multiple high-level PHONYtargets, similar to targets provided by the ports framework.
crypto/openssl: make vendor imports easier/less error proneThis change adds a custom BSD makefile containing multiple high-level PHONYtargets, similar to targets provided by the ports framework.The Makefile does the following:- Reruns Configure with a deterministic set of arguments to ensure that all appropriate features have been enabled/disabled in OpenSSL.- Preens the pkgconfig files to remove duplicate paths in their `CFLAGS` and `includedir` variables.- Rebuilds all ASM files to ensure that the content contained is fresh.- Rebuilds all manpages to ensure that the content contained in the manpages is fresh.Some additional work needs to be done to make the manpage regeneration"operation" reproducible (the date the manpages were generated isembedded in the files).All dynamic configuration previously captured in`include/openssl/configuration.h` and `include/crypto/bn_conf.h` has beenmoved to `freebsd/include/dynamic_freebsd_configuration.h` and`freebsd/include/crypto/bn_conf.h`, respectively. This helpsensure that future updates don't wipe out FreeBSD customizations tothese files, which tune behavior on a per-target architecture basis, e.g.,ARM vs x86, 32-bit vs 64-bit, etc.MFC after: 1 monthDifferential Revision: https://reviews.freebsd.org/D51663
openssl: Import version 3.5.1Migrate to OpenSSL 3.5 in advance of FreeBSD 15.0. OpenSSL 3.0 will beEOL after 2026-09-07.Approved by: philip (mentor)Sponsored by: Alpha-Omega Beach Cleaning Proj
openssl: Import version 3.5.1Migrate to OpenSSL 3.5 in advance of FreeBSD 15.0. OpenSSL 3.0 will beEOL after 2026-09-07.Approved by: philip (mentor)Sponsored by: Alpha-Omega Beach Cleaning ProjectSponsored by: The FreeBSD FoundationDifferential revision: https://reviews.freebsd.org/D51613
Merge commit '1095efe41feed8ea5a6fe5ca123c347ae0914801'Approved by: philip (mentor)Sponsored by: Alpha-Omega Beach Cleaning ProjectSponsored by: The FreeBSD Foundation
openssl: Import OpenSSL 3.0.16This release incorporates the following bug fixes and mitigations:- [CVE-2024-13176](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-13176- [CVE-2024-9143
openssl: Import OpenSSL 3.0.16This release incorporates the following bug fixes and mitigations:- [CVE-2024-13176](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-13176- [CVE-2024-9143](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-9143)Release notes can be found at:https://openssl-library.org/news/openssl-3.0-notes/index.htmlMFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D49296
openssl: Import OpenSSL 3.0.15.This release incorporates the following bug fixes and mitigations:- Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])- Fixed possible buffer o
openssl: Import OpenSSL 3.0.15.This release incorporates the following bug fixes and mitigations:- Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])- Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])Release notes can be found at:https://openssl-library.org/news/openssl-3.0-notes/index.htmlCo-authored-by: gordonMFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D46602Merge commit '108164cf95d9594884c2dcccba2691335e6f221b'
OpenSSL: Vendor import of OpenSSL 3.0.13 * Fixed PKCS12 Decoding crashes ([CVE-2024-0727]) * Fixed Excessive time spent checking invalid RSA public keys ([CVE-2023-6237]) * Fixed POLY1305 MAC
OpenSSL: Vendor import of OpenSSL 3.0.13 * Fixed PKCS12 Decoding crashes ([CVE-2024-0727]) * Fixed Excessive time spent checking invalid RSA public keys ([CVE-2023-6237]) * Fixed POLY1305 MAC implementation corrupting vector registers on PowerPC CPUs which support PowerISA 2.07 ([CVE-2023-6129]) * Fix excessive time spent in DH check / generation with large Q parameter value ([CVE-2023-5678])Release notes can be found at https://www.openssl.org/news/openssl-3.0-notes.html.Approved by: emasteMFC after: 3 daysMerge commit '9dd13e84fa8eca8f3462bd55485aa3da8c37f54a'