en Copyright 2015 Java http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#e7be843b4a162e68651d3911f0357ed464915629 Merge commit '1095efe41feed8ea5a6fe5ca123c347ae0914801'Approved by: philip (mentor)Sponsored by: Alpha-Omega Beach Cleaning ProjectSponsored by: The FreeBSD Foundation List of files: /freebsd/crypto/openssl/Configure Thu, 07 Aug 2025 15:50:32 +0200 Pierre Pronchery <khorben@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#a7148ab39c03abd4d1a84997c70bf96f15dd2a09 openssl: Import OpenSSL 3.0.15.This release incorporates the following bug fixes and mitigations:- Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])- Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])Release notes can be found at:https://openssl-library.org/news/openssl-3.0-notes/index.htmlCo-authored-by: gordonMFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D46602Merge commit '108164cf95d9594884c2dcccba2691335e6f221b' List of files: /freebsd/crypto/openssl/Configure Sun, 08 Sep 2024 06:30:17 +0200 Enji Cooper <ngie@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#44096ebd22ddd0081a357011714eff8963614b65 Update to OpenSSL 3.0.14This release resolves 3 upstream found CVEs:- Fixed potential use after free after SSL_free_buffers() is called (CVE-2024-4741)- Fixed an issue where checking excessively long DSA keys or parameters may be very slow (CVE-2024-4603)- Fixed unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511)MFC after: 3 daysMerge commit '1070e7dca8223387baf5155524b28f62bfe7da3c' List of files: /freebsd/crypto/openssl/Configure Thu, 27 Jun 2024 01:50:13 +0200 Enji Cooper <ngie@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6 OpenSSL: Vendor import of OpenSSL 3.0.13 * Fixed PKCS12 Decoding crashes ([CVE-2024-0727]) * Fixed Excessive time spent checking invalid RSA public keys ([CVE-2023-6237]) * Fixed POLY1305 MAC implementation corrupting vector registers on PowerPC CPUs which support PowerISA 2.07 ([CVE-2023-6129]) * Fix excessive time spent in DH check / generation with large Q parameter value ([CVE-2023-5678])Release notes can be found at https://www.openssl.org/news/openssl-3.0-notes.html.Approved by: emasteMFC after: 3 daysMerge commit '9dd13e84fa8eca8f3462bd55485aa3da8c37f54a' List of files: /freebsd/crypto/openssl/Configure Fri, 02 Feb 2024 22:10:22 +0100 Cy Schubert <cy@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#aa7957345732816fb0ba8308798d2f79f45597f9 OpenSSL: update to 3.0.10OpenSSL 3.0.10 addresses:- CVE-2023-3817- CVE-2023-3446- CVE-2023-2975(Note that the vendor branch commit incorrectly referenced 3.0.9.)Relnotes: YesPull request: https://github.com/freebsd/freebsd-src/pull/808Sponsored by: The FreeBSD Foundation List of files: /freebsd/crypto/openssl/Configure Thu, 10 Aug 2023 18:07:32 +0200 Pierre Pronchery <pierre@freebsdfoundation.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#b077aed33b7b6aefca7b17ddb250cf521f938613 Merge OpenSSL 3.0.9Migrate to OpenSSL 3.0 in advance of FreeBSD 14.0. OpenSSL 1.1.1 (theversion we were previously using) will be EOL as of 2023-09-11.Most of the base system has already been updated for a seamless switchto OpenSSL 3.0. For many components we've added`-DOPENSSL_API_COMPAT=0x10100000L` to CFLAGS to specify the API version,which avoids deprecation warnings from OpenSSL 3.0. Changes have alsobeen made to avoid OpenSSL APIs that were already deprecated in OpenSSL1.1.1. The process of updating to contemporary APIs can continue afterthis merge.Additional changes are still required for libarchive and Kerberos-related libraries or tools; workarounds will immediately follow thiscommit. Fixes are in progress in the upstream projects and will beincorporated when those are next updated.There are some performance regressions in benchmarks (certain tests in`openssl speed`) and in some OpenSSL consumers in ports (e.g. haproxy).Investigation will continue for these.Netflix's testing showed no functional regression and a rather small,albeit statistically significant, increase in CPU consumption withOpenSSL 3.0.Thanks to ngie@ and des@ for updating base system components, toantoine@ and bofh@ for ports exp-runs and port fixes/workarounds, and toNetflix and everyone who tested prior to commit or contributed to thisupdate in other ways.PR: 271615PR: 271656 [exp-run]Relnotes: YesSponsored by: The FreeBSD Foundation List of files: /freebsd/crypto/openssl/Configure Sat, 24 Jun 2023 00:53:35 +0200 Pierre Pronchery <pierre@freebsdfoundation.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#8f1ef87a6b93af292e68f8e33087e2df6325e9bb OpenSSL: Merge OpenSSL 1.1.1u(cherry picked from commit 8ecb489345f08012fdc92a202a40119891cac330) List of files: /freebsd/crypto/openssl/Configure Tue, 30 May 2023 16:24:15 +0200 Jung-uk Kim <jkim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#640242a5915761ce63205bdb0542fa3c1473c0ff OpenSSL: Merge OpenSSL 1.1.1tMerge commit '0d51f658515c605fcc4a8073cb5a8e0d7d904088' List of files: /freebsd/crypto/openssl/Configure Tue, 07 Feb 2023 19:51:38 +0100 Jung-uk Kim <jkim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#5ac766ab8ec23e780f108b7903d46e553d5e39d1 OpenSSL: Merge OpenSSL 1.1.1n List of files: /freebsd/crypto/openssl/Configure Wed, 16 Mar 2022 00:35:22 +0100 Jung-uk Kim <jkim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#b2bf0c7e5f4037d63458def91a026592468afd2f OpenSSL: Merge OpenSSL 1.1.1mMerge commit '56eae1b760adf10835560a9ee595549a1f10410f' List of files: /freebsd/crypto/openssl/Configure Tue, 14 Dec 2021 20:04:30 +0100 Jung-uk Kim <jkim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#88e852c0b5c872b1a3234515623104ae61b60773 OpenSSL: Merge OpenSSL 1.1.1jMerge commit '4f55bd5321b72491d4eff396e4928e9ab0706735' List of files: /freebsd/crypto/openssl/Configure Tue, 16 Feb 2021 23:00:27 +0100 Jung-uk Kim <jkim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#aa906e2a4957db700d9e6cc60857e1afe1aecc85 OpenSSL: Support for kernel TLS offload (KTLS)This merges upstream patches from OpenSSL's master branch to addKTLS infrastructure for TLS 1.0-1.3 including both RX and TXoffload and SSL_sendfile support on both Linux and FreeBSD.Note that TLS 1.3 only supports TX offload.A new WITH/WITHOUT_OPENSSL_KTLS determines if OpenSSL is built withKTLS support. It defaults to enabled on amd64 and disabled on allother architectures.Reviewed by: jkim (earlier version)Approved by: secteamObtained from: OpenSSL (patches from master)MFC after: 1 weekRelnotes: yesSponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D28273 List of files: /freebsd/crypto/openssl/Configure Sat, 16 Jan 2021 01:17:31 +0100 John Baldwin <jhb@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#58f351825a371d1a3dd693d6f64a1245ea851a51 Merge OpenSSL 1.1.1h. List of files: /freebsd/crypto/openssl/Configure Tue, 22 Sep 2020 18:18:31 +0200 Jung-uk Kim <jkim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#17f01e9963948a18f55eb97173123702c5dae671 Merge OpenSSL 1.1.1e. List of files: /freebsd/crypto/openssl/Configure Wed, 18 Mar 2020 03:13:12 +0100 Jung-uk Kim <jkim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#61c1328eb016476ee7ff5ad65d8224bb43e572db Merge ^/head r352105 through r352307. List of files: /freebsd/crypto/openssl/Configure Fri, 13 Sep 2019 23:15:01 +0200 Dimitry Andric <dim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#da327cd22e88f26f6cab9d4c45805b512139aa11 Merge OpenSSL 1.1.1d. List of files: /freebsd/crypto/openssl/Configure Tue, 10 Sep 2019 23:08:17 +0200 Jung-uk Kim <jkim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#0269ae4c19ad779b43b0d6e2416ac7386945d692 MFHead @348740Sponsored by: The FreeBSD Foundation List of files: /freebsd/crypto/openssl/Configure Thu, 06 Jun 2019 18:20:50 +0200 Alan Somers <asomers@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#610a21fd82f731685fabbf6da5387e981b07fbbd Merge OpenSSL 1.1.1c. List of files: /freebsd/crypto/openssl/Configure Tue, 28 May 2019 23:54:12 +0200 Jung-uk Kim <jkim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#2aaf9152a852aba9eb2036b95f4948ee77988826 MFHead@r345275 List of files: /freebsd/crypto/openssl/Configure Mon, 18 Mar 2019 20:21:53 +0100 Alan Somers <asomers@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/crypto/openssl/Configure#b18a4ccab954b694b9ed6dcc83773f615c430d33 MFhead@r344786 List of files: /freebsd/crypto/openssl/Configure Tue, 05 Mar 2019 02:00:38 +0100 Enji Cooper <ngie@FreeBSD.org>