Changes in Makefile

d5984d5f29a7c717b88ccd17a85a747792403cdf - OpenSSL: update Makefiles to reflect 3.5.1 release

Mon, 08 Sep 2025 05:20:42 +0200

OpenSSL: update Makefiles to reflect 3.5.1 releaseThis is a targeted effort to update the INCS and SRCS entries forlibcrypto, the legacy provider, and libssl to match what upstream(OpenSSL) builds in their respective libraries.The number of stylistic changes were kept at a minimum.Another incoming change will reformat this file to make futuremaintenance easier.MFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D52554 List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

b370fb00c89e9182f650943902a008f0c60883d6 - openssl: link enough files for the legacy provider to actually load

Mon, 01 Sep 2025 18:39:14 +0200

openssl: link enough files for the legacy provider to actually loadReviewed by: khorben, ngieDifferential Revision: https://reviews.freebsd.org/D52113 List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

4757b351ea9d59d71d4a38b82506d2d16fcd560d - openssl: Import version 3.5.1

Fri, 11 Jul 2025 23:57:10 +0200

openssl: Import version 3.5.1Migrate to OpenSSL 3.5 in advance of FreeBSD 15.0. OpenSSL 3.0 will beEOL after 2026-09-07.Approved by: philip (mentor)Sponsored by: Alpha-Omega Beach Cleaning ProjectSponsored by: The FreeBSD FoundationDifferential revision: https://reviews.freebsd.org/D51613 List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

e9ac41698b2f322d55ccf9da50a3596edb2c1800 - Remove residual blank line at start of Makefile

Mon, 15 Jul 2024 06:46:32 +0200

Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

572948d00ddfea1dbd2cba9117b36fc3c47ca444 - Revert "OpenSSL: use the upstream provided version.map files for the fips/legacy providers"

Sun, 21 Apr 2024 18:55:01 +0200

Revert "OpenSSL: use the upstream provided version.map files for the fips/legacy providers"This change is still under review and should not have been mergeddirectly to main (yet).This is a case and point for using `push.default` to nothing instead ofmatching or simple.This reverts commit 42ce242e353065dfbaa248955f6657005a395a95. List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

42ce242e353065dfbaa248955f6657005a395a95 - OpenSSL: use the upstream provided version.map files for the fips/legacy providers

Sat, 20 Apr 2024 21:12:50 +0200

OpenSSL: use the upstream provided version.map files for the fips/legacy providersThis change introduces a static copy of the fips and legacy linker version mapsgenerated by the OpenSSL 3.0.13 build process.This unbreaks the fips and legacy providers by not exposing unnecessarysymbols from the fips/legacy provider shared objects shared with otherproviders (base, default) and libcrypto.More discussion:Prior to this change, loading the fips provider indirectly from aFreeBSD 14.0-CURRENT and 15.0-CURRENT host would result in aprocess-wide deadlock when invoking select OpenSSL APIs(CONF_modules_load* in this particular example).Speaking with the upstream maintainers [1], it became obvious thatthe FreeBSD base system was incorrectly building/linking the fipsprovider, resulting in a symbol collision at runtime, and thus aprocess-wide deadlock in specific circumstances. The fips providerwould deadlock when trying to acquire a write lock on internalstructures which should have only been available to the base anddefault providers, as certain preprocessor ifdefs only allow specificinternal calls to be made with the base and default providers.1. https://github.com/openssl/openssl/issues/24202Differential Revision: https://reviews.freebsd.org/D44892 List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

1a18383a52bc373e316d224cef1298debf6f7e25 - libcrypto: link engines and the legacy provider to libcrypto

Fri, 15 Sep 2023 17:14:16 +0200

libcrypto: link engines and the legacy provider to libcryptoOpenSSL's legacy provider module and engines need to link tolibcrypto.so, as it provides some of the actual implementations oflegacy routines.This is a little tricky due to build order issues. Introduce a smallhack (LIBCRYPTO_WITHOUT_SUBDIRS) that builds libcrypto.so in its usualearly phase without any OpenSSL provider modules or engines. This isintended to restore the test suite; a future change should remove thehack and replace it with a better approach.PR: 254853, 273528Discussed with: Folks at EuroBSDCon in CoimbraSponsored by: The FreeBSD Foundation List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf - Remove $FreeBSD$: one-line sh pattern

Wed, 16 Aug 2023 19:55:03 +0200

Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

4a3cc17e317212d46a70ff88fd67889f06468ed5 - libcrypto: expand the common Makefile for providers

Fri, 30 Jun 2023 19:20:31 +0200

libcrypto: expand the common Makefile for providersOpenSSL 3 supports a modular architecture, allowing different providersto bring specific implementations of cryptographical algorithms. Thischange adds mandatory source files to every provider.Sponsored by: The FreeBSD FoundationPull Request: https://github.com/freebsd/freebsd-src/pull/787 List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

87e08018b175e564b6a19ee41bc65af66f55e078 - libcrypto: add missing symbols to the legacy provider

Thu, 29 Jun 2023 23:32:59 +0200

libcrypto: add missing symbols to the legacy providerOpenSSL 3 supports a modular architecture, allowing different providersto bring specific implementations of cryptographical algorithms. Onesuch provider, "legacy", ships with OpenSSL 3 directly, and groupsobsoleted algorithms that can still optionally be used anyway.The import of OpenSSL 3.0.9 was building this provider incorrectly,missing symbols required for proper operation.Sponsored by: The FreeBSD FoundationPull Request: https://github.com/freebsd/freebsd-src/pull/787 List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

8e7046ff29a09852584b87f5237c230283023e11 - libcrypto: Revert recent changes to fix legacy and fips providers

Tue, 04 Jul 2023 22:37:21 +0200

libcrypto: Revert recent changes to fix legacy and fips providersThey break the !amd64 builds due to an underspecified include path andwill be re-applied once that's fixed.Reported by: Ronald Klop List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile

0b27be500a947b76385a4a179e6f61d83af6adb3 - libcrypto: expand the common Makefile for providers

Fri, 30 Jun 2023 19:20:31 +0200

0457eebbe83f951238387f6f720597f3165c3828 - libcrypto: add missing symbols to the legacy provider

Thu, 29 Jun 2023 23:32:59 +0200

b077aed33b7b6aefca7b17ddb250cf521f938613 - Merge OpenSSL 3.0.9

Sat, 24 Jun 2023 00:53:35 +0200

Merge OpenSSL 3.0.9Migrate to OpenSSL 3.0 in advance of FreeBSD 14.0. OpenSSL 1.1.1 (theversion we were previously using) will be EOL as of 2023-09-11.Most of the base system has already been updated for a seamless switchto OpenSSL 3.0. For many components we've added`-DOPENSSL_API_COMPAT=0x10100000L` to CFLAGS to specify the API version,which avoids deprecation warnings from OpenSSL 3.0. Changes have alsobeen made to avoid OpenSSL APIs that were already deprecated in OpenSSL1.1.1. The process of updating to contemporary APIs can continue afterthis merge.Additional changes are still required for libarchive and Kerberos-related libraries or tools; workarounds will immediately follow thiscommit. Fixes are in progress in the upstream projects and will beincorporated when those are next updated.There are some performance regressions in benchmarks (certain tests in`openssl speed`) and in some OpenSSL consumers in ports (e.g. haproxy).Investigation will continue for these.Netflix's testing showed no functional regression and a rather small,albeit statistically significant, increase in CPU consumption withOpenSSL 3.0.Thanks to ngie@ and des@ for updating base system components, toantoine@ and bofh@ for ports exp-runs and port fixes/workarounds, and toNetflix and everyone who tested prior to commit or contributed to thisupdate in other ways.PR: 271615PR: 271656 [exp-run]Relnotes: YesSponsored by: The FreeBSD Foundation List of files: /freebsd/secure/lib/libcrypto/modules/legacy/Makefile