src/secure/lib/libcrypto/Version.map, branch release/14.3.0FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=release%2F14.3.02023-08-16T17:55:03ZRemove $FreeBSD$: one-line sh pattern2023-08-16T17:55:03ZWarner Loshimp@FreeBSD.org2023-08-16T17:55:03Zurn:sha1:d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf
Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
openssl: include d2i_KeyParams() and d2i_KeyParams_bio()2023-07-09T13:18:21ZKristof Provostkp@FreeBSD.org2023-07-07T19:25:34Zurn:sha1:ebd508a0b2719e15575e8a2224f0730c4d37afec
These functions are new, and some ports (e.g.opensc) expect to have them
available. Add the file they're defined in to the build, and add them
to Version.map.
PR: 270076
Reviewed by: markj, emaste, pierre
Fixes: b077aed33b7b ("Merge OpenSSL 3.0.9")
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D40914
Do not expose architecture specific symbols2023-06-24T10:13:45ZEnji Cooperngie@FreeBSD.org2023-06-24T09:13:31Zurn:sha1:6f6446b33064f099e7c20c6465116a91bdf0e141
The following methods have existed since 1.0.2, however, they are
deprecated and are not available on all architectures.
- EC_GFp_nistp224_method
- EC_GFp_nistp256_method
- EC_GFp_nistp521_method
Do not expose them via libcrypto.
Discussed with: emaste
Merge OpenSSL 3.0.92023-06-23T22:53:36ZPierre Proncherypierre@freebsdfoundation.org2023-06-23T22:53:35Zurn:sha1:b077aed33b7b6aefca7b17ddb250cf521f938613
Migrate to OpenSSL 3.0 in advance of FreeBSD 14.0. OpenSSL 1.1.1 (the
version we were previously using) will be EOL as of 2023-09-11.
Most of the base system has already been updated for a seamless switch
to OpenSSL 3.0. For many components we've added
`-DOPENSSL_API_COMPAT=0x10100000L` to CFLAGS to specify the API version,
which avoids deprecation warnings from OpenSSL 3.0. Changes have also
been made to avoid OpenSSL APIs that were already deprecated in OpenSSL
1.1.1. The process of updating to contemporary APIs can continue after
this merge.
Additional changes are still required for libarchive and Kerberos-
related libraries or tools; workarounds will immediately follow this
commit. Fixes are in progress in the upstream projects and will be
incorporated when those are next updated.
There are some performance regressions in benchmarks (certain tests in
`openssl speed`) and in some OpenSSL consumers in ports (e.g. haproxy).
Investigation will continue for these.
Netflix's testing showed no functional regression and a rather small,
albeit statistically significant, increase in CPU consumption with
OpenSSL 3.0.
Thanks to ngie@ and des@ for updating base system components, to
antoine@ and bofh@ for ports exp-runs and port fixes/workarounds, and to
Netflix and everyone who tested prior to commit or contributed to this
update in other ways.
PR: 271615
PR: 271656 [exp-run]
Relnotes: Yes
Sponsored by: The FreeBSD Foundation
libcrypto: Add symbol versions for symbols added since 1.1.1d.2021-05-28T22:18:15ZJohn Baldwinjhb@FreeBSD.org2021-05-28T22:18:15Zurn:sha1:7ad70d22c667173586c04fc13dd315995d78fbbf
While here, trim a spurious local: I missed when added SSL_sendfile.
PR: 255277
Reported by: yuri
Reviewed by: jkim
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D30483
Merge OpenSSL 1.1.1d.2019-09-10T21:08:17ZJung-uk Kimjkim@FreeBSD.org2019-09-10T21:08:17Zurn:sha1:da327cd22e88f26f6cab9d4c45805b512139aa11Merge OpenSSL 1.1.1c.2019-05-28T21:54:12ZJung-uk Kimjkim@FreeBSD.org2019-05-28T21:54:12Zurn:sha1:610a21fd82f731685fabbf6da5387e981b07fbbdAdd OpenSSL symbol version maps.2018-09-13T23:51:54ZJung-uk Kimjkim@FreeBSD.org2018-09-13T23:51:54Zurn:sha1:cec27dca41f49438670a4222883f41d468a2d25b
Note the files are not automatically generated for now.