FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F13.1.0 2021-06-30T07:24:31Z 2021-06-30T07:24:31Z Emmanuel Vadot manu@FreeBSD.org 2021-05-02T15:46:17Z urn:sha1:632e3f2f3a66cea437a93169b0f907931348ffb5 This is useful for upgrade and also to make tiny jail so they won't depend on FreeBSD-utilities (where openssl was packaged before). MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D30081 2021-06-09T21:53:42Z John Baldwin jhb@FreeBSD.org 2021-05-28T22:18:15Z urn:sha1:f8edb3f9c725e5b4a60981ee19a56395b0497e13 While here, trim a spurious local: I missed when added SSL_sendfile. PR: 255277 Reported by: yuri Reviewed by: jkim Differential Revision: https://reviews.freebsd.org/D30483 (cherry picked from commit 7ad70d22c667173586c04fc13dd315995d78fbbf) 2021-02-05T00:03:20Z John Baldwin jhb@FreeBSD.org 2021-01-16T00:17:31Z urn:sha1:c1c52cd57e8810ca294d02220dfa72607c9a5567 This merges upstream patches from OpenSSL's master branch to add KTLS infrastructure for TLS 1.0-1.3 including both RX and TX offload and SSL_sendfile support on both Linux and FreeBSD. Note that TLS 1.3 only supports TX offload. A new WITH/WITHOUT_OPENSSL_KTLS determines if OpenSSL is built with KTLS support. It defaults to enabled on amd64 and disabled on all other architectures. Sponsored by: Netflix (cherry picked from commit aa906e2a4957db700d9e6cc60857e1afe1aecc85) 2020-08-13T20:28:35Z John Baldwin jhb@FreeBSD.org 2020-08-13T20:28:35Z urn:sha1:1e04d9ff3e2565a402e449eb59b30b826bb2894a In practice this isn't used in OpenSSL outside of some sparc-specific code. Reviewed by: delphij Differential Revision: https://reviews.freebsd.org/D26058 2020-07-01T00:59:28Z Conrad Meyer cem@FreeBSD.org 2020-07-01T00:59:28Z urn:sha1:80a315ffb6053e5e2b1a0d07d7571fad0e0a64bd SSLv3 has been deprecated since 2015 (and broken since 2014: "POODLE"); it should not have shipped in FreeBSD 11 (2016) or 12 (2018). No one should use it, and if they must, they can use some implementation outside of base. There are three symbols removed with OPENSSL_NO_SSL3_METHOD: SSLv3_client_method SSLv3_method SSLv3_server_method These symbols exist to request an explicit SSLv3 connection to a server. There is no good reason for an application to link or invoke these symbols instead of TLS_method(), et al (née SSLv23_method, et al). Applications that do so have broken cryptography. Define these symbols for some pedantic definition of ABI stability, but remove the functionality again (r361392) after r362620. Reviewed by: gordon, jhb (earlier-but-equivalent version both) Discussed with: bjk, kib Differential Revision: https://reviews.freebsd.org/D25493 2019-12-11T17:37:53Z Simon J. Gerraty sjg@FreeBSD.org 2019-12-11T17:37:53Z urn:sha1:2c9a9dfc187d171de6b92654d71b977f067ed641 Update a bunch of Makefile.depend files as a result of adding Makefile.depend.options files Reviewed by: bdrewery MFC after: 1 week Sponsored by: Juniper Networks Differential Revision: https://reviews.freebsd.org/D22494 2018-11-20T21:10:04Z Jung-uk Kim jkim@FreeBSD.org 2018-11-20T21:10:04Z urn:sha1:c9cf7b5cb1693e44f8caa63f47bbb9ae85508687 2018-10-25T13:37:57Z Konstantin Belousov kib@FreeBSD.org 2018-10-25T13:37:57Z urn:sha1:89250cff0c9af8a2c976020468fbe9637b846dd3 Reported by: many Reviewed by: gjb Sponsored by: The FreeBSD Foundation MFC after: 3 hours 2018-09-25T22:21:36Z Jung-uk Kim jkim@FreeBSD.org 2018-09-25T22:21:36Z urn:sha1:8fef2de1fc0aedb055fbd6212287261eec857d49 It can't be right. :-( 2018-09-25T21:12:36Z Jung-uk Kim jkim@FreeBSD.org 2018-09-25T21:12:36Z urn:sha1:c66de03c60aee6067b956cd10db0ccae9b08ff95