src/secure/lib/libssl, branch releng/13.5FreeBSD source treehttps://cgit-dev.freebsd.org/src/atom?h=releng%2F13.52023-08-23T17:43:30ZRemove $FreeBSD$: one-line sh pattern2023-08-23T17:43:30ZWarner Loshimp@FreeBSD.org2023-08-22T01:32:01Zurn:sha1:023fc80ee38a117fa65b2ccb2abf8bdc7dbd6fd9
Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
Similar commit in main:
(cherry picked from commit d0b2dbfa0ecf)
Remove $FreeBSD$: one-line .c pattern2023-08-23T17:43:26ZWarner Loshimp@FreeBSD.org2023-08-22T01:31:41Zurn:sha1:3d497e17ebd33fe0f58d773e35ab994d750258d6
Remove /^[\s*]*__FBSDID\("\$FreeBSD\$"\);?\s*\n/
Similar commit in main:
(cherry picked from commit 1d386b48a555)
openssl: install pc files2022-10-12T08:34:03ZBaptiste Daroussinbapt@FreeBSD.org2022-08-26T14:02:09Zurn:sha1:41067961b6f3a0b5667e40e768b7b46e4092348e
most programs in ports are looking for .pc files in order to get the
necessary information on how to compile and link against openssl.
The ports now also has a way to hide or force a path for pkgconf.
Providing .pc files along with openssl in base will allow (once all
the supported version of FreeBSD has it) so improve the framework to
deal with openssl in base vs openssl in ports (and libressl)
This will also greatly reduce the number of patches necessary to
workaround the build systems which only knows how to detect where
openssl is installed via pkgconf.
PR: 266051
MFC After: 3 weeks
Reviewed by: jkim, delphij
Exp-run by: antoine
Differential Revision: https://reviews.freebsd.org/D36360
(cherry picked from commit b323fa85f15268ac44b8ff90faf90bce5d87b608)
pkgbase: Put openssl in its own package2021-06-30T07:24:31ZEmmanuel Vadotmanu@FreeBSD.org2021-05-02T15:46:17Zurn:sha1:632e3f2f3a66cea437a93169b0f907931348ffb5
This is useful for upgrade and also to make tiny jail so they won't
depend on FreeBSD-utilities (where openssl was packaged before).
MFC after: 1 month
Differential Revision: https://reviews.freebsd.org/D30081
libcrypto: Add symbol versions for symbols added since 1.1.1d.2021-06-09T21:53:42ZJohn Baldwinjhb@FreeBSD.org2021-05-28T22:18:15Zurn:sha1:f8edb3f9c725e5b4a60981ee19a56395b0497e13
While here, trim a spurious local: I missed when added SSL_sendfile.
PR: 255277
Reported by: yuri
Reviewed by: jkim
Differential Revision: https://reviews.freebsd.org/D30483
(cherry picked from commit 7ad70d22c667173586c04fc13dd315995d78fbbf)
OpenSSL: Support for kernel TLS offload (KTLS)2021-02-05T00:03:20ZJohn Baldwinjhb@FreeBSD.org2021-01-16T00:17:31Zurn:sha1:c1c52cd57e8810ca294d02220dfa72607c9a5567
This merges upstream patches from OpenSSL's master branch to add
KTLS infrastructure for TLS 1.0-1.3 including both RX and TX
offload and SSL_sendfile support on both Linux and FreeBSD.
Note that TLS 1.3 only supports TX offload.
A new WITH/WITHOUT_OPENSSL_KTLS determines if OpenSSL is built with
KTLS support. It defaults to enabled on amd64 and disabled on all
other architectures.
Sponsored by: Netflix
(cherry picked from commit aa906e2a4957db700d9e6cc60857e1afe1aecc85)
Fix a typo in the cpp macro defined for PIC.2020-08-13T20:28:35ZJohn Baldwinjhb@FreeBSD.org2020-08-13T20:28:35Zurn:sha1:1e04d9ff3e2565a402e449eb59b30b826bb2894a
In practice this isn't used in OpenSSL outside of some sparc-specific
code.
Reviewed by: delphij
Differential Revision: https://reviews.freebsd.org/D26058
Replace OPENSSL_NO_SSL3_METHODs with dummies2020-07-01T00:59:28ZConrad Meyercem@FreeBSD.org2020-07-01T00:59:28Zurn:sha1:80a315ffb6053e5e2b1a0d07d7571fad0e0a64bd
SSLv3 has been deprecated since 2015 (and broken since 2014: "POODLE"); it
should not have shipped in FreeBSD 11 (2016) or 12 (2018). No one should use
it, and if they must, they can use some implementation outside of base.
There are three symbols removed with OPENSSL_NO_SSL3_METHOD:
SSLv3_client_method
SSLv3_method
SSLv3_server_method
These symbols exist to request an explicit SSLv3 connection to a server.
There is no good reason for an application to link or invoke these symbols
instead of TLS_method(), et al (née SSLv23_method, et al). Applications
that do so have broken cryptography.
Define these symbols for some pedantic definition of ABI stability, but
remove the functionality again (r361392) after r362620.
Reviewed by: gordon, jhb (earlier-but-equivalent version both)
Discussed with: bjk, kib
Differential Revision: https://reviews.freebsd.org/D25493
Update Makefile.depend files2019-12-11T17:37:53ZSimon J. Gerratysjg@FreeBSD.org2019-12-11T17:37:53Zurn:sha1:2c9a9dfc187d171de6b92654d71b977f067ed641
Update a bunch of Makefile.depend files as
a result of adding Makefile.depend.options files
Reviewed by: bdrewery
MFC after: 1 week
Sponsored by: Juniper Networks
Differential Revision: https://reviews.freebsd.org/D22494
Merge OpenSSL 1.1.1a.2018-11-20T21:10:04ZJung-uk Kimjkim@FreeBSD.org2018-11-20T21:10:04Zurn:sha1:c9cf7b5cb1693e44f8caa63f47bbb9ae85508687