aboutsummaryrefslogtreecommitdiff
path: root/crypto/openssl/doc/man3
Commit message (Collapse)AuthorAgeFilesLines
* crypto/openssl: update to 3.5.4Enji Cooper8 days4-18/+24
| | | | | | | | | | This change includes all necessary changes required to update to OpenSSL 3.5.4. More information about the 3.5.4 release can be found in the relevant release notes (see 8e12a5c4eb3507846b5 for more details). Merge commit '8e12a5c4eb3507846b507d0afe87d115af41df40'
* crypto/openssl: update component to 3.5.3Enji Cooper2025-09-2214-44/+67
| | | | | | | | | | | This change updates the sources for crypto/openssl. The subsequent commit will update the build artifacts to match the 3.5.3 release. More details about the update can be found in the related vendor branch commits. MFC after: 1 week Merge commit 'aed904c48f330dc76da942a8ee2d6eef9d11f572'
* Merge commit '1095efe41feed8ea5a6fe5ca123c347ae0914801'Pierre Pronchery2025-08-07337-1524/+13697
| | | | | | Approved by: philip (mentor) Sponsored by: Alpha-Omega Beach Cleaning Project Sponsored by: The FreeBSD Foundation
* openssl: Import OpenSSL 3.0.16Enji Cooper2025-03-1421-48/+100
| | | | | | | | | | | | This release incorporates the following bug fixes and mitigations: - [CVE-2024-13176](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-13176 - [CVE-2024-9143](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-9143) Release notes can be found at: https://openssl-library.org/news/openssl-3.0-notes/index.html MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D49296
* openssl: Import OpenSSL 3.0.15.Enji Cooper2024-09-0873-165/+257
| | | | | | | | | | | | | | | This release incorporates the following bug fixes and mitigations: - Fixed possible denial of service in X.509 name checks ([CVE-2024-6119]) - Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535]) Release notes can be found at: https://openssl-library.org/news/openssl-3.0-notes/index.html Co-authored-by: gordon MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D46602 Merge commit '108164cf95d9594884c2dcccba2691335e6f221b'
* Update to OpenSSL 3.0.14Enji Cooper2024-06-2610-19/+48
| | | | | | | | | | This release resolves 3 upstream found CVEs: - Fixed potential use after free after SSL_free_buffers() is called (CVE-2024-4741) - Fixed an issue where checking excessively long DSA keys or parameters may be very slow (CVE-2024-4603) - Fixed unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511) MFC after: 3 days Merge commit '1070e7dca8223387baf5155524b28f62bfe7da3c'
* OpenSSL: Vendor import of OpenSSL 3.0.13Cy Schubert2024-02-0218-41/+870
| | | | | | | | | | | | | | | | | | * Fixed PKCS12 Decoding crashes ([CVE-2024-0727]) * Fixed Excessive time spent checking invalid RSA public keys ([CVE-2023-6237]) * Fixed POLY1305 MAC implementation corrupting vector registers on PowerPC CPUs which support PowerISA 2.07 ([CVE-2023-6129]) * Fix excessive time spent in DH check / generation with large Q parameter value ([CVE-2023-5678]) Release notes can be found at https://www.openssl.org/news/openssl-3.0-notes.html. Approved by: emaste MFC after: 3 days Merge commit '9dd13e84fa8eca8f3462bd55485aa3da8c37f54a'
* OpenSSL: update to 3.0.12Ed Maste2023-10-2433-52/+83
| | | | | | | | | | | | OpenSSL 3.0.12 addresses: * Fix incorrect key and IV resizing issues when calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() with OSSL_PARAM parameters that alter the key or IV length ([CVE-2023-5363]). Relnotes: Yes Sponsored by: The FreeBSD Foundation
* OpenSSL: update to 3.0.11Pierre Pronchery2023-10-0913-41/+83
| | | | | | | | | | OpenSSL 3.0.11 addresses: POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807) Relnotes: Yes Pull request: https://github.com/freebsd/freebsd-src/pull/852 Sponsored by: The FreeBSD Foundation
* OpenSSL: clean up botched merges in OpenSSL 3.0.9 importJung-uk Kim2023-08-111-23/+0
| | | | No functional change intended.
* OpenSSL: update to 3.0.10Pierre Pronchery2023-08-1048-117/+148
| | | | | | | | | | | | | OpenSSL 3.0.10 addresses: - CVE-2023-3817 - CVE-2023-3446 - CVE-2023-2975 (Note that the vendor branch commit incorrectly referenced 3.0.9.) Relnotes: Yes Pull request: https://github.com/freebsd/freebsd-src/pull/808 Sponsored by: The FreeBSD Foundation
* Merge OpenSSL 3.0.9Pierre Pronchery2023-06-23614-6244/+28655
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Migrate to OpenSSL 3.0 in advance of FreeBSD 14.0. OpenSSL 1.1.1 (the version we were previously using) will be EOL as of 2023-09-11. Most of the base system has already been updated for a seamless switch to OpenSSL 3.0. For many components we've added `-DOPENSSL_API_COMPAT=0x10100000L` to CFLAGS to specify the API version, which avoids deprecation warnings from OpenSSL 3.0. Changes have also been made to avoid OpenSSL APIs that were already deprecated in OpenSSL 1.1.1. The process of updating to contemporary APIs can continue after this merge. Additional changes are still required for libarchive and Kerberos- related libraries or tools; workarounds will immediately follow this commit. Fixes are in progress in the upstream projects and will be incorporated when those are next updated. There are some performance regressions in benchmarks (certain tests in `openssl speed`) and in some OpenSSL consumers in ports (e.g. haproxy). Investigation will continue for these. Netflix's testing showed no functional regression and a rather small, albeit statistically significant, increase in CPU consumption with OpenSSL 3.0. Thanks to ngie@ and des@ for updating base system components, to antoine@ and bofh@ for ports exp-runs and port fixes/workarounds, and to Netflix and everyone who tested prior to commit or contributed to this update in other ways. PR: 271615 PR: 271656 [exp-run] Relnotes: Yes Sponsored by: The FreeBSD Foundation
* OpenSSL: Merge OpenSSL 1.1.1uJung-uk Kim2023-05-301-3/+8
| | | | (cherry picked from commit 8ecb489345f08012fdc92a202a40119891cac330)
* OpenSSL: Merge OpenSSL 1.1.1sJung-uk Kim2022-11-0110-157/+206
| | | | Merge commit 'b6b67f23b82101d4c04c89f81d726b902ab77106'
* OpenSSL: Merge OpenSSL 1.1.1qJung-uk Kim2022-07-051-3/+3
| | | | Merge commit 'f874e59ffcd8b5ecd018ad8311d78e866340f3e9'
* OpenSSL: Merge OpenSSL 1.1.1pJung-uk Kim2022-06-212-5/+15
| | | | Merge commit '54ae8e38f717f22963c2a87f48af6ecefc6b3e9b'
* OpenSSL: Merge OpenSSL 1.1.1oJung-uk Kim2022-05-031-1/+11
| | | | Merge commit 'cf0ffd7607ed8f39829c6951a65a55fa1eb3aafe'
* OpenSSL: Merge OpenSSL 1.1.1nJung-uk Kim2022-03-157-29/+110
|
* Fix a bug in BN_mod_sqrt() that can cause it to loop forever.Gordon Tetlow2022-03-151-2/+13
| | | | | Obtained from: OpenSSL Project Security: CVE-2022-0778
* OpenSSL: Merge OpenSSL 1.1.1mJung-uk Kim2021-12-1412-74/+101
| | | | Merge commit '56eae1b760adf10835560a9ee595549a1f10410f'
* Import OpenSSL 1.1.1lJung-uk Kim2021-09-014-28/+32
|
* OpenSSL: Update KTLS documentationJohn Baldwin2021-08-173-17/+27
| | | | | | | | | | | | KTLS support has been changed to be off by default, and configuration is via a single "option" rather two "modes". Documentation is updated accordingly. Reviewed by: jkim Obtained from: OpenSSL (6878f4300213cfd7d4f01e26a8b97f70344da100) MFC after: 5 days Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D31441
* Handle partial data re-sending on ktls/sendfile on FreeBSDOleksandr Tymoshenko2021-02-171-1/+2
| | | | | | | | | | | | | | Add a handler for EBUSY sendfile error in addition to EAGAIN. With EBUSY returned the data still can be partially sent and user code has to be notified about it, otherwise it may try to send data multiple times. PR: 251969 Reviewed by: jkim Obtained from: OpenSSL (dfcfd17f2818cf520ce6381aed9ec3d2fc12170d) MFC after: 1 week Sponsored by: Netflix (merging to FreeBSD) Differential Revision: https://reviews.freebsd.org/D28714
* OpenSSL: Merge OpenSSL 1.1.1jJung-uk Kim2021-02-164-14/+54
| | | | Merge commit '4f55bd5321b72491d4eff396e4928e9ab0706735'
* OpenSSL: Support for kernel TLS offload (KTLS)John Baldwin2021-01-284-4/+75
| | | | | | | | | | | | | | | | | | | | This merges upstream patches from OpenSSL's master branch to add KTLS infrastructure for TLS 1.0-1.3 including both RX and TX offload and SSL_sendfile support on both Linux and FreeBSD. Note that TLS 1.3 only supports TX offload. A new WITH/WITHOUT_OPENSSL_KTLS determines if OpenSSL is built with KTLS support. It defaults to enabled on amd64 and disabled on all other architectures. Reviewed by: jkim (earlier version) Approved by: secteam Obtained from: OpenSSL (patches from master) MFC after: 1 week Relnotes: yes Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D28273
* Merge OpenSSL 1.1.1i.Jung-uk Kim2020-12-092-4/+2
| | | | Notes: svn path=/head/; revision=368472
* Merge OpenSSL 1.1.1h.Jung-uk Kim2020-09-22130-430/+562
| | | | Notes: svn path=/head/; revision=366004
* Merge OpenSSL 1.1.1g.Jung-uk Kim2020-04-213-4/+85
| | | | Notes: svn path=/head/; revision=360175
* Merge OpenSSL 1.1.1f.Jung-uk Kim2020-03-313-5/+32
| | | | Notes: svn path=/head/; revision=359486
* Merge OpenSSL 1.1.1e.Jung-uk Kim2020-03-1843-277/+951
| | | | Notes: svn path=/head/; revision=359060
* Merge OpenSSL 1.1.1d.Jung-uk Kim2019-09-1072-235/+434
| | | | Notes: svn path=/head/; revision=352191
* Merge OpenSSL 1.1.1c.Jung-uk Kim2019-05-2857-474/+563
| | | | Notes: svn path=/head/; revision=348340
* Merge OpenSSL 1.1.1b.Jung-uk Kim2019-02-26119-238/+293
| | | | Notes: svn path=/head/; revision=344602
* Merge OpenSSL 1.1.1a.Jung-uk Kim2018-11-2032-359/+630
| | | | Notes: svn path=/head/; revision=340703
* Update OpenSSL to 1.1.1.Jung-uk Kim2018-09-13464-10/+52033
| | | | | | | Note it does not update build infrastructure. Notes: svn path=/projects/openssl111/; revision=338663
* Merge OpenSSL 1.0.2p.Jung-uk Kim2018-08-141-0/+39
Notes: svn path=/head/; revision=337791
generated by cgit v1.2.3 (git 2.25.1) at 2025-10-12 14:23:59 +0000