aboutsummaryrefslogtreecommitdiff
path: root/crypto/openssl/doc
Commit message (Collapse)AuthorAgeFilesLines
* OpenSSL: clean up botched merges in OpenSSL 3.0.9 importJung-uk Kim2023-08-111-23/+0
| | | | No functional change intended.
* OpenSSL: update to 3.0.10Pierre Pronchery2023-08-1067-171/+251
|\ | | | | | | | | | | | | | | | | | | | | | | | | OpenSSL 3.0.10 addresses: - CVE-2023-3817 - CVE-2023-3446 - CVE-2023-2975 (Note that the vendor branch commit incorrectly referenced 3.0.9.) Relnotes: Yes Pull request: https://github.com/freebsd/freebsd-src/pull/808 Sponsored by: The FreeBSD Foundation
* | Merge OpenSSL 3.0.9Pierre Pronchery2023-06-23890-15160/+70913
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Migrate to OpenSSL 3.0 in advance of FreeBSD 14.0. OpenSSL 1.1.1 (the version we were previously using) will be EOL as of 2023-09-11. Most of the base system has already been updated for a seamless switch to OpenSSL 3.0. For many components we've added `-DOPENSSL_API_COMPAT=0x10100000L` to CFLAGS to specify the API version, which avoids deprecation warnings from OpenSSL 3.0. Changes have also been made to avoid OpenSSL APIs that were already deprecated in OpenSSL 1.1.1. The process of updating to contemporary APIs can continue after this merge. Additional changes are still required for libarchive and Kerberos- related libraries or tools; workarounds will immediately follow this commit. Fixes are in progress in the upstream projects and will be incorporated when those are next updated. There are some performance regressions in benchmarks (certain tests in `openssl speed`) and in some OpenSSL consumers in ports (e.g. haproxy). Investigation will continue for these. Netflix's testing showed no functional regression and a rather small, albeit statistically significant, increase in CPU consumption with OpenSSL 3.0. Thanks to ngie@ and des@ for updating base system components, to antoine@ and bofh@ for ports exp-runs and port fixes/workarounds, and to Netflix and everyone who tested prior to commit or contributed to this update in other ways. PR: 271615 PR: 271656 [exp-run] Relnotes: Yes Sponsored by: The FreeBSD Foundation
* | OpenSSL: Merge OpenSSL 1.1.1uJung-uk Kim2023-05-302-3/+13
| | | | | | | | (cherry picked from commit 8ecb489345f08012fdc92a202a40119891cac330)
* | OpenSSL: Merge OpenSSL 1.1.1sJung-uk Kim2022-11-0111-167/+220
|\| | | | | | | Merge commit 'b6b67f23b82101d4c04c89f81d726b902ab77106'
* | OpenSSL: Merge OpenSSL 1.1.1qJung-uk Kim2022-07-051-3/+3
|\| | | | | | | Merge commit 'f874e59ffcd8b5ecd018ad8311d78e866340f3e9'
* | OpenSSL: Merge OpenSSL 1.1.1pJung-uk Kim2022-06-212-5/+15
|\| | | | | | | Merge commit '54ae8e38f717f22963c2a87f48af6ecefc6b3e9b'
* | OpenSSL: Merge OpenSSL 1.1.1oJung-uk Kim2022-05-032-1/+21
|\| | | | | | | Merge commit 'cf0ffd7607ed8f39829c6951a65a55fa1eb3aafe'
* | OpenSSL: Merge OpenSSL 1.1.1nJung-uk Kim2022-03-158-30/+114
| |
* | Fix a bug in BN_mod_sqrt() that can cause it to loop forever.Gordon Tetlow2022-03-151-2/+13
| | | | | | | | | | Obtained from: OpenSSL Project Security: CVE-2022-0778
* | OpenSSL: Merge OpenSSL 1.1.1mJung-uk Kim2021-12-1415-79/+114
| | | | | | | | Merge commit '56eae1b760adf10835560a9ee595549a1f10410f'
* | Import OpenSSL 1.1.1lJung-uk Kim2021-09-018-35/+39
| |
* | OpenSSL: Update KTLS documentationJohn Baldwin2021-08-173-17/+27
| | | | | | | | | | | | | | | | | | | | | | | | KTLS support has been changed to be off by default, and configuration is via a single "option" rather two "modes". Documentation is updated accordingly. Reviewed by: jkim Obtained from: OpenSSL (6878f4300213cfd7d4f01e26a8b97f70344da100) MFC after: 5 days Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D31441
* | Handle partial data re-sending on ktls/sendfile on FreeBSDOleksandr Tymoshenko2021-02-171-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a handler for EBUSY sendfile error in addition to EAGAIN. With EBUSY returned the data still can be partially sent and user code has to be notified about it, otherwise it may try to send data multiple times. PR: 251969 Reviewed by: jkim Obtained from: OpenSSL (dfcfd17f2818cf520ce6381aed9ec3d2fc12170d) MFC after: 1 week Sponsored by: Netflix (merging to FreeBSD) Differential Revision: https://reviews.freebsd.org/D28714
* | OpenSSL: Merge OpenSSL 1.1.1jJung-uk Kim2021-02-1626-71/+107
|\| | | | | | | Merge commit '4f55bd5321b72491d4eff396e4928e9ab0706735'
* | OpenSSL: Support for kernel TLS offload (KTLS)John Baldwin2021-01-284-4/+75
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This merges upstream patches from OpenSSL's master branch to add KTLS infrastructure for TLS 1.0-1.3 including both RX and TX offload and SSL_sendfile support on both Linux and FreeBSD. Note that TLS 1.3 only supports TX offload. A new WITH/WITHOUT_OPENSSL_KTLS determines if OpenSSL is built with KTLS support. It defaults to enabled on amd64 and disabled on all other architectures. Reviewed by: jkim (earlier version) Approved by: secteam Obtained from: OpenSSL (patches from master) MFC after: 1 week Relnotes: yes Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D28273
* | Merge OpenSSL 1.1.1i.Jung-uk Kim2020-12-093-8/+10
|\| | | | | | | Notes: svn path=/head/; revision=368472
* | Merge OpenSSL 1.1.1h.Jung-uk Kim2020-09-22151-548/+685
|\| | | | | | | Notes: svn path=/head/; revision=366004
* | Merge OpenSSL 1.1.1g.Jung-uk Kim2020-04-214-6/+87
|\| | | | | | | Notes: svn path=/head/; revision=360175
* | Merge OpenSSL 1.1.1f.Jung-uk Kim2020-03-313-5/+32
|\| | | | | | | Notes: svn path=/head/; revision=359486
* | Merge OpenSSL 1.1.1e.Jung-uk Kim2020-03-1857-624/+1410
|\| | | | | | | Notes: svn path=/head/; revision=359060
* | Merge OpenSSL 1.1.1d.Jung-uk Kim2019-09-1086-259/+464
|\| | | | | | | Notes: svn path=/head/; revision=352191
* | Merge OpenSSL 1.1.1c.Jung-uk Kim2019-05-2863-494/+583
|\| | | | | | | Notes: svn path=/head/; revision=348340
* | Merge OpenSSL 1.1.1b.Jung-uk Kim2019-02-26141-290/+378
|\| | | | | | | Notes: svn path=/head/; revision=344602
* | Merge OpenSSL 1.1.1a.Jung-uk Kim2018-11-2041-409/+756
|\| | | | | | | Notes: svn path=/head/; revision=340703
* | Update OpenSSL to 1.1.1.Jung-uk Kim2018-09-13917-53059/+70904
|\| | | | | | | | | | | | | Note it does not update build infrastructure. Notes: svn path=/projects/openssl111/; revision=338663
* | Merge OpenSSL 1.0.2p.Jung-uk Kim2018-08-1424-166/+280
|\| | | | | | | Notes: svn path=/head/; revision=337791
* | Merge OpenSSL 1.0.2o.Jung-uk Kim2018-03-2711-41/+66
|\| | | | | | | Notes: svn path=/head/; revision=331627
* | Merge OpenSSL 1.0.2n.Jung-uk Kim2017-12-071-2/+2
|\| | | | | | | Notes: svn path=/head/; revision=326662
* | Merge OpenSSL 1.0.2m.Jung-uk Kim2017-11-0253-12/+561
|\| | | | | | | Notes: svn path=/head/; revision=325328
* | Merge OpenSSL 1.0.2l.Jung-uk Kim2017-05-2512-22/+135
|\| | | | | | | Notes: svn path=/head/; revision=318899
* | Merge OpenSSL 1.0.2k.Jung-uk Kim2017-01-2610-50/+51
|\| | | | | | | Notes: svn path=/head/; revision=312825
* | Merge OpenSSL 1.0.2i.Jung-uk Kim2016-09-2221-42/+169
|\| | | | | | | Notes: svn path=/head/; revision=306193
* | Merge OpenSSL 1.0.2h.Jung-uk Kim2016-05-036-2/+268
|\| | | | | | | | | | | | | Relnotes: yes Notes: svn path=/head/; revision=298998
* | Merge OpenSSL 1.0.2g.Jung-uk Kim2016-03-0110-125/+268
|\| | | | | | | | | | | | | Relnotes: yes Notes: svn path=/head/; revision=296279
* | Merge OpenSSL 1.0.2f.Jung-uk Kim2016-01-285-32/+86
|\| | | | | | | | | | | | | Relnotes: yes Notes: svn path=/head/; revision=295009
* | Merge OpenSSL 1.0.2e.Jung-uk Kim2015-12-0326-97/+265
|\| | | | | | | Notes: svn path=/head/; revision=291719
* | Remove duplicate manual pages.Jung-uk Kim2015-11-162-5/+3
| | | | | | | | | | | | | | Reported by: brd Notes: svn path=/head/; revision=290947
* | Merge OpenSSL 1.0.2d.Jung-uk Kim2015-10-3095-307/+3571
|\| | | | | | | Notes: svn path=/head/; revision=290207
* | Merge OpenSSL 1.0.1p.Jung-uk Kim2015-07-093-5/+18
|\| | | | | | | Notes: svn path=/head/; revision=285329
* | Merge OpenSSL 1.0.1n.Jung-uk Kim2015-06-1113-79/+188
|\| | | | | | | Notes: svn path=/head/; revision=284283
* | Merge OpenSSL 1.0.1m.Jung-uk Kim2015-03-2012-40/+310
|\| | | | | | | Notes: svn path=/head/; revision=280297
* | Merge OpenSSL 1.0.1k.Jung-uk Kim2015-01-0811-180/+189
|\| | | | | | | Notes: svn path=/head/; revision=276861
* | Merge OpenSSL 1.0.1j.Jung-uk Kim2014-10-1510-87/+213
|\| | | | | | | Notes: svn path=/head/; revision=273144
* | Merge OpenSSL 1.0.1i.Jung-uk Kim2014-08-0743-106/+682
|\| | | | | | | Notes: svn path=/head/; revision=269682
* | Merge OpenSSL 1.0.1h.Jung-uk Kim2014-06-0917-17/+77
|\| | | | | | | | | | | | | Approved by: so (delphij) Notes: svn path=/head/; revision=267256
* | Merge OpenSSL 1.0.1g.Jung-uk Kim2014-04-0817-22/+45
|\| | | | | | | | | | | | | Approved by: benl (maintainer) Notes: svn path=/head/; revision=264278
* | Merge OpenSSL 1.0.1f.Jung-uk Kim2014-01-2223-71/+89
|\| | | | | | | | | | | | | Approved by: so (delphij), benl (silence) Notes: svn path=/head/; revision=261037
* | Merge OpenSSL 1.0.1e.Jung-uk Kim2013-02-1312-53/+58
|\| | | | | | | | | | | | | Approved by: secteam (simon), benl (silence) Notes: svn path=/head/; revision=246772
* | Change "the the" to "the". It is a continuation of r226436 and missed inJung-uk Kim2013-02-131-1/+1
| | | | | | | | | | | | | | | | | | r237658. Approved by: benl (maintainer, implicit) Notes: svn path=/head/; revision=246771
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-13 17:37:43 +0000