| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This change adds a custom BSD makefile containing multiple high-level PHONY
targets, similar to targets provided by the ports framework.
The Makefile does the following:
- Reruns Configure with a deterministic set of arguments to ensure that
all appropriate features have been enabled/disabled in OpenSSL.
- Preens the pkgconfig files to remove duplicate paths in their
`CFLAGS` and `includedir` variables.
- Rebuilds all ASM files to ensure that the content contained is fresh.
- Rebuilds all manpages to ensure that the content contained in the
manpages is fresh.
Some additional work needs to be done to make the manpage regeneration
"operation" reproducible (the date the manpages were generated is
embedded in the files).
All dynamic configuration previously captured in
`include/openssl/configuration.h` and `include/crypto/bn_conf.h` has been
moved to `freebsd/include/dynamic_freebsd_configuration.h` and
`freebsd/include/crypto/bn_conf.h`, respectively. This helps
ensure that future updates don't wipe out FreeBSD customizations to
these files, which tune behavior on a per-target architecture basis, e.g.,
ARM vs x86, 32-bit vs 64-bit, etc.
MFC after: 1 month
Differential Revision: https://reviews.freebsd.org/D51663
|
|
|
|
|
|
|
|
|
|
| |
Migrate to OpenSSL 3.5 in advance of FreeBSD 15.0. OpenSSL 3.0 will be
EOL after 2026-09-07.
Approved by: philip (mentor)
Sponsored by: Alpha-Omega Beach Cleaning Project
Sponsored by: The FreeBSD Foundation
Differential revision: https://reviews.freebsd.org/D51613
|
|\
| |
| |
| |
| |
| | |
Approved by: philip (mentor)
Sponsored by: Alpha-Omega Beach Cleaning Project
Sponsored by: The FreeBSD Foundation
|
|\|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This release incorporates the following bug fixes and mitigations:
- [CVE-2024-13176](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-13176
- [CVE-2024-9143](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-9143)
Release notes can be found at:
https://openssl-library.org/news/openssl-3.0-notes/index.html
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D49296
|
|\|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This release incorporates the following bug fixes and mitigations:
- Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])
- Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])
Release notes can be found at:
https://openssl-library.org/news/openssl-3.0-notes/index.html
Co-authored-by: gordon
MFC after: 1 week
Differential Revision: https://reviews.freebsd.org/D46602
Merge commit '108164cf95d9594884c2dcccba2691335e6f221b'
|
|/
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* Fixed PKCS12 Decoding crashes ([CVE-2024-0727])
* Fixed Excessive time spent checking invalid RSA public keys
([CVE-2023-6237])
* Fixed POLY1305 MAC implementation corrupting vector registers on
PowerPC CPUs which support PowerISA 2.07 ([CVE-2023-6129])
* Fix excessive time spent in DH check / generation with large Q
parameter value ([CVE-2023-5678])
Release notes can be found at
https://www.openssl.org/news/openssl-3.0-notes.html.
Approved by: emaste
MFC after: 3 days
Merge commit '9dd13e84fa8eca8f3462bd55485aa3da8c37f54a'
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=182044
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=167612
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=162911
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=160814
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=142425
|
|
|
|
|
|
|
| |
part of recent releases.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=142421
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=127128
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=120631
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=111147
|
|
|
|
|
|
|
| |
support for AES and OpenBSD's hardware crypto.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=109998
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=101615
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=100936
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=100928
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=89837
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=76866
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=72613
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=68651
|
|
|
|
| |
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=59191
|
|
infringement reasons.
Notes:
svn path=/vendor-crypto/openssl/dist/; revision=55714
|