Diffusion FreeBSD src repository aa7957345732

OpenSSL: update to 3.0.10
aa7957345732
Actions

Description

OpenSSL: update to 3.0.10

OpenSSL 3.0.10 addresses:

CVE-2023-3817
CVE-2023-3446
CVE-2023-2975

(Note that the vendor branch commit incorrectly referenced 3.0.9.)

Relnotes: Yes
Pull request: https://github.com/freebsd/freebsd-src/pull/808
Sponsored by: The FreeBSD Foundation

Details

Provenance

khorben_defora.org	Authored on Aug 10 2023, 4:07 PM
emaste	Committed on Aug 10 2023, 4:07 PM

Parents

rGec54a3142354: ixl.4: update link to intel-nvmupdate ports
rGcf2fc1b0f5ce: openssl: Vendor import of OpenSSL-3.0.9

Branches

Unknown

Tags

Unknown

Event Timeline

emaste committed rGaa7957345732: OpenSSL: update to 3.0.10 (authored by khorben_defora.org).Aug 10 2023, 4:07 PM

Merged Changes

cf2fc1b0f5ce openssl: Vendor import of OpenSSL-3.0.9
Author
khorben_defora.org
Revisions
D41293: openssl: Vendor import of OpenSSL-3.0.10
Browse Repository
No Builds
No Audits

Changes (921)
Show All Changes

Very Large Commit

This commit is very large. Load each file individually.

Path

Size

crypto/

openssl/

apps/

lib/

crypto/

asn1/

bn/

cms/

conf/

dh/

err/

evp/

ctrl_params_translate.c

http/

pkcs12/

rand/

rc4/

rsa/

sha/

asm/

keccak1600-avx2.pl

keccak1600-avx512.pl

keccak1600-avx512vl.pl

store/

x509/

doc/

man1/

openssl-dhparam.pod.in

openssl-genpkey.pod.in

openssl-genrsa.pod.in

openssl-kdf.pod.in

openssl-rsautl.pod.in

openssl-s_client.pod.in

openssl-verification-options.pod

openssl-x509.pod.in

man3/

ASN1_aux_cb.pod

ASN1_item_sign.pod

ASYNC_WAIT_CTX_new.pod

BIO_s_core.pod

BN_rand.pod

CONF_modules_load_file.pod

EVP_PKEY_decapsulate.pod

EVP_PKEY_derive.pod

EVP_PKEY_encapsulate.pod

EVP_PKEY_get_default_digest_nid.pod

EVP_PKEY_gettable_params.pod

EVP_PKEY_new.pod

EVP_PKEY_todata.pod

EVP_chacha20.pod

OCSP_resp_find_status.pod

OCSP_sendreq_new.pod

OSSL_CMP_CTX_new.pod

OSSL_CMP_log_open.pod

OSSL_DECODER.pod

OSSL_DECODER_CTX_new_for_pkey.pod

OSSL_ENCODER.pod

OSSL_ENCODER_CTX.pod

OSSL_ESS_check_signing_certs.pod

OSSL_HTTP_REQ_CTX.pod

OSSL_HTTP_parse_url.pod

OSSL_PARAM.pod

OSSL_PARAM_int.pod

OSSL_PROVIDER.pod

OSSL_SELF_TEST_new.pod

OSSL_STORE_LOADER.pod

OSSL_trace_set_channel.pod

PKCS12_decrypt_skey.pod

SSL_CTX_set_tmp_dh_callback.pod

SSL_get_verify_result.pod

X509_STORE_CTX_new.pod

X509_VERIFY_PARAM_set_flags.pod

man5/

man7/

OSSL_PROVIDER-FIPS.pod

engines/

include/

crypto/

x509err.h

openssl/

dh.h

x509err.h

providers/

common/

securitycheck.c

fips-sources.checksums

fips.checksum

fips/

self_test.c

implementations/

ciphers/

cipher_aes_siv.c

cipher_rc4_hmac_md5.h

storemgmt/

file_store.c

ssl/

statem/

extensions.c

statem_lib.c

t1_lib.c

secure/

lib/

libcrypto/

Makefile.asm

Makefile.inc

man/

man3/

ADMISSIONS.3

ASN1_EXTERN_FUNCS.3

ASN1_INTEGER_get_int64.3

ASN1_INTEGER_new.3

ASN1_ITEM_lookup.3

ASN1_OBJECT_new.3

ASN1_STRING_TABLE_add.3

ASN1_STRING_length.3

ASN1_STRING_new.3

ASN1_STRING_print_ex.3

ASN1_TIME_set.3

ASN1_TYPE_get.3

ASN1_aux_cb.3

ASN1_generate_nconf.3

BIO_get_ex_new_index.3

BN_mod_mul_montgomery.3

BN_mod_mul_reciprocal.3

CMS_EncryptedData_decrypt.3

CMS_EncryptedData_encrypt.3

CMS_EnvelopedData_create.3

CMS_add0_cert.3

CMS_add1_recipient_cert.3

CMS_get0_RecipientInfos.3

CMS_get0_SignerInfos.3

CMS_get0_type.3

CMS_get1_ReceiptRequest.3

CONF_modules_load_file.3

CRYPTO_THREAD_run_once.3

CRYPTO_get_ex_new_index.3

CRYPTO_memcmp.3

CTLOG_STORE_get0_log_by_id.3

CTLOG_STORE_new.3

CTLOG_new.3

CT_POLICY_EVAL_CTX_new.3

DEFINE_STACK_OF.3

DES_random_key.3

DH_generate_key.3

DH_generate_parameters.3

DSA_generate_parameters.3

ECPKParameters_print.3

EC_GFp_simple_method.3

EC_GROUP_copy.3

EC_GROUP_new.3

EC_KEY_get_enc_flags.3

ERR_load_crypto_strings.3

EVP_ASYM_CIPHER_free.3

EVP_BytesToKey.3

EVP_CIPHER_CTX_get_cipher_data.3

EVP_CIPHER_CTX_get_original_iv.3

EVP_CIPHER_meth_new.3

EVP_DigestInit.3

EVP_DigestSignInit.3

EVP_DigestVerifyInit.3

EVP_PKEY_ASN1_METHOD.3

EVP_PKEY_CTX_ctrl.3

EVP_PKEY_CTX_get0_libctx.3

EVP_PKEY_CTX_get0_pkey.3

EVP_PKEY_CTX_new.3

EVP_PKEY_CTX_set1_pbe_pass.3

EVP_PKEY_CTX_set_hkdf_md.3

EVP_PKEY_CTX_set_params.3

EVP_PKEY_CTX_set_rsa_pss_keygen_md.3

EVP_PKEY_CTX_set_scrypt_N.3

EVP_PKEY_CTX_set_tls1_prf_md.3

EVP_PKEY_asn1_get_count.3

EVP_PKEY_check.3

EVP_PKEY_copy_parameters.3

EVP_PKEY_decapsulate.3

EVP_PKEY_decrypt.3

EVP_PKEY_derive.3

EVP_PKEY_digestsign_supports_digest.3

EVP_PKEY_encapsulate.3

EVP_PKEY_encrypt.3

EVP_PKEY_fromdata.3

EVP_PKEY_get_default_digest_nid.3

EVP_PKEY_get_field_type.3

EVP_PKEY_get_group_name.3

EVP_PKEY_get_size.3

EVP_PKEY_gettable_params.3

EVP_PKEY_is_a.3

EVP_PKEY_keygen.3

EVP_PKEY_meth_get_count.3

EVP_PKEY_meth_new.3

EVP_PKEY_new.3

EVP_PKEY_print_private.3

EVP_PKEY_set1_RSA.3

EVP_PKEY_set1_encoded_public_key.3

EVP_PKEY_set_type.3

EVP_PKEY_settable_params.3

EVP_PKEY_sign.3

EVP_PKEY_todata.3

EVP_PKEY_verify.3

EVP_PKEY_verify_recover.3

EVP_camellia_128_ecb.3

EVP_rc5_32_12_16_cbc.3

EVP_ripemd160.3

EVP_seed_cbc.3

EVP_set_default_properties.3

OCSP_request_add1_nonce.3

OCSP_resp_find_status.3

OCSP_response_status.3

OCSP_sendreq_new.3

OPENSSL_Applink.3

OPENSSL_FILE.3

OPENSSL_LH_COMPFUNC.3

OPENSSL_LH_stats.3

OPENSSL_config.3

OPENSSL_fork_prepare.3

OPENSSL_gmtime.3

OPENSSL_hexchar2int.3

OPENSSL_ia32cap.3

OPENSSL_init_crypto.3

OPENSSL_init_ssl.3

OPENSSL_instrument_bus.3

OPENSSL_load_builtin_modules.3

OPENSSL_malloc.3

OPENSSL_s390xcap.3

OPENSSL_secure_malloc.3

OSSL_CMP_HDR_get0_transactionID.3

OSSL_CMP_ITAV_set0.3

OSSL_CMP_MSG_get0_header.3

OSSL_CMP_MSG_http_perform.3

OSSL_CMP_SRV_CTX_new.3

OSSL_CMP_STATUSINFO_new.3

OSSL_CMP_exec_certreq.3

OSSL_CMP_log_open.3

OSSL_CMP_validate_msg.3

OSSL_CORE_MAKE_FUNC.3

OSSL_CRMF_MSG_get0_tmpl.3

OSSL_CRMF_MSG_set0_validity.3

OSSL_CRMF_MSG_set1_regCtrl_regToken.3

OSSL_CRMF_MSG_set1_regInfo_certReq.3

OSSL_CRMF_pbmp_new.3

OSSL_DECODER.3

OSSL_DECODER_CTX.3

OSSL_DECODER_CTX_new_for_pkey.3

OSSL_DECODER_from_bio.3

OSSL_DISPATCH.3

OSSL_ENCODER.3

OSSL_ENCODER_CTX.3

OSSL_ENCODER_CTX_new_for_pkey.3

OSSL_ENCODER_to_bio.3

OSSL_ESS_check_signing_certs.3

OSSL_HTTP_REQ_CTX.3

OSSL_HTTP_parse_url.3

OSSL_PARAM_allocate_from_text.3

OSSL_SELF_TEST_set_callback.3

OSSL_trace_get_category_num.3

OSSL_trace_set_channel.3

OpenSSL_add_all_algorithms.3

OpenSSL_version.3

PEM_X509_INFO_read_bio_ex.3

PEM_bytes_read_bio.3

PEM_read.3

PEM_read_CMS.3

PEM_read_bio_PrivateKey.3

PEM_read_bio_ex.3

PEM_write_bio_CMS_stream.3

PEM_write_bio_PKCS7_stream.3

PKCS12_PBE_keyivgen.3

PKCS12_SAFEBAG_create_cert.3

PKCS12_SAFEBAG_get0_attrs.3

PKCS12_SAFEBAG_get1_cert.3

PKCS12_add1_attr_by_NID.3

PKCS12_add_CSPName_asc.3

PKCS12_add_cert.3

PKCS12_add_friendlyname_asc.3

PKCS12_add_localkeyid.3

PKCS12_add_safe.3

PKCS12_create.3

PKCS12_decrypt_skey.3

PKCS12_gen_mac.3

PKCS12_get_friendlyname.3

PKCS12_init.3

PKCS12_item_decrypt_d2i.3

PKCS12_key_gen_utf8_ex.3

PKCS12_newpass.3

PKCS12_pack_p7encdata.3

PKCS7_get_octet_string.3

PKCS7_sign.3

PKCS7_sign_add_signer.3

PKCS7_type_is_other.3

PKCS7_verify.3

PKCS8_encrypt.3

PKCS8_pkey_add1_attr.3

RAND_set_rand_method.3

RSA_padding_add_PKCS1_type_1.3

RSA_print.3

RSA_private_encrypt.3

RSA_public_encrypt.3

RSA_set_method.3

RSA_sign.3

RSA_sign_ASN1_OCTET_STRING.3

SRP_create_verifier.3

SRP_user_pwd_new.3

SSL_CIPHER_get_name.3

SSL_COMP_add_compression_method.3

SSL_CONF_CTX_new.3

SSL_CONF_CTX_set1_prefix.3

SSL_CONF_CTX_set_flags.3

SSL_CONF_CTX_set_ssl_ctx.3

SSL_CONF_cmd.3

SSL_CONF_cmd_argv.3

SSL_CTX_add1_chain_cert.3

SSL_CTX_add_extra_chain_cert.3

SSL_CTX_add_session.3

SSL_CTX_config.3

SSL_CTX_ctrl.3

SSL_CTX_dane_enable.3

SSL_CTX_flush_sessions.3

SSL_CTX_free.3

SSL_CTX_get0_param.3

SSL_CTX_get_verify_mode.3

SSL_CTX_has_client_custom_ext.3

SSL_CTX_load_verify_locations.3

SSL_CTX_new.3

SSL_CTX_sess_number.3

SSL_CTX_sess_set_cache_size.3

SSL_CTX_sess_set_get_cb.3

SSL_CTX_sessions.3

SSL_CTX_set0_CA_list.3

SSL_CTX_set1_curves.3

SSL_CTX_set1_sigalgs.3

SSL_CTX_set1_verify_cert_store.3

SSL_CTX_set_alpn_select_cb.3

SSL_CTX_set_cert_cb.3

SSL_CTX_set_cert_store.3

SSL_CTX_set_cert_verify_callback.3

SSL_CTX_set_cipher_list.3

SSL_CTX_set_client_cert_cb.3

SSL_CTX_set_client_hello_cb.3

SSL_CTX_set_ct_validation_callback.3

SSL_CTX_set_ctlog_list_file.3

SSL_CTX_set_default_passwd_cb.3

SSL_CTX_set_generate_session_id.3

SSL_CTX_set_info_callback.3

SSL_CTX_set_keylog_callback.3

SSL_CTX_set_max_cert_list.3

SSL_CTX_set_min_proto_version.3

SSL_CTX_set_mode.3

SSL_CTX_set_msg_callback.3

SSL_CTX_set_num_tickets.3

SSL_CTX_set_options.3

SSL_CTX_set_psk_client_callback.3

SSL_CTX_set_quiet_shutdown.3

SSL_CTX_set_read_ahead.3

SSL_CTX_set_record_padding_callback.3

SSL_CTX_set_security_level.3

SSL_CTX_set_session_cache_mode.3

SSL_CTX_set_session_id_context.3

SSL_CTX_set_session_ticket_cb.3

SSL_CTX_set_split_send_fragment.3

SSL_CTX_set_srp_password.3

SSL_CTX_set_ssl_version.3

SSL_CTX_set_stateless_cookie_generate_cb.3

SSL_CTX_set_timeout.3

SSL_CTX_set_tlsext_servername_callback.3

SSL_CTX_set_tlsext_status_cb.3

SSL_CTX_set_tlsext_ticket_key_cb.3

SSL_CTX_set_tlsext_use_srtp.3

SSL_CTX_set_tmp_dh_callback.3

SSL_CTX_set_tmp_ecdh.3

SSL_CTX_set_verify.3

SSL_CTX_use_certificate.3

SSL_CTX_use_psk_identity_hint.3

SSL_CTX_use_serverinfo.3

SSL_SESSION_free.3

SSL_SESSION_get0_cipher.3

SSL_SESSION_get0_hostname.3

SSL_SESSION_get0_id_context.3

SSL_SESSION_get0_peer.3

SSL_SESSION_get_compress_id.3

SSL_SESSION_get_protocol_version.3

SSL_SESSION_get_time.3

SSL_SESSION_has_ticket.3

SSL_SESSION_is_resumable.3

SSL_SESSION_print.3

SSL_SESSION_set1_id.3

SSL_accept.3

SSL_alert_type_string.3

SSL_export_keying_material.3

SSL_extension_supported.3

SSL_free.3

SSL_get0_peer_scts.3

SSL_get_SSL_CTX.3

SSL_get_all_async_fds.3

SSL_get_certificate.3

SSL_get_ciphers.3

SSL_get_client_random.3

SSL_get_current_cipher.3

SSL_get_default_timeout.3

SSL_get_error.3

SSL_get_extms_support.3

SSL_get_fd.3

SSL_get_peer_cert_chain.3

SSL_get_peer_certificate.3

SSL_get_peer_signature_nid.3

SSL_get_peer_tmp_key.3

SSL_get_psk_identity.3

SSL_get_rbio.3

SSL_get_session.3

SSL_get_shared_sigalgs.3

SSL_get_verify_result.3

SSL_load_client_CA_file.3

SSL_new.3

SSL_pending.3

SSL_read.3

SSL_read_early_data.3

SSL_rstate_string.3

SSL_session_reused.3

SSL_set1_host.3

SSL_set_async_callback.3

SSL_set_bio.3

SSL_set_connect_state.3

SSL_set_fd.3

SSL_set_retry_verify.3

SSL_set_session.3

SSL_set_shutdown.3

SSL_set_verify_result.3

TS_VERIFY_CTX_set_certs.3

X509_CRL_get0_by_serial.3

X509_EXTENSION_set_object.3

X509_LOOKUP.3

X509_LOOKUP_hash_dir.3

X509_LOOKUP_meth_new.3

X509_NAME_ENTRY_get_object.3

X509_NAME_add_entry_by_txt.3

X509_NAME_get0_der.3

X509_NAME_get_index_by_NID.3

X509_NAME_print_ex.3

X509_PUBKEY_new.3

X509_SIG_get0.3

X509_STORE_CTX_get_error.3

X509_STORE_CTX_new.3

X509_STORE_CTX_set_verify_cb.3

X509_STORE_add_cert.3

X509_STORE_get0_param.3

X509_STORE_new.3

X509_STORE_set_verify_cb_func.3

X509_VERIFY_PARAM_set_flags.3

X509_check_private_key.3

X509_get0_distinguishing_id.3

X509_get0_notBefore.3

X509_get0_signature.3

X509_get0_uids.3

X509_get_extension_flags.3

X509_get_pubkey.3

X509_get_serialNumber.3

X509_get_subject_name.3

X509v3_get_ext_by_NID.3

b2i_PVK_bio_ex.3

d2i_PKCS8PrivateKey_bio.3

i2d_PKCS7_bio_stream.3

man5/

man7/

EVP_ASYM_CIPHER-RSA.7

EVP_ASYM_CIPHER-SM2.7

EVP_CIPHER-AES.7

EVP_CIPHER-ARIA.7

EVP_CIPHER-BLOWFISH.7

EVP_CIPHER-CAMELLIA.7

EVP_KDF-X942-CONCAT.7

EVP_SIGNATURE-ECDSA.7

EVP_SIGNATURE-ED25519.7

OSSL_PROVIDER-default.7

OSSL_PROVIDER-legacy.7

openssl-core_dispatch.h.7

openssl-core_names.h.7

openssl-env.7

openssl-glossary.7

openssl-threads.7

openssl_user_macros.7

ossl_store-file.7

ossl_store.7

passphrase-encoding.7

property.7

provider-asym_cipher.7

usr.bin/

openssl/

man/

openssl-fipsinstall.1

openssl-format-options.1

openssl-namedisplay-options.1

openssl-nseq.1

openssl-ocsp.1

openssl-passphrase-options.1

openssl-verification-options.1

OpenSSL: update to 3.0.10aa7957345732Actions

Description

Details

Event Timeline

Merged Changes

Changes (921)Show All Changes

Very Large Commit

rGaa7957345732

crypto/openssl/CHANGES.md

crypto/openssl/Configure

crypto/openssl/INSTALL.md

crypto/openssl/NEWS.md

crypto/openssl/README-FIPS.md

crypto/openssl/VERSION.dat

crypto/openssl/apps/ca.c

crypto/openssl/apps/cmp.c

crypto/openssl/apps/cms.c

crypto/openssl/apps/lib/apps.c

crypto/openssl/apps/pkeyutl.c

crypto/openssl/apps/req.c

crypto/openssl/apps/s_client.c

crypto/openssl/apps/speed.c

crypto/openssl/crypto/LPdir_unix.c

crypto/openssl/crypto/asn1/asn_mime.c

crypto/openssl/crypto/bn/bn_recp.c

crypto/openssl/crypto/cms/cms_env.c

crypto/openssl/crypto/cms/cms_lib.c

crypto/openssl/crypto/cms/cms_rsa.c

crypto/openssl/crypto/conf/conf_mod.c

crypto/openssl/crypto/conf/conf_sap.c

crypto/openssl/crypto/core_namemap.c

crypto/openssl/crypto/dh/dh_check.c

crypto/openssl/crypto/err/openssl.txt

crypto/openssl/crypto/evp/ctrl_params_translate.c

crypto/openssl/crypto/evp/p5_crpt2.c

crypto/openssl/crypto/evp/p_lib.c

crypto/openssl/crypto/http/http_lib.c

crypto/openssl/crypto/params.c

crypto/openssl/crypto/pkcs12/p12_mutl.c

crypto/openssl/crypto/rand/rand_lib.c

crypto/openssl/crypto/rc4/build.info

crypto/openssl/crypto/rsa/rsa_ameth.c

crypto/openssl/crypto/rsa/rsa_pmeth.c

crypto/openssl/crypto/sha/asm/keccak1600-avx2.pl

crypto/openssl/crypto/sha/asm/keccak1600-avx512.pl

crypto/openssl/crypto/sha/asm/keccak1600-avx512vl.pl

crypto/openssl/crypto/store/store_result.c

crypto/openssl/crypto/x509/by_dir.c

crypto/openssl/crypto/x509/v3_ist.c

crypto/openssl/crypto/x509/v3_purp.c

crypto/openssl/crypto/x509/x509_att.c

crypto/openssl/crypto/x509/x509_cmp.c

crypto/openssl/crypto/x509/x509_err.c

crypto/openssl/crypto/x509/x509_vpm.c

crypto/openssl/doc/man1/openssl-dhparam.pod.in

crypto/openssl/doc/man1/openssl-genpkey.pod.in

crypto/openssl/doc/man1/openssl-genrsa.pod.in

crypto/openssl/doc/man1/openssl-kdf.pod.in

crypto/openssl/doc/man1/openssl-rsautl.pod.in

crypto/openssl/doc/man1/openssl-s_client.pod.in

crypto/openssl/doc/man1/openssl-verification-options.pod

crypto/openssl/doc/man1/openssl-x509.pod.in

crypto/openssl/doc/man3/ASN1_aux_cb.pod

crypto/openssl/doc/man3/ASN1_item_sign.pod

crypto/openssl/doc/man3/ASYNC_WAIT_CTX_new.pod

crypto/openssl/doc/man3/BIO_s_core.pod

crypto/openssl/doc/man3/BN_rand.pod

crypto/openssl/doc/man3/CONF_modules_load_file.pod

crypto/openssl/doc/man3/DH_get0_pqg.pod

crypto/openssl/doc/man3/EVP_EncryptInit.pod

crypto/openssl/doc/man3/EVP_KDF.pod

crypto/openssl/doc/man3/EVP_KEYMGMT.pod

crypto/openssl/doc/man3/EVP_PKEY2PKCS8.pod

crypto/openssl/doc/man3/EVP_PKEY_decapsulate.pod

crypto/openssl/doc/man3/EVP_PKEY_derive.pod

crypto/openssl/doc/man3/EVP_PKEY_encapsulate.pod

crypto/openssl/doc/man3/EVP_PKEY_get_default_digest_nid.pod

crypto/openssl/doc/man3/EVP_PKEY_gettable_params.pod

crypto/openssl/doc/man3/EVP_PKEY_new.pod

crypto/openssl/doc/man3/EVP_PKEY_todata.pod

OpenSSL: update to 3.0.10
aa7957345732
Actions

Changes (921)
Show All Changes