BSD Commit Log Search

openssl: update ASM and version info for 3.0.16 import

MFC after:      1 week
MFC with:       0d0c8621fd181e507f0fb50ffcca606faf66a8c2
Differential Revision:  https://reviews.freebsd.org/D49297

openssl: Import OpenSSL 3.0.15.

This release incorporates the following bug fixes and mitigations:
- Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])
- Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])

Release notes can be found at:
https://openssl-library.org/news/openssl-3.0-notes/index.html

Co-authored-by: gordon
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D46602

Merge commit '108164cf95d9594884c2dcccba2691335e6f221b'

(cherry picked from commit a7148ab39c03abd4d1a84997c70bf96f15dd2a09)

Update config/build info for OpenSSL 3.0.15


    [32 lines not shown]

Update config/build info for OpenSSL 3.0.15

This is a companion commit to the OpenSSL 3.0.15 update.

`opensslv.h` was regenerated via the following process:

```
cd crypto/openssl
./config
git reset --hard
gmake include/openssl/opensslv.h
```

`Makefile.inc` has been updated to match.

MFC after:      1 week
MFC with:       a7148ab39c03abd4d1a84997c70bf96f15dd2a09
Differential Revision:  https://reviews.freebsd.org/D46603

Update config/build info for OpenSSL

This is a companion commit to the OpenSSL 3.0.14 update.

MFC after:      3 days
MFC with:       44096ebd22ddd0081a357011714eff8963614b65

(cherry picked from commit 303596eac3f5a7fed63f1084028d811919d37eaf)

Update config/build info for OpenSSL

This is a companion commit to the OpenSSL 3.0.14 update.

MFC after:      3 days
MFC with:       44096ebd22ddd0081a357011714eff8963614b65

OpenSSL: Update date string

Reported by:    "Herbert J. Skuhra" <herbert at gojira.at>
Fixes:          74fe298c8299

(cherry picked from commit da63ac1b0757e10255613bdae1b7fa353eb4aea2)

OpenSSL: Update date string

Reported by:    "Herbert J. Skuhra" <herbert at gojira.at>
Fixes:          74fe298c8299
MFC after:      3 days

OpenSSL: Update version strings

Reported by:    "Herbert J. Skuhra" <herbert at gojira.at>
Fixes:          9eb4e0b42d7c

(cherry picked from commit 74fe298c8299fdb8c8f761728ddd245b0c3fe04a)

OpenSSL: Update version strings

Reported by:    "Herbert J. Skuhra" <herbert at gojira.at>
Fixes:          9eb4e0b42d7c
MFC after:      3 days

OpenSSL: update to 3.0.12

OpenSSL 3.0.12 addresses:

 * Fix incorrect key and IV resizing issues when calling
   EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2()
   with OSSL_PARAM parameters that alter the key or IV length
   ([CVE-2023-5363]).

Relnotes:       Yes
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit ad991e4c142ebabad7aef488ad97b189ecabb270)
(cherry picked from commit 575878a533823aa3e5bab715928d9cdffbc4dcbc)
(cherry picked from commit e833378cf9589171562ccad4c6ff59c3713770bd)

Approved by:    so
Approved by:    re (gjb)

OpenSSL: update to 3.0.12

OpenSSL 3.0.12 addresses:

 * Fix incorrect key and IV resizing issues when calling
   EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2()
   with OSSL_PARAM parameters that alter the key or IV length
   ([CVE-2023-5363]).

Relnotes:       Yes
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit ad991e4c142ebabad7aef488ad97b189ecabb270)
(cherry picked from commit 575878a533823aa3e5bab715928d9cdffbc4dcbc)

OpenSSL: update to 3.0.12

OpenSSL 3.0.12 addresses:

 * Fix incorrect key and IV resizing issues when calling
   EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2()
   with OSSL_PARAM parameters that alter the key or IV length
   ([CVE-2023-5363]).

Relnotes:       Yes
Sponsored by:   The FreeBSD Foundation

OpenSSL: update to 3.0.11

OpenSSL 3.0.11 addresses:

    POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807)

Relnotes:       Yes
Pull request:   https://github.com/freebsd/freebsd-src/pull/852
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit 6f1af0d7d2af54b339b5212434cd6d4fda628d80)
(cherry picked from commit bbecb0ff6c9e2fc05c096ce2ca5387df0d8e99fe)

Approved by:    re (gjb)

OpenSSL: update to 3.0.11

OpenSSL 3.0.11 addresses:

    POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807)

Relnotes:       Yes
Pull request:   https://github.com/freebsd/freebsd-src/pull/852
Sponsored by:   The FreeBSD Foundation

(cherry picked from commit 6f1af0d7d2af54b339b5212434cd6d4fda628d80)

OpenSSL: update to 3.0.11

OpenSSL 3.0.11 addresses:

    POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807)

Relnotes:       Yes
Pull request:   https://github.com/freebsd/freebsd-src/pull/852
Sponsored by:   The FreeBSD Foundation

OpenSSL: Merge OpenSSL 1.1.1w

(cherry picked from commit a1860b94f62494288804faebb1bf6ea8110ca148)

OpenSSL: Merge OpenSSL 1.1.1w

(cherry picked from commit a1860b94f62494288804faebb1bf6ea8110ca148)

OpenSSL: regen opensslv.h for OpenSSL 3.0.10

OpenSSL: Import OpenSSL 1.1.1v

(cherry picked from commit cc0d356166e39da7f956c39f874e6dee67fd5d60)

OpenSSL: Import OpenSSL 1.1.1v

(cherry picked from commit cc0d356166e39da7f956c39f874e6dee67fd5d60)

Merge OpenSSL 3.0.9

Migrate to OpenSSL 3.0 in advance of FreeBSD 14.0.  OpenSSL 1.1.1 (the
version we were previously using) will be EOL as of 2023-09-11.

Most of the base system has already been updated for a seamless switch
to OpenSSL 3.0.  For many components we've added
`-DOPENSSL_API_COMPAT=0x10100000L` to CFLAGS to specify the API version,
which avoids deprecation warnings from OpenSSL 3.0.  Changes have also
been made to avoid OpenSSL APIs that were already deprecated in OpenSSL
1.1.1.  The process of updating to contemporary APIs can continue after
this merge.

Additional changes are still required for libarchive and Kerberos-
related libraries or tools; workarounds will immediately follow this
commit.  Fixes are in progress in the upstream projects and will be
incorporated when those are next updated.

There are some performance regressions in benchmarks (certain tests in

    [16 lines not shown]

OpenSSL: Merge OpenSSL 1.1.1u

(cherry picked from commit 8ecb489345f08012fdc92a202a40119891cac330)
(cherry picked from commit 8f1ef87a6b93af292e68f8e33087e2df6325e9bb)

OpenSSL: Merge OpenSSL 1.1.1u

(cherry picked from commit 8ecb489345f08012fdc92a202a40119891cac330)
(cherry picked from commit 8f1ef87a6b93af292e68f8e33087e2df6325e9bb)

OpenSSL: Merge OpenSSL 1.1.1u

(cherry picked from commit 8ecb489345f08012fdc92a202a40119891cac330)

OpenSSL: Merge OpenSSL 1.1.1t

(cherry picked from commit 0d51f658515c605fcc4a8073cb5a8e0d7d904088)

OpenSSL: Merge OpenSSL 1.1.1t

(cherry picked from commit 640242a5915761ce63205bdb0542fa3c1473c0ff)

OpenSSL: Merge OpenSSL 1.1.1t
Merge commit '0d51f658515c605fcc4a8073cb5a8e0d7d904088'

Import OpenSSL 1.1.1s

(cherry picked from commit b6b67f23b82101d4c04c89f81d726b902ab77106)

OpenSSL: Merge OpenSSL 1.1.1s

(cherry picked from commit cfc39718e9cc18943a6f8428c560b02c6f590b16)

OpenSSL: Merge OpenSSL 1.1.1s

Merge commit 'b6b67f23b82101d4c04c89f81d726b902ab77106'