]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
openssl: Vendor import of OpenSSL-3.0.9
authorPierre Pronchery <pierre@freebsdfoundation.org>
Wed, 31 May 2023 22:06:50 +0000 (00:06 +0200)
committerEd Maste <emaste@FreeBSD.org>
Fri, 23 Jun 2023 13:13:27 +0000 (09:13 -0400)
commitb84c4564effd02dfdc047dd6cbeaf910bbb1a888
tree39604e7e6f13fced003ef2f77c35f3989aa574ca
parente4520c8bd1d300a7a338d0ed4af171a2d0e583ef
openssl: Vendor import of OpenSSL-3.0.9

Summary:

Release notes can be found at
https://www.openssl.org/news/openssl-3.0-notes.html .

Obtained from:  https://www.openssl.org/source/openssl-3.0.9.tar.gz

Test Plan:
```
$ git status
On branch vendor/openssl-3.0
Your branch is up to date with 'origin/vendor/openssl-3.0'.

nothing to commit, working tree clean
$ (cd ..; fetch http://www.openssl.org/source/openssl-${OSSLVER}.tar.gz http://www.openssl.org/source/openssl-${OSSLVER}.tar.gz.asc)
openssl-3.0.9.tar.gz                                    14 MB   74 MBps    01s
openssl-3.0.9.tar.gz.asc                               833  B   10 MBps    00s
$ set | egrep '(XLIST|OSSLVER)='
OSSLVER=3.0.9
XLIST=FREEBSD-Xlist
$ gpg --list-keys
/home/khorben/.gnupg/pubring.kbx
--------------------------------
pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
      A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
uid           [ unknown] Tomáš Mráz <tm@t8m.info>
uid           [ unknown] Tomáš Mráz <tomas@arleto.cz>
uid           [ unknown] Tomáš Mráz <tomas@openssl.org>
sub   rsa4096 2021-07-16 [S] [expires: 2027-07-15]
sub   rsa4096 2021-07-16 [E] [expires: 2031-07-14]

$ gpg --verify ../openssl-${OSSLVER}.tar.gz.asc ../openssl-${OSSLVER}.tar.gz
gpg: Signature made Tue May 30 14:32:24 2023 CEST
gpg:                using RSA key DC7032662AF885E2F47F243F527466A21CA79E6D
gpg: Good signature from "Tomáš Mráz <tm@t8m.info>" [unknown]
gpg:                 aka "Tomáš Mráz <tomas@arleto.cz>" [unknown]
gpg:                 aka "Tomáš Mráz <tomas@openssl.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: A21F AB74 B008 8AA3 6115  2586 B8EF 1A6B A9DA 2D5C
     Subkey fingerprint: DC70 3266 2AF8 85E2 F47F  243F 5274 66A2 1CA7 9E6D

$ tar -x -X $XLIST -f ../openssl-${OSSLVER}.tar.gz -C ..
$ rsync --exclude FREEBSD.* --delete -avzz ../openssl-${OSSLVER}/* .
[...]
$ diff -arq ../openssl-${OSSLVER}  .
Only in .: .git
Only in .: FREEBSD-Xlist
Only in .: FREEBSD-upgrade
$ git status FREEBSD*
On branch vendor/openssl-3.0
Your branch is up to date with 'origin/vendor/openssl-3.0'.

nothing to commit, working tree clean
```
181 files changed:
CHANGES.md
Configure
NEWS.md
NOTES-NONSTOP.md
NOTES-VMS.md
VERSION.dat
apps/cmp.c
apps/dgst.c
apps/enc.c
apps/include/cmp_mock_srv.h
apps/lib/apps.c
apps/lib/cmp_mock_srv.c
apps/openssl.cnf
apps/rehash.c
apps/s_server.c
crypto/aes/asm/aesv8-armx.pl
crypto/aes/asm/bsaes-armv7.pl
crypto/asn1/a_bitstr.c
crypto/asn1/asn1_parse.c
crypto/asn1/asn_pack.c
crypto/bio/bio_lib.c
crypto/bio/bss_acpt.c
crypto/bn/bn_asm.c
crypto/bn/bn_blind.c
crypto/bn/bn_lib.c
crypto/bn/bn_local.h
crypto/bn/bn_nist.c
crypto/bn/bn_rsa_fips186_4.c
crypto/bn/build.info
crypto/bn/rsa_sup_mul.c [deleted file]
crypto/build.info
crypto/cmp/cmp_client.c
crypto/cmp/cmp_ctx.c
crypto/cmp/cmp_err.c
crypto/cmp/cmp_local.h
crypto/cmp/cmp_msg.c
crypto/cmp/cmp_protect.c
crypto/cmp/cmp_server.c
crypto/cmp/cmp_vfy.c
crypto/cms/cms_dh.c
crypto/cms/cms_ec.c
crypto/cms/cms_env.c
crypto/cms/cms_lib.c
crypto/cms/cms_smime.c
crypto/conf/conf_def.c
crypto/dsa/dsa_backend.c
crypto/dsa/dsa_err.c
crypto/dsa/dsa_ossl.c
crypto/dsa/dsa_sign.c
crypto/ec/asm/ecp_nistp521-ppc64.pl
crypto/ec/ec_err.c
crypto/ec/ecdsa_ossl.c
crypto/ec/ecx_meth.c
crypto/engine/eng_lib.c
crypto/err/openssl.txt
crypto/evp/ctrl_params_translate.c
crypto/evp/digest.c
crypto/evp/ec_ctrl.c
crypto/evp/evp_pbe.c
crypto/evp/keymgmt_meth.c
crypto/evp/p_lib.c
crypto/evp/pmeth_lib.c
crypto/ffc/ffc_backend.c
crypto/ffc/ffc_params.c
crypto/http/http_client.c
crypto/http/http_lib.c
crypto/modes/asm/aes-gcm-armv8_64.pl
crypto/objects/obj_dat.c
crypto/property/property.c
crypto/rand/rand_lib.c
crypto/rsa/rsa_chk.c
crypto/rsa/rsa_ossl.c
crypto/rsa/rsa_sp800_56b_gen.c
crypto/sm2/sm2_sign.c
crypto/ui/ui_lib.c
crypto/ui/ui_util.c
crypto/x509/pcy_local.h
crypto/x509/pcy_node.c
crypto/x509/pcy_tree.c
crypto/x509/x509_txt.c
crypto/x509/x509_vfy.c
doc/build.info
doc/fingerprints.txt
doc/internal/man3/ossl_cmp_certreq_new.pod
doc/internal/man3/ossl_cmp_mock_srv_new.pod
doc/internal/man3/ossl_cmp_msg_protect.pod
doc/internal/man3/ossl_cmp_pkisi_get_status.pod
doc/man1/openssl-cmp.pod.in
doc/man1/openssl-enc.pod.in
doc/man1/openssl.pod
doc/man3/ASN1_STRING_new.pod
doc/man3/CMS_EncryptedData_decrypt.pod
doc/man3/CMS_add0_cert.pod
doc/man3/CMS_decrypt.pod
doc/man3/EC_GROUP_copy.pod
doc/man3/EC_KEY_new.pod
doc/man3/EC_POINT_add.pod
doc/man3/EC_POINT_new.pod
doc/man3/EVP_EncryptInit.pod
doc/man3/EVP_PKEY_set1_RSA.pod
doc/man3/EVP_RAND.pod
doc/man3/EVP_aes_128_gcm.pod
doc/man3/EVP_aria_128_gcm.pod
doc/man3/EVP_bf_cbc.pod
doc/man3/EVP_blake2b512.pod
doc/man3/EVP_camellia_128_ecb.pod
doc/man3/EVP_cast5_cbc.pod
doc/man3/EVP_chacha20.pod
doc/man3/EVP_des_cbc.pod
doc/man3/EVP_desx_cbc.pod
doc/man3/EVP_idea_cbc.pod
doc/man3/EVP_md2.pod
doc/man3/EVP_md4.pod
doc/man3/EVP_md5.pod
doc/man3/EVP_mdc2.pod
doc/man3/EVP_rc2_cbc.pod
doc/man3/EVP_rc4.pod
doc/man3/EVP_rc5_32_12_16_cbc.pod
doc/man3/EVP_ripemd160.pod
doc/man3/EVP_seed_cbc.pod
doc/man3/EVP_sha1.pod
doc/man3/EVP_sha224.pod
doc/man3/EVP_sha3_224.pod
doc/man3/EVP_sm3.pod
doc/man3/EVP_sm4_cbc.pod
doc/man3/EVP_whirlpool.pod
doc/man3/OSSL_CMP_CTX_new.pod
doc/man3/OSSL_CMP_MSG_get0_header.pod
doc/man3/OSSL_CRMF_MSG_set0_validity.pod
doc/man3/OSSL_DECODER_from_bio.pod
doc/man3/OSSL_PARAM.pod
doc/man3/OSSL_PARAM_int.pod
doc/man3/PEM_read_CMS.pod
doc/man3/PKCS7_sign.pod
doc/man3/SSL_CTX_set_options.pod
doc/man3/SSL_CTX_set_split_send_fragment.pod
doc/man3/SSL_SESSION_free.pod
doc/man3/X509_STORE_CTX_get_error.pod
doc/man3/X509_VERIFY_PARAM_set_flags.pod
doc/man5/config.pod
doc/man7/EVP_CIPHER-NULL.pod [new file with mode: 0644]
doc/man7/EVP_MD-NULL.pod [new file with mode: 0644]
doc/man7/EVP_PKEY-EC.pod
doc/man7/OSSL_PROVIDER-FIPS.pod
doc/man7/OSSL_PROVIDER-default.pod
doc/man7/crypto.pod
doc/man7/migration_guide.pod
doc/man7/provider-asym_cipher.pod
doc/man7/provider-base.pod
doc/man7/provider-cipher.pod
doc/man7/provider-decoder.pod
doc/man7/provider-digest.pod
doc/man7/provider-keymgmt.pod
doc/man7/provider-signature.pod
engines/e_padlock.c
include/crypto/bn.h
include/crypto/cmperr.h
include/crypto/dsaerr.h
include/crypto/ecerr.h
include/internal/refcount.h
include/openssl/cmp.h.in
include/openssl/cmperr.h
include/openssl/dsaerr.h
include/openssl/ecerr.h
providers/fips-sources.checksums
providers/fips.checksum
providers/fips.module.sources
providers/implementations/asymciphers/rsa_enc.c
providers/implementations/ciphers/cipher_tdes_common.c
providers/implementations/kdfs/hkdf.c
providers/implementations/keymgmt/ec_kmgmt.c
providers/implementations/keymgmt/rsa_kmgmt.c
providers/implementations/rands/drbg.c
providers/implementations/signature/rsa_sig.c
ssl/record/rec_layer_d1.c
ssl/record/rec_layer_s3.c
ssl/record/ssl3_buffer.c
ssl/record/ssl3_record.c
ssl/ssl_cert.c
ssl/ssl_sess.c
ssl/t1_lib.c