Diffusion FreeBSD src repository bbecb0ff6c9e

OpenSSL: update to 3.0.11
bbecb0ff6c9e
Actions

Description

OpenSSL: update to 3.0.11

OpenSSL 3.0.11 addresses:

POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807)

Relnotes: Yes
Pull request: https://github.com/freebsd/freebsd-src/pull/852
Sponsored by: The FreeBSD Foundation

(cherry picked from commit 6f1af0d7d2af54b339b5212434cd6d4fda628d80)

Details

Provenance

khorben_defora.org	Authored on Oct 9 2023, 7:00 PM
emaste	Committed on Oct 12 2023, 6:46 PM

Parents

rGb24ca3caa752: ssh: Update to OpenSSH 9.5p1

Branches

Unknown

Tags

Unknown

Event Timeline

emaste committed rGbbecb0ff6c9e: OpenSSL: update to 3.0.11 (authored by khorben_defora.org).Oct 12 2023, 6:46 PM

emaste mentioned this in rGc4262d1b08e9: OpenSSL: update to 3.0.11.Oct 13 2023, 11:16 PM

Changes (868)
Show All Changes

Very Large Commit

This commit is very large. Load each file individually.

Path

Size

crypto/

openssl/

apps/

lib/

crypto/

asn1/

a_strnid.c

asn1_gen.c

chacha/

asm/

cmp/

cms/

conf/

encode_decode/

engine/

evp/

ctrl_params_translate.c

http/

pem/

perlasm/

pkcs12/

poly1305/

asm/

property/

rsa/

srp/

store/

x509/

doc/

man1/

man3/

OSSL_CMP_exec_certreq.pod

OSSL_HTTP_REQ_CTX.pod

OSSL_HTTP_transfer.pod

PKCS12_create.pod

PKCS12_gen_mac.pod

SSL_new.pod

d2i_RSAPrivateKey.pod

d2i_X509.pod

man5/

x509v3_config.pod

man7/

EVP_KDF-PKCS12KDF.pod

migration_guide.pod

include/

openssl/

opensslv.h

providers/

fips-sources.checksums

fips.checksum

implementations/

ciphers/

encode_decode/

keymgmt/

ssl/

statem/

secure/

lib/

libcrypto/

Makefile.inc

man/

man3/

ADMISSIONS.3

ASN1_EXTERN_FUNCS.3

ASN1_INTEGER_get_int64.3

ASN1_INTEGER_new.3

ASN1_ITEM_lookup.3

ASN1_OBJECT_new.3

ASN1_STRING_TABLE_add.3

ASN1_STRING_length.3

ASN1_STRING_new.3

ASN1_STRING_print_ex.3

ASN1_TIME_set.3

ASN1_TYPE_get.3

ASN1_aux_cb.3

ASN1_generate_nconf.3

BIO_get_ex_new_index.3

BN_mod_mul_montgomery.3

BN_mod_mul_reciprocal.3

CMS_EncryptedData_decrypt.3

CMS_EncryptedData_encrypt.3

CMS_EnvelopedData_create.3

CMS_add0_cert.3

CMS_add1_recipient_cert.3

CMS_get0_RecipientInfos.3

CMS_get0_SignerInfos.3

CMS_get0_type.3

CMS_get1_ReceiptRequest.3

CONF_modules_load_file.3

CRYPTO_THREAD_run_once.3

CRYPTO_get_ex_new_index.3

CRYPTO_memcmp.3

CTLOG_STORE_get0_log_by_id.3

CTLOG_STORE_new.3

CTLOG_new.3

CT_POLICY_EVAL_CTX_new.3

DEFINE_STACK_OF.3

DES_random_key.3

DH_generate_key.3

DH_generate_parameters.3

DSA_generate_parameters.3

ECPKParameters_print.3

EC_GFp_simple_method.3

EC_GROUP_copy.3

EC_GROUP_new.3

EC_KEY_get_enc_flags.3

ERR_load_crypto_strings.3

EVP_ASYM_CIPHER_free.3

EVP_BytesToKey.3

EVP_CIPHER_CTX_get_cipher_data.3

EVP_CIPHER_CTX_get_original_iv.3

EVP_CIPHER_meth_new.3

EVP_DigestInit.3

EVP_DigestSignInit.3

EVP_DigestVerifyInit.3

EVP_PKEY_ASN1_METHOD.3

EVP_PKEY_CTX_ctrl.3

EVP_PKEY_CTX_get0_libctx.3

EVP_PKEY_CTX_get0_pkey.3

EVP_PKEY_CTX_new.3

EVP_PKEY_CTX_set1_pbe_pass.3

EVP_PKEY_CTX_set_hkdf_md.3

EVP_PKEY_CTX_set_params.3

EVP_PKEY_CTX_set_rsa_pss_keygen_md.3

EVP_PKEY_CTX_set_scrypt_N.3

EVP_PKEY_CTX_set_tls1_prf_md.3

EVP_PKEY_asn1_get_count.3

EVP_PKEY_check.3

EVP_PKEY_copy_parameters.3

EVP_PKEY_decapsulate.3

EVP_PKEY_decrypt.3

EVP_PKEY_derive.3

EVP_PKEY_digestsign_supports_digest.3

EVP_PKEY_encapsulate.3

EVP_PKEY_encrypt.3

EVP_PKEY_fromdata.3

EVP_PKEY_get_default_digest_nid.3

EVP_PKEY_get_field_type.3

EVP_PKEY_get_group_name.3

EVP_PKEY_get_size.3

EVP_PKEY_gettable_params.3

EVP_PKEY_is_a.3

EVP_PKEY_keygen.3

EVP_PKEY_meth_get_count.3

EVP_PKEY_meth_new.3

EVP_PKEY_new.3

EVP_PKEY_print_private.3

EVP_PKEY_set1_RSA.3

EVP_PKEY_set1_encoded_public_key.3

EVP_PKEY_set_type.3

EVP_PKEY_settable_params.3

EVP_PKEY_sign.3

EVP_PKEY_todata.3

EVP_PKEY_verify.3

EVP_PKEY_verify_recover.3

EVP_camellia_128_ecb.3

EVP_rc5_32_12_16_cbc.3

EVP_ripemd160.3

EVP_seed_cbc.3

EVP_set_default_properties.3

OCSP_request_add1_nonce.3

OCSP_resp_find_status.3

OCSP_response_status.3

OCSP_sendreq_new.3

OPENSSL_Applink.3

OPENSSL_FILE.3

OPENSSL_LH_COMPFUNC.3

OPENSSL_LH_stats.3

OPENSSL_config.3

OPENSSL_fork_prepare.3

OPENSSL_gmtime.3

OPENSSL_hexchar2int.3

OPENSSL_ia32cap.3

OPENSSL_init_crypto.3

OPENSSL_init_ssl.3

OPENSSL_instrument_bus.3

OPENSSL_load_builtin_modules.3

OPENSSL_malloc.3

OPENSSL_s390xcap.3

OPENSSL_secure_malloc.3

OSSL_CMP_HDR_get0_transactionID.3

OSSL_CMP_ITAV_set0.3

OSSL_CMP_MSG_get0_header.3

OSSL_CMP_MSG_http_perform.3

OSSL_CMP_SRV_CTX_new.3

OSSL_CMP_STATUSINFO_new.3

OSSL_CMP_exec_certreq.3

OSSL_CMP_log_open.3

OSSL_CMP_validate_msg.3

OSSL_CORE_MAKE_FUNC.3

OSSL_CRMF_MSG_get0_tmpl.3

OSSL_CRMF_MSG_set0_validity.3

OSSL_CRMF_MSG_set1_regCtrl_regToken.3

OSSL_CRMF_MSG_set1_regInfo_certReq.3

OSSL_CRMF_pbmp_new.3

OSSL_DECODER.3

OSSL_DECODER_CTX.3

OSSL_DECODER_CTX_new_for_pkey.3

OSSL_DECODER_from_bio.3

OSSL_DISPATCH.3

OSSL_ENCODER.3

OSSL_ENCODER_CTX.3

OSSL_ENCODER_CTX_new_for_pkey.3

OSSL_ENCODER_to_bio.3

OSSL_ESS_check_signing_certs.3

OSSL_HTTP_REQ_CTX.3

OSSL_HTTP_parse_url.3

OSSL_PARAM_allocate_from_text.3

OSSL_SELF_TEST_set_callback.3

OSSL_trace_get_category_num.3

OSSL_trace_set_channel.3

OpenSSL_add_all_algorithms.3

OpenSSL_version.3

PEM_X509_INFO_read_bio_ex.3

PEM_bytes_read_bio.3

PEM_read.3

PEM_read_CMS.3

PEM_read_bio_PrivateKey.3

PEM_read_bio_ex.3

PEM_write_bio_CMS_stream.3

PEM_write_bio_PKCS7_stream.3

PKCS12_PBE_keyivgen.3

PKCS12_SAFEBAG_create_cert.3

PKCS12_SAFEBAG_get0_attrs.3

PKCS12_SAFEBAG_get1_cert.3

PKCS12_add1_attr_by_NID.3

PKCS12_add_CSPName_asc.3

PKCS12_add_cert.3

PKCS12_add_friendlyname_asc.3

PKCS12_add_localkeyid.3

PKCS12_add_safe.3

PKCS12_create.3

PKCS12_decrypt_skey.3

PKCS12_gen_mac.3

PKCS12_get_friendlyname.3

PKCS12_init.3

PKCS12_item_decrypt_d2i.3

PKCS12_key_gen_utf8_ex.3

PKCS12_newpass.3

PKCS12_pack_p7encdata.3

PKCS7_get_octet_string.3

PKCS7_sign.3

PKCS7_sign_add_signer.3

PKCS7_type_is_other.3

PKCS7_verify.3

PKCS8_encrypt.3

PKCS8_pkey_add1_attr.3

RAND_set_rand_method.3

RSA_padding_add_PKCS1_type_1.3

RSA_print.3

RSA_private_encrypt.3

RSA_public_encrypt.3

RSA_set_method.3

RSA_sign.3

RSA_sign_ASN1_OCTET_STRING.3

SRP_create_verifier.3

SRP_user_pwd_new.3

SSL_CIPHER_get_name.3

SSL_COMP_add_compression_method.3

SSL_CONF_CTX_new.3

SSL_CONF_CTX_set1_prefix.3

SSL_CONF_CTX_set_flags.3

SSL_CONF_CTX_set_ssl_ctx.3

SSL_CONF_cmd.3

SSL_CONF_cmd_argv.3

SSL_CTX_add1_chain_cert.3

SSL_CTX_add_extra_chain_cert.3

SSL_CTX_add_session.3

SSL_CTX_config.3

SSL_CTX_ctrl.3

SSL_CTX_dane_enable.3

SSL_CTX_flush_sessions.3

SSL_CTX_free.3

SSL_CTX_get0_param.3

SSL_CTX_get_verify_mode.3

SSL_CTX_has_client_custom_ext.3

SSL_CTX_load_verify_locations.3

SSL_CTX_new.3

SSL_CTX_sess_number.3

SSL_CTX_sess_set_cache_size.3

SSL_CTX_sess_set_get_cb.3

SSL_CTX_sessions.3

SSL_CTX_set0_CA_list.3

SSL_CTX_set1_curves.3

SSL_CTX_set1_sigalgs.3

SSL_CTX_set1_verify_cert_store.3

SSL_CTX_set_alpn_select_cb.3

SSL_CTX_set_cert_cb.3

SSL_CTX_set_cert_store.3

SSL_CTX_set_cert_verify_callback.3

SSL_CTX_set_cipher_list.3

SSL_CTX_set_client_cert_cb.3

SSL_CTX_set_client_hello_cb.3

SSL_CTX_set_ct_validation_callback.3

SSL_CTX_set_ctlog_list_file.3

SSL_CTX_set_default_passwd_cb.3

SSL_CTX_set_generate_session_id.3

SSL_CTX_set_info_callback.3

SSL_CTX_set_keylog_callback.3

SSL_CTX_set_max_cert_list.3

SSL_CTX_set_min_proto_version.3

SSL_CTX_set_mode.3

SSL_CTX_set_msg_callback.3

SSL_CTX_set_num_tickets.3

SSL_CTX_set_options.3

SSL_CTX_set_psk_client_callback.3

SSL_CTX_set_quiet_shutdown.3

SSL_CTX_set_read_ahead.3

SSL_CTX_set_record_padding_callback.3

SSL_CTX_set_security_level.3

SSL_CTX_set_session_cache_mode.3

SSL_CTX_set_session_id_context.3

SSL_CTX_set_session_ticket_cb.3

SSL_CTX_set_split_send_fragment.3

SSL_CTX_set_srp_password.3

SSL_CTX_set_ssl_version.3

SSL_CTX_set_stateless_cookie_generate_cb.3

SSL_CTX_set_timeout.3

SSL_CTX_set_tlsext_servername_callback.3

SSL_CTX_set_tlsext_status_cb.3

SSL_CTX_set_tlsext_ticket_key_cb.3

SSL_CTX_set_tlsext_use_srtp.3

SSL_CTX_set_tmp_dh_callback.3

SSL_CTX_set_tmp_ecdh.3

SSL_CTX_set_verify.3

SSL_CTX_use_certificate.3

SSL_CTX_use_psk_identity_hint.3

SSL_CTX_use_serverinfo.3

SSL_SESSION_free.3

SSL_SESSION_get0_cipher.3

SSL_SESSION_get0_hostname.3

SSL_SESSION_get0_id_context.3

SSL_SESSION_get0_peer.3

SSL_SESSION_get_compress_id.3

SSL_SESSION_get_protocol_version.3

SSL_SESSION_get_time.3

SSL_SESSION_has_ticket.3

SSL_SESSION_is_resumable.3

SSL_SESSION_print.3

SSL_SESSION_set1_id.3

SSL_accept.3

SSL_alert_type_string.3

SSL_export_keying_material.3

SSL_extension_supported.3

SSL_free.3

SSL_get0_peer_scts.3

SSL_get_SSL_CTX.3

SSL_get_all_async_fds.3

SSL_get_certificate.3

SSL_get_ciphers.3

SSL_get_client_random.3

SSL_get_current_cipher.3

SSL_get_default_timeout.3

SSL_get_error.3

SSL_get_extms_support.3

SSL_get_fd.3

SSL_get_peer_cert_chain.3

SSL_get_peer_certificate.3

SSL_get_peer_signature_nid.3

SSL_get_peer_tmp_key.3

SSL_get_psk_identity.3

SSL_get_rbio.3

SSL_get_session.3

SSL_get_shared_sigalgs.3

SSL_get_verify_result.3

SSL_load_client_CA_file.3

SSL_new.3

SSL_pending.3

SSL_read.3

SSL_read_early_data.3

SSL_rstate_string.3

SSL_session_reused.3

SSL_set1_host.3

SSL_set_async_callback.3

SSL_set_bio.3

SSL_set_connect_state.3

SSL_set_fd.3

SSL_set_retry_verify.3

SSL_set_session.3

SSL_set_shutdown.3

SSL_set_verify_result.3

TS_VERIFY_CTX_set_certs.3

X509_CRL_get0_by_serial.3

X509_EXTENSION_set_object.3

X509_LOOKUP.3

X509_LOOKUP_hash_dir.3

X509_LOOKUP_meth_new.3

X509_NAME_ENTRY_get_object.3

X509_NAME_add_entry_by_txt.3

X509_NAME_get0_der.3

X509_NAME_get_index_by_NID.3

X509_NAME_print_ex.3

X509_PUBKEY_new.3

X509_SIG_get0.3

X509_STORE_CTX_get_error.3

X509_STORE_CTX_new.3

X509_STORE_CTX_set_verify_cb.3

X509_STORE_add_cert.3

X509_STORE_get0_param.3

X509_STORE_new.3

X509_STORE_set_verify_cb_func.3

X509_VERIFY_PARAM_set_flags.3

X509_check_private_key.3

X509_get0_distinguishing_id.3

X509_get0_notBefore.3

X509_get0_signature.3

X509_get0_uids.3

X509_get_extension_flags.3

X509_get_pubkey.3

X509_get_serialNumber.3

X509_get_subject_name.3

X509v3_get_ext_by_NID.3

b2i_PVK_bio_ex.3

d2i_PKCS8PrivateKey_bio.3

i2d_PKCS7_bio_stream.3

man5/

man7/

EVP_ASYM_CIPHER-RSA.7

EVP_ASYM_CIPHER-SM2.7

EVP_CIPHER-AES.7

EVP_CIPHER-ARIA.7

EVP_CIPHER-BLOWFISH.7

EVP_CIPHER-CAMELLIA.7

EVP_KDF-X942-CONCAT.7

EVP_SIGNATURE-ECDSA.7

EVP_SIGNATURE-ED25519.7

OSSL_PROVIDER-default.7

OSSL_PROVIDER-legacy.7

openssl-core_dispatch.h.7

openssl-core_names.h.7

openssl-env.7

openssl-glossary.7

openssl-threads.7

openssl_user_macros.7

ossl_store-file.7

ossl_store.7

passphrase-encoding.7

property.7

provider-asym_cipher.7

usr.bin/

openssl/

man/

openssl-fipsinstall.1

openssl-format-options.1

openssl-namedisplay-options.1

openssl-nseq.1

openssl-ocsp.1

openssl-passphrase-options.1

openssl-verification-options.1

OpenSSL: update to 3.0.11bbecb0ff6c9eActions

Description

Details

Event Timeline

Changes (868)Show All Changes

Very Large Commit

rGbbecb0ff6c9e

crypto/openssl/CHANGES.md

crypto/openssl/NEWS.md

crypto/openssl/README.md

crypto/openssl/VERSION.dat

crypto/openssl/apps/cmp.c

crypto/openssl/apps/lib/apps.c

crypto/openssl/apps/req.c

crypto/openssl/apps/s_server.c

crypto/openssl/crypto/asn1/a_strnid.c

crypto/openssl/crypto/asn1/asn1_gen.c

crypto/openssl/crypto/chacha/asm/chacha-ia64.pl

crypto/openssl/crypto/cmp/cmp_asn.c

crypto/openssl/crypto/cmp/cmp_client.c

crypto/openssl/crypto/cmp/cmp_status.c

crypto/openssl/crypto/cms/cms_env.c

crypto/openssl/crypto/cms/cms_lib.c

crypto/openssl/crypto/cms/cms_local.h

crypto/openssl/crypto/cms/cms_sd.c

crypto/openssl/crypto/conf/conf_sap.c

crypto/openssl/crypto/encode_decode/decoder_lib.c

crypto/openssl/crypto/encode_decode/decoder_pkey.c

crypto/openssl/crypto/engine/eng_lib.c

crypto/openssl/crypto/engine/eng_list.c

crypto/openssl/crypto/engine/eng_local.h

crypto/openssl/crypto/engine/eng_table.c

crypto/openssl/crypto/evp/ctrl_params_translate.c

crypto/openssl/crypto/evp/p_lib.c

crypto/openssl/crypto/http/http_client.c

crypto/openssl/crypto/mem.c

crypto/openssl/crypto/pem/pem_pkey.c

crypto/openssl/crypto/perlasm/arm-xlate.pl

crypto/openssl/crypto/pkcs12/p12_crt.c

crypto/openssl/crypto/poly1305/asm/poly1305-x86_64.pl

crypto/openssl/crypto/property/property.c

crypto/openssl/crypto/provider_core.c

crypto/openssl/crypto/rsa/rsa_ameth.c

crypto/openssl/crypto/srp/srp_vfy.c

crypto/openssl/crypto/store/store_lib.c

crypto/openssl/crypto/threads_pthread.c

crypto/openssl/crypto/x509/v3_ist.c

crypto/openssl/crypto/x509/x509_cmp.c

crypto/openssl/doc/man1/openssl-cmp.pod.in

crypto/openssl/doc/man1/openssl-cms.pod.in

crypto/openssl/doc/man1/openssl-ts.pod.in

crypto/openssl/doc/man3/BIO_s_mem.pod

crypto/openssl/doc/man3/CMS_sign.pod

crypto/openssl/doc/man3/EVP_MAC.pod

crypto/openssl/doc/man3/EVP_SIGNATURE.pod

crypto/openssl/doc/man3/OSSL_CMP_CTX_new.pod

crypto/openssl/doc/man3/OSSL_CMP_exec_certreq.pod

crypto/openssl/doc/man3/OSSL_HTTP_REQ_CTX.pod

crypto/openssl/doc/man3/OSSL_HTTP_transfer.pod

crypto/openssl/doc/man3/PKCS12_create.pod

crypto/openssl/doc/man3/PKCS12_gen_mac.pod

crypto/openssl/doc/man3/SSL_new.pod

crypto/openssl/doc/man3/d2i_RSAPrivateKey.pod

crypto/openssl/doc/man3/d2i_X509.pod

crypto/openssl/doc/man5/x509v3_config.pod

crypto/openssl/doc/man7/EVP_KDF-PKCS12KDF.pod

crypto/openssl/doc/man7/migration_guide.pod

crypto/openssl/include/openssl/opensslv.h

crypto/openssl/providers/fips-sources.checksums

crypto/openssl/providers/fips.checksum

crypto/openssl/providers/implementations/ciphers/cipher_chacha20.c

crypto/openssl/providers/implementations/encode_decode/decode_der2key.c

crypto/openssl/providers/implementations/encode_decode/decode_msblob2key.c

crypto/openssl/providers/implementations/encode_decode/decode_pvk2key.c

crypto/openssl/providers/implementations/encode_decode/encode_key2any.c

crypto/openssl/providers/implementations/keymgmt/dh_kmgmt.c

crypto/openssl/providers/implementations/keymgmt/dsa_kmgmt.c

crypto/openssl/providers/implementations/keymgmt/ecx_kmgmt.c

crypto/openssl/providers/implementations/keymgmt/mac_legacy_kmgmt.c

crypto/openssl/ssl/ssl_lib.c

OpenSSL: update to 3.0.11
bbecb0ff6c9e
Actions

Changes (868)
Show All Changes