openssl: Import OpenSSL 3.0.16This release incorporates the following bug fixes and mitigations:- [CVE-2024-13176](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-13176- [CVE-2024-9143
openssl: Import OpenSSL 3.0.16This release incorporates the following bug fixes and mitigations:- [CVE-2024-13176](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-13176- [CVE-2024-9143](https://www.openssl.org/news/vulnerabilities.html#CVE-2024-9143)Release notes can be found at:https://openssl-library.org/news/openssl-3.0-notes/index.htmlApproved by: soSecurity: FreeBSD-EN-25:07.opensslDifferential Revision: https://reviews.freebsd.org/D49296Differential Revision: https://reviews.freebsd.org/D49297(cherry picked from commit 0d0c8621fd181e507f0fb50ffcca606faf66a8c2)(cherry picked from commit cb29db243bd09d16604435639ae43ef7af0ea254)(cherry picked from commit d2a55e6a9348bb55038dbc6b727ab041085f22db)(cherry picked from commit 0d61082e3c64a43f52ec5f1bf3d85671d97d9514)
show more ...
ossl: Rebuild the openssl asmThis adds the new BTI instructions when needed to the arm64 assembly.Sponsored by: Arm LtdReviewed by: Pierre Pronchery <[email protected]> (earlier vers
ossl: Rebuild the openssl asmThis adds the new BTI instructions when needed to the arm64 assembly.Sponsored by: Arm LtdReviewed by: Pierre Pronchery <[email protected]> (earlier version)Sponsored by: Arm LtdDifferential Revision: https://reviews.freebsd.org/D41941(cherry picked from commit bd9588bca05f5cbdeac6e5f9f426b2589301d7c6)
ossl: Move arm_arch.h to a common subdirectoryOpenSSL itself keeps only a single copy of this header. Do the same insys/crypto/openssl to avoid the extra maintenance burden. This requiresadjust
ossl: Move arm_arch.h to a common subdirectoryOpenSSL itself keeps only a single copy of this header. Do the same insys/crypto/openssl to avoid the extra maintenance burden. This requiresadjusting the include paths for generated asm files.No functional change intended.Reported by: jrtc27Reviewed by: jhbMFC after: 3 monthsDifferential Revision: https://reviews.freebsd.org/D42866(cherry picked from commit e655cc70dfcda5cfedb5a1d9bef1e87d55519f64)
OpenSSL: update to 3.0.12OpenSSL 3.0.12 addresses: * Fix incorrect key and IV resizing issues when calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() with OSSL_PAR
OpenSSL: update to 3.0.12OpenSSL 3.0.12 addresses: * Fix incorrect key and IV resizing issues when calling EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() or EVP_CipherInit_ex2() with OSSL_PARAM parameters that alter the key or IV length ([CVE-2023-5363]).Relnotes: YesSponsored by: The FreeBSD Foundation(cherry picked from commit ad991e4c142ebabad7aef488ad97b189ecabb270)(cherry picked from commit 575878a533823aa3e5bab715928d9cdffbc4dcbc)
ossl: Update arm_arch.h from OpenSSL 1.1.1 to 3.0Reviewed by: emasteSponsored by: Arm LtdDifferential Revision: https://reviews.freebsd.org/D41939(cherry picked from commit 2f198d313b4894c1fc36
ossl: Update arm_arch.h from OpenSSL 1.1.1 to 3.0Reviewed by: emasteSponsored by: Arm LtdDifferential Revision: https://reviews.freebsd.org/D41939(cherry picked from commit 2f198d313b4894c1fc3649aa1e5ccfba2b6a2ef5)
ossl: Update the generated assembly files from OpenSSL 3.0.Tested with: cryptocheck -d ossl0 -a all -z on amd64Reviewed by: markjDifferential Revision: https://reviews.freebsd.org/D41568(cherry
ossl: Update the generated assembly files from OpenSSL 3.0.Tested with: cryptocheck -d ossl0 -a all -z on amd64Reviewed by: markjDifferential Revision: https://reviews.freebsd.org/D41568(cherry picked from commit c0855eaa3ee9614804b6bd6a255aa9f71e095f43)
sys: Remove $FreeBSD$: one-line .c comment patternRemove /^/[*/]\s*\$FreeBSD\$.*\n/
OpenSSL: Regen assembly file for OpenSSSL 1.1.1s
Merge OpenSSL 1.1.1i.
ossl: port to arm64Enable in-kernel acceleration of SHA1 and SHA2 operations on arm64 by addingsupport for the ossl(4) crypto driver. This uses OpenSSL's assembly routinesunder the hood, which wi
ossl: port to arm64Enable in-kernel acceleration of SHA1 and SHA2 operations on arm64 by addingsupport for the ossl(4) crypto driver. This uses OpenSSL's assembly routinesunder the hood, which will detect and use SHA intrinsics if they aresupported by the CPU.Reviewed by: jhbSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D27390
Move generated OpenSSL assembly routines into the kernel sources.Sponsored by: Netflix