en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#cc43f991 openssl: Import OpenSSL 3.0.15.This release incorporates the following bug fixes and mitigations:- Fixed possible denial of service in X.509 name checks ([CVE-2024-6119])- Fixed possible buffer overread in SSL_select_next_proto() ([CVE-2024-5535])Release notes can be found at:https://openssl-library.org/news/openssl-3.0-notes/index.htmlCo-authored-by: gordonMFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D46602Merge commit '108164cf95d9594884c2dcccba2691335e6f221b'(cherry picked from commit a7148ab39c03abd4d1a84997c70bf96f15dd2a09)Update config/build info for OpenSSL 3.0.15This is a companion commit to the OpenSSL 3.0.15 update.`opensslv.h` was regenerated via the following process:```cd crypto/openssl./configgit reset --hardgmake include/openssl/opensslv.h````Makefile.inc` has been updated to match.MFC after: 1 weekMFC with: a7148ab39c03abd4d1a84997c70bf96f15dd2a09Differential Revision: https://reviews.freebsd.org/D46603(cherry picked from commit cc717b574d7faa2e0b2de1a985076286cef74187)sys/crypto/openssl: update powerpc* ASMThis change updates the crypto powerpc* ASM via the prescribed processdocumented in `crypto/openssl/FREEBSD-upgrade`.This change syncs the ASM with 3.0.15's generated ASM.MFC after: 1 weekMFC with: a7148ab39c03abd4d1a84997c70bf96f15dd2a09MFC with: cc717b574d7faa2e0b2de1a985076286cef74187Differential Revision: https://reviews.freebsd.org/D46604(cherry picked from commit 77864b545b0aaa91bc78b1156c477825007a6233) List of files: /freebsd-14.2/crypto/openssl/Configure Sun, 08 Sep 2024 04:30:17 +0000 Enji Cooper <ngie@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#13a031f0 Update to OpenSSL 3.0.14This release resolves 3 upstream found CVEs:- Fixed potential use after free after SSL_free_buffers() is called (CVE-2024-4741)- Fixed an issue where checking excessively long DSA keys or parameters may be very slow (CVE-2024-4603)- Fixed unbounded memory growth with session handling in TLSv1.3 (CVE-2024-2511)MFC after: 3 daysMerge commit '1070e7dca8223387baf5155524b28f62bfe7da3c'(cherry picked from commit 44096ebd22ddd0081a357011714eff8963614b65) List of files: /freebsd-14.2/crypto/openssl/Configure Wed, 26 Jun 2024 23:50:13 +0000 Enji Cooper <ngie@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#c9488674 OpenSSL: Vendor import of OpenSSL 3.0.13 * Fixed PKCS12 Decoding crashes ([CVE-2024-0727]) * Fixed Excessive time spent checking invalid RSA public keys ([CVE-2023-6237]) * Fixed POLY1305 MAC implementation corrupting vector registers on PowerPC CPUs which support PowerISA 2.07 ([CVE-2023-6129]) * Fix excessive time spent in DH check / generation with large Q parameter value ([CVE-2023-5678])Release notes can be found at https://www.openssl.org/news/openssl-3.0-notes.html.Approved by: emasteMerge commit '9dd13e84fa8eca8f3462bd55485aa3da8c37f54a'(cherry picked from commit e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6) List of files: /freebsd-14.2/crypto/openssl/Configure Fri, 02 Feb 2024 21:10:22 +0000 Cy Schubert <cy@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#8f1ef87a OpenSSL: Merge OpenSSL 1.1.1u(cherry picked from commit 8ecb489345f08012fdc92a202a40119891cac330) List of files: /freebsd-14.2/crypto/openssl/Configure Tue, 30 May 2023 14:24:15 +0000 Jung-uk Kim <jkim@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#5ac766ab OpenSSL: Merge OpenSSL 1.1.1n List of files: /freebsd-14.2/crypto/openssl/Configure Tue, 15 Mar 2022 23:35:22 +0000 Jung-uk Kim <jkim@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#b2bf0c7e OpenSSL: Merge OpenSSL 1.1.1mMerge commit '56eae1b760adf10835560a9ee595549a1f10410f' List of files: /freebsd-14.2/crypto/openssl/Configure Tue, 14 Dec 2021 19:04:30 +0000 Jung-uk Kim <jkim@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#aa906e2a OpenSSL: Support for kernel TLS offload (KTLS)This merges upstream patches from OpenSSL's master branch to addKTLS infrastructure for TLS 1.0-1.3 including both RX and TXoffload and SSL_sendfile support on both Linux and FreeBSD.Note that TLS 1.3 only supports TX offload.A new WITH/WITHOUT_OPENSSL_KTLS determines if OpenSSL is built withKTLS support. It defaults to enabled on amd64 and disabled on allother architectures.Reviewed by: jkim (earlier version)Approved by: secteamObtained from: OpenSSL (patches from master)MFC after: 1 weekRelnotes: yesSponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D28273 List of files: /freebsd-14.2/crypto/openssl/Configure Sat, 16 Jan 2021 00:17:31 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#ccc1eaed Merge OpenSSL 0.9.8n from head into stable/8.Approved by: re (kib) List of files: /freebsd-14.2/crypto/openssl/Configure Sat, 22 May 2010 18:40:54 +0000 Simon L. B. Nielsen <simon@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#5471f83e Vendor import of OpenSSL 0.9.8e. List of files: /freebsd-14.2/crypto/openssl/Configure Thu, 15 Mar 2007 20:03:30 +0000 Simon L. B. Nielsen <simon@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#ed5d4f9a Vendor import of OpenSSL 0.9.8d. List of files: /freebsd-14.2/crypto/openssl/Configure Sun, 01 Oct 2006 07:38:44 +0000 Simon L. B. Nielsen <simon@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#3b4e3dcb Vendor import of OpenSSL 0.9.8b List of files: /freebsd-14.2/crypto/openssl/Configure Sat, 29 Jul 2006 19:10:21 +0000 Simon L. B. Nielsen <simon@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#6be8ae07 Vendor import of OpenSSL 0.9.7e. List of files: /freebsd-14.2/crypto/openssl/Configure Fri, 25 Feb 2005 05:39:05 +0000 Jacques Vidrine <nectar@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#ced566fd Vendor import of OpenSSL 0.9.7d. List of files: /freebsd-14.2/crypto/openssl/Configure Wed, 17 Mar 2004 15:49:33 +0000 Jacques Vidrine <nectar@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#50ef0093 Vendor import of OpenSSL 0.9.7c List of files: /freebsd-14.2/crypto/openssl/Configure Wed, 01 Oct 2003 12:32:41 +0000 Jacques Vidrine <nectar@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#fceca8a3 Vendor import of OpenSSL 0.9.7a. List of files: /freebsd-14.2/crypto/openssl/Configure Wed, 19 Feb 2003 23:17:42 +0000 Jacques Vidrine <nectar@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#5c87c606 Vendor import of OpenSSL release 0.9.7. This release includessupport for AES and OpenBSD's hardware crypto. List of files: /freebsd-14.2/crypto/openssl/Configure Tue, 28 Jan 2003 21:43:22 +0000 Mark Murray <markm@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#9e6c5d17 Import of OpenSSL 0.9.6f. List of files: /freebsd-14.2/crypto/openssl/Configure Sat, 10 Aug 2002 01:40:00 +0000 Jacques Vidrine <nectar@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#4f20a5a2 Import of OpenSSL 0.9.6e. List of files: /freebsd-14.2/crypto/openssl/Configure Tue, 30 Jul 2002 13:38:06 +0000 Jacques Vidrine <nectar@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#c1803d78 Import of OpenSSL 0.9.6d. List of files: /freebsd-14.2/crypto/openssl/Configure Tue, 30 Jul 2002 12:44:15 +0000 Jacques Vidrine <nectar@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/crypto/openssl/Configure#a21b1b38 Initial import of OpenSSL 0.9.6c List of files: /freebsd-14.2/crypto/openssl/Configure Sun, 27 Jan 2002 03:13:07 +0000 Kris Kennaway <kris@FreeBSD.org>