en Copyright 2015 Java http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#ab64f100 libcrypto: complete the support for the 0.9.8 APIWhen importing OpenSSL 3 in base, some but not all source filesimplementing the deprecated 0.9.8 API were imported. With this change,it becomes possible again to compile software targeting this API.PR: 272220Fixes: b077aed33b7b ("Merge OpenSSL 3.0.9")Reviewed by: emasteSponsored by: The FreeBSD FoundationPull Request: https://github.com/freebsd/freebsd-src/pull/851(cherry picked from commit b15b39521644ebffdcc091bd283ed410b0ae9274) List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Thu, 21 Sep 2023 11:42:06 +0000 Pierre Pronchery <pierre@freebsdfoundation.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#fd4b13ac libcrypto: link engines and the legacy provider to libcryptoOpenSSL's legacy provider module and engines need to link tolibcrypto.so, as it provides some of the actual implementations oflegacy routines.This is a little tricky due to build order issues. Introduce a smallhack (LIBCRYPTO_WITHOUT_SUBDIRS) that builds libcrypto.so in its usualearly phase without any OpenSSL provider modules or engines. This isintended to restore the test suite; a future change should remove thehack and replace it with a better approach.PR: 254853, 273528Discussed with: Folks at EuroBSDCon in CoimbraSponsored by: The FreeBSD Foundation(cherry picked from commit 1a18383a52bc373e316d224cef1298debf6f7e25) List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Fri, 15 Sep 2023 15:14:16 +0000 Pierre Pronchery <pierre@freebsdfoundation.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#bf5069fb libcrypto: Switch back to the generated assembly in sys/crypto/opensslReviewed by: markjDifferential Revision: https://reviews.freebsd.org/D41569(cherry picked from commit 47d997021fbc7b662e9507deec1897d514d1224c) List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Tue, 29 Aug 2023 21:46:44 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#ef81451d libcrypto: Add buildasm and cleanasm targetsThese targets generate all the assembly files in sys/crypto/openssl.Reviewed by: markj, emaste (earlier version)Differential Revision: https://reviews.freebsd.org/D41590(cherry picked from commit 73653b72af65e294dcfedc43a8ea09b2137d72ed) List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Tue, 29 Aug 2023 21:39:54 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#3250c9d5 libcrypto: Update assembly build glue for x86 for OpenSSL 3.0.Notably, define AES_ASM which is required for any AES acceleration(OpenSSL 1.0 gated all AES acceleration on OPENSSL_CPUID_OBJ instead).Enabling this exposed that new assembly files added in OpenSSL 3.0needed to be included in the build (aes-x86-64.S and aes-586.S). Bothof these files supplant both aes_core.c and aes_cbc.c. The last filehad to be moved out of the MI SRCS line for aes and into each ASM_*for non-x86.As part of this I audited the generated configdata.pm for amd64, i386,and aarch64 and found the following additional discrepecancies that arefixed here as well:- Enabled BSAES_ASM on amd64 which requires bsase-x86_64.S- Enabled WHIRLPOOL_ASM on amd64 (asm sources already built)- Enabled CMLL_ASM on amd64 and i386 (asm sources already built)aarch64 had no discreprecancies in configdata.pm, and no *.pl asmgenerators were missing for aarch64 in Makefile.asm. I did not checkpowerpc or armv7, but for armv7 all of the asm generators seem to bepresent in Makefile.asm.Reported by: gallatin (AES-GCM using plain software on amd64)Reviewed by: gallatin, ngie, emasteDifferential Revision: https://reviews.freebsd.org/D41539 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Tue, 22 Aug 2023 04:02:42 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#57a3b817 libcrypto: add rsa_depr.c to the buildIt provides the RSA_generate_key function, which is deprecated as of3.0 but is used by various ports.Reviewed by: kbowlingSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D41506 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Fri, 18 Aug 2023 19:03:40 +0000 Ed Maste <emaste@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#e5e6a865 libcrypto: add err_all_legacy.c to the buildIt provides the ERR_load_*_strings routines, which are deprecated as of3.0 but are used by various ports.PR: 272580Reviewed by: kbowlingSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D41505 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Fri, 18 Aug 2023 18:28:42 +0000 Ed Maste <emaste@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#d0b2dbfa Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Wed, 16 Aug 2023 17:55:03 +0000 Warner Losh <imp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#1d7ffb37 pkgbase: reorganise caroot and openssl packagesThis splits out the certctl utility into a new certctl package and theopenssl libs into an openssl-lib package.PR: 272816Reviewed by: manuDifferential Revision: https://reviews.freebsd.org/D41321 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Mon, 31 Jul 2023 14:38:45 +0000 Doug Rabson <dfr@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#ebd508a0 openssl: include d2i_KeyParams() and d2i_KeyParams_bio()These functions are new, and some ports (e.g.opensc) expect to have themavailable. Add the file they're defined in to the build, and add themto Version.map.PR: 270076Reviewed by: markj, emaste, pierreFixes: b077aed33b7b ("Merge OpenSSL 3.0.9")Sponsored by: Rubicon Communications, LLC ("Netgate")Differential Revision: https://reviews.freebsd.org/D40914 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Fri, 07 Jul 2023 19:25:34 +0000 Kristof Provost <kp@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#544deacc libcrypto: group definitions for libcrypto and fipsOpenSSL 3 supports a modular architecture, allowing different providersto bring specific implementations of cryptographical algorithms. Thischange makes sure the FIPS module matches build instructions used forlibcrypto.Sponsored by: The FreeBSD FoundationPull Request: https://github.com/freebsd/freebsd-src/pull/787 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Fri, 30 Jun 2023 17:23:57 +0000 Pierre Pronchery <pierre@freebsdfoundation.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#9cbc371c libcrypto: build nistp* on all little-endian 64-bit targetslibcrypto intends to provide these routines on little-endian 64-bittargets. This was previously done by including them in the ASM_aarch64and ASM_amd64 blocks in the Makefile, but this excluded powerpc64le andriscv64.Reported by: ci.freebsd.orgReviewed by: jrtc27Fixes: b077aed33b7b ("Merge OpenSSL 3.0.9")Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D40749 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Sat, 24 Jun 2023 17:52:08 +0000 Ed Maste <emaste@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#84ffbd77 OpenSSL: Merge OpenSSL 1.1.1u List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Tue, 30 May 2023 15:14:28 +0000 Jung-uk Kim <jkim@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#fb313455 OpenSSL: Merge OpenSSL 1.1.1t List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Tue, 07 Feb 2023 18:54:16 +0000 Jung-uk Kim <jkim@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#b323fa85 openssl: install pc filesmost programs in ports are looking for .pc files in order to get thenecessary information on how to compile and link against openssl.The ports now also has a way to hide or force a path for pkgconf.Providing .pc files along with openssl in base will allow (once allthe supported version of FreeBSD has it) so improve the framework todeal with openssl in base vs openssl in ports (and libressl)This will also greatly reduce the number of patches necessary toworkaround the build systems which only knows how to detect whereopenssl is installed via pkgconf.PR: 266051MFC After: 3 weeksReviewed by: jkim, delphijExp-run by: antoineDifferential Revision: https://reviews.freebsd.org/D36360 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Fri, 26 Aug 2022 14:02:09 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#3b41ae32 libcrypto: Work around strict aliasing violations in bn_nist.cThis file is full of strict aliasing violations. Previously it was onlyoptimised in ways that broke the code by CHERI LLVM, but now it appearsthat the in-tree LLVM also breaks it for RISC-V, resulting in brokenECDSA signature validation with error messages like the following: root@unmatched:/usr/src # ssh-keygen -l -f /etc/ssh/ssh_host_ecdsa_key /etc/ssh/ssh_host_ecdsa_key is not a key file. root@unmatched:/usr/src # git fetch fatal: unable to access 'https://git.FreeBSD.org/src.git/': error:1012606B:elliptic curve routines:EC_POINT_set_affine_coordinates:point is not on curveReviewed by: dim, jkimObtained from: CheriBSDMFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D35885 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Mon, 25 Jul 2022 17:17:50 +0000 Jessica Clarke <jrtc27@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#3a608692 Add assembly optimized code for OpenSSL on powerpc, powerpc64 and powerpc64leSummary:1. https://github.com/openssl/openssl/commit/34ab13b7d8e3e723adb60be8142e38b7c9cd382aneeds to be merged for ELFv2 support on big-endian.2. crypto/openssl/crypto/ppccap.c needs to be patched.Same reason as in https://github.com/openssl/openssl/pull/17082.Approved by: jkim, jhibbitsMFC after: 1 monthDifferential Revision: https://reviews.freebsd.org/D33076 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Mon, 22 Nov 2021 02:28:46 +0000 Piotr Kubaj <pkubaj@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#ca179c4d pkgbase: Put openssl in its own packageThis is useful for upgrade and also to make tiny jail so they won'tdepend on FreeBSD-utilities (where openssl was packaged before).MFC after: 1 monthDifferential Revision: https://reviews.freebsd.org/D30081 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Sun, 02 May 2021 15:46:17 +0000 Emmanuel Vadot <manu@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#aa906e2a OpenSSL: Support for kernel TLS offload (KTLS)This merges upstream patches from OpenSSL's master branch to addKTLS infrastructure for TLS 1.0-1.3 including both RX and TXoffload and SSL_sendfile support on both Linux and FreeBSD.Note that TLS 1.3 only supports TX offload.A new WITH/WITHOUT_OPENSSL_KTLS determines if OpenSSL is built withKTLS support. It defaults to enabled on amd64 and disabled on allother architectures.Reviewed by: jkim (earlier version)Approved by: secteamObtained from: OpenSSL (patches from master)MFC after: 1 weekRelnotes: yesSponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D28273 List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Sat, 16 Jan 2021 00:17:31 +0000 John Baldwin <jhb@FreeBSD.org> http://172.16.0.5:8080/history/freebsd-14.2/secure/lib/libcrypto/Makefile#bc3d5698 Move generated OpenSSL assembly routines into the kernel sources.Sponsored by: Netflix List of files: /freebsd-14.2/secure/lib/libcrypto/Makefile Tue, 20 Oct 2020 17:00:43 +0000 John Baldwin <jhb@FreeBSD.org>