Date: Mon, 22 Sep 2025 22:38:57 GMT From: Enji Cooper <ngie@FreeBSD.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Subject: git: 88b8b7f0c4e9 - main - crypto/openssl: update component to 3.5.3 Message-ID: <202509222238.58MMcvnY086500@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by ngie: URL: https://cgit.FreeBSD.org/src/commit/?id=88b8b7f0c4e9948667a2279e78e975a784049cba commit 88b8b7f0c4e9948667a2279e78e975a784049cba Merge: 3e13aae0d1f1 aed904c48f33 Author: Enji Cooper <ngie@FreeBSD.org> AuthorDate: 2025-09-22 22:31:10 +0000 Commit: Enji Cooper <ngie@FreeBSD.org> CommitDate: 2025-09-22 22:31:10 +0000 crypto/openssl: update component to 3.5.3 This change updates the sources for crypto/openssl. The subsequent commit will update the build artifacts to match the 3.5.3 release. More details about the update can be found in the related vendor branch commits. MFC after: 1 week Merge commit 'aed904c48f330dc76da942a8ee2d6eef9d11f572' crypto/openssl/.ctags.d/add-dir.ctags | 11 + crypto/openssl/.ctags.d/exclude.ctags | 13 + .../openssl-stage1/10extrac-macrodefs.ctags | 18 + .../.ctags.d/openssl-stage2/10expand-macros.ctags | 9 + crypto/openssl/CHANGES.md | 57 +++ crypto/openssl/Configurations/unix-Makefile.tmpl | 14 +- crypto/openssl/NEWS.md | 14 + crypto/openssl/NOTES-WINDOWS.md | 2 +- crypto/openssl/VERSION.dat | 4 +- crypto/openssl/apps/asn1parse.c | 2 +- crypto/openssl/apps/cms.c | 1 + crypto/openssl/apps/enc.c | 2 + crypto/openssl/apps/include/apps.h | 1 - crypto/openssl/apps/lib/apps.c | 49 -- crypto/openssl/apps/ocsp.c | 21 +- crypto/openssl/apps/rand.c | 4 +- crypto/openssl/crypto/aes/asm/aes-s390x.pl | 5 +- crypto/openssl/crypto/asn1/asn_mime.c | 22 +- crypto/openssl/crypto/bio/bss_dgram.c | 25 +- crypto/openssl/crypto/dh/dh_check.c | 36 +- crypto/openssl/crypto/dh/dh_key.c | 14 +- crypto/openssl/crypto/dh/dh_pmeth.c | 2 +- crypto/openssl/crypto/encode_decode/decoder_lib.c | 28 ++ crypto/openssl/crypto/encode_decode/decoder_pkey.c | 72 ++- .../openssl/crypto/encode_decode/encoder_local.h | 2 + crypto/openssl/crypto/err/openssl.txt | 1 + crypto/openssl/crypto/evp/asymcipher.c | 8 +- crypto/openssl/crypto/evp/keymgmt_meth.c | 4 +- crypto/openssl/crypto/evp/m_sigver.c | 24 +- crypto/openssl/crypto/evp/p_seal.c | 7 +- crypto/openssl/crypto/evp/skeymgmt_meth.c | 2 +- crypto/openssl/crypto/pkcs7/pk7_doit.c | 7 +- crypto/openssl/crypto/provider_core.c | 10 +- crypto/openssl/crypto/rand/randfile.c | 6 +- crypto/openssl/crypto/riscv32cpuid.pl | 5 +- crypto/openssl/crypto/riscv64cpuid.pl | 5 +- crypto/openssl/crypto/rsa/rsa_gen.c | 15 + crypto/openssl/crypto/rsa/rsa_pmeth.c | 8 +- crypto/openssl/crypto/sleep.c | 39 +- crypto/openssl/crypto/slh_dsa/slh_dsa_key.c | 24 +- crypto/openssl/crypto/slh_dsa/slh_hash.c | 3 + crypto/openssl/crypto/sm2/sm2_sign.c | 6 +- crypto/openssl/crypto/store/store_lib.c | 25 +- crypto/openssl/crypto/x509/by_store.c | 34 +- crypto/openssl/crypto/x509/t_req.c | 6 +- crypto/openssl/crypto/x509/v3_attrdesc.c | 4 +- crypto/openssl/crypto/x509/v3_purp.c | 2 +- crypto/openssl/crypto/x509/x509_ext.c | 20 +- crypto/openssl/crypto/x509/x509_local.h | 1 + crypto/openssl/crypto/x509/x509_lu.c | 6 +- crypto/openssl/crypto/x509/x509_vpm.c | 5 + crypto/openssl/crypto/x509/x_crl.c | 15 +- crypto/openssl/demos/bio/saccept.c | 7 +- crypto/openssl/demos/bio/server-arg.c | 7 +- crypto/openssl/demos/bio/server-cmod.c | 7 +- crypto/openssl/demos/bio/server-conf.c | 7 +- crypto/openssl/demos/certs/mkcerts.sh | 2 +- crypto/openssl/demos/certs/ocspquery.sh | 2 +- crypto/openssl/demos/certs/ocsprun.sh | 4 +- crypto/openssl/demos/cms/cms_ddec.c | 4 +- crypto/openssl/demos/cms/cms_denc.c | 4 +- crypto/openssl/demos/pkey/EVP_PKEY_RSA_keygen.c | 4 +- .../openssl/doc/internal/man3/ossl_namemap_new.pod | 15 +- crypto/openssl/doc/man1/openssl-enc.pod.in | 7 +- crypto/openssl/doc/man1/openssl-fipsinstall.pod.in | 10 +- crypto/openssl/doc/man3/BN_generate_prime.pod | 6 +- crypto/openssl/doc/man3/EVP_EncryptInit.pod | 2 +- crypto/openssl/doc/man3/EVP_PKEY_new.pod | 14 +- crypto/openssl/doc/man3/EVP_aes_128_gcm.pod | 4 +- crypto/openssl/doc/man3/EVP_aria_128_gcm.pod | 4 +- crypto/openssl/doc/man3/EVP_chacha20.pod | 4 +- crypto/openssl/doc/man3/OPENSSL_secure_malloc.pod | 9 +- crypto/openssl/doc/man3/OSSL_CALLBACK.pod | 11 +- crypto/openssl/doc/man3/PEM_read_CMS.pod | 8 +- crypto/openssl/doc/man3/RAND_load_file.pod | 8 +- .../openssl/doc/man3/SSL_CTX_set_domain_flags.pod | 2 +- .../doc/man3/SSL_CTX_set_tmp_dh_callback.pod | 10 +- crypto/openssl/doc/man3/SSL_poll.pod | 24 +- crypto/openssl/doc/man3/d2i_X509.pod | 5 +- crypto/openssl/doc/man5/fips_config.pod | 16 +- crypto/openssl/doc/man7/EVP_ASYM_CIPHER-RSA.pod | 5 +- crypto/openssl/doc/man7/EVP_PKEY-DSA.pod | 4 +- crypto/openssl/doc/man7/EVP_PKEY-FFC.pod | 4 +- crypto/openssl/doc/man7/EVP_SIGNATURE-ML-DSA.pod | 2 +- crypto/openssl/doc/man7/EVP_SIGNATURE-SLH-DSA.pod | 2 +- crypto/openssl/doc/man7/OSSL_PROVIDER-FIPS.pod | 96 ++-- crypto/openssl/doc/man7/provider-base.pod | 31 ++ crypto/openssl/fuzz/dtlsserver.c | 5 +- crypto/openssl/include/crypto/dh.h | 4 +- crypto/openssl/include/crypto/rsa.h | 6 +- crypto/openssl/include/crypto/slh_dsa.h | 2 + crypto/openssl/include/internal/quic_ackm.h | 4 +- crypto/openssl/include/internal/quic_record_rx.h | 11 + crypto/openssl/include/openssl/core_dispatch.h | 4 + crypto/openssl/include/openssl/crypto.h.in | 8 +- crypto/openssl/include/openssl/opensslv.h.in | 9 +- crypto/openssl/include/openssl/pem.h | 1 + crypto/openssl/include/openssl/proverr.h | 1 + crypto/openssl/include/openssl/self_test.h | 2 + crypto/openssl/providers/common/provider_err.c | 2 + .../openssl/providers/common/securitycheck_fips.c | 25 +- crypto/openssl/providers/fips-sources.checksums | 76 +-- crypto/openssl/providers/fips.checksum | 2 +- crypto/openssl/providers/fips/fipsprov.c | 9 + .../providers/fips/include/fips/fipsindicator.h | 3 +- crypto/openssl/providers/fips/self_test.c | 13 +- crypto/openssl/providers/fips/self_test_data.inc | 235 ++++----- .../implementations/asymciphers/rsa_enc.c | 19 +- .../implementations/encode_decode/decode_pem2der.c | 1 + .../providers/implementations/kem/ml_kem_kem.c | 2 +- .../providers/implementations/keymgmt/dh_kmgmt.c | 15 +- .../providers/implementations/keymgmt/ec_kmgmt.c | 17 + .../providers/implementations/keymgmt/ecx_kmgmt.c | 23 +- .../implementations/keymgmt/ml_dsa_kmgmt.c | 13 +- .../implementations/keymgmt/ml_kem_kmgmt.c | 4 +- .../providers/implementations/keymgmt/rsa_kmgmt.c | 1 + .../implementations/keymgmt/slh_dsa_kmgmt.c | 29 +- .../providers/implementations/macs/hmac_prov.c | 17 +- .../providers/implementations/signature/dsa_sig.c | 2 +- .../implementations/signature/ecdsa_sig.c | 2 +- .../providers/implementations/signature/rsa_sig.c | 8 +- crypto/openssl/providers/legacyprov.c | 11 +- crypto/openssl/ssl/d1_lib.c | 2 +- crypto/openssl/ssl/quic/quic_ackm.c | 33 +- crypto/openssl/ssl/quic/quic_channel.c | 18 +- crypto/openssl/ssl/quic/quic_impl.c | 1 + crypto/openssl/ssl/quic/quic_port.c | 3 +- crypto/openssl/ssl/quic/quic_record_rx.c | 10 + crypto/openssl/ssl/quic/quic_record_tx.c | 4 +- crypto/openssl/ssl/quic/quic_rx_depack.c | 28 +- crypto/openssl/ssl/statem/extensions_clnt.c | 10 +- crypto/openssl/test/crltest.c | 127 ++++- crypto/openssl/test/evp_extra_test.c | 43 ++ crypto/openssl/test/fake_rsaprov.c | 548 ++++++++++++++++++++- crypto/openssl/test/ml_kem_internal_test.c | 14 +- crypto/openssl/test/provider_pkey_test.c | 289 ++++++++++- .../hq-interop/quic-hq-interop.c | 3 +- crypto/openssl/test/quic_ackm_test.c | 5 +- crypto/openssl/test/quic_fifd_test.c | 5 +- crypto/openssl/test/quic_txp_test.c | 3 +- crypto/openssl/test/quicapitest.c | 57 +++ crypto/openssl/test/radix/quic_bindings.c | 4 +- crypto/openssl/test/recipes/15-test_ec.t | 14 +- crypto/openssl/test/recipes/20-test_cli_list.t | 25 + .../recipes/30-test_evp_data/evppkey_ecdsa.txt | 11 +- crypto/openssl/test/recipes/80-test_cms.t | 17 + crypto/openssl/test/recipes/90-test_store_cases.t | 26 +- .../recipes/90-test_store_cases_data/test-BER.p12 | Bin 0 -> 2126 bytes .../recipes/90-test_threads_data/store/8489a545.0 | 19 + .../oqsprovider-ca.sh | 58 +++ .../oqsprovider.sh | 2 + crypto/openssl/test/sanitytest.c | 81 ++- crypto/openssl/test/slh_dsa_test.c | 9 +- crypto/openssl/test/testec-sm2.pem | 5 + crypto/openssl/test/threadstest.c | 70 ++- crypto/openssl/test/tls13groupselection_test.c | 19 +- crypto/openssl/test/x509_test.c | 111 ++++- crypto/openssl/util/perl/TLSProxy/Proxy.pm | 27 +- 158 files changed, 2705 insertions(+), 653 deletions(-) diff --cc crypto/openssl/.ctags.d/add-dir.ctags index 000000000000,ec20b51bd4ca..ec20b51bd4ca mode 000000,100644..100644 --- a/crypto/openssl/.ctags.d/add-dir.ctags +++ b/crypto/openssl/.ctags.d/add-dir.ctags diff --cc crypto/openssl/.ctags.d/exclude.ctags index 000000000000,c932464e6dbd..c932464e6dbd mode 000000,100644..100644 --- a/crypto/openssl/.ctags.d/exclude.ctags +++ b/crypto/openssl/.ctags.d/exclude.ctags diff --cc crypto/openssl/.ctags.d/openssl-stage1/10extrac-macrodefs.ctags index 000000000000,ddd4fd54bd04..ddd4fd54bd04 mode 000000,100644..100644 --- a/crypto/openssl/.ctags.d/openssl-stage1/10extrac-macrodefs.ctags +++ b/crypto/openssl/.ctags.d/openssl-stage1/10extrac-macrodefs.ctags diff --cc crypto/openssl/.ctags.d/openssl-stage2/10expand-macros.ctags index 000000000000,5cf5000df3af..5cf5000df3af mode 000000,100644..100644 --- a/crypto/openssl/.ctags.d/openssl-stage2/10expand-macros.ctags +++ b/crypto/openssl/.ctags.d/openssl-stage2/10expand-macros.ctags diff --cc crypto/openssl/crypto/aes/asm/aes-s390x.pl index 5d1283f57690,2345d4574a41..2345d4574a41 mode 100755,100644..100755 --- a/crypto/openssl/crypto/aes/asm/aes-s390x.pl +++ b/crypto/openssl/crypto/aes/asm/aes-s390x.pl diff --cc crypto/openssl/test/recipes/20-test_cli_list.t index 000000000000,a039b20978e4..a039b20978e4 mode 000000,100644..100644 --- a/crypto/openssl/test/recipes/20-test_cli_list.t +++ b/crypto/openssl/test/recipes/20-test_cli_list.t diff --cc crypto/openssl/test/recipes/90-test_store_cases_data/test-BER.p12 index 000000000000,256e697bac1a..256e697bac1a mode 000000,100644..100644 Binary files differ diff --cc crypto/openssl/test/recipes/90-test_threads_data/store/8489a545.0 index 000000000000,7fd65dfe924b..7fd65dfe924b mode 000000,100644..100644 --- a/crypto/openssl/test/recipes/90-test_threads_data/store/8489a545.0 +++ b/crypto/openssl/test/recipes/90-test_threads_data/store/8489a545.0 diff --cc crypto/openssl/test/recipes/95-test_external_oqsprovider_data/oqsprovider-ca.sh index 000000000000,716172f029d3..716172f029d3 mode 000000,100755..100755 --- a/crypto/openssl/test/recipes/95-test_external_oqsprovider_data/oqsprovider-ca.sh +++ b/crypto/openssl/test/recipes/95-test_external_oqsprovider_data/oqsprovider-ca.sh diff --cc crypto/openssl/test/testec-sm2.pem index 000000000000,30e25613b38e..30e25613b38e mode 000000,100644..100644 --- a/crypto/openssl/test/testec-sm2.pem +++ b/crypto/openssl/test/testec-sm2.pem
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202509222238.58MMcvnY086500>