pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/security/openssl



Module Name:    pkgsrc
Committed By:   wiz
Date:           Tue Apr  9 17:16:45 UTC 2024

Modified Files:
        pkgsrc/security/openssl: Makefile PLIST distinfo options.mk
        pkgsrc/security/openssl/patches:
            patch-Configurations_unix-Makefile.tmpl
            patch-util_perl_OpenSSL_config.pm

Log Message:
openssl: update to 3.3.0.

OpenSSL 3.3
-----------

### Major changes between OpenSSL 3.2 and OpenSSL 3.3.0 [9 Apr 2024]

OpenSSL 3.3.0 is a feature release adding significant new functionality to
OpenSSL.

This release adds the following new features:

  * Support for qlog for tracing QUIC connections has been added

  * Added APIs to allow configuring the negotiated idle timeout for QUIC
    connections, and to allow determining the number of additional streams
    that can currently be created for a QUIC connection.

  * Added APIs to allow disabling implicit QUIC event processing for QUIC SSL
    objects

  * Added APIs to allow querying the size and utilisation of a QUIC stream's
    write buffer

  * New API `SSL_write_ex2`, which can be used to send an end-of-stream (FIN)
    condition in an optimised way when using QUIC.

  * Limited support for polling of QUIC connection and stream objects in a
    non-blocking manner.

  * Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
    times with different output sizes.

  * Added exporter for CMake on Unix and Windows, alongside the pkg-config
    exporter.

  * The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
    output length.

  * The EVP_PKEY_fromdata function has been augmented to allow for the
    derivation of CRT (Chinese Remainder Theorem) parameters when requested

  * Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
    is enabled

  * Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
    config options and the respective calls to SSL[_CTX]_set1_sigalgs() and
    SSL[_CTX]_set1_client_sigalgs() that start with `?` character are
    ignored and the configuration will still be used.

  * Added `-set_issuer` and `-set_subject` options to `openssl x509` to
    override the Issuer and Subject when creating a certificate. The `-subj`
    option now is an alias for `-set_subject`.

  * Added several new features of CMPv3 defined in RFC 9480 and RFC 9483

  * New option `SSL_OP_PREFER_NO_DHE_KEX`, which allows configuring a TLS1.3
    server to prefer session resumption using PSK-only key exchange over PSK
    with DHE, if both are available.

  * New atexit configuration switch, which controls whether the OPENSSL_cleanup
    is registered when libcrypto is unloaded.

  * Added X509_STORE_get1_objects to avoid issues with the existing
    X509_STORE_get0_objects API in multi-threaded applications.

This release incorporates the following potentially significant or incompatible
changes:

  * Applied AES-GCM unroll8 optimisation to Microsoft Azure Cobalt 100

  * Optimized AES-CTR for ARM Neoverse V1 and V2

  * Enable AES and SHA3 optimisations on Applie Silicon M3-based MacOS systems
    similar to M1/M2.

  * Various optimizations for cryptographic routines using RISC-V vector crypto
    extensions

  * Added assembly implementation for md5 on loongarch64

  * Accept longer context for TLS 1.2 exporters

  * The activate and soft_load configuration settings for providers in
    openssl.cnf have been updated to require a value of [1|yes|true|on]
    (in lower or UPPER case) to enable the setting. Conversely a value
    of [0|no|false|off] will disable the setting.

  * In `openssl speed`, changed the default hash function used with `hmac` from
    `md5` to `sha256`.

  * The `-verify` option to the `openssl crl` and `openssl req` will make the
    program exit with 1 on failure.

  * The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(), and
    related functions have been augmented to check for a minimum length of
    the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.

  * OPENSSL_sk_push() and sk_<TYPE>_push() functions now return 0 instead of -1
    if called with a NULL stack argument.

  * New limit on HTTP response headers is introduced to HTTP client. The
    default limit is set to 256 header lines.

This release incorporates the following bug fixes and mitigations:

  * The BIO_get_new_index() function can only be called 127 times before it
    reaches its upper bound of BIO_TYPE_MASK and will now return -1 once its
    exhausted.

A more detailed list of changes in this release can be found in the
[CHANGES.md] file.

Users interested in using the new QUIC functionality are encouraged to read the
[README file for QUIC][README-QUIC.md], which provides links to relevant
documentation and example code.

As always, bug reports and issues relating to OpenSSL can be [filed on our issue
tracker][issue tracker].

OpenSSL 3.2
-----------

### Major changes between OpenSSL 3.2.1 and OpenSSL 3.2.2 [under development]

OpenSSL 3.2.2 is a security patch release. The most severe CVE fixed in this
release is Low.

This release incorporates the following bug fixes and mitigations:

  * Fixed unbounded memory growth with session handling in TLSv1.3
    ([CVE-2024-2511])

### Major changes between OpenSSL 3.2.0 and OpenSSL 3.2.1 [30 Jan 2024]

OpenSSL 3.2.1 is a security patch release. The most severe CVE fixed in this
release is Low.

This release incorporates the following bug fixes and mitigations:

  * Fixed PKCS12 Decoding crashes
    ([CVE-2024-0727])
  * Fixed excessive time spent checking invalid RSA public keys
    ([CVE-2023-6237])
  * Fixed POLY1305 MAC implementation corrupting vector registers on PowerPC
    CPUs which support PowerISA 2.07
    ([CVE-2023-6129])

### Major changes between OpenSSL 3.1 and OpenSSL 3.2.0 [23 Nov 2023]

OpenSSL 3.2.0 is a feature release adding significant new functionality to
OpenSSL.

This release incorporates the following potentially significant or incompatible
changes:

  * The default SSL/TLS security level has been changed from 1 to 2.

  * The `x509`, `ca`, and `req` apps now always produce X.509v3 certificates.

  * Subject or issuer names in X.509 objects are now displayed as UTF-8 strings
    by default. Also spaces surrounding `=` in DN output are removed.

This release adds the following new features:

  * Support for client side QUIC, including support for
    multiple streams (RFC 9000)

  * Support for Ed25519ctx, Ed25519ph and Ed448ph in addition
    to existing support for Ed25519 and Ed448 (RFC 8032)

  * Support for deterministic ECDSA signatures (RFC 6979)

  * Support for AES-GCM-SIV, a nonce-misuse-resistant AEAD (RFC 8452)

  * Support for the Argon2 KDF, along with supporting thread pool
    functionality (RFC 9106)

  * Support for Hybrid Public Key Encryption (HPKE) (RFC 9180)

  * Support for SM4-XTS

  * Support for Brainpool curves in TLS 1.3

  * Support for TLS Raw Public Keys (RFC 7250)

  * Support for TCP Fast Open on Linux, macOS and FreeBSD,
    where enabled and supported (RFC 7413)

  * Support for TLS certificate compression, including library
    support for zlib, Brotli and zstd (RFC 8879)

  * Support for provider-based pluggable signature algorithms
    in TLS 1.3 with supporting CMS and X.509 functionality

    With a suitable provider this enables the use of post-quantum/quantum-safe
    cryptography.

  * Support for using the Windows system certificate store as a source of
    trusted root certificates

    This is not yet enabled by default and must be activated using an
    environment variable. This is likely to become enabled by default
    in a future feature release.

  * Support for using the IANA standard names in TLS ciphersuite configuration

  * Multiple new features and improvements to CMP protocol support

The following known issues are present in this release and will be rectified
in a future release:

  * Provider-based signature algorithms cannot be configured using the
    SignatureAlgorithms configuration file parameter (#22761)

This release incorporates the following documentation enhancements:

  * Added multiple tutorials on the OpenSSL library and in particular
    on writing various clients (using TLS and QUIC protocols) with libssl

    See [OpenSSL Guide].

This release incorporates the following bug fixes and mitigations:

  * Fixed excessive time spent in DH check / generation with large Q parameter
    value
    ([CVE-2023-5678])

A more detailed list of changes in this release can be found in the
[CHANGES.md] file.

Users interested in using the new QUIC functionality are encouraged to read the
[README file for QUIC][README-QUIC.md], which provides links to relevant
documentation and example code.


To generate a diff of this commit:
cvs rdiff -u -r1.296 -r1.297 pkgsrc/security/openssl/Makefile
cvs rdiff -u -r1.16 -r1.17 pkgsrc/security/openssl/PLIST
cvs rdiff -u -r1.172 -r1.173 pkgsrc/security/openssl/distinfo
cvs rdiff -u -r1.13 -r1.14 pkgsrc/security/openssl/options.mk
cvs rdiff -u -r1.6 -r1.7 \
    pkgsrc/security/openssl/patches/patch-Configurations_unix-Makefile.tmpl
cvs rdiff -u -r1.1 -r1.2 \
    pkgsrc/security/openssl/patches/patch-util_perl_OpenSSL_config.pm

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/openssl/Makefile
diff -u pkgsrc/security/openssl/Makefile:1.296 pkgsrc/security/openssl/Makefile:1.297
--- pkgsrc/security/openssl/Makefile:1.296      Sat Feb  3 18:21:26 2024
+++ pkgsrc/security/openssl/Makefile    Tue Apr  9 17:16:45 2024
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.296 2024/02/03 18:21:26 adam Exp $
+# $NetBSD: Makefile,v 1.297 2024/04/09 17:16:45 wiz Exp $
 
 # Remember to upload-distfiles when updating OpenSSL -- otherwise it
 # is not possible for users who have bootstrapped without OpenSSL
 # to install it and enable HTTPS fetching.
-DISTNAME=      openssl-3.1.5
+DISTNAME=      openssl-3.3.0
 CATEGORIES=    security
 MASTER_SITES=  https://www.openssl.org/source/
 

Index: pkgsrc/security/openssl/PLIST
diff -u pkgsrc/security/openssl/PLIST:1.16 pkgsrc/security/openssl/PLIST:1.17
--- pkgsrc/security/openssl/PLIST:1.16  Sat Feb  3 18:21:26 2024
+++ pkgsrc/security/openssl/PLIST       Tue Apr  9 17:16:45 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.16 2024/02/03 18:21:26 adam Exp $
+@comment $NetBSD: PLIST,v 1.17 2024/04/09 17:16:45 wiz Exp $
 bin/c_rehash
 bin/openssl
 include/openssl/aes.h
@@ -50,6 +50,7 @@ include/openssl/dsa.h
 include/openssl/dsaerr.h
 include/openssl/dtls1.h
 include/openssl/e_os2.h
+include/openssl/e_ostime.h
 include/openssl/ebcdic.h
 include/openssl/ec.h
 include/openssl/ecdh.h
@@ -67,6 +68,7 @@ include/openssl/evperr.h
 include/openssl/fips_names.h
 include/openssl/fipskey.h
 include/openssl/hmac.h
+include/openssl/hpke.h
 include/openssl/http.h
 include/openssl/httperr.h
 include/openssl/idea.h
@@ -99,6 +101,7 @@ include/openssl/pkcs7err.h
 include/openssl/prov_ssl.h
 include/openssl/proverr.h
 include/openssl/provider.h
+include/openssl/quic.h
 include/openssl/rand.h
 include/openssl/randerr.h
 include/openssl/rc2.h
@@ -122,6 +125,7 @@ include/openssl/stack.h
 include/openssl/store.h
 include/openssl/storeerr.h
 include/openssl/symhacks.h
+include/openssl/thread.h
 include/openssl/tls1.h
 include/openssl/trace.h
 include/openssl/ts.h
@@ -136,6 +140,8 @@ include/openssl/x509_vfy.h
 include/openssl/x509err.h
 include/openssl/x509v3.h
 include/openssl/x509v3err.h
+lib/cmake/OpenSSL/OpenSSLConfig.cmake
+lib/cmake/OpenSSL/OpenSSLConfigVersion.cmake
 ${PLIST.afalg}lib/engines-3/afalg.${SOEXT}
 lib/engines-3/capi.${SOEXT}
 ${PLIST.devcrypto}lib/engines-3/devcrypto.${SOEXT}
@@ -147,7 +153,7 @@ lib/libcrypto.so.3
 lib/libssl.a
 lib/libssl.so
 lib/libssl.so.3
-lib/ossl-modules/legacy.${SOEXT}
+lib/ossl-modules/legacy.so
 lib/pkgconfig/libcrypto.pc
 lib/pkgconfig/libssl.pc
 lib/pkgconfig/openssl.pc
@@ -331,9 +337,12 @@ man/man3/ASN1_item_d2i_fp_ex.3
 man/man3/ASN1_item_i2d_mem_bio.3
 man/man3/ASN1_item_new.3
 man/man3/ASN1_item_new_ex.3
+man/man3/ASN1_item_pack.3
 man/man3/ASN1_item_sign.3
 man/man3/ASN1_item_sign_ctx.3
 man/man3/ASN1_item_sign_ex.3
+man/man3/ASN1_item_unpack.3
+man/man3/ASN1_item_unpack_ex.3
 man/man3/ASN1_item_verify.3
 man/man3/ASN1_item_verify_ctx.3
 man/man3/ASN1_item_verify_ex.3
@@ -359,10 +368,14 @@ man/man3/ASYNC_block_pause.3
 man/man3/ASYNC_callback_fn.3
 man/man3/ASYNC_cleanup_thread.3
 man/man3/ASYNC_get_current_job.3
+man/man3/ASYNC_get_mem_functions.3
 man/man3/ASYNC_get_wait_ctx.3
 man/man3/ASYNC_init_thread.3
 man/man3/ASYNC_is_capable.3
 man/man3/ASYNC_pause_job.3
+man/man3/ASYNC_set_mem_functions.3
+man/man3/ASYNC_stack_alloc_fn.3
+man/man3/ASYNC_stack_free_fn.3
 man/man3/ASYNC_start_job.3
 man/man3/ASYNC_unblock_pause.3
 man/man3/AUTHORITY_INFO_ACCESS_free.3
@@ -388,6 +401,8 @@ man/man3/BIO_ADDRINFO_next.3
 man/man3/BIO_ADDRINFO_protocol.3
 man/man3/BIO_ADDRINFO_socktype.3
 man/man3/BIO_ADDR_clear.3
+man/man3/BIO_ADDR_copy.3
+man/man3/BIO_ADDR_dup.3
 man/man3/BIO_ADDR_family.3
 man/man3/BIO_ADDR_free.3
 man/man3/BIO_ADDR_hostname_string.3
@@ -416,17 +431,30 @@ man/man3/BIO_ctrl_wpending.3
 man/man3/BIO_debug_callback.3
 man/man3/BIO_debug_callback_ex.3
 man/man3/BIO_destroy_bio_pair.3
+man/man3/BIO_dgram_detect_peer_addr.3
+man/man3/BIO_dgram_get_caps.3
+man/man3/BIO_dgram_get_effective_caps.3
+man/man3/BIO_dgram_get_local_addr_cap.3
+man/man3/BIO_dgram_get_local_addr_enable.3
+man/man3/BIO_dgram_get_mtu.3
 man/man3/BIO_dgram_get_mtu_overhead.3
+man/man3/BIO_dgram_get_no_trunc.3
 man/man3/BIO_dgram_get_peer.3
 man/man3/BIO_dgram_recv_timedout.3
 man/man3/BIO_dgram_send_timedout.3
+man/man3/BIO_dgram_set_caps.3
+man/man3/BIO_dgram_set_local_addr_enable.3
+man/man3/BIO_dgram_set_mtu.3
+man/man3/BIO_dgram_set_no_trunc.3
 man/man3/BIO_dgram_set_peer.3
 man/man3/BIO_do_accept.3
 man/man3/BIO_do_connect.3
 man/man3/BIO_do_connect_retry.3
 man/man3/BIO_do_handshake.3
 man/man3/BIO_eof.3
+man/man3/BIO_err_is_non_fatal.3
 man/man3/BIO_f_base64.3
+man/man3/BIO_f_brotli.3
 man/man3/BIO_f_buffer.3
 man/man3/BIO_f_cipher.3
 man/man3/BIO_f_md.3
@@ -434,10 +462,13 @@ man/man3/BIO_f_null.3
 man/man3/BIO_f_prefix.3
 man/man3/BIO_f_readbuffer.3
 man/man3/BIO_f_ssl.3
+man/man3/BIO_f_zlib.3
+man/man3/BIO_f_zstd.3
 man/man3/BIO_find_type.3
 man/man3/BIO_flush.3
 man/man3/BIO_free.3
 man/man3/BIO_free_all.3
+man/man3/BIO_get0_dgram_bio.3
 man/man3/BIO_get_accept_ip_family.3
 man/man3/BIO_get_accept_name.3
 man/man3/BIO_get_accept_port.3
@@ -453,6 +484,7 @@ man/man3/BIO_get_close.3
 man/man3/BIO_get_conn_address.3
 man/man3/BIO_get_conn_hostname.3
 man/man3/BIO_get_conn_ip_family.3
+man/man3/BIO_get_conn_mode.3
 man/man3/BIO_get_conn_port.3
 man/man3/BIO_get_data.3
 man/man3/BIO_get_ex_data.3
@@ -476,8 +508,11 @@ man/man3/BIO_get_peer_port.3
 man/man3/BIO_get_read_request.3
 man/man3/BIO_get_retry_BIO.3
 man/man3/BIO_get_retry_reason.3
+man/man3/BIO_get_rpoll_descriptor.3
 man/man3/BIO_get_shutdown.3
+man/man3/BIO_get_sock_type.3
 man/man3/BIO_get_ssl.3
+man/man3/BIO_get_wpoll_descriptor.3
 man/man3/BIO_get_write_buf_size.3
 man/man3/BIO_get_write_guarantee.3
 man/man3/BIO_gets.3
@@ -498,6 +533,8 @@ man/man3/BIO_meth_get_gets.3
 man/man3/BIO_meth_get_puts.3
 man/man3/BIO_meth_get_read.3
 man/man3/BIO_meth_get_read_ex.3
+man/man3/BIO_meth_get_recvmmsg.3
+man/man3/BIO_meth_get_sendmmsg.3
 man/man3/BIO_meth_get_write.3
 man/man3/BIO_meth_get_write_ex.3
 man/man3/BIO_meth_new.3
@@ -509,12 +546,15 @@ man/man3/BIO_meth_set_gets.3
 man/man3/BIO_meth_set_puts.3
 man/man3/BIO_meth_set_read.3
 man/man3/BIO_meth_set_read_ex.3
+man/man3/BIO_meth_set_recvmmsg.3
+man/man3/BIO_meth_set_sendmmsg.3
 man/man3/BIO_meth_set_write.3
 man/man3/BIO_meth_set_write_ex.3
 man/man3/BIO_method_type.3
 man/man3/BIO_new.3
 man/man3/BIO_new_CMS.3
 man/man3/BIO_new_accept.3
+man/man3/BIO_new_bio_dgram_pair.3
 man/man3/BIO_new_bio_pair.3
 man/man3/BIO_new_buffer_ssl_connect.3
 man/man3/BIO_new_connect.3
@@ -539,6 +579,7 @@ man/man3/BIO_puts.3
 man/man3/BIO_read.3
 man/man3/BIO_read_ex.3
 man/man3/BIO_read_filename.3
+man/man3/BIO_recvmmsg.3
 man/man3/BIO_reset.3
 man/man3/BIO_retry_type.3
 man/man3/BIO_rw_filename.3
@@ -547,6 +588,8 @@ man/man3/BIO_s_bio.3
 man/man3/BIO_s_connect.3
 man/man3/BIO_s_core.3
 man/man3/BIO_s_datagram.3
+man/man3/BIO_s_dgram_mem.3
+man/man3/BIO_s_dgram_pair.3
 man/man3/BIO_s_fd.3
 man/man3/BIO_s_file.3
 man/man3/BIO_s_mem.3
@@ -554,6 +597,7 @@ man/man3/BIO_s_null.3
 man/man3/BIO_s_secmem.3
 man/man3/BIO_s_socket.3
 man/man3/BIO_seek.3
+man/man3/BIO_sendmmsg.3
 man/man3/BIO_set_accept_bios.3
 man/man3/BIO_set_accept_ip_family.3
 man/man3/BIO_set_accept_name.3
@@ -570,6 +614,7 @@ man/man3/BIO_set_close.3
 man/man3/BIO_set_conn_address.3
 man/man3/BIO_set_conn_hostname.3
 man/man3/BIO_set_conn_ip_family.3
+man/man3/BIO_set_conn_mode.3
 man/man3/BIO_set_conn_port.3
 man/man3/BIO_set_data.3
 man/man3/BIO_set_ex_data.3
@@ -588,10 +633,13 @@ man/man3/BIO_set_prefix.3
 man/man3/BIO_set_read_buffer_size.3
 man/man3/BIO_set_retry_reason.3
 man/man3/BIO_set_shutdown.3
+man/man3/BIO_set_sock_type.3
 man/man3/BIO_set_ssl.3
 man/man3/BIO_set_ssl_mode.3
 man/man3/BIO_set_ssl_renegotiate_bytes.3
 man/man3/BIO_set_ssl_renegotiate_timeout.3
+man/man3/BIO_set_tfo.3
+man/man3/BIO_set_tfo_accept.3
 man/man3/BIO_set_write_buf_size.3
 man/man3/BIO_set_write_buffer_size.3
 man/man3/BIO_should_io_special.3
@@ -749,6 +797,12 @@ man/man3/BN_secure_new.3
 man/man3/BN_security_bits.3
 man/man3/BN_set_bit.3
 man/man3/BN_set_word.3
+man/man3/BN_signed_bin2bn.3
+man/man3/BN_signed_bn2bin.3
+man/man3/BN_signed_bn2lebin.3
+man/man3/BN_signed_bn2native.3
+man/man3/BN_signed_lebin2bn.3
+man/man3/BN_signed_native2bn.3
 man/man3/BN_sqr.3
 man/man3/BN_sub.3
 man/man3/BN_sub_word.3
@@ -779,6 +833,8 @@ man/man3/CMS_EncryptedData_encrypt.3
 man/man3/CMS_EncryptedData_encrypt_ex.3
 man/man3/CMS_EnvelopedData_create.3
 man/man3/CMS_EnvelopedData_create_ex.3
+man/man3/CMS_EnvelopedData_decrypt.3
+man/man3/CMS_EnvelopedData_it.3
 man/man3/CMS_ReceiptRequest_create0.3
 man/man3/CMS_ReceiptRequest_create0_ex.3
 man/man3/CMS_ReceiptRequest_free.3
@@ -795,6 +851,9 @@ man/man3/CMS_RecipientInfo_ktri_get0_sig
 man/man3/CMS_RecipientInfo_set0_key.3
 man/man3/CMS_RecipientInfo_set0_pkey.3
 man/man3/CMS_RecipientInfo_type.3
+man/man3/CMS_SignedData_free.3
+man/man3/CMS_SignedData_new.3
+man/man3/CMS_SignedData_verify.3
 man/man3/CMS_SignerInfo_cert_cmp.3
 man/man3/CMS_SignerInfo_get0_signature.3
 man/man3/CMS_SignerInfo_get0_signer_id.3
@@ -821,6 +880,7 @@ man/man3/CMS_digest_create_ex.3
 man/man3/CMS_encrypt.3
 man/man3/CMS_encrypt_ex.3
 man/man3/CMS_final.3
+man/man3/CMS_final_digest.3
 man/man3/CMS_get0_RecipientInfos.3
 man/man3/CMS_get0_SignerInfos.3
 man/man3/CMS_get0_content.3
@@ -857,6 +917,20 @@ man/man3/CMS_unsigned_get_attr_by_OBJ.3
 man/man3/CMS_unsigned_get_attr_count.3
 man/man3/CMS_verify.3
 man/man3/CMS_verify_receipt.3
+man/man3/COMP_CTX_free.3
+man/man3/COMP_CTX_get_method.3
+man/man3/COMP_CTX_get_type.3
+man/man3/COMP_CTX_new.3
+man/man3/COMP_brotli.3
+man/man3/COMP_brotli_oneshot.3
+man/man3/COMP_compress_block.3
+man/man3/COMP_expand_block.3
+man/man3/COMP_get_name.3
+man/man3/COMP_get_type.3
+man/man3/COMP_zlib.3
+man/man3/COMP_zlib_oneshot.3
+man/man3/COMP_zstd.3
+man/man3/COMP_zstd_oneshot.3
 man/man3/CONF_get1_default_config_file.3
 man/man3/CONF_modules_finish.3
 man/man3/CONF_modules_free.3
@@ -878,6 +952,7 @@ man/man3/CRYPTO_THREAD_write_lock.3
 man/man3/CRYPTO_alloc_ex_data.3
 man/man3/CRYPTO_atomic_add.3
 man/man3/CRYPTO_atomic_load.3
+man/man3/CRYPTO_atomic_load_int.3
 man/man3/CRYPTO_atomic_or.3
 man/man3/CRYPTO_clear_free.3
 man/man3/CRYPTO_clear_realloc.3
@@ -1133,6 +1208,8 @@ man/man3/DTLSv1_2_client_method.3
 man/man3/DTLSv1_2_method.3
 man/man3/DTLSv1_2_server_method.3
 man/man3/DTLSv1_client_method.3
+man/man3/DTLSv1_get_timeout.3
+man/man3/DTLSv1_handle_timeout.3
 man/man3/DTLSv1_listen.3
 man/man3/DTLSv1_method.3
 man/man3/DTLSv1_server_method.3
@@ -1212,6 +1289,7 @@ man/man3/EC_GROUP_set_curve_name.3
 man/man3/EC_GROUP_set_generator.3
 man/man3/EC_GROUP_set_point_conversion_form.3
 man/man3/EC_GROUP_set_seed.3
+man/man3/EC_GROUP_to_params.3
 man/man3/EC_KEY_check_key.3
 man/man3/EC_KEY_clear_flags.3
 man/man3/EC_KEY_copy.3
@@ -1393,6 +1471,7 @@ man/man3/ERR_add_error_txt.3
 man/man3/ERR_add_error_vdata.3
 man/man3/ERR_clear_error.3
 man/man3/ERR_clear_last_mark.3
+man/man3/ERR_count_to_mark.3
 man/man3/ERR_error_string.3
 man/man3/ERR_error_string_n.3
 man/man3/ERR_free_strings.3
@@ -1418,6 +1497,7 @@ man/man3/ERR_peek_last_error_data.3
 man/man3/ERR_peek_last_error_func.3
 man/man3/ERR_peek_last_error_line.3
 man/man3/ERR_peek_last_error_line_data.3
+man/man3/ERR_pop.3
 man/man3/ERR_pop_to_mark.3
 man/man3/ERR_print_errors.3
 man/man3/ERR_print_errors_cb.3
@@ -1586,6 +1666,7 @@ man/man3/EVP_DigestSignFinal.3
 man/man3/EVP_DigestSignInit.3
 man/man3/EVP_DigestSignInit_ex.3
 man/man3/EVP_DigestSignUpdate.3
+man/man3/EVP_DigestSqueeze.3
 man/man3/EVP_DigestUpdate.3
 man/man3/EVP_DigestVerify.3
 man/man3/EVP_DigestVerifyFinal.3
@@ -1939,6 +2020,8 @@ man/man3/EVP_PKEY_assign_EC_KEY.3
 man/man3/EVP_PKEY_assign_POLY1305.3
 man/man3/EVP_PKEY_assign_RSA.3
 man/man3/EVP_PKEY_assign_SIPHASH.3
+man/man3/EVP_PKEY_auth_decapsulate_init.3
+man/man3/EVP_PKEY_auth_encapsulate_init.3
 man/man3/EVP_PKEY_base_id.3
 man/man3/EVP_PKEY_bits.3
 man/man3/EVP_PKEY_can_sign.3
@@ -2585,6 +2668,7 @@ man/man3/OPENSSL_LH_HASHFUNC.3
 man/man3/OPENSSL_LH_delete.3
 man/man3/OPENSSL_LH_doall.3
 man/man3/OPENSSL_LH_doall_arg.3
+man/man3/OPENSSL_LH_doall_arg_thunk.3
 man/man3/OPENSSL_LH_error.3
 man/man3/OPENSSL_LH_flush.3
 man/man3/OPENSSL_LH_free.3
@@ -2598,6 +2682,7 @@ man/man3/OPENSSL_LH_node_usage_stats_bio
 man/man3/OPENSSL_LH_num_items.3
 man/man3/OPENSSL_LH_retrieve.3
 man/man3/OPENSSL_LH_set_down_load.3
+man/man3/OPENSSL_LH_set_thunks.3
 man/man3/OPENSSL_LH_stats.3
 man/man3/OPENSSL_LH_stats_bio.3
 man/man3/OPENSSL_LINE.3
@@ -2696,11 +2781,16 @@ man/man3/OSSL_CALLBACK.3
 man/man3/OSSL_CMP_CR.3
 man/man3/OSSL_CMP_CTX_build_cert_chain.3
 man/man3/OSSL_CMP_CTX_free.3
+man/man3/OSSL_CMP_CTX_get0_geninfo_ITAVs.3
+man/man3/OSSL_CMP_CTX_get0_libctx.3
 man/man3/OSSL_CMP_CTX_get0_newCert.3
 man/man3/OSSL_CMP_CTX_get0_newPkey.3
+man/man3/OSSL_CMP_CTX_get0_propq.3
 man/man3/OSSL_CMP_CTX_get0_statusString.3
+man/man3/OSSL_CMP_CTX_get0_trusted.3
 man/man3/OSSL_CMP_CTX_get0_trustedStore.3
 man/man3/OSSL_CMP_CTX_get0_untrusted.3
+man/man3/OSSL_CMP_CTX_get0_validatedSrvCert.3
 man/man3/OSSL_CMP_CTX_get1_caPubs.3
 man/man3/OSSL_CMP_CTX_get1_extraCertsIn.3
 man/man3/OSSL_CMP_CTX_get1_newChain.3
@@ -2722,6 +2812,7 @@ man/man3/OSSL_CMP_CTX_reset_geninfo_ITAV
 man/man3/OSSL_CMP_CTX_server_perform.3
 man/man3/OSSL_CMP_CTX_set0_newPkey.3
 man/man3/OSSL_CMP_CTX_set0_reqExtensions.3
+man/man3/OSSL_CMP_CTX_set0_trusted.3
 man/man3/OSSL_CMP_CTX_set0_trustedStore.3
 man/man3/OSSL_CMP_CTX_set1_cert.3
 man/man3/OSSL_CMP_CTX_set1_expected_sender.3
@@ -2736,6 +2827,7 @@ man/man3/OSSL_CMP_CTX_set1_recipient.3
 man/man3/OSSL_CMP_CTX_set1_referenceValue.3
 man/man3/OSSL_CMP_CTX_set1_secretValue.3
 man/man3/OSSL_CMP_CTX_set1_senderNonce.3
+man/man3/OSSL_CMP_CTX_set1_serialNumber.3
 man/man3/OSSL_CMP_CTX_set1_server.3
 man/man3/OSSL_CMP_CTX_set1_serverPath.3
 man/man3/OSSL_CMP_CTX_set1_srvCert.3
@@ -2754,14 +2846,23 @@ man/man3/OSSL_CMP_CTX_set_transfer_cb.3
 man/man3/OSSL_CMP_CTX_set_transfer_cb_arg.3
 man/man3/OSSL_CMP_CTX_setup_CRM.3
 man/man3/OSSL_CMP_CTX_snprint_PKIStatus.3
+man/man3/OSSL_CMP_HDR_get0_geninfo_ITAVs.3
 man/man3/OSSL_CMP_HDR_get0_recipNonce.3
 man/man3/OSSL_CMP_HDR_get0_transactionID.3
 man/man3/OSSL_CMP_IR.3
 man/man3/OSSL_CMP_ITAV_create.3
 man/man3/OSSL_CMP_ITAV_dup.3
 man/man3/OSSL_CMP_ITAV_free.3
+man/man3/OSSL_CMP_ITAV_get0_caCerts.3
+man/man3/OSSL_CMP_ITAV_get0_certProfile.3
+man/man3/OSSL_CMP_ITAV_get0_rootCaCert.3
+man/man3/OSSL_CMP_ITAV_get0_rootCaKeyUpdate.3
 man/man3/OSSL_CMP_ITAV_get0_type.3
 man/man3/OSSL_CMP_ITAV_get0_value.3
+man/man3/OSSL_CMP_ITAV_new0_certProfile.3
+man/man3/OSSL_CMP_ITAV_new_caCerts.3
+man/man3/OSSL_CMP_ITAV_new_rootCaCert.3
+man/man3/OSSL_CMP_ITAV_new_rootCaKeyUpdate.3
 man/man3/OSSL_CMP_ITAV_push0_stack_item.3
 man/man3/OSSL_CMP_ITAV_set0.3
 man/man3/OSSL_CMP_KUR.3
@@ -2776,6 +2877,7 @@ man/man3/OSSL_CMP_LOG_TRACE.3
 man/man3/OSSL_CMP_LOG_WARNING.3
 man/man3/OSSL_CMP_MSG_dup.3
 man/man3/OSSL_CMP_MSG_free.3
+man/man3/OSSL_CMP_MSG_get0_certreq_publickey.3
 man/man3/OSSL_CMP_MSG_get0_header.3
 man/man3/OSSL_CMP_MSG_get_bodytype.3
 man/man3/OSSL_CMP_MSG_http_perform.3
@@ -2797,6 +2899,7 @@ man/man3/OSSL_CMP_SRV_CTX_free.3
 man/man3/OSSL_CMP_SRV_CTX_get0_cmp_ctx.3
 man/man3/OSSL_CMP_SRV_CTX_get0_custom_ctx.3
 man/man3/OSSL_CMP_SRV_CTX_init.3
+man/man3/OSSL_CMP_SRV_CTX_init_trans.3
 man/man3/OSSL_CMP_SRV_CTX_new.3
 man/man3/OSSL_CMP_SRV_CTX_set_accept_raverified.3
 man/man3/OSSL_CMP_SRV_CTX_set_accept_unprotected.3
@@ -2804,6 +2907,8 @@ man/man3/OSSL_CMP_SRV_CTX_set_grant_impl
 man/man3/OSSL_CMP_SRV_CTX_set_send_unprotected_errors.3
 man/man3/OSSL_CMP_SRV_certConf_cb_t.3
 man/man3/OSSL_CMP_SRV_cert_request_cb_t.3
+man/man3/OSSL_CMP_SRV_clean_transaction_cb_t.3
+man/man3/OSSL_CMP_SRV_delayed_delivery_cb_t.3
 man/man3/OSSL_CMP_SRV_error_cb_t.3
 man/man3/OSSL_CMP_SRV_genm_cb_t.3
 man/man3/OSSL_CMP_SRV_pollReq_cb_t.3
@@ -2819,6 +2924,8 @@ man/man3/OSSL_CMP_exec_KUR_ses.3
 man/man3/OSSL_CMP_exec_P10CR_ses.3
 man/man3/OSSL_CMP_exec_RR_ses.3
 man/man3/OSSL_CMP_exec_certreq.3
+man/man3/OSSL_CMP_get1_caCerts.3
+man/man3/OSSL_CMP_get1_rootCaKeyUpdate.3
 man/man3/OSSL_CMP_log_cb_t.3
 man/man3/OSSL_CMP_log_close.3
 man/man3/OSSL_CMP_log_open.3
@@ -2842,6 +2949,7 @@ man/man3/OSSL_CRMF_CERTTEMPLATE_fill.3
 man/man3/OSSL_CRMF_CERTTEMPLATE_free.3
 man/man3/OSSL_CRMF_CERTTEMPLATE_get0_extensions.3
 man/man3/OSSL_CRMF_CERTTEMPLATE_get0_issuer.3
+man/man3/OSSL_CRMF_CERTTEMPLATE_get0_publicKey.3
 man/man3/OSSL_CRMF_CERTTEMPLATE_get0_serialNumber.3
 man/man3/OSSL_CRMF_CERTTEMPLATE_get0_subject.3
 man/man3/OSSL_CRMF_CERTTEMPLATE_it.3
@@ -2940,6 +3048,7 @@ man/man3/OSSL_DECODER_names_do_all.3
 man/man3/OSSL_DECODER_settable_ctx_params.3
 man/man3/OSSL_DECODER_up_ref.3
 man/man3/OSSL_DISPATCH.3
+man/man3/OSSL_DISPATCH_END.3
 man/man3/OSSL_EC_curve_nid2name.3
 man/man3/OSSL_ENCODER.3
 man/man3/OSSL_ENCODER_CLEANUP.3
@@ -2984,9 +3093,34 @@ man/man3/OSSL_ENCODER_to_bio.3
 man/man3/OSSL_ENCODER_to_data.3
 man/man3/OSSL_ENCODER_to_fp.3
 man/man3/OSSL_ENCODER_up_ref.3
+man/man3/OSSL_ERR_STATE_free.3
+man/man3/OSSL_ERR_STATE_new.3
+man/man3/OSSL_ERR_STATE_restore.3
+man/man3/OSSL_ERR_STATE_save.3
+man/man3/OSSL_ERR_STATE_save_to_mark.3
 man/man3/OSSL_ESS_check_signing_certs.3
 man/man3/OSSL_ESS_signing_cert_new_init.3
 man/man3/OSSL_ESS_signing_cert_v2_new_init.3
+man/man3/OSSL_HPKE_CTX_free.3
+man/man3/OSSL_HPKE_CTX_get_seq.3
+man/man3/OSSL_HPKE_CTX_new.3
+man/man3/OSSL_HPKE_CTX_set1_authpriv.3
+man/man3/OSSL_HPKE_CTX_set1_authpub.3
+man/man3/OSSL_HPKE_CTX_set1_ikme.3
+man/man3/OSSL_HPKE_CTX_set1_psk.3
+man/man3/OSSL_HPKE_CTX_set_seq.3
+man/man3/OSSL_HPKE_decap.3
+man/man3/OSSL_HPKE_encap.3
+man/man3/OSSL_HPKE_export.3
+man/man3/OSSL_HPKE_get_ciphertext_size.3
+man/man3/OSSL_HPKE_get_grease_value.3
+man/man3/OSSL_HPKE_get_public_encap_size.3
+man/man3/OSSL_HPKE_get_recommended_ikmelen.3
+man/man3/OSSL_HPKE_keygen.3
+man/man3/OSSL_HPKE_open.3
+man/man3/OSSL_HPKE_seal.3
+man/man3/OSSL_HPKE_str2suite.3
+man/man3/OSSL_HPKE_suite_check.3
 man/man3/OSSL_HTTP_REQ_CTX.3
 man/man3/OSSL_HTTP_REQ_CTX_add1_header.3
 man/man3/OSSL_HTTP_REQ_CTX_exchange.3
@@ -2998,6 +3132,7 @@ man/man3/OSSL_HTTP_REQ_CTX_nbio_d2i.3
 man/man3/OSSL_HTTP_REQ_CTX_new.3
 man/man3/OSSL_HTTP_REQ_CTX_set1_req.3
 man/man3/OSSL_HTTP_REQ_CTX_set_expected.3
+man/man3/OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines.3
 man/man3/OSSL_HTTP_REQ_CTX_set_max_response_length.3
 man/man3/OSSL_HTTP_REQ_CTX_set_request_line.3
 man/man3/OSSL_HTTP_adapt_proxy.3
@@ -3125,6 +3260,7 @@ man/man3/OSSL_PROVIDER.3
 man/man3/OSSL_PROVIDER_add_builtin.3
 man/man3/OSSL_PROVIDER_available.3
 man/man3/OSSL_PROVIDER_do_all.3
+man/man3/OSSL_PROVIDER_get0_default_search_path.3
 man/man3/OSSL_PROVIDER_get0_dispatch.3
 man/man3/OSSL_PROVIDER_get0_name.3
 man/man3/OSSL_PROVIDER_get0_provider_ctx.3
@@ -3132,12 +3268,37 @@ man/man3/OSSL_PROVIDER_get_capabilities.
 man/man3/OSSL_PROVIDER_get_params.3
 man/man3/OSSL_PROVIDER_gettable_params.3
 man/man3/OSSL_PROVIDER_load.3
+man/man3/OSSL_PROVIDER_load_ex.3
 man/man3/OSSL_PROVIDER_query_operation.3
 man/man3/OSSL_PROVIDER_self_test.3
 man/man3/OSSL_PROVIDER_set_default_search_path.3
 man/man3/OSSL_PROVIDER_try_load.3
+man/man3/OSSL_PROVIDER_try_load_ex.3
 man/man3/OSSL_PROVIDER_unload.3
 man/man3/OSSL_PROVIDER_unquery_operation.3
+man/man3/OSSL_QUIC_ERR_AEAD_LIMIT_REACHED.3
+man/man3/OSSL_QUIC_ERR_APPLICATION_ERROR.3
+man/man3/OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR.3
+man/man3/OSSL_QUIC_ERR_CONNECTION_REFUSED.3
+man/man3/OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED.3
+man/man3/OSSL_QUIC_ERR_CRYPTO_ERR.3
+man/man3/OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN.3
+man/man3/OSSL_QUIC_ERR_CRYPTO_ERR_END.3
+man/man3/OSSL_QUIC_ERR_FINAL_SIZE_ERROR.3
+man/man3/OSSL_QUIC_ERR_FLOW_CONTROL_ERROR.3
+man/man3/OSSL_QUIC_ERR_FRAME_ENCODING_ERROR.3
+man/man3/OSSL_QUIC_ERR_INTERNAL_ERROR.3
+man/man3/OSSL_QUIC_ERR_INVALID_TOKEN.3
+man/man3/OSSL_QUIC_ERR_KEY_UPDATE_ERROR.3
+man/man3/OSSL_QUIC_ERR_NO_ERROR.3
+man/man3/OSSL_QUIC_ERR_NO_VIABLE_PATH.3
+man/man3/OSSL_QUIC_ERR_PROTOCOL_VIOLATION.3
+man/man3/OSSL_QUIC_ERR_STREAM_LIMIT_ERROR.3
+man/man3/OSSL_QUIC_ERR_STREAM_STATE_ERROR.3
+man/man3/OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR.3
+man/man3/OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT.3
+man/man3/OSSL_QUIC_client_method.3
+man/man3/OSSL_QUIC_client_thread_method.3
 man/man3/OSSL_SELF_TEST_free.3
 man/man3/OSSL_SELF_TEST_get_callback.3
 man/man3/OSSL_SELF_TEST_new.3
@@ -3145,6 +3306,7 @@ man/man3/OSSL_SELF_TEST_onbegin.3
 man/man3/OSSL_SELF_TEST_oncorrupt_byte.3
 man/man3/OSSL_SELF_TEST_onend.3
 man/man3/OSSL_SELF_TEST_set_callback.3
+man/man3/OSSL_STACK_OF_X509_free.3
 man/man3/OSSL_STORE_CTX.3
 man/man3/OSSL_STORE_INFO.3
 man/man3/OSSL_STORE_INFO_free.3
@@ -3215,6 +3377,7 @@ man/man3/OSSL_STORE_close.3
 man/man3/OSSL_STORE_close_fn.3
 man/man3/OSSL_STORE_ctrl.3
 man/man3/OSSL_STORE_ctrl_fn.3
+man/man3/OSSL_STORE_delete.3
 man/man3/OSSL_STORE_eof.3
 man/man3/OSSL_STORE_eof_fn.3
 man/man3/OSSL_STORE_error.3
@@ -3233,6 +3396,8 @@ man/man3/OSSL_STORE_post_process_info_fn
 man/man3/OSSL_STORE_register_loader.3
 man/man3/OSSL_STORE_supports_search.3
 man/man3/OSSL_STORE_unregister_loader.3
+man/man3/OSSL_THREAD_SUPPORT_FLAG_DEFAULT_SPAWN.3
+man/man3/OSSL_THREAD_SUPPORT_FLAG_THREAD_POOL.3
 man/man3/OSSL_TRACE.3
 man/man3/OSSL_TRACE1.3
 man/man3/OSSL_TRACE2.3
@@ -3248,9 +3413,15 @@ man/man3/OSSL_TRACE_BEGIN.3
 man/man3/OSSL_TRACE_CANCEL.3
 man/man3/OSSL_TRACE_ENABLED.3
 man/man3/OSSL_TRACE_END.3
+man/man3/OSSL_TRACE_STRING.3
+man/man3/OSSL_TRACE_STRING_MAX.3
 man/man3/OSSL_default_cipher_list.3
 man/man3/OSSL_default_ciphersuites.3
+man/man3/OSSL_get_max_threads.3
+man/man3/OSSL_get_thread_support_flags.3
 man/man3/OSSL_parse_url.3
+man/man3/OSSL_set_max_threads.3
+man/man3/OSSL_sleep.3
 man/man3/OSSL_trace_begin.3
 man/man3/OSSL_trace_cb.3
 man/man3/OSSL_trace_enabled.3
@@ -3261,6 +3432,7 @@ man/man3/OSSL_trace_set_callback.3
 man/man3/OSSL_trace_set_channel.3
 man/man3/OSSL_trace_set_prefix.3
 man/man3/OSSL_trace_set_suffix.3
+man/man3/OSSL_trace_string.3
 man/man3/OTHERNAME_free.3
 man/man3/OTHERNAME_new.3
 man/man3/OpenSSL_add_all_algorithms.3
@@ -3427,10 +3599,13 @@ man/man3/PKCS12_SAFEBAG_get0_pkcs8.3
 man/man3/PKCS12_SAFEBAG_get0_safes.3
 man/man3/PKCS12_SAFEBAG_get0_type.3
 man/man3/PKCS12_SAFEBAG_get1_cert.3
+man/man3/PKCS12_SAFEBAG_get1_cert_ex.3
 man/man3/PKCS12_SAFEBAG_get1_crl.3
+man/man3/PKCS12_SAFEBAG_get1_crl_ex.3
 man/man3/PKCS12_SAFEBAG_get_bag_nid.3
 man/man3/PKCS12_SAFEBAG_get_nid.3
 man/man3/PKCS12_SAFEBAG_new.3
+man/man3/PKCS12_SAFEBAG_set0_attrs.3
 man/man3/PKCS12_add1_attr_by_NID.3
 man/man3/PKCS12_add1_attr_by_txt.3
 man/man3/PKCS12_add_CSPName_asc.3
@@ -3447,7 +3622,9 @@ man/man3/PKCS12_add_safes.3
 man/man3/PKCS12_add_safes_ex.3
 man/man3/PKCS12_add_secret.3
 man/man3/PKCS12_create.3
+man/man3/PKCS12_create_cb.3
 man/man3/PKCS12_create_ex.3
+man/man3/PKCS12_create_ex2.3
 man/man3/PKCS12_decrypt_skey.3
 man/man3/PKCS12_decrypt_skey_ex.3
 man/man3/PKCS12_free.3
@@ -3803,6 +3980,7 @@ man/man3/SRP_user_pwd_new.3
 man/man3/SRP_user_pwd_set0_sv.3
 man/man3/SRP_user_pwd_set1_ids.3
 man/man3/SRP_user_pwd_set_gN.3
+man/man3/SSL_ACCEPT_STREAM_NO_BLOCK.3
 man/man3/SSL_CIPHER_description.3
 man/man3/SSL_CIPHER_find.3
 man/man3/SSL_CIPHER_get_auth_nid.3
@@ -3833,6 +4011,8 @@ man/man3/SSL_CONF_CTX_set_ssl_ctx.3
 man/man3/SSL_CONF_cmd.3
 man/man3/SSL_CONF_cmd_argv.3
 man/man3/SSL_CONF_cmd_value_type.3
+man/man3/SSL_CONN_CLOSE_FLAG_LOCAL.3
+man/man3/SSL_CONN_CLOSE_FLAG_TRANSPORT.3
 man/man3/SSL_CTX_add0_chain_cert.3
 man/man3/SSL_CTX_add1_chain_cert.3
 man/man3/SSL_CTX_add1_to_CA_list.3
@@ -3849,6 +4029,7 @@ man/man3/SSL_CTX_clear_chain_certs.3
 man/man3/SSL_CTX_clear_extra_chain_certs.3
 man/man3/SSL_CTX_clear_mode.3
 man/man3/SSL_CTX_clear_options.3
+man/man3/SSL_CTX_compress_certs.3
 man/man3/SSL_CTX_config.3
 man/man3/SSL_CTX_ct_is_enabled.3
 man/man3/SSL_CTX_ctrl.3
@@ -3865,9 +4046,12 @@ man/man3/SSL_CTX_generate_session_ticket
 man/man3/SSL_CTX_get0_CA_list.3
 man/man3/SSL_CTX_get0_chain_cert_store.3
 man/man3/SSL_CTX_get0_chain_certs.3
+man/man3/SSL_CTX_get0_client_cert_type.3
 man/man3/SSL_CTX_get0_param.3
 man/man3/SSL_CTX_get0_security_ex_data.3
+man/man3/SSL_CTX_get0_server_cert_type.3
 man/man3/SSL_CTX_get0_verify_cert_store.3
+man/man3/SSL_CTX_get1_compressed_cert.3
 man/man3/SSL_CTX_get_app_data.3
 man/man3/SSL_CTX_get_cert_store.3
 man/man3/SSL_CTX_get_ciphers.3
@@ -3941,16 +4125,20 @@ man/man3/SSL_CTX_set0_chain_cert_store.3
 man/man3/SSL_CTX_set0_security_ex_data.3
 man/man3/SSL_CTX_set0_tmp_dh_pkey.3
 man/man3/SSL_CTX_set0_verify_cert_store.3
+man/man3/SSL_CTX_set1_cert_comp_preference.3
 man/man3/SSL_CTX_set1_cert_store.3
 man/man3/SSL_CTX_set1_chain.3
 man/man3/SSL_CTX_set1_chain_cert_store.3
+man/man3/SSL_CTX_set1_client_cert_type.3
 man/man3/SSL_CTX_set1_client_sigalgs.3
 man/man3/SSL_CTX_set1_client_sigalgs_list.3
+man/man3/SSL_CTX_set1_compressed_cert.3
 man/man3/SSL_CTX_set1_curves.3
 man/man3/SSL_CTX_set1_curves_list.3
 man/man3/SSL_CTX_set1_groups.3
 man/man3/SSL_CTX_set1_groups_list.3
 man/man3/SSL_CTX_set1_param.3
+man/man3/SSL_CTX_set1_server_cert_type.3
 man/man3/SSL_CTX_set1_sigalgs.3
 man/man3/SSL_CTX_set1_sigalgs_list.3
 man/man3/SSL_CTX_set1_verify_cert_store.3
@@ -4060,7 +4248,36 @@ man/man3/SSL_CTX_use_psk_identity_hint.3
 man/man3/SSL_CTX_use_serverinfo.3
 man/man3/SSL_CTX_use_serverinfo_ex.3
 man/man3/SSL_CTX_use_serverinfo_file.3
+man/man3/SSL_DEFAULT_STREAM_MODE_AUTO_BIDI.3
+man/man3/SSL_DEFAULT_STREAM_MODE_AUTO_UNI.3
+man/man3/SSL_DEFAULT_STREAM_MODE_NONE.3
+man/man3/SSL_INCOMING_STREAM_POLICY_ACCEPT.3
+man/man3/SSL_INCOMING_STREAM_POLICY_AUTO.3
+man/man3/SSL_INCOMING_STREAM_POLICY_REJECT.3
 man/man3/SSL_OP_BIT.3
+man/man3/SSL_POLL_EVENT_E.3
+man/man3/SSL_POLL_EVENT_EC.3
+man/man3/SSL_POLL_EVENT_ECD.3
+man/man3/SSL_POLL_EVENT_ER.3
+man/man3/SSL_POLL_EVENT_EW.3
+man/man3/SSL_POLL_EVENT_F.3
+man/man3/SSL_POLL_EVENT_I.3
+man/man3/SSL_POLL_EVENT_IS.3
+man/man3/SSL_POLL_EVENT_ISB.3
+man/man3/SSL_POLL_EVENT_ISE.3
+man/man3/SSL_POLL_EVENT_ISU.3
+man/man3/SSL_POLL_EVENT_NONE.3
+man/man3/SSL_POLL_EVENT_OS.3
+man/man3/SSL_POLL_EVENT_OSB.3
+man/man3/SSL_POLL_EVENT_OSE.3
+man/man3/SSL_POLL_EVENT_OSU.3
+man/man3/SSL_POLL_EVENT_R.3
+man/man3/SSL_POLL_EVENT_RE.3
+man/man3/SSL_POLL_EVENT_RW.3
+man/man3/SSL_POLL_EVENT_RWE.3
+man/man3/SSL_POLL_EVENT_W.3
+man/man3/SSL_POLL_EVENT_WE.3
+man/man3/SSL_POLL_FLAG_NO_HANDLE_EVENTS.3
 man/man3/SSL_SESSION_dup.3
 man/man3/SSL_SESSION_free.3
 man/man3/SSL_SESSION_get0_alpn_selected.3
@@ -4068,6 +4285,7 @@ man/man3/SSL_SESSION_get0_cipher.3
 man/man3/SSL_SESSION_get0_hostname.3
 man/man3/SSL_SESSION_get0_id_context.3
 man/man3/SSL_SESSION_get0_peer.3
+man/man3/SSL_SESSION_get0_peer_rpk.3
 man/man3/SSL_SESSION_get0_ticket.3
 man/man3/SSL_SESSION_get0_ticket_appdata.3
 man/man3/SSL_SESSION_get_app_data.3
@@ -4081,6 +4299,7 @@ man/man3/SSL_SESSION_get_max_fragment_le
 man/man3/SSL_SESSION_get_protocol_version.3
 man/man3/SSL_SESSION_get_ticket_lifetime_hint.3
 man/man3/SSL_SESSION_get_time.3
+man/man3/SSL_SESSION_get_time_ex.3
 man/man3/SSL_SESSION_get_timeout.3
 man/man3/SSL_SESSION_has_ticket.3
 man/man3/SSL_SESSION_is_resumable.3
@@ -4100,15 +4319,49 @@ man/man3/SSL_SESSION_set_ex_data.3
 man/man3/SSL_SESSION_set_max_early_data.3
 man/man3/SSL_SESSION_set_protocol_version.3
 man/man3/SSL_SESSION_set_time.3
+man/man3/SSL_SESSION_set_time_ex.3
 man/man3/SSL_SESSION_set_timeout.3
 man/man3/SSL_SESSION_up_ref.3
+man/man3/SSL_STREAM_FLAG_ADVANCE.3
+man/man3/SSL_STREAM_FLAG_NO_BLOCK.3
+man/man3/SSL_STREAM_FLAG_UNI.3
+man/man3/SSL_STREAM_STATE_CONN_CLOSED.3
+man/man3/SSL_STREAM_STATE_FINISHED.3
+man/man3/SSL_STREAM_STATE_NONE.3
+man/man3/SSL_STREAM_STATE_OK.3
+man/man3/SSL_STREAM_STATE_RESET_LOCAL.3
+man/man3/SSL_STREAM_STATE_RESET_REMOTE.3
+man/man3/SSL_STREAM_STATE_WRONG_DIR.3
+man/man3/SSL_STREAM_TYPE_BIDI.3
+man/man3/SSL_STREAM_TYPE_NONE.3
+man/man3/SSL_STREAM_TYPE_READ.3
+man/man3/SSL_STREAM_TYPE_WRITE.3
+man/man3/SSL_VALUE_CLASS_FEATURE_NEGOTIATED.3
+man/man3/SSL_VALUE_CLASS_FEATURE_PEER_REQUEST.3
+man/man3/SSL_VALUE_CLASS_FEATURE_REQUEST.3
+man/man3/SSL_VALUE_CLASS_GENERIC.3
+man/man3/SSL_VALUE_EVENT_HANDLING_MODE.3
+man/man3/SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT.3
+man/man3/SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT.3
+man/man3/SSL_VALUE_EVENT_HANDLING_MODE_INHERIT.3
+man/man3/SSL_VALUE_QUIC_IDLE_TIMEOUT.3
+man/man3/SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL.3
+man/man3/SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL.3
+man/man3/SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL.3
+man/man3/SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL.3
+man/man3/SSL_VALUE_STREAM_WRITE_BUF_AVAIL.3
+man/man3/SSL_VALUE_STREAM_WRITE_BUF_SIZE.3
+man/man3/SSL_VALUE_STREAM_WRITE_BUF_USED.3
+man/man3/SSL_WRITE_FLAG_CONCLUDE.3
 man/man3/SSL_accept.3
+man/man3/SSL_accept_stream.3
 man/man3/SSL_add0_chain_cert.3
 man/man3/SSL_add1_chain_cert.3
 man/man3/SSL_add1_host.3
 man/man3/SSL_add1_to_CA_list.3
 man/man3/SSL_add_client_CA.3
 man/man3/SSL_add_dir_cert_subjects_to_stack.3
+man/man3/SSL_add_expected_rpk.3
 man/man3/SSL_add_file_cert_subjects_to_stack.3
 man/man3/SSL_add_store_cert_subjects_to_stack.3
 man/man3/SSL_alert_desc_string.3
@@ -4135,8 +4388,10 @@ man/man3/SSL_client_hello_get0_legacy_ve
 man/man3/SSL_client_hello_get0_random.3
 man/man3/SSL_client_hello_get0_session_id.3
 man/man3/SSL_client_hello_get1_extensions_present.3
+man/man3/SSL_client_hello_get_extension_order.3
 man/man3/SSL_client_hello_isv2.3
 man/man3/SSL_client_version.3
+man/man3/SSL_compress_certs.3
 man/man3/SSL_config.3
 man/man3/SSL_connect.3
 man/man3/SSL_ct_is_enabled.3
@@ -4161,27 +4416,36 @@ man/man3/SSL_get0_CA_list.3
 man/man3/SSL_get0_alpn_selected.3
 man/man3/SSL_get0_chain_cert_store.3
 man/man3/SSL_get0_chain_certs.3
+man/man3/SSL_get0_client_cert_type.3
+man/man3/SSL_get0_connection.3
 man/man3/SSL_get0_dane_authority.3
 man/man3/SSL_get0_dane_tlsa.3
+man/man3/SSL_get0_group_name.3
+man/man3/SSL_get0_iana_groups.3
 man/man3/SSL_get0_next_proto_negotiated.3
 man/man3/SSL_get0_param.3
 man/man3/SSL_get0_peer_CA_list.3
 man/man3/SSL_get0_peer_certificate.3
+man/man3/SSL_get0_peer_rpk.3
 man/man3/SSL_get0_peer_scts.3
 man/man3/SSL_get0_peername.3
 man/man3/SSL_get0_security_ex_data.3
+man/man3/SSL_get0_server_cert_type.3
 man/man3/SSL_get0_session.3
 man/man3/SSL_get0_verified_chain.3
 man/man3/SSL_get0_verify_cert_store.3
+man/man3/SSL_get1_compressed_cert.3
 man/man3/SSL_get1_curves.3
 man/man3/SSL_get1_groups.3
 man/man3/SSL_get1_peer_certificate.3
 man/man3/SSL_get1_session.3
 man/man3/SSL_get1_supported_ciphers.3
 man/man3/SSL_get_SSL_CTX.3
+man/man3/SSL_get_accept_stream_queue_len.3
 man/man3/SSL_get_all_async_fds.3
 man/man3/SSL_get_app_data.3
 man/man3/SSL_get_async_status.3
+man/man3/SSL_get_blocking_mode.3
 man/man3/SSL_get_certificate.3
 man/man3/SSL_get_changed_async_fds.3
 man/man3/SSL_get_cipher.3
@@ -4193,17 +4457,25 @@ man/man3/SSL_get_ciphers.3
 man/man3/SSL_get_client_CA_list.3
 man/man3/SSL_get_client_ciphers.3
 man/man3/SSL_get_client_random.3
+man/man3/SSL_get_conn_close_info.3
 man/man3/SSL_get_current_cipher.3
 man/man3/SSL_get_default_passwd_cb.3
 man/man3/SSL_get_default_passwd_cb_userdata.3
 man/man3/SSL_get_default_timeout.3
 man/man3/SSL_get_early_data_status.3
 man/man3/SSL_get_error.3
+man/man3/SSL_get_event_handling_mode.3
+man/man3/SSL_get_event_timeout.3
 man/man3/SSL_get_ex_data.3
 man/man3/SSL_get_ex_data_X509_STORE_CTX_idx.3
 man/man3/SSL_get_ex_new_index.3
 man/man3/SSL_get_extms_support.3
 man/man3/SSL_get_fd.3
+man/man3/SSL_get_feature_negotiated_uint.3
+man/man3/SSL_get_feature_peer_request_uint.3
+man/man3/SSL_get_feature_request_uint.3
+man/man3/SSL_get_generic_value_uint.3
+man/man3/SSL_get_handshake_rtt.3
 man/man3/SSL_get_info_callback.3
 man/man3/SSL_get_key_update_type.3
 man/man3/SSL_get_max_cert_list.3
@@ -4211,7 +4483,9 @@ man/man3/SSL_get_max_early_data.3
 man/man3/SSL_get_max_proto_version.3
 man/man3/SSL_get_min_proto_version.3
 man/man3/SSL_get_mode.3
+man/man3/SSL_get_negotiated_client_cert_type.3
 man/man3/SSL_get_negotiated_group.3
+man/man3/SSL_get_negotiated_server_cert_type.3
 man/man3/SSL_get_num_tickets.3
 man/man3/SSL_get_options.3
 man/man3/SSL_get_peer_cert_chain.3
@@ -4223,12 +4497,17 @@ man/man3/SSL_get_pending_cipher.3
 man/man3/SSL_get_privatekey.3
 man/man3/SSL_get_psk_identity.3
 man/man3/SSL_get_psk_identity_hint.3
+man/man3/SSL_get_quic_stream_bidi_local_avail.3
+man/man3/SSL_get_quic_stream_bidi_remote_avail.3
+man/man3/SSL_get_quic_stream_uni_local_avail.3
+man/man3/SSL_get_quic_stream_uni_remote_avail.3
 man/man3/SSL_get_quiet_shutdown.3
 man/man3/SSL_get_rbio.3
 man/man3/SSL_get_read_ahead.3
 man/man3/SSL_get_record_padding_callback_arg.3
 man/man3/SSL_get_recv_max_early_data.3
 man/man3/SSL_get_rfd.3
+man/man3/SSL_get_rpoll_descriptor.3
 man/man3/SSL_get_secure_renegotiation_support.3
 man/man3/SSL_get_security_callback.3
 man/man3/SSL_get_security_level.3
@@ -4253,11 +4532,21 @@ man/man3/SSL_get_srp_username.3
 man/man3/SSL_get_srtp_profiles.3
 man/man3/SSL_get_ssl_method.3
 man/man3/SSL_get_state.3
+man/man3/SSL_get_stream_id.3
+man/man3/SSL_get_stream_read_error_code.3
+man/man3/SSL_get_stream_read_state.3
+man/man3/SSL_get_stream_type.3
+man/man3/SSL_get_stream_write_buf_avail.3
+man/man3/SSL_get_stream_write_buf_size.3
+man/man3/SSL_get_stream_write_buf_used.3
+man/man3/SSL_get_stream_write_error_code.3
+man/man3/SSL_get_stream_write_state.3
 man/man3/SSL_get_time.3
 man/man3/SSL_get_timeout.3
 man/man3/SSL_get_tlsext_status_ocsp_resp.3
 man/man3/SSL_get_tlsext_status_type.3
 man/man3/SSL_get_tmp_key.3
+man/man3/SSL_get_value_uint.3
 man/man3/SSL_get_verify_callback.3
 man/man3/SSL_get_verify_depth.3
 man/man3/SSL_get_verify_mode.3
@@ -4265,26 +4554,37 @@ man/man3/SSL_get_verify_result.3
 man/man3/SSL_get_version.3
 man/man3/SSL_get_wbio.3
 man/man3/SSL_get_wfd.3
+man/man3/SSL_get_wpoll_descriptor.3
 man/man3/SSL_group_to_name.3
+man/man3/SSL_handle_events.3
 man/man3/SSL_has_matching_session_id.3
 man/man3/SSL_has_pending.3
 man/man3/SSL_in_accept_init.3
 man/man3/SSL_in_before.3
 man/man3/SSL_in_connect_init.3
 man/man3/SSL_in_init.3
+man/man3/SSL_inject_net_dgram.3
+man/man3/SSL_is_connection.3
 man/man3/SSL_is_dtls.3
 man/man3/SSL_is_init_finished.3
+man/man3/SSL_is_quic.3
 man/man3/SSL_is_server.3
+man/man3/SSL_is_stream_local.3
+man/man3/SSL_is_tls.3
 man/man3/SSL_key_update.3
 man/man3/SSL_library_init.3
 man/man3/SSL_load_client_CA_file.3
 man/man3/SSL_load_client_CA_file_ex.3
 man/man3/SSL_load_error_strings.3
+man/man3/SSL_net_read_desired.3
+man/man3/SSL_net_write_desired.3
 man/man3/SSL_new.3
 man/man3/SSL_new_session_ticket.3
+man/man3/SSL_new_stream.3
 man/man3/SSL_peek.3
 man/man3/SSL_peek_ex.3
 man/man3/SSL_pending.3
+man/man3/SSL_poll.3
 man/man3/SSL_psk_client_cb_func.3
 man/man3/SSL_psk_find_session_cb_func.3
 man/man3/SSL_psk_server_cb_func.3
@@ -4309,16 +4609,21 @@ man/man3/SSL_set0_security_ex_data.3
 man/man3/SSL_set0_tmp_dh_pkey.3
 man/man3/SSL_set0_verify_cert_store.3
 man/man3/SSL_set0_wbio.3
+man/man3/SSL_set1_cert_comp_preference.3
 man/man3/SSL_set1_chain.3
 man/man3/SSL_set1_chain_cert_store.3
+man/man3/SSL_set1_client_cert_type.3
 man/man3/SSL_set1_client_sigalgs.3
 man/man3/SSL_set1_client_sigalgs_list.3
+man/man3/SSL_set1_compressed_cert.3
 man/man3/SSL_set1_curves.3
 man/man3/SSL_set1_curves_list.3
 man/man3/SSL_set1_groups.3
 man/man3/SSL_set1_groups_list.3
 man/man3/SSL_set1_host.3
+man/man3/SSL_set1_initial_peer_addr.3
 man/man3/SSL_set1_param.3
+man/man3/SSL_set1_server_cert_type.3
 man/man3/SSL_set1_sigalgs.3
 man/man3/SSL_set1_sigalgs_list.3
 man/man3/SSL_set1_verify_cert_store.3
@@ -4330,6 +4635,7 @@ man/man3/SSL_set_async_callback.3
 man/man3/SSL_set_async_callback_arg.3
 man/man3/SSL_set_bio.3
 man/man3/SSL_set_block_padding.3
+man/man3/SSL_set_blocking_mode.3
 man/man3/SSL_set_cert_cb.3
 man/man3/SSL_set_cipher_list.3
 man/man3/SSL_set_ciphersuites.3
@@ -4340,12 +4646,17 @@ man/man3/SSL_set_current_cert.3
 man/man3/SSL_set_default_passwd_cb.3
 man/man3/SSL_set_default_passwd_cb_userdata.3
 man/man3/SSL_set_default_read_buffer_len.3
+man/man3/SSL_set_default_stream_mode.3
 man/man3/SSL_set_dh_auto.3
 man/man3/SSL_set_ecdh_auto.3
+man/man3/SSL_set_event_handling_mode.3
 man/man3/SSL_set_ex_data.3
 man/man3/SSL_set_fd.3
+man/man3/SSL_set_feature_request_uint.3
 man/man3/SSL_set_generate_session_id.3
+man/man3/SSL_set_generic_value_uint.3
 man/man3/SSL_set_hostflags.3
+man/man3/SSL_set_incoming_stream_policy.3
 man/man3/SSL_set_info_callback.3
 man/man3/SSL_set_max_cert_list.3
 man/man3/SSL_set_max_early_data.3
@@ -4391,14 +4702,19 @@ man/man3/SSL_set_tmp_dh.3
 man/man3/SSL_set_tmp_dh_callback.3
 man/man3/SSL_set_tmp_ecdh.3
 man/man3/SSL_set_trust.3
+man/man3/SSL_set_value_uint.3
 man/man3/SSL_set_verify.3
 man/man3/SSL_set_verify_depth.3
 man/man3/SSL_set_verify_result.3
 man/man3/SSL_set_wfd.3
 man/man3/SSL_shutdown.3
+man/man3/SSL_shutdown_ex.3
 man/man3/SSL_state_string.3
 man/man3/SSL_state_string_long.3
 man/man3/SSL_stateless.3
+man/man3/SSL_stream_conclude.3
+man/man3/SSL_stream_reset.3
+man/man3/SSL_trace.3
 man/man3/SSL_up_ref.3
 man/man3/SSL_use_PrivateKey.3
 man/man3/SSL_use_PrivateKey_ASN1.3
@@ -4428,6 +4744,7 @@ man/man3/SSL_want_x509_lookup.3
 man/man3/SSL_write.3
 man/man3/SSL_write_early_data.3
 man/man3/SSL_write_ex.3
+man/man3/SSL_write_ex2.3
 man/man3/SSLv23_client_method.3
 man/man3/SSLv23_method.3
 man/man3/SSLv23_server_method.3
@@ -4726,6 +5043,7 @@ man/man3/X509_PUBKEY_new.3
 man/man3/X509_PUBKEY_new_ex.3
 man/man3/X509_PUBKEY_set.3
 man/man3/X509_PUBKEY_set0_param.3
+man/man3/X509_PUBKEY_set0_public_key.3
 man/man3/X509_REQ_INFO_free.3
 man/man3/X509_REQ_INFO_new.3
 man/man3/X509_REQ_add1_attr.3
@@ -4799,10 +5117,12 @@ man/man3/X509_STORE_CTX_free.3
 man/man3/X509_STORE_CTX_get0_cert.3
 man/man3/X509_STORE_CTX_get0_chain.3
 man/man3/X509_STORE_CTX_get0_param.3
+man/man3/X509_STORE_CTX_get0_rpk.3
 man/man3/X509_STORE_CTX_get0_untrusted.3
 man/man3/X509_STORE_CTX_get1_chain.3
 man/man3/X509_STORE_CTX_get1_issuer.3
 man/man3/X509_STORE_CTX_get_app_data.3
+man/man3/X509_STORE_CTX_get_by_subject.3
 man/man3/X509_STORE_CTX_get_cert_crl.3
 man/man3/X509_STORE_CTX_get_check_crl.3
 man/man3/X509_STORE_CTX_get_check_issued.3
@@ -4821,9 +5141,11 @@ man/man3/X509_STORE_CTX_get_issuer_fn.3
 man/man3/X509_STORE_CTX_get_lookup_certs.3
 man/man3/X509_STORE_CTX_get_lookup_crls.3
 man/man3/X509_STORE_CTX_get_num_untrusted.3
+man/man3/X509_STORE_CTX_get_obj_by_subject.3
 man/man3/X509_STORE_CTX_get_verify.3
 man/man3/X509_STORE_CTX_get_verify_cb.3
 man/man3/X509_STORE_CTX_init.3
+man/man3/X509_STORE_CTX_init_rpk.3
 man/man3/X509_STORE_CTX_lookup_certs_fn.3
 man/man3/X509_STORE_CTX_lookup_crls_fn.3
 man/man3/X509_STORE_CTX_new.3
@@ -4832,16 +5154,19 @@ man/man3/X509_STORE_CTX_print_verify_cb.
 man/man3/X509_STORE_CTX_purpose_inherit.3
 man/man3/X509_STORE_CTX_set0_crls.3
 man/man3/X509_STORE_CTX_set0_param.3
+man/man3/X509_STORE_CTX_set0_rpk.3
 man/man3/X509_STORE_CTX_set0_trusted_stack.3
 man/man3/X509_STORE_CTX_set0_untrusted.3
 man/man3/X509_STORE_CTX_set0_verified_chain.3
 man/man3/X509_STORE_CTX_set_app_data.3
 man/man3/X509_STORE_CTX_set_cert.3
 man/man3/X509_STORE_CTX_set_current_cert.3
+man/man3/X509_STORE_CTX_set_current_reasons.3
 man/man3/X509_STORE_CTX_set_default.3
 man/man3/X509_STORE_CTX_set_error.3
 man/man3/X509_STORE_CTX_set_error_depth.3
 man/man3/X509_STORE_CTX_set_ex_data.3
+man/man3/X509_STORE_CTX_set_get_crl.3
 man/man3/X509_STORE_CTX_set_purpose.3
 man/man3/X509_STORE_CTX_set_trust.3
 man/man3/X509_STORE_CTX_set_verify.3
@@ -4856,6 +5181,7 @@ man/man3/X509_STORE_free.3
 man/man3/X509_STORE_get0_objects.3
 man/man3/X509_STORE_get0_param.3
 man/man3/X509_STORE_get1_all_certs.3
+man/man3/X509_STORE_get1_objects.3
 man/man3/X509_STORE_get_cert_crl.3
 man/man3/X509_STORE_get_check_crl.3
 man/man3/X509_STORE_get_check_issued.3
@@ -4968,6 +5294,10 @@ man/man3/X509_get0_subject_key_id.3
 man/man3/X509_get0_tbs_sigalg.3
 man/man3/X509_get0_uids.3
 man/man3/X509_get_X509_PUBKEY.3
+man/man3/X509_get_default_cert_dir.3
+man/man3/X509_get_default_cert_dir_env.3
+man/man3/X509_get_default_cert_file.3
+man/man3/X509_get_default_cert_file_env.3
 man/man3/X509_get_ex_data.3
 man/man3/X509_get_ex_new_index.3
 man/man3/X509_get_ext.3
@@ -5200,6 +5530,8 @@ man/man3/d2i_PROXY_POLICY.3
 man/man3/d2i_PUBKEY.3
 man/man3/d2i_PUBKEY_bio.3
 man/man3/d2i_PUBKEY_ex.3
+man/man3/d2i_PUBKEY_ex_bio.3
+man/man3/d2i_PUBKEY_ex_fp.3
 man/man3/d2i_PUBKEY_fp.3
 man/man3/d2i_PrivateKey.3
 man/man3/d2i_PrivateKey_bio.3
@@ -5222,6 +5554,7 @@ man/man3/d2i_RSA_PUBKEY_fp.3
 man/man3/d2i_SCRYPT_PARAMS.3
 man/man3/d2i_SCT_LIST.3
 man/man3/d2i_SSL_SESSION.3
+man/man3/d2i_SSL_SESSION_ex.3
 man/man3/d2i_SXNET.3
 man/man3/d2i_SXNETID.3
 man/man3/d2i_TS_ACCURACY.3
@@ -5563,12 +5896,15 @@ man/man7/EVP_CIPHER-RC4.7
 man/man7/EVP_CIPHER-RC5.7
 man/man7/EVP_CIPHER-SEED.7
 man/man7/EVP_CIPHER-SM4.7
+man/man7/EVP_KDF-ARGON2.7
 man/man7/EVP_KDF-HKDF.7
+man/man7/EVP_KDF-HMAC-DRBG.7
 man/man7/EVP_KDF-KB.7
 man/man7/EVP_KDF-KRB5KDF.7
 man/man7/EVP_KDF-PBKDF1.7
 man/man7/EVP_KDF-PBKDF2.7
 man/man7/EVP_KDF-PKCS12KDF.7
+man/man7/EVP_KDF-PVKKDF.7
 man/man7/EVP_KDF-SCRYPT.7
 man/man7/EVP_KDF-SS.7
 man/man7/EVP_KDF-SSHKDF.7
@@ -5577,7 +5913,10 @@ man/man7/EVP_KDF-TLS1_PRF.7
 man/man7/EVP_KDF-X942-ASN1.7
 man/man7/EVP_KDF-X942-CONCAT.7
 man/man7/EVP_KDF-X963.7
+man/man7/EVP_KEM-EC.7
 man/man7/EVP_KEM-RSA.7
+man/man7/EVP_KEM-X25519.7
+man/man7/EVP_KEM-X448.7
 man/man7/EVP_KEYEXCH-DH.7
 man/man7/EVP_KEYEXCH-ECDH.7
 man/man7/EVP_KEYEXCH-X25519.7
@@ -5609,6 +5948,7 @@ man/man7/EVP_MAC-Poly1305.7
 man/man7/EVP_MAC-Siphash.7
 man/man7/EVP_MD-BLAKE2.7
 man/man7/EVP_MD-KECCAK-KMAC.7
+man/man7/EVP_MD-KECCAK.7
 man/man7/EVP_MD-MD2.7
 man/man7/EVP_MD-MD4.7
 man/man7/EVP_MD-MD5-SHA1.7
@@ -5686,8 +6026,22 @@ man/man7/openssl-core_dispatch.h.7
 man/man7/openssl-core_names.h.7
 man/man7/openssl-env.7
 man/man7/openssl-glossary.7
+man/man7/openssl-qlog.7
+man/man7/openssl-quic.7
 man/man7/openssl-threads.7
 man/man7/openssl_user_macros.7
+man/man7/ossl-guide-introduction.7
+man/man7/ossl-guide-libcrypto-introduction.7
+man/man7/ossl-guide-libraries-introduction.7
+man/man7/ossl-guide-libssl-introduction.7
+man/man7/ossl-guide-migration.7
+man/man7/ossl-guide-quic-client-block.7
+man/man7/ossl-guide-quic-client-non-block.7
+man/man7/ossl-guide-quic-introduction.7
+man/man7/ossl-guide-quic-multi-stream.7
+man/man7/ossl-guide-tls-client-block.7
+man/man7/ossl-guide-tls-client-non-block.7
+man/man7/ossl-guide-tls-introduction.7
 man/man7/ossl_store-file.7
 man/man7/ossl_store.7
 man/man7/passphrase-encoding.7

Index: pkgsrc/security/openssl/distinfo
diff -u pkgsrc/security/openssl/distinfo:1.172 pkgsrc/security/openssl/distinfo:1.173
--- pkgsrc/security/openssl/distinfo:1.172      Sat Feb  3 18:21:26 2024
+++ pkgsrc/security/openssl/distinfo    Tue Apr  9 17:16:45 2024
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.172 2024/02/03 18:21:26 adam Exp $
+$NetBSD: distinfo,v 1.173 2024/04/09 17:16:45 wiz Exp $
 
-BLAKE2s (openssl-3.1.5.tar.gz) = 259837669e34cb57f3822c0fea435b72c517d12c54fc3b0cc5ee67a585ee49be
-SHA512 (openssl-3.1.5.tar.gz) = 82e2ac6b3d9b03f8fc66d2ec421246e989eb702eb94586515abfb5afb5300391a0beedf6a2602f61ac10896b41e5608feeeeb4d37714fa17ac0f2ce465249fa9
-Size (openssl-3.1.5.tar.gz) = 15663524 bytes
-SHA1 (patch-Configurations_unix-Makefile.tmpl) = a482c9b1be14428efb99f3ef638eccbcaea506b7
-SHA1 (patch-util_perl_OpenSSL_config.pm) = 8f335441860597d0074245d49cc9e081b0f9fd4e
+BLAKE2s (openssl-3.3.0.tar.gz) = 5d0678ee0fdaa49b3ae775a97a9b356e8493599655dcaaf01d82203f6aa354dc
+SHA512 (openssl-3.3.0.tar.gz) = 1f9daeee6542e1b831c65f1f87befaef98ccedc3abc958c9d17f064ef771924c30849e3ff880f94eed4aaa9d81ea105e3bc8815e6d2e4d6b60b5e890f14fc5da
+Size (openssl-3.3.0.tar.gz) = 18038030 bytes
+SHA1 (patch-Configurations_unix-Makefile.tmpl) = ea9b0a0c8de810362813d84a4f85c5ebdedf9fc6
+SHA1 (patch-util_perl_OpenSSL_config.pm) = 3d5b52a397265e91544a24c2a6c81029dff27b77

Index: pkgsrc/security/openssl/options.mk
diff -u pkgsrc/security/openssl/options.mk:1.13 pkgsrc/security/openssl/options.mk:1.14
--- pkgsrc/security/openssl/options.mk:1.13     Tue Oct 24 21:30:35 2023
+++ pkgsrc/security/openssl/options.mk  Tue Apr  9 17:16:45 2024
@@ -1,4 +1,4 @@
-# $NetBSD: options.mk,v 1.13 2023/10/24 21:30:35 wiz Exp $
+# $NetBSD: options.mk,v 1.14 2024/04/09 17:16:45 wiz Exp $
 
 PKG_OPTIONS_VAR=       PKG_OPTIONS.openssl
 PKG_SUPPORTED_OPTIONS= zlib threads
@@ -6,8 +6,6 @@ PKG_SUGGESTED_OPTIONS=  threads
 
 .include "../../mk/bsd.options.mk"
 
-PLIST_VARS+=           ${PKG_SUPPORTED_OPTIONS}
-
 .if !empty(PKG_OPTIONS:Mzlib)
 CONFIGURE_ARGS+=       zlib
 .include "../../devel/zlib/buildlink3.mk"

Index: pkgsrc/security/openssl/patches/patch-Configurations_unix-Makefile.tmpl
diff -u pkgsrc/security/openssl/patches/patch-Configurations_unix-Makefile.tmpl:1.6 pkgsrc/security/openssl/patches/patch-Configurations_unix-Makefile.tmpl:1.7
--- pkgsrc/security/openssl/patches/patch-Configurations_unix-Makefile.tmpl:1.6 Fri Oct 27 18:30:12 2023
+++ pkgsrc/security/openssl/patches/patch-Configurations_unix-Makefile.tmpl     Tue Apr  9 17:16:45 2024
@@ -1,24 +1,24 @@
-$NetBSD: patch-Configurations_unix-Makefile.tmpl,v 1.6 2023/10/27 18:30:12 jperkin Exp $
+$NetBSD: patch-Configurations_unix-Makefile.tmpl,v 1.7 2024/04/09 17:16:45 wiz Exp $
 
 Do not build or install HTML documentation.
 
---- Configurations/unix-Makefile.tmpl.orig     2023-10-24 13:41:51.000000000 +0000
+--- Configurations/unix-Makefile.tmpl.orig     2024-04-09 12:12:22.000000000 +0000
 +++ Configurations/unix-Makefile.tmpl
-@@ -502,7 +502,7 @@ LANG=C
- {- dependmagic('build_programs'); -}: build_programs_nodep
+@@ -536,7 +536,7 @@ all: build_sw {- "build_docs" if !$disab
  
+ ##@ Documentation
  build_generated_pods: $(GENERATED_PODS)
--build_docs: build_man_docs build_html_docs
-+build_docs: build_man_docs
- build_man_docs: $(MANDOCS1) $(MANDOCS3) $(MANDOCS5) $(MANDOCS7)
- build_html_docs: $(HTMLDOCS1) $(HTMLDOCS3) $(HTMLDOCS5) $(HTMLDOCS7)
+-build_docs: build_man_docs build_html_docs ## Create documentation
++build_docs: build_man_docs ## Create documentation
+ build_man_docs: $(MANDOCS1) $(MANDOCS3) $(MANDOCS5) $(MANDOCS7) ## Create manpages
+ build_html_docs: $(HTMLDOCS1) $(HTMLDOCS3) $(HTMLDOCS5) $(HTMLDOCS7) ## Create HTML documentation
  
-@@ -611,7 +611,7 @@ install_sw: install_dev install_engines
+@@ -652,7 +652,7 @@ install_sw: install_dev install_engines 
  
- uninstall_sw: uninstall_runtime uninstall_modules uninstall_engines uninstall_dev
+ uninstall_sw: uninstall_runtime uninstall_modules uninstall_engines uninstall_dev ## Uninstall the software and libraries
  
--install_docs: install_man_docs install_html_docs
-+install_docs: install_man_docs
+-install_docs: install_man_docs install_html_docs ## Install manpages and HTML documentation
++install_docs: install_man_docs ## Install manpages and HTML documentation
  
- uninstall_docs: uninstall_man_docs uninstall_html_docs
+ uninstall_docs: uninstall_man_docs uninstall_html_docs ## Uninstall manpages and HTML documentation
        $(RM) -r "$(DESTDIR)$(DOCDIR)"

Index: pkgsrc/security/openssl/patches/patch-util_perl_OpenSSL_config.pm
diff -u pkgsrc/security/openssl/patches/patch-util_perl_OpenSSL_config.pm:1.1 pkgsrc/security/openssl/patches/patch-util_perl_OpenSSL_config.pm:1.2
--- pkgsrc/security/openssl/patches/patch-util_perl_OpenSSL_config.pm:1.1       Wed Dec 27 15:55:58 2023
+++ pkgsrc/security/openssl/patches/patch-util_perl_OpenSSL_config.pm   Tue Apr  9 17:16:45 2024
@@ -1,12 +1,10 @@
-$NetBSD: patch-util_perl_OpenSSL_config.pm,v 1.1 2023/12/27 15:55:58 spz Exp $
+$NetBSD: patch-util_perl_OpenSSL_config.pm,v 1.2 2024/04/09 17:16:45 wiz Exp $
 
 a strategic chomp makes openssl on NetBSD/i386 configure
 
---- ./util/perl/OpenSSL/config.pm.orig 2023-10-24 13:41:51.000000000 +0000
-+++ ./util/perl/OpenSSL/config.pm
-@@ -127,8 +127,9 @@ my $guess_patterns = [
-     # Order is important, this has to appear before 'NetBSD:.*'
-     [ 'NetBSD:.*?:.*?:.*386.*',
+--- util/perl/OpenSSL/config.pm.orig   2024-04-09 12:12:22.000000000 +0000
++++ util/perl/OpenSSL/config.pm
+@@ -130,6 +130,7 @@ my $guess_patterns = [
        sub {
            my $hw = `/usr/sbin/sysctl -n hw.model || /sbin/sysctl -n hw.model`;
            $hw =~  s@.*(.)86-class.*@i${1}86@;



Home | Main Index | Thread Index | Old Index