CVS commit: pkgsrc/security/openssl

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: pkgsrc/security/openssl
From: "Adam Ciarcinski" <adam%netbsd.org@localhost>
Date: Tue, 24 Dec 2024 15:30:30 +0000

Module Name:    pkgsrc
Committed By:   adam
Date:           Tue Dec 24 15:30:30 UTC 2024

Modified Files:
        pkgsrc/security/openssl: Makefile PLIST distinfo

Log Message:
openssl: updated to 3.4.0

OpenSSL 3.4

Major changes between OpenSSL 3.3 and OpenSSL 3.4.0 [22 Oct 2024]

OpenSSL 3.4.0 is a feature release adding significant new functionality to OpenSSL.

This release incorporates the following potentially significant or incompatible changes:

Deprecation of TS_VERIFY_CTX_set_* functions and addition of replacement TS_VERIFY_CTX_set0_* functions with improved semantics

Redesigned use of OPENSSLDIR/ENGINESDIR/MODULESDIR on Windows such that what were formerly build time locations can now be defined at run time with registry keys

The X25519 and X448 key exchange implementation in the FIPS provider is unapproved and has fips=no property.

SHAKE-128 and SHAKE-256 implementations have no default digest length anymore. That means these algorithms cannot be used with EVP_DigestFinal/_ex() unless the xoflen param is set before.

Setting config_diagnostics=1 in the config file will cause errors to be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an error in the ssl module configuration.

An empty renegotiate extension will be used in TLS client hellos instead of the empty renegotiation SCSV, for all connections with a minimum TLS version > 1.0.

Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and SSL_CTX_flush_sessions() functions in favor of their respective _ex functions which are Y2038-safe on platforms with Y2038-safe time_t

This release adds the following new features:

Support for directly fetched composite signature algorithms such as RSA-SHA2-256 including new API functions

FIPS indicators support in the FIPS provider and various updates of the FIPS provider required for future FIPS 140-3 validations

Implementation of RFC 9579 (PBMAC1) in PKCS#12

An optional additional random seed source RNG JITTER using a statically linked jitterentropy library

New options -not_before and -not_after for explicit setting start and end dates of certificates created with the req and x509 apps

Support for integrity-only cipher suites TLS_SHA256_SHA256 and TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150

Support for requesting CRL in CMP

Support for additional X.509v3 extensions related to Attribute Certificates

Initial Attribute Certificate (RFC 5755) support

Possibility to customize ECC groups initialization to use precomputed values to save CPU time and use of this feature by the P-256 implementation


To generate a diff of this commit:
cvs rdiff -u -r1.303 -r1.304 pkgsrc/security/openssl/Makefile
cvs rdiff -u -r1.19 -r1.20 pkgsrc/security/openssl/PLIST
cvs rdiff -u -r1.176 -r1.177 pkgsrc/security/openssl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/openssl/Makefile
diff -u pkgsrc/security/openssl/Makefile:1.303 pkgsrc/security/openssl/Makefile:1.304
--- pkgsrc/security/openssl/Makefile:1.303      Tue Sep 17 11:31:52 2024
+++ pkgsrc/security/openssl/Makefile    Tue Dec 24 15:30:30 2024
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.303 2024/09/17 11:31:52 nia Exp $
+# $NetBSD: Makefile,v 1.304 2024/12/24 15:30:30 adam Exp $
 
 # Remember to upload-distfiles when updating OpenSSL -- otherwise it
 # is not possible for users who have bootstrapped without OpenSSL
 # to install it and enable HTTPS fetching.
-DISTNAME=      openssl-3.3.2
+DISTNAME=      openssl-3.4.0
 CATEGORIES=    security
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=openssl/}
 GITHUB_RELEASE=        ${DISTNAME}
@@ -85,9 +85,9 @@ CONFIGURE_ENV+=               KERNEL_BITS=${ABI}
 OPENSSL_ARCH.aarch64=  arm64
 OPENSSL_ARCH.x86_64=   amd64
 CONFIGURE_ENV+=                MACHINE=${OPENSSL_ARCH.${MACHINE_ARCH}:U${MACHINE_GNU_ARCH}:Q}
-CONFIGURE_ENV+=                RELEASE=${OS_VERSION:Q}
-CONFIGURE_ENV+=                SYSTEM=${OPSYS:Q}
-CONFIGURE_ENV+=                BUILD=${OPSYS:Q}\ ${OS_VERSION:Q}
+CONFIGURE_ENV+=                RELEASE=${OS_VERSION}
+CONFIGURE_ENV+=                SYSTEM=${OPSYS}
+CONFIGURE_ENV+=                BUILD=${OPSYS}\ ${OS_VERSION}
 
 # We don't carry a runtime dependency on Perl, but OpenSSL does provide
 # a Perl script that you can use if you do install Perl.
@@ -97,7 +97,7 @@ SUBST_STAGE.perlcross=                pre-install
 SUBST_FILES.perlcross+=                tools/c_rehash
 SUBST_FILES.perlcross+=                apps/CA.pl
 SUBST_FILES.perlcross+=                apps/tsget.pl
-SUBST_SED.perlcross=           -e s,${PERL5:Q},${LOCALBASE:Q}/bin/perl5,g
+SUBST_SED.perlcross=           -e s,${PERL5:Q},${LOCALBASE}/bin/perl5,g
 CHECK_INTERPRETER_SKIP+=       bin/c_rehash
 
 .endif                         # USE_CROSS_COMPILE

Index: pkgsrc/security/openssl/PLIST
diff -u pkgsrc/security/openssl/PLIST:1.19 pkgsrc/security/openssl/PLIST:1.20
--- pkgsrc/security/openssl/PLIST:1.19  Wed Jun  5 07:47:33 2024
+++ pkgsrc/security/openssl/PLIST       Tue Dec 24 15:30:30 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.19 2024/06/05 07:47:33 adam Exp $
+@comment $NetBSD: PLIST,v 1.20 2024/12/24 15:30:30 adam Exp $
 bin/c_rehash
 bin/openssl
 include/openssl/aes.h
@@ -72,6 +72,7 @@ include/openssl/hpke.h
 include/openssl/http.h
 include/openssl/httperr.h
 include/openssl/idea.h
+include/openssl/indicator.h
 include/openssl/kdf.h
 include/openssl/kdferr.h
 include/openssl/lhash.h
@@ -136,6 +137,7 @@ include/openssl/ui.h
 include/openssl/uierr.h
 include/openssl/whrlpool.h
 include/openssl/x509.h
+include/openssl/x509_acert.h
 include/openssl/x509_vfy.h
 include/openssl/x509err.h
 include/openssl/x509v3.h
@@ -822,6 +824,16 @@ man/man3/BUF_MEM_new_ex.3
 man/man3/BUF_reverse.3
 man/man3/CERTIFICATEPOLICIES_free.3
 man/man3/CERTIFICATEPOLICIES_new.3
+man/man3/CMAC_CTX.3
+man/man3/CMAC_CTX_cleanup.3
+man/man3/CMAC_CTX_copy.3
+man/man3/CMAC_CTX_free.3
+man/man3/CMAC_CTX_get0_cipher_ctx.3
+man/man3/CMAC_CTX_new.3
+man/man3/CMAC_Final.3
+man/man3/CMAC_Init.3
+man/man3/CMAC_Update.3
+man/man3/CMAC_resume.3
 man/man3/CMS_AuthEnvelopedData_create.3
 man/man3/CMS_AuthEnvelopedData_create_ex.3
 man/man3/CMS_ContentInfo_free.3
@@ -949,11 +961,15 @@ man/man3/CRYPTO_THREAD_read_lock.3
 man/man3/CRYPTO_THREAD_run_once.3
 man/man3/CRYPTO_THREAD_unlock.3
 man/man3/CRYPTO_THREAD_write_lock.3
+man/man3/CRYPTO_aligned_alloc.3
 man/man3/CRYPTO_alloc_ex_data.3
 man/man3/CRYPTO_atomic_add.3
+man/man3/CRYPTO_atomic_add64.3
+man/man3/CRYPTO_atomic_and.3
 man/man3/CRYPTO_atomic_load.3
 man/man3/CRYPTO_atomic_load_int.3
 man/man3/CRYPTO_atomic_or.3
+man/man3/CRYPTO_atomic_store.3
 man/man3/CRYPTO_clear_free.3
 man/man3/CRYPTO_clear_realloc.3
 man/man3/CRYPTO_free.3
@@ -1123,6 +1139,7 @@ man/man3/DIRECTORYSTRING_free.3
 man/man3/DIRECTORYSTRING_new.3
 man/man3/DISPLAYTEXT_free.3
 man/man3/DISPLAYTEXT_new.3
+man/man3/DIST_POINT_NAME_dup.3
 man/man3/DIST_POINT_NAME_free.3
 man/man3/DIST_POINT_NAME_new.3
 man/man3/DIST_POINT_free.3
@@ -1553,6 +1570,8 @@ man/man3/EVP_CIPHER_CTX_free.3
 man/man3/EVP_CIPHER_CTX_get0_cipher.3
 man/man3/EVP_CIPHER_CTX_get0_name.3
 man/man3/EVP_CIPHER_CTX_get1_cipher.3
+man/man3/EVP_CIPHER_CTX_get_algor.3
+man/man3/EVP_CIPHER_CTX_get_algor_params.3
 man/man3/EVP_CIPHER_CTX_get_app_data.3
 man/man3/EVP_CIPHER_CTX_get_block_size.3
 man/man3/EVP_CIPHER_CTX_get_cipher_data.3
@@ -1578,6 +1597,7 @@ man/man3/EVP_CIPHER_CTX_nid.3
 man/man3/EVP_CIPHER_CTX_num.3
 man/man3/EVP_CIPHER_CTX_original_iv.3
 man/man3/EVP_CIPHER_CTX_reset.3
+man/man3/EVP_CIPHER_CTX_set_algor_params.3
 man/man3/EVP_CIPHER_CTX_set_app_data.3
 man/man3/EVP_CIPHER_CTX_set_cipher_data.3
 man/man3/EVP_CIPHER_CTX_set_flags.3
@@ -1740,6 +1760,7 @@ man/man3/EVP_KEYMGMT.3
 man/man3/EVP_KEYMGMT_do_all_provided.3
 man/man3/EVP_KEYMGMT_fetch.3
 man/man3/EVP_KEYMGMT_free.3
+man/man3/EVP_KEYMGMT_gen_gettable_params.3
 man/man3/EVP_KEYMGMT_gen_settable_params.3
 man/man3/EVP_KEYMGMT_get0_description.3
 man/man3/EVP_KEYMGMT_get0_name.3
@@ -1793,6 +1814,7 @@ man/man3/EVP_MD_CTX_get_block_size.3
 man/man3/EVP_MD_CTX_get_params.3
 man/man3/EVP_MD_CTX_get_pkey_ctx.3
 man/man3/EVP_MD_CTX_get_size.3
+man/man3/EVP_MD_CTX_get_size_ex.3
 man/man3/EVP_MD_CTX_get_type.3
 man/man3/EVP_MD_CTX_gettable_params.3
 man/man3/EVP_MD_CTX_md.3
@@ -1857,6 +1879,7 @@ man/man3/EVP_MD_settable_ctx_params.3
 man/man3/EVP_MD_size.3
 man/man3/EVP_MD_type.3
 man/man3/EVP_MD_up_ref.3
+man/man3/EVP_MD_xof.3
 man/man3/EVP_OpenFinal.3
 man/man3/EVP_OpenInit.3
 man/man3/EVP_OpenUpdate.3
@@ -1891,6 +1914,8 @@ man/man3/EVP_PKEY_CTX_get0_provider.3
 man/man3/EVP_PKEY_CTX_get0_rsa_oaep_label.3
 man/man3/EVP_PKEY_CTX_get1_id.3
 man/man3/EVP_PKEY_CTX_get1_id_len.3
+man/man3/EVP_PKEY_CTX_get_algor.3
+man/man3/EVP_PKEY_CTX_get_algor_params.3
 man/man3/EVP_PKEY_CTX_get_app_data.3
 man/man3/EVP_PKEY_CTX_get_cb.3
 man/man3/EVP_PKEY_CTX_get_dh_kdf_md.3
@@ -1928,6 +1953,7 @@ man/man3/EVP_PKEY_CTX_set1_pbe_pass.3
 man/man3/EVP_PKEY_CTX_set1_rsa_keygen_pubexp.3
 man/man3/EVP_PKEY_CTX_set1_scrypt_salt.3
 man/man3/EVP_PKEY_CTX_set1_tls1_prf_secret.3
+man/man3/EVP_PKEY_CTX_set_algor_params.3
 man/man3/EVP_PKEY_CTX_set_app_data.3
 man/man3/EVP_PKEY_CTX_set_cb.3
 man/man3/EVP_PKEY_CTX_set_dh_kdf_md.3
@@ -1980,6 +2006,7 @@ man/man3/EVP_PKEY_CTX_set_scrypt_N.3
 man/man3/EVP_PKEY_CTX_set_scrypt_maxmem_bytes.3
 man/man3/EVP_PKEY_CTX_set_scrypt_p.3
 man/man3/EVP_PKEY_CTX_set_scrypt_r.3
+man/man3/EVP_PKEY_CTX_set_signature.3
 man/man3/EVP_PKEY_CTX_set_signature_md.3
 man/man3/EVP_PKEY_CTX_set_tls1_prf_md.3
 man/man3/EVP_PKEY_CTX_settable_params.3
@@ -2197,6 +2224,10 @@ man/man3/EVP_PKEY_settable_params.3
 man/man3/EVP_PKEY_sign.3
 man/man3/EVP_PKEY_sign_init.3
 man/man3/EVP_PKEY_sign_init_ex.3
+man/man3/EVP_PKEY_sign_init_ex2.3
+man/man3/EVP_PKEY_sign_message_final.3
+man/man3/EVP_PKEY_sign_message_init.3
+man/man3/EVP_PKEY_sign_message_update.3
 man/man3/EVP_PKEY_size.3
 man/man3/EVP_PKEY_todata.3
 man/man3/EVP_PKEY_type.3
@@ -2205,9 +2236,14 @@ man/man3/EVP_PKEY_up_ref.3
 man/man3/EVP_PKEY_verify.3
 man/man3/EVP_PKEY_verify_init.3
 man/man3/EVP_PKEY_verify_init_ex.3
+man/man3/EVP_PKEY_verify_init_ex2.3
+man/man3/EVP_PKEY_verify_message_final.3
+man/man3/EVP_PKEY_verify_message_init.3
+man/man3/EVP_PKEY_verify_message_update.3
 man/man3/EVP_PKEY_verify_recover.3
 man/man3/EVP_PKEY_verify_recover_init.3
 man/man3/EVP_PKEY_verify_recover_init_ex.3
+man/man3/EVP_PKEY_verify_recover_init_ex2.3
 man/man3/EVP_Q_digest.3
 man/man3/EVP_Q_mac.3
 man/man3/EVP_RAND.3
@@ -2474,11 +2510,13 @@ man/man3/EVP_whirlpool.3
 man/man3/EXTENDED_KEY_USAGE_free.3
 man/man3/EXTENDED_KEY_USAGE_new.3
 man/man3/EXT_UTF8STRING.3
+man/man3/GENERAL_NAME.3
 man/man3/GENERAL_NAMES_free.3
 man/man3/GENERAL_NAMES_new.3
 man/man3/GENERAL_NAME_dup.3
 man/man3/GENERAL_NAME_free.3
 man/man3/GENERAL_NAME_new.3
+man/man3/GENERAL_NAME_set1_X509_NAME.3
 man/man3/GENERAL_SUBTREE_free.3
 man/man3/GENERAL_SUBTREE_new.3
 man/man3/GEN_SESSION_CB.3
@@ -2698,6 +2736,7 @@ man/man3/OPENSSL_VERSION_PATCH.3
 man/man3/OPENSSL_VERSION_PREREQ.3
 man/man3/OPENSSL_VERSION_PRE_RELEASE.3
 man/man3/OPENSSL_VERSION_TEXT.3
+man/man3/OPENSSL_aligned_alloc.3
 man/man3/OPENSSL_atexit.3
 man/man3/OPENSSL_buf2hexstr.3
 man/man3/OPENSSL_buf2hexstr_ex.3
@@ -2731,6 +2770,7 @@ man/man3/OPENSSL_mem_debug_push.3
 man/man3/OPENSSL_memdup.3
 man/man3/OPENSSL_no_config.3
 man/man3/OPENSSL_realloc.3
+man/man3/OPENSSL_riscvcap.3
 man/man3/OPENSSL_s390xcap.3
 man/man3/OPENSSL_secure_actual_size.3
 man/man3/OPENSSL_secure_clear_free.3
@@ -2768,6 +2808,7 @@ man/man3/OPENSSL_strlcat.3
 man/man3/OPENSSL_strlcpy.3
 man/man3/OPENSSL_strncasecmp.3
 man/man3/OPENSSL_strndup.3
+man/man3/OPENSSL_strtoul.3
 man/man3/OPENSSL_thread_stop.3
 man/man3/OPENSSL_thread_stop_ex.3
 man/man3/OPENSSL_version_build_metadata.3
@@ -2777,8 +2818,33 @@ man/man3/OPENSSL_version_patch.3
 man/man3/OPENSSL_version_pre_release.3
 man/man3/OPENSSL_zalloc.3
 man/man3/OSSL_ALGORITHM.3
+man/man3/OSSL_ATTRIBUTES_SYNTAX_free.3
+man/man3/OSSL_ATTRIBUTES_SYNTAX_it.3
+man/man3/OSSL_ATTRIBUTES_SYNTAX_new.3
+man/man3/OSSL_BASIC_ATTR_CONSTRAINTS_free.3
+man/man3/OSSL_BASIC_ATTR_CONSTRAINTS_it.3
+man/man3/OSSL_BASIC_ATTR_CONSTRAINTS_new.3
 man/man3/OSSL_CALLBACK.3
+man/man3/OSSL_CMP_ATAV.3
+man/man3/OSSL_CMP_ATAVS.3
+man/man3/OSSL_CMP_ATAVS_free.3
+man/man3/OSSL_CMP_ATAVS_it.3
+man/man3/OSSL_CMP_ATAVS_new.3
+man/man3/OSSL_CMP_ATAV_create.3
+man/man3/OSSL_CMP_ATAV_free.3
+man/man3/OSSL_CMP_ATAV_get0_algId.3
+man/man3/OSSL_CMP_ATAV_get0_type.3
+man/man3/OSSL_CMP_ATAV_get0_value.3
+man/man3/OSSL_CMP_ATAV_get_rsaKeyLen.3
+man/man3/OSSL_CMP_ATAV_new_algId.3
+man/man3/OSSL_CMP_ATAV_new_rsaKeyLen.3
+man/man3/OSSL_CMP_ATAV_push1.3
+man/man3/OSSL_CMP_ATAV_set0.3
 man/man3/OSSL_CMP_CR.3
+man/man3/OSSL_CMP_CRLSTATUS_create.3
+man/man3/OSSL_CMP_CRLSTATUS_free.3
+man/man3/OSSL_CMP_CRLSTATUS_get0.3
+man/man3/OSSL_CMP_CRLSTATUS_new1.3
 man/man3/OSSL_CMP_CTX_build_cert_chain.3
 man/man3/OSSL_CMP_CTX_free.3
 man/man3/OSSL_CMP_CTX_get0_geninfo_ITAVs.3
@@ -2855,12 +2921,18 @@ man/man3/OSSL_CMP_ITAV_dup.3
 man/man3/OSSL_CMP_ITAV_free.3
 man/man3/OSSL_CMP_ITAV_get0_caCerts.3
 man/man3/OSSL_CMP_ITAV_get0_certProfile.3
+man/man3/OSSL_CMP_ITAV_get0_crlStatusList.3
+man/man3/OSSL_CMP_ITAV_get0_crls.3
 man/man3/OSSL_CMP_ITAV_get0_rootCaCert.3
 man/man3/OSSL_CMP_ITAV_get0_rootCaKeyUpdate.3
 man/man3/OSSL_CMP_ITAV_get0_type.3
 man/man3/OSSL_CMP_ITAV_get0_value.3
+man/man3/OSSL_CMP_ITAV_get1_certReqTemplate.3
 man/man3/OSSL_CMP_ITAV_new0_certProfile.3
+man/man3/OSSL_CMP_ITAV_new0_certReqTemplate.3
+man/man3/OSSL_CMP_ITAV_new0_crlStatusList.3
 man/man3/OSSL_CMP_ITAV_new_caCerts.3
+man/man3/OSSL_CMP_ITAV_new_crls.3
 man/man3/OSSL_CMP_ITAV_new_rootCaCert.3
 man/man3/OSSL_CMP_ITAV_new_rootCaKeyUpdate.3
 man/man3/OSSL_CMP_ITAV_push0_stack_item.3
@@ -2925,6 +2997,8 @@ man/man3/OSSL_CMP_exec_P10CR_ses.3
 man/man3/OSSL_CMP_exec_RR_ses.3
 man/man3/OSSL_CMP_exec_certreq.3
 man/man3/OSSL_CMP_get1_caCerts.3
+man/man3/OSSL_CMP_get1_certReqTemplate.3
+man/man3/OSSL_CMP_get1_crlUpdate.3
 man/man3/OSSL_CMP_get1_rootCaKeyUpdate.3
 man/man3/OSSL_CMP_log_cb_t.3
 man/man3/OSSL_CMP_log_close.3
@@ -2938,6 +3012,8 @@ man/man3/OSSL_CMP_try_certreq.3
 man/man3/OSSL_CMP_validate_cert_path.3
 man/man3/OSSL_CMP_validate_msg.3
 man/man3/OSSL_CORE_MAKE_FUNC.3
+man/man3/OSSL_CRMF_ATTRIBUTETYPEANDVALUE_dup.3
+man/man3/OSSL_CRMF_ATTRIBUTETYPEANDVALUE_free.3
 man/man3/OSSL_CRMF_CERTID_dup.3
 man/man3/OSSL_CRMF_CERTID_free.3
 man/man3/OSSL_CRMF_CERTID_gen.3
@@ -2945,6 +3021,7 @@ man/man3/OSSL_CRMF_CERTID_get0_issuer.3
 man/man3/OSSL_CRMF_CERTID_get0_serialNumber.3
 man/man3/OSSL_CRMF_CERTID_it.3
 man/man3/OSSL_CRMF_CERTID_new.3
+man/man3/OSSL_CRMF_CERTTEMPLATE_dup.3
 man/man3/OSSL_CRMF_CERTTEMPLATE_fill.3
 man/man3/OSSL_CRMF_CERTTEMPLATE_free.3
 man/man3/OSSL_CRMF_CERTTEMPLATE_get0_extensions.3
@@ -3101,6 +3178,7 @@ man/man3/OSSL_ERR_STATE_save_to_mark.3
 man/man3/OSSL_ESS_check_signing_certs.3
 man/man3/OSSL_ESS_signing_cert_new_init.3
 man/man3/OSSL_ESS_signing_cert_v2_new_init.3
+man/man3/OSSL_GENERAL_NAMES_print.3
 man/man3/OSSL_HPKE_CTX_free.3
 man/man3/OSSL_HPKE_CTX_get_seq.3
 man/man3/OSSL_HPKE_CTX_new.3
@@ -3146,15 +3224,45 @@ man/man3/OSSL_HTTP_parse_url.3
 man/man3/OSSL_HTTP_proxy_connect.3
 man/man3/OSSL_HTTP_set1_request.3
 man/man3/OSSL_HTTP_transfer.3
+man/man3/OSSL_IETF_ATTR_SYNTAX.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_VALUE_free.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_VALUE_it.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_VALUE_new.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_add1_value.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_free.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_get0_policyAuthority.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_get0_value.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_get_value_num.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_it.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_new.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_print.3
+man/man3/OSSL_IETF_ATTR_SYNTAX_set0_policyAuthority.3
+man/man3/OSSL_INDICATOR_get_callback.3
+man/man3/OSSL_INDICATOR_set_callback.3
+man/man3/OSSL_ISSUER_SERIAL_free.3
+man/man3/OSSL_ISSUER_SERIAL_get0_issuer.3
+man/man3/OSSL_ISSUER_SERIAL_get0_issuerUID.3
+man/man3/OSSL_ISSUER_SERIAL_get0_serial.3
+man/man3/OSSL_ISSUER_SERIAL_new.3
+man/man3/OSSL_ISSUER_SERIAL_set1_issuer.3
+man/man3/OSSL_ISSUER_SERIAL_set1_issuerUID.3
+man/man3/OSSL_ISSUER_SERIAL_set1_serial.3
 man/man3/OSSL_ITEM.3
 man/man3/OSSL_LIB_CTX.3
 man/man3/OSSL_LIB_CTX_free.3
 man/man3/OSSL_LIB_CTX_get0_global_default.3
+man/man3/OSSL_LIB_CTX_get_conf_diagnostics.3
+man/man3/OSSL_LIB_CTX_get_data.3
 man/man3/OSSL_LIB_CTX_load_config.3
 man/man3/OSSL_LIB_CTX_new.3
 man/man3/OSSL_LIB_CTX_new_child.3
 man/man3/OSSL_LIB_CTX_new_from_dispatch.3
 man/man3/OSSL_LIB_CTX_set0_default.3
+man/man3/OSSL_LIB_CTX_set_conf_diagnostics.3
+man/man3/OSSL_OBJECT_DIGEST_INFO_free.3
+man/man3/OSSL_OBJECT_DIGEST_INFO_get0_digest.3
+man/man3/OSSL_OBJECT_DIGEST_INFO_new.3
+man/man3/OSSL_OBJECT_DIGEST_INFO_set1_digest.3
 man/man3/OSSL_PARAM.3
 man/man3/OSSL_PARAM_BLD.3
 man/man3/OSSL_PARAM_BLD_free.3
@@ -3396,6 +3504,18 @@ man/man3/OSSL_STORE_post_process_info_fn
 man/man3/OSSL_STORE_register_loader.3
 man/man3/OSSL_STORE_supports_search.3
 man/man3/OSSL_STORE_unregister_loader.3
+man/man3/OSSL_TARGETING_INFORMATION_free.3
+man/man3/OSSL_TARGETING_INFORMATION_it.3
+man/man3/OSSL_TARGETING_INFORMATION_new.3
+man/man3/OSSL_TARGETS_free.3
+man/man3/OSSL_TARGETS_it.3
+man/man3/OSSL_TARGETS_new.3
+man/man3/OSSL_TARGET_CERT_free.3
+man/man3/OSSL_TARGET_CERT_it.3
+man/man3/OSSL_TARGET_CERT_new.3
+man/man3/OSSL_TARGET_free.3
+man/man3/OSSL_TARGET_it.3
+man/man3/OSSL_TARGET_new.3
 man/man3/OSSL_THREAD_SUPPORT_FLAG_DEFAULT_SPAWN.3
 man/man3/OSSL_THREAD_SUPPORT_FLAG_THREAD_POOL.3
 man/man3/OSSL_TRACE.3
@@ -3415,6 +3535,9 @@ man/man3/OSSL_TRACE_ENABLED.3
 man/man3/OSSL_TRACE_END.3
 man/man3/OSSL_TRACE_STRING.3
 man/man3/OSSL_TRACE_STRING_MAX.3
+man/man3/OSSL_USER_NOTICE_SYNTAX_free.3
+man/man3/OSSL_USER_NOTICE_SYNTAX_it.3
+man/man3/OSSL_USER_NOTICE_SYNTAX_new.3
 man/man3/OSSL_default_cipher_list.3
 man/man3/OSSL_default_ciphersuites.3
 man/man3/OSSL_get_max_threads.3
@@ -3447,6 +3570,10 @@ man/man3/PBEPARAM_free.3
 man/man3/PBEPARAM_new.3
 man/man3/PBKDF2PARAM_free.3
 man/man3/PBKDF2PARAM_new.3
+man/man3/PBMAC1PARAM_free.3
+man/man3/PBMAC1PARAM_it.3
+man/man3/PBMAC1PARAM_new.3
+man/man3/PBMAC1_get1_pbkdf2_param.3
 man/man3/PEM_FLAG_EAY_COMPATIBLE.3
 man/man3/PEM_FLAG_ONLY_B64.3
 man/man3/PEM_FLAG_SECURE.3
@@ -3480,6 +3607,7 @@ man/man3/PEM_read_RSAPublicKey.3
 man/man3/PEM_read_RSA_PUBKEY.3
 man/man3/PEM_read_SSL_SESSION.3
 man/man3/PEM_read_X509.3
+man/man3/PEM_read_X509_ACERT.3
 man/man3/PEM_read_X509_AUX.3
 man/man3/PEM_read_X509_CRL.3
 man/man3/PEM_read_X509_PUBKEY.3
@@ -3507,6 +3635,7 @@ man/man3/PEM_read_bio_RSAPublicKey.3
 man/man3/PEM_read_bio_RSA_PUBKEY.3
 man/man3/PEM_read_bio_SSL_SESSION.3
 man/man3/PEM_read_bio_X509.3
+man/man3/PEM_read_bio_X509_ACERT.3
 man/man3/PEM_read_bio_X509_AUX.3
 man/man3/PEM_read_bio_X509_CRL.3
 man/man3/PEM_read_bio_X509_PUBKEY.3
@@ -3537,6 +3666,7 @@ man/man3/PEM_write_RSAPublicKey.3
 man/man3/PEM_write_RSA_PUBKEY.3
 man/man3/PEM_write_SSL_SESSION.3
 man/man3/PEM_write_X509.3
+man/man3/PEM_write_X509_ACERT.3
 man/man3/PEM_write_X509_AUX.3
 man/man3/PEM_write_X509_CRL.3
 man/man3/PEM_write_X509_PUBKEY.3
@@ -3571,6 +3701,7 @@ man/man3/PEM_write_bio_RSAPublicKey.3
 man/man3/PEM_write_bio_RSA_PUBKEY.3
 man/man3/PEM_write_bio_SSL_SESSION.3
 man/man3/PEM_write_bio_X509.3
+man/man3/PEM_write_bio_X509_ACERT.3
 man/man3/PEM_write_bio_X509_AUX.3
 man/man3/PEM_write_bio_X509_CRL.3
 man/man3/PEM_write_bio_X509_PUBKEY.3
@@ -3629,6 +3760,7 @@ man/man3/PKCS12_decrypt_skey.3
 man/man3/PKCS12_decrypt_skey_ex.3
 man/man3/PKCS12_free.3
 man/man3/PKCS12_gen_mac.3
+man/man3/PKCS12_get0_mac.3
 man/man3/PKCS12_get_attr_gen.3
 man/man3/PKCS12_get_friendlyname.3
 man/man3/PKCS12_init.3
@@ -3651,6 +3783,7 @@ man/man3/PKCS12_parse.3
 man/man3/PKCS12_pbe_crypt.3
 man/man3/PKCS12_pbe_crypt_ex.3
 man/man3/PKCS12_set_mac.3
+man/man3/PKCS12_set_pbmac1_pbkdf2.3
 man/man3/PKCS12_setup_mac.3
 man/man3/PKCS12_verify_mac.3
 man/man3/PKCS5_PBE_keyivgen.3
@@ -4041,6 +4174,7 @@ man/man3/SSL_CTX_decrypt_session_ticket_
 man/man3/SSL_CTX_disable_ct.3
 man/man3/SSL_CTX_enable_ct.3
 man/man3/SSL_CTX_flush_sessions.3
+man/man3/SSL_CTX_flush_sessions_ex.3
 man/man3/SSL_CTX_free.3
 man/man3/SSL_CTX_generate_session_ticket_fn.3
 man/man3/SSL_CTX_get0_CA_list.3
@@ -4149,6 +4283,7 @@ man/man3/SSL_CTX_set_app_data.3
 man/man3/SSL_CTX_set_async_callback.3
 man/man3/SSL_CTX_set_async_callback_arg.3
 man/man3/SSL_CTX_set_block_padding.3
+man/man3/SSL_CTX_set_block_padding_ex.3
 man/man3/SSL_CTX_set_cert_cb.3
 man/man3/SSL_CTX_set_cert_store.3
 man/man3/SSL_CTX_set_cert_verify_callback.3
@@ -4434,6 +4569,7 @@ man/man3/SSL_get0_server_cert_type.3
 man/man3/SSL_get0_session.3
 man/man3/SSL_get0_verified_chain.3
 man/man3/SSL_get0_verify_cert_store.3
+man/man3/SSL_get1_builtin_sigalgs.3
 man/man3/SSL_get1_compressed_cert.3
 man/man3/SSL_get1_curves.3
 man/man3/SSL_get1_groups.3
@@ -4635,6 +4771,7 @@ man/man3/SSL_set_async_callback.3
 man/man3/SSL_set_async_callback_arg.3
 man/man3/SSL_set_bio.3
 man/man3/SSL_set_block_padding.3
+man/man3/SSL_set_block_padding_ex.3
 man/man3/SSL_set_blocking_mode.3
 man/man3/SSL_set_cert_cb.3
 man/man3/SSL_set_cipher_list.3
@@ -4792,7 +4929,21 @@ man/man3/TS_TST_INFO_dup.3
 man/man3/TS_TST_INFO_free.3
 man/man3/TS_TST_INFO_new.3
 man/man3/TS_VERIFY_CTS_set_certs.3
+man/man3/TS_VERIFY_CTX.3
+man/man3/TS_VERIFY_CTX_add_flags.3
+man/man3/TS_VERIFY_CTX_cleanup.3
+man/man3/TS_VERIFY_CTX_free.3
+man/man3/TS_VERIFY_CTX_init.3
+man/man3/TS_VERIFY_CTX_new.3
+man/man3/TS_VERIFY_CTX_set0_certs.3
+man/man3/TS_VERIFY_CTX_set0_data.3
+man/man3/TS_VERIFY_CTX_set0_imprint.3
+man/man3/TS_VERIFY_CTX_set0_store.3
 man/man3/TS_VERIFY_CTX_set_certs.3
+man/man3/TS_VERIFY_CTX_set_data.3
+man/man3/TS_VERIFY_CTX_set_flags.3
+man/man3/TS_VERIFY_CTX_set_imprint.3
+man/man3/TS_VERIFY_CTX_set_store.3
 man/man3/UI.3
 man/man3/UI_METHOD.3
 man/man3/UI_OpenSSL.3
@@ -4870,6 +5021,53 @@ man/man3/X509V3_add1_i2d.3
 man/man3/X509V3_get_d2i.3
 man/man3/X509V3_set_ctx.3
 man/man3/X509V3_set_issuer_pkey.3
+man/man3/X509_ACERT_INFO_free.3
+man/man3/X509_ACERT_INFO_it.3
+man/man3/X509_ACERT_INFO_new.3
+man/man3/X509_ACERT_ISSUER_V2FORM_free.3
+man/man3/X509_ACERT_ISSUER_V2FORM_new.3
+man/man3/X509_ACERT_add1_attr.3
+man/man3/X509_ACERT_add1_attr_by_NID.3
+man/man3/X509_ACERT_add1_attr_by_OBJ.3
+man/man3/X509_ACERT_add1_attr_by_txt.3
+man/man3/X509_ACERT_add1_ext_i2d.3
+man/man3/X509_ACERT_add_attr_nconf.3
+man/man3/X509_ACERT_delete_attr.3
+man/man3/X509_ACERT_dup.3
+man/man3/X509_ACERT_free.3
+man/man3/X509_ACERT_get0_extensions.3
+man/man3/X509_ACERT_get0_holder_baseCertId.3
+man/man3/X509_ACERT_get0_holder_digest.3
+man/man3/X509_ACERT_get0_holder_entityName.3
+man/man3/X509_ACERT_get0_info_sigalg.3
+man/man3/X509_ACERT_get0_issuerName.3
+man/man3/X509_ACERT_get0_issuerUID.3
+man/man3/X509_ACERT_get0_notAfter.3
+man/man3/X509_ACERT_get0_notBefore.3
+man/man3/X509_ACERT_get0_serialNumber.3
+man/man3/X509_ACERT_get0_signature.3
+man/man3/X509_ACERT_get_attr.3
+man/man3/X509_ACERT_get_attr_by_NID.3
+man/man3/X509_ACERT_get_attr_by_OBJ.3
+man/man3/X509_ACERT_get_attr_count.3
+man/man3/X509_ACERT_get_ext_d2i.3
+man/man3/X509_ACERT_get_signature_nid.3
+man/man3/X509_ACERT_get_version.3
+man/man3/X509_ACERT_it.3
+man/man3/X509_ACERT_new.3
+man/man3/X509_ACERT_print.3
+man/man3/X509_ACERT_print_ex.3
+man/man3/X509_ACERT_set0_holder_baseCertId.3
+man/man3/X509_ACERT_set0_holder_digest.3
+man/man3/X509_ACERT_set0_holder_entityName.3
+man/man3/X509_ACERT_set1_issuerName.3
+man/man3/X509_ACERT_set1_notAfter.3
+man/man3/X509_ACERT_set1_notBefore.3
+man/man3/X509_ACERT_set1_serialNumber.3
+man/man3/X509_ACERT_set_version.3
+man/man3/X509_ACERT_sign.3
+man/man3/X509_ACERT_sign_ctx.3
+man/man3/X509_ACERT_verify.3
 man/man3/X509_ALGOR_cmp.3
 man/man3/X509_ALGOR_copy.3
 man/man3/X509_ALGOR_dup.3
@@ -5368,6 +5566,7 @@ man/man3/X509at_get_attr_by_NID.3
 man/man3/X509at_get_attr_by_OBJ.3
 man/man3/X509at_get_attr_count.3
 man/man3/X509v3_add_ext.3
+man/man3/X509v3_add_extensions.3
 man/man3/X509v3_delete_ext.3
 man/man3/X509v3_get_ext.3
 man/man3/X509v3_get_ext_by_NID.3
@@ -5481,6 +5680,9 @@ man/man3/d2i_OCSP_REVOKEDINFO.3
 man/man3/d2i_OCSP_SERVICELOC.3
 man/man3/d2i_OCSP_SIGNATURE.3
 man/man3/d2i_OCSP_SINGLERESP.3
+man/man3/d2i_OSSL_ATTRIBUTES_SYNTAX.3
+man/man3/d2i_OSSL_BASIC_ATTR_CONSTRAINTS.3
+man/man3/d2i_OSSL_CMP_ATAVS.3
 man/man3/d2i_OSSL_CMP_MSG.3
 man/man3/d2i_OSSL_CMP_MSG_bio.3
 man/man3/d2i_OSSL_CMP_PKIHEADER.3
@@ -5493,10 +5695,19 @@ man/man3/d2i_OSSL_CRMF_MSGS.3
 man/man3/d2i_OSSL_CRMF_PBMPARAMETER.3
 man/man3/d2i_OSSL_CRMF_PKIPUBLICATIONINFO.3
 man/man3/d2i_OSSL_CRMF_SINGLEPUBINFO.3
+man/man3/d2i_OSSL_IETF_ATTR_SYNTAX.3
+man/man3/d2i_OSSL_ISSUER_SERIAL.3
+man/man3/d2i_OSSL_OBJECT_DIGEST_INFO.3
+man/man3/d2i_OSSL_TARGET.3
+man/man3/d2i_OSSL_TARGETING_INFORMATION.3
+man/man3/d2i_OSSL_TARGETS.3
+man/man3/d2i_OSSL_TARGET_CERT.3
+man/man3/d2i_OSSL_USER_NOTICE_SYNTAX.3
 man/man3/d2i_OTHERNAME.3
 man/man3/d2i_PBE2PARAM.3
 man/man3/d2i_PBEPARAM.3
 man/man3/d2i_PBKDF2PARAM.3
+man/man3/d2i_PBMAC1PARAM.3
 man/man3/d2i_PKCS12.3
 man/man3/d2i_PKCS12_BAGS.3
 man/man3/d2i_PKCS12_MAC_DATA.3
@@ -5574,6 +5785,9 @@ man/man3/d2i_TS_TST_INFO_bio.3
 man/man3/d2i_TS_TST_INFO_fp.3
 man/man3/d2i_USERNOTICE.3
 man/man3/d2i_X509.3
+man/man3/d2i_X509_ACERT.3
+man/man3/d2i_X509_ACERT_bio.3
+man/man3/d2i_X509_ACERT_fp.3
 man/man3/d2i_X509_ALGOR.3
 man/man3/d2i_X509_ALGORS.3
 man/man3/d2i_X509_ATTRIBUTE.3
@@ -5703,6 +5917,9 @@ man/man3/i2d_OCSP_REVOKEDINFO.3
 man/man3/i2d_OCSP_SERVICELOC.3
 man/man3/i2d_OCSP_SIGNATURE.3
 man/man3/i2d_OCSP_SINGLERESP.3
+man/man3/i2d_OSSL_ATTRIBUTES_SYNTAX.3
+man/man3/i2d_OSSL_BASIC_ATTR_CONSTRAINTS.3
+man/man3/i2d_OSSL_CMP_ATAVS.3
 man/man3/i2d_OSSL_CMP_MSG.3
 man/man3/i2d_OSSL_CMP_MSG_bio.3
 man/man3/i2d_OSSL_CMP_PKIHEADER.3
@@ -5715,10 +5932,19 @@ man/man3/i2d_OSSL_CRMF_MSGS.3
 man/man3/i2d_OSSL_CRMF_PBMPARAMETER.3
 man/man3/i2d_OSSL_CRMF_PKIPUBLICATIONINFO.3
 man/man3/i2d_OSSL_CRMF_SINGLEPUBINFO.3
+man/man3/i2d_OSSL_IETF_ATTR_SYNTAX.3
+man/man3/i2d_OSSL_ISSUER_SERIAL.3
+man/man3/i2d_OSSL_OBJECT_DIGEST_INFO.3
+man/man3/i2d_OSSL_TARGET.3
+man/man3/i2d_OSSL_TARGETING_INFORMATION.3
+man/man3/i2d_OSSL_TARGETS.3
+man/man3/i2d_OSSL_TARGET_CERT.3
+man/man3/i2d_OSSL_USER_NOTICE_SYNTAX.3
 man/man3/i2d_OTHERNAME.3
 man/man3/i2d_PBE2PARAM.3
 man/man3/i2d_PBEPARAM.3
 man/man3/i2d_PBKDF2PARAM.3
+man/man3/i2d_PBMAC1PARAM.3
 man/man3/i2d_PKCS12.3
 man/man3/i2d_PKCS12_BAGS.3
 man/man3/i2d_PKCS12_MAC_DATA.3
@@ -5795,6 +6021,9 @@ man/man3/i2d_TS_TST_INFO_bio.3
 man/man3/i2d_TS_TST_INFO_fp.3
 man/man3/i2d_USERNOTICE.3
 man/man3/i2d_X509.3
+man/man3/i2d_X509_ACERT.3
+man/man3/i2d_X509_ACERT_bio.3
+man/man3/i2d_X509_ACERT_fp.3
 man/man3/i2d_X509_ALGOR.3
 man/man3/i2d_X509_ALGORS.3
 man/man3/i2d_X509_ATTRIBUTE.3
@@ -5980,9 +6209,11 @@ man/man7/EVP_PKEY-SM2.7
 man/man7/EVP_PKEY-Siphash.7
 man/man7/EVP_PKEY-X25519.7
 man/man7/EVP_PKEY-X448.7
+man/man7/EVP_RAND-CRNG-TEST.7
 man/man7/EVP_RAND-CTR-DRBG.7
 man/man7/EVP_RAND-HASH-DRBG.7
 man/man7/EVP_RAND-HMAC-DRBG.7
+man/man7/EVP_RAND-JITTER.7
 man/man7/EVP_RAND-SEED-SRC.7
 man/man7/EVP_RAND-TEST-RAND.7
 man/man7/EVP_RAND.7
@@ -6045,6 +6276,7 @@ man/man7/ossl-guide-quic-multi-stream.7
 man/man7/ossl-guide-tls-client-block.7
 man/man7/ossl-guide-tls-client-non-block.7
 man/man7/ossl-guide-tls-introduction.7
+man/man7/ossl-guide-tls-server-block.7
 man/man7/ossl_store-file.7
 man/man7/ossl_store.7
 man/man7/passphrase-encoding.7

Index: pkgsrc/security/openssl/distinfo
diff -u pkgsrc/security/openssl/distinfo:1.176 pkgsrc/security/openssl/distinfo:1.177
--- pkgsrc/security/openssl/distinfo:1.176      Fri Sep  6 13:47:09 2024
+++ pkgsrc/security/openssl/distinfo    Tue Dec 24 15:30:30 2024
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.176 2024/09/06 13:47:09 adam Exp $
+$NetBSD: distinfo,v 1.177 2024/12/24 15:30:30 adam Exp $
 
-BLAKE2s (openssl-3.3.2.tar.gz) = 6e65cfafc1733835fde3632ba608ef329cc5bda70454d8c9f5e4788a6d9b8ea9
-SHA512 (openssl-3.3.2.tar.gz) = 5ae47bf1aed2740a33ba5df7dc7345a6738aa6bfa3c9c4de5e51742485e24b25192988d7a2c1b8201ef70056ad8abd0ca78b3d55abe24c0b0373d83b47ed9b74
-Size (openssl-3.3.2.tar.gz) = 18076531 bytes
+BLAKE2s (openssl-3.4.0.tar.gz) = e4dcd64fe54f41055ed729243519c921a4ab5aeb4cedf56b0a69a36533edb816
+SHA512 (openssl-3.4.0.tar.gz) = 0784096f00c7907e477919d5ddeadb14b61bcb569a938fa739c1c714949214a7daf63574149d718dae372ed0c91c300042f4e3ba5e8633607e8034a3bda75a26
+Size (openssl-3.4.0.tar.gz) = 18320899 bytes
 SHA1 (patch-Configurations_unix-Makefile.tmpl) = ea9b0a0c8de810362813d84a4f85c5ebdedf9fc6
 SHA1 (patch-util_perl_OpenSSL_config.pm) = 3ba3c23046bf69c7d348b4c1c8c8269d83cfa2b4

Prev by Date: CVS commit: pkgsrc/net/haproxy
Next by Date: CVS commit: pkgsrc/net/ngtcp2
Previous by Thread: CVS commit: pkgsrc/net/haproxy
Next by Thread: CVS commit: pkgsrc/net/ngtcp2
Indexes:

Home | Main Index | Thread Index | Old Index