Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update OpenSSL to version 3.0.8 in the base system #740

Closed
wants to merge 33 commits into from

Commits on Mar 1, 2023

  1. Import OpenSSL 1.1.1s

    juikim authored and ngie-eign committed Mar 1, 2023
    Configuration menu
    Copy the full SHA
    aba33b3 View commit details
    Browse the repository at this point in the history
  2. Import OpenSSL 1.1.1t

    juikim authored and ngie-eign committed Mar 1, 2023
    Configuration menu
    Copy the full SHA
    3c320f4 View commit details
    Browse the repository at this point in the history

Commits on Mar 6, 2023

  1. openssl: Vendor import of OpenSSL-3.0.8

    Summary:
    
    Release notes can be found at
    https://www.openssl.org/news/openssl-3.0-notes.html .
    
    Obtained from:  https://www.openssl.org/source/openssl-3.0.8.tar.gz
    Differential Revision:	https://reviews.freebsd.org/D38835
    
    Test Plan:
    ```
    $ git status
    On branch vendor/openssl-3.0
    nothing to commit, working tree clean
    $ (cd ..; fetch http://www.openssl.org/source/openssl-${OSSLVER}.tar.gz http://www.openssl.org/source/openssl-${OSSLVER}.tar.gz.asc)
    openssl-3.0.8.tar.gz                                    14 MB 4507 kBps    04s
    openssl-3.0.8.tar.gz.asc                               833  B   10 MBps    00s
    $ set | egrep '(XLIST|OSSLVER)='
    OSSLVER=3.0.8
    XLIST=FREEBSD-Xlist
    $ gpg --list-keys
    /home/ngie/.gnupg/pubring.kbx
    -----------------------------
    pub   rsa4096 2014-10-04 [SC]
          7953AC1FBC3DC8B3B292393ED5E9E43F7DF9EE8C
    uid           [ unknown] Richard Levitte <[email protected]>
    uid           [ unknown] Richard Levitte <[email protected]>
    uid           [ unknown] Richard Levitte <[email protected]>
    sub   rsa4096 2014-10-04 [E]
    
    $ gpg --verify openssl-${OSSLVER}.tar.gz.asc openssl-${OSSLVER}.tar.gz
    gpg: Signature made Tue Feb  7 05:43:55 2023 PST
    gpg:                using RSA key 7953AC1FBC3DC8B3B292393ED5E9E43F7DF9EE8C
    gpg: Good signature from "Richard Levitte <[email protected]>" [unknown]
    gpg:                 aka "Richard Levitte <[email protected]>" [unknown]
    gpg:                 aka "Richard Levitte <[email protected]>" [unknown]
    gpg: WARNING: This key is not certified with a trusted signature!
    gpg:          There is no indication that the signature belongs to the owner.
    Primary key fingerprint: 7953 AC1F BC3D C8B3 B292  393E D5E9 E43F 7DF9 EE8C
    $ (cd vendor.checkout/; git status; find . -type f -or -type l | cut -c 3- | sort > ../old)
    On branch vendor/openssl-3.0
    nothing to commit, working tree clean
    $ tar -x -X $XLIST -f ../openssl-${OSSLVER}.tar.gz -C ..
    $ rsync --exclude FREEBSD.* --delete -avzz ../openssl-${OSSLVER}/* .
    $ cat .git
    gitdir: /home/ngie/git/freebsd-src/.git/worktrees/vendor.checkout
    $ diff -arq ../openssl-3.0.8  .
    Only in .: .git
    Only in .: FREEBSD-Xlist
    Only in .: FREEBSD-upgrade
    $ git status FREEBSD*
    On branch vendor/openssl-3.0
    nothing to commit, working tree clean
    $
    ```
    
    Reviewers: emaste, jkim
    
    Subscribers: imp, andrew, dab
    
    Differential Revision: https://reviews.freebsd.org/D38835
    ngie-eign committed Mar 6, 2023
    Configuration menu
    Copy the full SHA
    e4520c8 View commit details
    Browse the repository at this point in the history

Commits on May 23, 2023

  1. openssl: Upgrade to 3.0.8.

    Merge commit 'e4520c8bd1d300a7a338d0ed4af171a2d0e583ef' into khorben/openssl-3.0
    khorben committed May 23, 2023
    Configuration menu
    Copy the full SHA
    595cd6b View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    57d2e55 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    e4950a2 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    e8002a1 View commit details
    Browse the repository at this point in the history
  5. openssl: Register new folders and obsolete files

    With the update to OpenSSL 3.0, engines are installed into a different
    folder, and modular providers can be installed into a dedicated folder
    as well.
    khorben committed May 23, 2023
    Configuration menu
    Copy the full SHA
    8ad6669 View commit details
    Browse the repository at this point in the history
  6. ldns: Request the OpenSSL 1.1 API

    Ed has a better commit message for this in commit
    3e98230.
    khorben committed May 23, 2023
    Configuration menu
    Copy the full SHA
    4acc6ab View commit details
    Browse the repository at this point in the history
  7. Configuration menu
    Copy the full SHA
    abdbec3 View commit details
    Browse the repository at this point in the history
  8. Configuration menu
    Copy the full SHA
    6992c9d View commit details
    Browse the repository at this point in the history
  9. Configuration menu
    Copy the full SHA
    1c7f1f2 View commit details
    Browse the repository at this point in the history
  10. Configuration menu
    Copy the full SHA
    0bb9b6b View commit details
    Browse the repository at this point in the history
  11. Configuration menu
    Copy the full SHA
    d57615d View commit details
    Browse the repository at this point in the history
  12. Configuration menu
    Copy the full SHA
    ab38636 View commit details
    Browse the repository at this point in the history
  13. Configuration menu
    Copy the full SHA
    a0ee985 View commit details
    Browse the repository at this point in the history
  14. Configuration menu
    Copy the full SHA
    8824e2a View commit details
    Browse the repository at this point in the history
  15. Configuration menu
    Copy the full SHA
    35ba896 View commit details
    Browse the repository at this point in the history
  16. Configuration menu
    Copy the full SHA
    9a662d0 View commit details
    Browse the repository at this point in the history
  17. libarchive: Request the OpenSSL 1.1 API

    This also requires lowering the level of warnings for archive_hmac.c
    when building with OpenSSL 3.
    khorben committed May 23, 2023
    Configuration menu
    Copy the full SHA
    393199d View commit details
    Browse the repository at this point in the history
  18. Configuration menu
    Copy the full SHA
    1303d78 View commit details
    Browse the repository at this point in the history
  19. Configuration menu
    Copy the full SHA
    d49b727 View commit details
    Browse the repository at this point in the history
  20. Configuration menu
    Copy the full SHA
    4c581da View commit details
    Browse the repository at this point in the history
  21. Configuration menu
    Copy the full SHA
    0475235 View commit details
    Browse the repository at this point in the history
  22. Configuration menu
    Copy the full SHA
    a693794 View commit details
    Browse the repository at this point in the history
  23. Configuration menu
    Copy the full SHA
    490e6dd View commit details
    Browse the repository at this point in the history
  24. Configuration menu
    Copy the full SHA
    12d7220 View commit details
    Browse the repository at this point in the history
  25. libarchive: Avoid a build error with OpenSSL 3.0.8

    This disables warning-errors for:
    
        archive_hmac.c:241:64: error: passing argument 2 of
        'OSSL_PARAM_construct_utf8_string' discards 'const' qualifier from
        pointer target type [-Werror=discarded-qualifiers]
    khorben committed May 23, 2023
    Configuration menu
    Copy the full SHA
    c9f9966 View commit details
    Browse the repository at this point in the history
  26. Configuration menu
    Copy the full SHA
    d5b2a96 View commit details
    Browse the repository at this point in the history
  27. openssl: Re-generate the assembly files

    This commit leveraged the updated Makefile.asm in order to re-generate
    the assembly files provided by OpenSSL.
    khorben committed May 23, 2023
    Configuration menu
    Copy the full SHA
    4c50d46 View commit details
    Browse the repository at this point in the history
  28. libarchive: New workaround to build with OpenSSL 3

    This casts the second parameter to OSSL_PARAM_construct_utf8_string() as
    a char * for a string litteral, as documented in EVP_MAC(3).
    khorben committed May 23, 2023
    Configuration menu
    Copy the full SHA
    9a1ea7f View commit details
    Browse the repository at this point in the history
  29. Configuration menu
    Copy the full SHA
    8a4d596 View commit details
    Browse the repository at this point in the history
  30. openssl: Disable ec_nistp_64_gcc_128 on big-endian systems

    ec_nistp_64_gcc_128 is only supported on 64-bit systems, but also only
    on little-endian systems.
    
    This fixes the build on PowerPC 64 (big-endian).
    khorben committed May 23, 2023
    Configuration menu
    Copy the full SHA
    069e79e View commit details
    Browse the repository at this point in the history