git: bbecb0ff6c9e - stable/14 - OpenSSL: update to 3.0.11
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 12 Oct 2023 18:46:56 UTC
The branch stable/14 has been updated by emaste:
URL: https://cgit.FreeBSD.org/src/commit/?id=bbecb0ff6c9e2fc05c096ce2ca5387df0d8e99fe
commit bbecb0ff6c9e2fc05c096ce2ca5387df0d8e99fe
Author: Pierre Pronchery <pierre@freebsdfoundation.org>
AuthorDate: 2023-10-09 19:00:25 +0000
Commit: Ed Maste <emaste@FreeBSD.org>
CommitDate: 2023-10-12 18:46:11 +0000
OpenSSL: update to 3.0.11
OpenSSL 3.0.11 addresses:
POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807)
Relnotes: Yes
Pull request: https://github.com/freebsd/freebsd-src/pull/852
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 6f1af0d7d2af54b339b5212434cd6d4fda628d80)
---
crypto/openssl/CHANGES.md | 25 +++++++++
crypto/openssl/NEWS.md | 6 ++
crypto/openssl/README.md | 2 +-
crypto/openssl/VERSION.dat | 4 +-
crypto/openssl/apps/cmp.c | 2 +-
crypto/openssl/apps/lib/apps.c | 13 ++---
crypto/openssl/apps/req.c | 8 +--
crypto/openssl/apps/s_server.c | 2 +-
crypto/openssl/crypto/asn1/a_strnid.c | 4 +-
crypto/openssl/crypto/asn1/asn1_gen.c | 11 ++--
crypto/openssl/crypto/chacha/asm/chacha-ia64.pl | 2 +
crypto/openssl/crypto/cmp/cmp_asn.c | 10 ++--
crypto/openssl/crypto/cmp/cmp_client.c | 2 +-
crypto/openssl/crypto/cmp/cmp_status.c | 7 ++-
crypto/openssl/crypto/cms/cms_env.c | 21 ++++++-
crypto/openssl/crypto/cms/cms_lib.c | 5 +-
crypto/openssl/crypto/cms/cms_local.h | 3 +-
crypto/openssl/crypto/cms/cms_sd.c | 6 +-
crypto/openssl/crypto/conf/conf_sap.c | 3 +-
crypto/openssl/crypto/encode_decode/decoder_lib.c | 7 ++-
crypto/openssl/crypto/encode_decode/decoder_pkey.c | 8 ++-
crypto/openssl/crypto/engine/eng_lib.c | 24 +++++---
crypto/openssl/crypto/engine/eng_list.c | 11 ++--
crypto/openssl/crypto/engine/eng_local.h | 6 +-
crypto/openssl/crypto/engine/eng_table.c | 12 ++--
crypto/openssl/crypto/evp/ctrl_params_translate.c | 22 +++++---
crypto/openssl/crypto/evp/p_lib.c | 2 +
crypto/openssl/crypto/http/http_client.c | 15 +++--
crypto/openssl/crypto/mem.c | 5 +-
crypto/openssl/crypto/pem/pem_pkey.c | 13 ++++-
crypto/openssl/crypto/perlasm/arm-xlate.pl | 2 +-
crypto/openssl/crypto/pkcs12/p12_crt.c | 64 +++++++++++++++-------
.../openssl/crypto/poly1305/asm/poly1305-x86_64.pl | 6 +-
crypto/openssl/crypto/property/property.c | 6 +-
crypto/openssl/crypto/provider_core.c | 8 +--
crypto/openssl/crypto/rsa/rsa_ameth.c | 5 +-
crypto/openssl/crypto/srp/srp_vfy.c | 3 +-
crypto/openssl/crypto/store/store_lib.c | 6 +-
crypto/openssl/crypto/threads_pthread.c | 4 +-
crypto/openssl/crypto/x509/v3_ist.c | 8 +--
crypto/openssl/crypto/x509/x509_cmp.c | 9 ++-
crypto/openssl/doc/man1/openssl-cmp.pod.in | 31 +++++++----
crypto/openssl/doc/man1/openssl-cms.pod.in | 4 +-
crypto/openssl/doc/man1/openssl-ts.pod.in | 4 +-
crypto/openssl/doc/man3/BIO_s_mem.pod | 22 +++++++-
crypto/openssl/doc/man3/CMS_sign.pod | 4 +-
crypto/openssl/doc/man3/EVP_MAC.pod | 4 +-
crypto/openssl/doc/man3/EVP_SIGNATURE.pod | 4 +-
crypto/openssl/doc/man3/OSSL_CMP_CTX_new.pod | 30 +++++-----
crypto/openssl/doc/man3/OSSL_CMP_exec_certreq.pod | 16 ++++--
crypto/openssl/doc/man3/OSSL_HTTP_REQ_CTX.pod | 12 ++--
crypto/openssl/doc/man3/OSSL_HTTP_transfer.pod | 9 ++-
crypto/openssl/doc/man3/PKCS12_create.pod | 9 ++-
crypto/openssl/doc/man3/PKCS12_gen_mac.pod | 2 +
crypto/openssl/doc/man3/SSL_new.pod | 4 +-
crypto/openssl/doc/man3/d2i_RSAPrivateKey.pod | 6 +-
crypto/openssl/doc/man3/d2i_X509.pod | 2 +
crypto/openssl/doc/man5/x509v3_config.pod | 4 +-
crypto/openssl/doc/man7/EVP_KDF-PKCS12KDF.pod | 8 ++-
crypto/openssl/doc/man7/migration_guide.pod | 9 +++
crypto/openssl/include/openssl/opensslv.h | 10 ++--
crypto/openssl/providers/fips-sources.checksums | 14 ++---
crypto/openssl/providers/fips.checksum | 2 +-
.../implementations/ciphers/cipher_chacha20.c | 23 +++++++-
.../implementations/encode_decode/decode_der2key.c | 6 +-
.../encode_decode/decode_msblob2key.c | 22 +++++++-
.../implementations/encode_decode/decode_pvk2key.c | 21 ++++++-
.../implementations/encode_decode/encode_key2any.c | 7 ++-
.../providers/implementations/keymgmt/dh_kmgmt.c | 3 +
.../providers/implementations/keymgmt/dsa_kmgmt.c | 3 +
.../providers/implementations/keymgmt/ecx_kmgmt.c | 5 +-
.../implementations/keymgmt/mac_legacy_kmgmt.c | 5 +-
crypto/openssl/ssl/ssl_lib.c | 10 ++--
crypto/openssl/ssl/ssl_sess.c | 5 +-
crypto/openssl/ssl/statem/extensions_srvr.c | 4 +-
secure/lib/libcrypto/Makefile.inc | 4 +-
secure/lib/libcrypto/man/man3/ADMISSIONS.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_EXTERN_FUNCS.3 | 6 +-
.../libcrypto/man/man3/ASN1_INTEGER_get_int64.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_INTEGER_new.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_ITEM_lookup.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_OBJECT_new.3 | 6 +-
.../lib/libcrypto/man/man3/ASN1_STRING_TABLE_add.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_STRING_length.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_STRING_new.3 | 6 +-
.../lib/libcrypto/man/man3/ASN1_STRING_print_ex.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_TIME_set.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_TYPE_get.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_aux_cb.3 | 6 +-
.../lib/libcrypto/man/man3/ASN1_generate_nconf.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_item_d2i_bio.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_item_new.3 | 6 +-
secure/lib/libcrypto/man/man3/ASN1_item_sign.3 | 6 +-
secure/lib/libcrypto/man/man3/ASYNC_WAIT_CTX_new.3 | 6 +-
secure/lib/libcrypto/man/man3/ASYNC_start_job.3 | 6 +-
secure/lib/libcrypto/man/man3/BF_encrypt.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_ADDR.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_ADDRINFO.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_connect.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_ctrl.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_f_base64.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_f_buffer.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_f_cipher.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_f_md.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_f_null.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_f_prefix.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_f_readbuffer.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_f_ssl.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_find_type.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_get_data.3 | 6 +-
.../lib/libcrypto/man/man3/BIO_get_ex_new_index.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_meth_new.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_new.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_new_CMS.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_parse_hostserv.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_printf.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_push.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_read.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_s_accept.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_s_bio.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_s_connect.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_s_core.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_s_datagram.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_s_fd.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_s_file.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_s_mem.3 | 31 +++++++++--
secure/lib/libcrypto/man/man3/BIO_s_null.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_s_socket.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_set_callback.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_should_retry.3 | 6 +-
secure/lib/libcrypto/man/man3/BIO_socket_wait.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_BLINDING_new.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_CTX_new.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_CTX_start.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_add.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_add_word.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_bn2bin.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_cmp.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_copy.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_generate_prime.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_mod_exp_mont.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_mod_inverse.3 | 6 +-
.../lib/libcrypto/man/man3/BN_mod_mul_montgomery.3 | 6 +-
.../lib/libcrypto/man/man3/BN_mod_mul_reciprocal.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_new.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_num_bytes.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_rand.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_security_bits.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_set_bit.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_swap.3 | 6 +-
secure/lib/libcrypto/man/man3/BN_zero.3 | 6 +-
secure/lib/libcrypto/man/man3/BUF_MEM_new.3 | 6 +-
.../libcrypto/man/man3/CMS_EncryptedData_decrypt.3 | 6 +-
.../libcrypto/man/man3/CMS_EncryptedData_encrypt.3 | 6 +-
.../libcrypto/man/man3/CMS_EnvelopedData_create.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_add0_cert.3 | 6 +-
.../libcrypto/man/man3/CMS_add1_recipient_cert.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_add1_signer.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_compress.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_data_create.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_decrypt.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_digest_create.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_encrypt.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_final.3 | 6 +-
.../libcrypto/man/man3/CMS_get0_RecipientInfos.3 | 6 +-
.../lib/libcrypto/man/man3/CMS_get0_SignerInfos.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_get0_type.3 | 6 +-
.../libcrypto/man/man3/CMS_get1_ReceiptRequest.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_sign.3 | 10 ++--
secure/lib/libcrypto/man/man3/CMS_sign_receipt.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_uncompress.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_verify.3 | 6 +-
secure/lib/libcrypto/man/man3/CMS_verify_receipt.3 | 6 +-
secure/lib/libcrypto/man/man3/CONF_modules_free.3 | 6 +-
.../libcrypto/man/man3/CONF_modules_load_file.3 | 6 +-
.../libcrypto/man/man3/CRYPTO_THREAD_run_once.3 | 6 +-
.../libcrypto/man/man3/CRYPTO_get_ex_new_index.3 | 6 +-
secure/lib/libcrypto/man/man3/CRYPTO_memcmp.3 | 6 +-
.../man/man3/CTLOG_STORE_get0_log_by_id.3 | 6 +-
secure/lib/libcrypto/man/man3/CTLOG_STORE_new.3 | 6 +-
secure/lib/libcrypto/man/man3/CTLOG_new.3 | 6 +-
.../libcrypto/man/man3/CT_POLICY_EVAL_CTX_new.3 | 6 +-
secure/lib/libcrypto/man/man3/DEFINE_STACK_OF.3 | 6 +-
secure/lib/libcrypto/man/man3/DES_random_key.3 | 6 +-
secure/lib/libcrypto/man/man3/DH_generate_key.3 | 6 +-
.../libcrypto/man/man3/DH_generate_parameters.3 | 6 +-
secure/lib/libcrypto/man/man3/DH_get0_pqg.3 | 6 +-
secure/lib/libcrypto/man/man3/DH_get_1024_160.3 | 6 +-
secure/lib/libcrypto/man/man3/DH_meth_new.3 | 6 +-
secure/lib/libcrypto/man/man3/DH_new.3 | 6 +-
secure/lib/libcrypto/man/man3/DH_new_by_nid.3 | 6 +-
secure/lib/libcrypto/man/man3/DH_set_method.3 | 6 +-
secure/lib/libcrypto/man/man3/DH_size.3 | 6 +-
secure/lib/libcrypto/man/man3/DSA_SIG_new.3 | 6 +-
secure/lib/libcrypto/man/man3/DSA_do_sign.3 | 6 +-
secure/lib/libcrypto/man/man3/DSA_dup_DH.3 | 6 +-
secure/lib/libcrypto/man/man3/DSA_generate_key.3 | 6 +-
.../libcrypto/man/man3/DSA_generate_parameters.3 | 6 +-
secure/lib/libcrypto/man/man3/DSA_get0_pqg.3 | 6 +-
secure/lib/libcrypto/man/man3/DSA_meth_new.3 | 6 +-
secure/lib/libcrypto/man/man3/DSA_new.3 | 6 +-
secure/lib/libcrypto/man/man3/DSA_set_method.3 | 6 +-
secure/lib/libcrypto/man/man3/DSA_sign.3 | 6 +-
secure/lib/libcrypto/man/man3/DSA_size.3 | 6 +-
secure/lib/libcrypto/man/man3/DTLS_get_data_mtu.3 | 6 +-
secure/lib/libcrypto/man/man3/DTLS_set_timer_cb.3 | 6 +-
secure/lib/libcrypto/man/man3/DTLSv1_listen.3 | 6 +-
secure/lib/libcrypto/man/man3/ECDSA_SIG_new.3 | 6 +-
secure/lib/libcrypto/man/man3/ECDSA_sign.3 | 6 +-
.../lib/libcrypto/man/man3/ECPKParameters_print.3 | 6 +-
.../lib/libcrypto/man/man3/EC_GFp_simple_method.3 | 6 +-
secure/lib/libcrypto/man/man3/EC_GROUP_copy.3 | 6 +-
secure/lib/libcrypto/man/man3/EC_GROUP_new.3 | 6 +-
.../lib/libcrypto/man/man3/EC_KEY_get_enc_flags.3 | 6 +-
secure/lib/libcrypto/man/man3/EC_KEY_new.3 | 6 +-
secure/lib/libcrypto/man/man3/EC_POINT_add.3 | 6 +-
secure/lib/libcrypto/man/man3/EC_POINT_new.3 | 6 +-
secure/lib/libcrypto/man/man3/ENGINE_add.3 | 6 +-
secure/lib/libcrypto/man/man3/ERR_GET_LIB.3 | 6 +-
secure/lib/libcrypto/man/man3/ERR_clear_error.3 | 6 +-
secure/lib/libcrypto/man/man3/ERR_error_string.3 | 6 +-
secure/lib/libcrypto/man/man3/ERR_get_error.3 | 6 +-
.../libcrypto/man/man3/ERR_load_crypto_strings.3 | 6 +-
secure/lib/libcrypto/man/man3/ERR_load_strings.3 | 6 +-
secure/lib/libcrypto/man/man3/ERR_new.3 | 6 +-
secure/lib/libcrypto/man/man3/ERR_print_errors.3 | 6 +-
secure/lib/libcrypto/man/man3/ERR_put_error.3 | 6 +-
secure/lib/libcrypto/man/man3/ERR_remove_state.3 | 6 +-
secure/lib/libcrypto/man/man3/ERR_set_mark.3 | 6 +-
.../lib/libcrypto/man/man3/EVP_ASYM_CIPHER_free.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_BytesToKey.3 | 6 +-
.../man/man3/EVP_CIPHER_CTX_get_cipher_data.3 | 6 +-
.../man/man3/EVP_CIPHER_CTX_get_original_iv.3 | 6 +-
.../lib/libcrypto/man/man3/EVP_CIPHER_meth_new.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_DigestInit.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_DigestSignInit.3 | 6 +-
.../lib/libcrypto/man/man3/EVP_DigestVerifyInit.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_EncodeInit.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_EncryptInit.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_KDF.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_KEM_free.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_KEYEXCH_free.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_KEYMGMT.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_MAC.3 | 10 ++--
secure/lib/libcrypto/man/man3/EVP_MD_meth_new.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_OpenInit.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PBE_CipherInit.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY2PKCS8.3 | 6 +-
.../lib/libcrypto/man/man3/EVP_PKEY_ASN1_METHOD.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_ctrl.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_CTX_get0_libctx.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_CTX_get0_pkey.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_new.3 | 6 +-
.../man/man3/EVP_PKEY_CTX_set1_pbe_pass.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_CTX_set_hkdf_md.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_CTX_set_params.3 | 6 +-
.../man/man3/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_CTX_set_scrypt_N.3 | 6 +-
.../man/man3/EVP_PKEY_CTX_set_tls1_prf_md.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_asn1_get_count.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_check.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_copy_parameters.3 | 6 +-
.../lib/libcrypto/man/man3/EVP_PKEY_decapsulate.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_decrypt.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_derive.3 | 6 +-
.../man/man3/EVP_PKEY_digestsign_supports_digest.3 | 6 +-
.../lib/libcrypto/man/man3/EVP_PKEY_encapsulate.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_encrypt.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_fromdata.3 | 6 +-
.../man/man3/EVP_PKEY_get_default_digest_nid.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_get_field_type.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_get_group_name.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_get_size.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_gettable_params.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_is_a.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_keygen.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_meth_get_count.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_meth_new.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_new.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_print_private.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_set1_RSA.3 | 6 +-
.../man/man3/EVP_PKEY_set1_encoded_public_key.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_set_type.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_settable_params.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_sign.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_todata.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_PKEY_verify.3 | 6 +-
.../libcrypto/man/man3/EVP_PKEY_verify_recover.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_RAND.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_SIGNATURE.3 | 10 ++--
secure/lib/libcrypto/man/man3/EVP_SealInit.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_SignInit.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_VerifyInit.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_aes_128_gcm.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_aria_128_gcm.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_bf_cbc.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_blake2b512.3 | 6 +-
.../lib/libcrypto/man/man3/EVP_camellia_128_ecb.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_cast5_cbc.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_chacha20.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_des_cbc.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_desx_cbc.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_idea_cbc.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_md2.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_md4.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_md5.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_mdc2.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_rc2_cbc.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_rc4.3 | 6 +-
.../lib/libcrypto/man/man3/EVP_rc5_32_12_16_cbc.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_ripemd160.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_seed_cbc.3 | 6 +-
.../man/man3/EVP_set_default_properties.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_sha1.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_sha224.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_sha3_224.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_sm3.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_sm4_cbc.3 | 6 +-
secure/lib/libcrypto/man/man3/EVP_whirlpool.3 | 6 +-
secure/lib/libcrypto/man/man3/HMAC.3 | 6 +-
secure/lib/libcrypto/man/man3/MD5.3 | 6 +-
secure/lib/libcrypto/man/man3/MDC2_Init.3 | 6 +-
secure/lib/libcrypto/man/man3/NCONF_new_ex.3 | 6 +-
secure/lib/libcrypto/man/man3/OBJ_nid2obj.3 | 6 +-
secure/lib/libcrypto/man/man3/OCSP_REQUEST_new.3 | 6 +-
secure/lib/libcrypto/man/man3/OCSP_cert_to_id.3 | 6 +-
.../libcrypto/man/man3/OCSP_request_add1_nonce.3 | 6 +-
.../lib/libcrypto/man/man3/OCSP_resp_find_status.3 | 6 +-
.../lib/libcrypto/man/man3/OCSP_response_status.3 | 6 +-
secure/lib/libcrypto/man/man3/OCSP_sendreq_new.3 | 6 +-
secure/lib/libcrypto/man/man3/OPENSSL_Applink.3 | 6 +-
secure/lib/libcrypto/man/man3/OPENSSL_FILE.3 | 6 +-
.../lib/libcrypto/man/man3/OPENSSL_LH_COMPFUNC.3 | 6 +-
secure/lib/libcrypto/man/man3/OPENSSL_LH_stats.3 | 6 +-
secure/lib/libcrypto/man/man3/OPENSSL_config.3 | 6 +-
.../lib/libcrypto/man/man3/OPENSSL_fork_prepare.3 | 6 +-
secure/lib/libcrypto/man/man3/OPENSSL_gmtime.3 | 6 +-
.../lib/libcrypto/man/man3/OPENSSL_hexchar2int.3 | 6 +-
secure/lib/libcrypto/man/man3/OPENSSL_ia32cap.3 | 6 +-
.../lib/libcrypto/man/man3/OPENSSL_init_crypto.3 | 6 +-
secure/lib/libcrypto/man/man3/OPENSSL_init_ssl.3 | 6 +-
.../libcrypto/man/man3/OPENSSL_instrument_bus.3 | 6 +-
.../man/man3/OPENSSL_load_builtin_modules.3 | 6 +-
secure/lib/libcrypto/man/man3/OPENSSL_malloc.3 | 6 +-
secure/lib/libcrypto/man/man3/OPENSSL_s390xcap.3 | 6 +-
.../lib/libcrypto/man/man3/OPENSSL_secure_malloc.3 | 6 +-
secure/lib/libcrypto/man/man3/OPENSSL_strcasecmp.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_ALGORITHM.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_CALLBACK.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_CMP_CTX_new.3 | 38 ++++++-------
.../man/man3/OSSL_CMP_HDR_get0_transactionID.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_CMP_ITAV_set0.3 | 6 +-
.../libcrypto/man/man3/OSSL_CMP_MSG_get0_header.3 | 6 +-
.../libcrypto/man/man3/OSSL_CMP_MSG_http_perform.3 | 6 +-
.../lib/libcrypto/man/man3/OSSL_CMP_SRV_CTX_new.3 | 6 +-
.../libcrypto/man/man3/OSSL_CMP_STATUSINFO_new.3 | 6 +-
.../lib/libcrypto/man/man3/OSSL_CMP_exec_certreq.3 | 22 +++++---
secure/lib/libcrypto/man/man3/OSSL_CMP_log_open.3 | 6 +-
.../lib/libcrypto/man/man3/OSSL_CMP_validate_msg.3 | 6 +-
.../lib/libcrypto/man/man3/OSSL_CORE_MAKE_FUNC.3 | 6 +-
.../libcrypto/man/man3/OSSL_CRMF_MSG_get0_tmpl.3 | 6 +-
.../man/man3/OSSL_CRMF_MSG_set0_validity.3 | 6 +-
.../man/man3/OSSL_CRMF_MSG_set1_regCtrl_regToken.3 | 6 +-
.../man/man3/OSSL_CRMF_MSG_set1_regInfo_certReq.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_CRMF_pbmp_new.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_DECODER.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_DECODER_CTX.3 | 6 +-
.../man/man3/OSSL_DECODER_CTX_new_for_pkey.3 | 6 +-
.../lib/libcrypto/man/man3/OSSL_DECODER_from_bio.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_DISPATCH.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_ENCODER.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_ENCODER_CTX.3 | 6 +-
.../man/man3/OSSL_ENCODER_CTX_new_for_pkey.3 | 6 +-
.../lib/libcrypto/man/man3/OSSL_ENCODER_to_bio.3 | 6 +-
.../man/man3/OSSL_ESS_check_signing_certs.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_HTTP_REQ_CTX.3 | 18 +++---
.../lib/libcrypto/man/man3/OSSL_HTTP_parse_url.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_HTTP_transfer.3 | 15 +++--
secure/lib/libcrypto/man/man3/OSSL_ITEM.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_LIB_CTX.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_PARAM.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_PARAM_BLD.3 | 6 +-
.../man/man3/OSSL_PARAM_allocate_from_text.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_PARAM_dup.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_PARAM_int.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_PROVIDER.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_SELF_TEST_new.3 | 6 +-
.../man/man3/OSSL_SELF_TEST_set_callback.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_STORE_INFO.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_STORE_LOADER.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_STORE_SEARCH.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_STORE_attach.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_STORE_expect.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_STORE_open.3 | 6 +-
secure/lib/libcrypto/man/man3/OSSL_trace_enabled.3 | 6 +-
.../man/man3/OSSL_trace_get_category_num.3 | 6 +-
.../libcrypto/man/man3/OSSL_trace_set_channel.3 | 6 +-
.../man/man3/OpenSSL_add_all_algorithms.3 | 6 +-
secure/lib/libcrypto/man/man3/OpenSSL_version.3 | 6 +-
.../libcrypto/man/man3/PEM_X509_INFO_read_bio_ex.3 | 6 +-
secure/lib/libcrypto/man/man3/PEM_bytes_read_bio.3 | 6 +-
secure/lib/libcrypto/man/man3/PEM_read.3 | 6 +-
secure/lib/libcrypto/man/man3/PEM_read_CMS.3 | 6 +-
.../libcrypto/man/man3/PEM_read_bio_PrivateKey.3 | 6 +-
secure/lib/libcrypto/man/man3/PEM_read_bio_ex.3 | 6 +-
.../libcrypto/man/man3/PEM_write_bio_CMS_stream.3 | 6 +-
.../man/man3/PEM_write_bio_PKCS7_stream.3 | 6 +-
.../lib/libcrypto/man/man3/PKCS12_PBE_keyivgen.3 | 6 +-
.../man/man3/PKCS12_SAFEBAG_create_cert.3 | 6 +-
.../libcrypto/man/man3/PKCS12_SAFEBAG_get0_attrs.3 | 6 +-
.../libcrypto/man/man3/PKCS12_SAFEBAG_get1_cert.3 | 6 +-
.../libcrypto/man/man3/PKCS12_add1_attr_by_NID.3 | 6 +-
.../libcrypto/man/man3/PKCS12_add_CSPName_asc.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS12_add_cert.3 | 6 +-
.../man/man3/PKCS12_add_friendlyname_asc.3 | 6 +-
.../lib/libcrypto/man/man3/PKCS12_add_localkeyid.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS12_add_safe.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS12_create.3 | 15 +++--
.../lib/libcrypto/man/man3/PKCS12_decrypt_skey.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS12_gen_mac.3 | 8 ++-
.../libcrypto/man/man3/PKCS12_get_friendlyname.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS12_init.3 | 6 +-
.../libcrypto/man/man3/PKCS12_item_decrypt_d2i.3 | 6 +-
.../libcrypto/man/man3/PKCS12_key_gen_utf8_ex.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS12_newpass.3 | 6 +-
.../lib/libcrypto/man/man3/PKCS12_pack_p7encdata.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS12_parse.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS5_PBE_keyivgen.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS5_PBKDF2_HMAC.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS7_decrypt.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS7_encrypt.3 | 6 +-
.../libcrypto/man/man3/PKCS7_get_octet_string.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS7_sign.3 | 6 +-
.../lib/libcrypto/man/man3/PKCS7_sign_add_signer.3 | 6 +-
.../lib/libcrypto/man/man3/PKCS7_type_is_other.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS7_verify.3 | 6 +-
secure/lib/libcrypto/man/man3/PKCS8_encrypt.3 | 6 +-
.../lib/libcrypto/man/man3/PKCS8_pkey_add1_attr.3 | 6 +-
secure/lib/libcrypto/man/man3/RAND_add.3 | 6 +-
secure/lib/libcrypto/man/man3/RAND_bytes.3 | 6 +-
secure/lib/libcrypto/man/man3/RAND_cleanup.3 | 6 +-
secure/lib/libcrypto/man/man3/RAND_egd.3 | 6 +-
secure/lib/libcrypto/man/man3/RAND_get0_primary.3 | 6 +-
secure/lib/libcrypto/man/man3/RAND_load_file.3 | 6 +-
secure/lib/libcrypto/man/man3/RAND_set_DRBG_type.3 | 6 +-
.../lib/libcrypto/man/man3/RAND_set_rand_method.3 | 6 +-
secure/lib/libcrypto/man/man3/RC4_set_key.3 | 6 +-
secure/lib/libcrypto/man/man3/RIPEMD160_Init.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_blinding_on.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_check_key.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_generate_key.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_get0_key.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_meth_new.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_new.3 | 6 +-
.../man/man3/RSA_padding_add_PKCS1_type_1.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_print.3 | 6 +-
.../lib/libcrypto/man/man3/RSA_private_encrypt.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_public_encrypt.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_set_method.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_sign.3 | 6 +-
.../man/man3/RSA_sign_ASN1_OCTET_STRING.3 | 6 +-
secure/lib/libcrypto/man/man3/RSA_size.3 | 6 +-
secure/lib/libcrypto/man/man3/SCT_new.3 | 6 +-
secure/lib/libcrypto/man/man3/SCT_print.3 | 6 +-
secure/lib/libcrypto/man/man3/SCT_validate.3 | 6 +-
secure/lib/libcrypto/man/man3/SHA256_Init.3 | 6 +-
secure/lib/libcrypto/man/man3/SMIME_read_ASN1.3 | 6 +-
secure/lib/libcrypto/man/man3/SMIME_read_CMS.3 | 6 +-
secure/lib/libcrypto/man/man3/SMIME_read_PKCS7.3 | 6 +-
secure/lib/libcrypto/man/man3/SMIME_write_ASN1.3 | 6 +-
secure/lib/libcrypto/man/man3/SMIME_write_CMS.3 | 6 +-
secure/lib/libcrypto/man/man3/SMIME_write_PKCS7.3 | 6 +-
secure/lib/libcrypto/man/man3/SRP_Calc_B.3 | 6 +-
secure/lib/libcrypto/man/man3/SRP_VBASE_new.3 | 6 +-
.../lib/libcrypto/man/man3/SRP_create_verifier.3 | 6 +-
secure/lib/libcrypto/man/man3/SRP_user_pwd_new.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CIPHER_get_name.3 | 6 +-
.../man/man3/SSL_COMP_add_compression_method.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CONF_CTX_new.3 | 6 +-
.../libcrypto/man/man3/SSL_CONF_CTX_set1_prefix.3 | 6 +-
.../libcrypto/man/man3/SSL_CONF_CTX_set_flags.3 | 6 +-
.../libcrypto/man/man3/SSL_CONF_CTX_set_ssl_ctx.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CONF_cmd.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CONF_cmd_argv.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_add1_chain_cert.3 | 6 +-
.../man/man3/SSL_CTX_add_extra_chain_cert.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CTX_add_session.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CTX_config.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CTX_ctrl.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CTX_dane_enable.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_flush_sessions.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CTX_free.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CTX_get0_param.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_get_verify_mode.3 | 6 +-
.../man/man3/SSL_CTX_has_client_custom_ext.3 | 6 +-
.../man/man3/SSL_CTX_load_verify_locations.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CTX_new.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CTX_sess_number.3 | 6 +-
.../man/man3/SSL_CTX_sess_set_cache_size.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_sess_set_get_cb.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CTX_sessions.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CTX_set0_CA_list.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CTX_set1_curves.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CTX_set1_sigalgs.3 | 6 +-
.../man/man3/SSL_CTX_set1_verify_cert_store.3 | 6 +-
.../man/man3/SSL_CTX_set_alpn_select_cb.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CTX_set_cert_cb.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_set_cert_store.3 | 6 +-
.../man/man3/SSL_CTX_set_cert_verify_callback.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_set_cipher_list.3 | 6 +-
.../man/man3/SSL_CTX_set_client_cert_cb.3 | 6 +-
.../man/man3/SSL_CTX_set_client_hello_cb.3 | 6 +-
.../man/man3/SSL_CTX_set_ct_validation_callback.3 | 6 +-
.../man/man3/SSL_CTX_set_ctlog_list_file.3 | 6 +-
.../man/man3/SSL_CTX_set_default_passwd_cb.3 | 6 +-
.../man/man3/SSL_CTX_set_generate_session_id.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_set_info_callback.3 | 6 +-
.../man/man3/SSL_CTX_set_keylog_callback.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_set_max_cert_list.3 | 6 +-
.../man/man3/SSL_CTX_set_min_proto_version.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CTX_set_mode.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_set_msg_callback.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_set_num_tickets.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CTX_set_options.3 | 6 +-
.../man/man3/SSL_CTX_set_psk_client_callback.3 | 6 +-
.../man/man3/SSL_CTX_set_quiet_shutdown.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_set_read_ahead.3 | 6 +-
.../man/man3/SSL_CTX_set_record_padding_callback.3 | 6 +-
.../man/man3/SSL_CTX_set_security_level.3 | 6 +-
.../man/man3/SSL_CTX_set_session_cache_mode.3 | 6 +-
.../man/man3/SSL_CTX_set_session_id_context.3 | 6 +-
.../man/man3/SSL_CTX_set_session_ticket_cb.3 | 6 +-
.../man/man3/SSL_CTX_set_split_send_fragment.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_set_srp_password.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_set_ssl_version.3 | 6 +-
.../SSL_CTX_set_stateless_cookie_generate_cb.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CTX_set_timeout.3 | 6 +-
.../man3/SSL_CTX_set_tlsext_servername_callback.3 | 6 +-
.../man/man3/SSL_CTX_set_tlsext_status_cb.3 | 6 +-
.../man/man3/SSL_CTX_set_tlsext_ticket_key_cb.3 | 6 +-
.../man/man3/SSL_CTX_set_tlsext_use_srtp.3 | 6 +-
.../man/man3/SSL_CTX_set_tmp_dh_callback.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_CTX_set_tmp_ecdh.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_CTX_set_verify.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_use_certificate.3 | 6 +-
.../man/man3/SSL_CTX_use_psk_identity_hint.3 | 6 +-
.../libcrypto/man/man3/SSL_CTX_use_serverinfo.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_SESSION_free.3 | 6 +-
.../libcrypto/man/man3/SSL_SESSION_get0_cipher.3 | 6 +-
.../libcrypto/man/man3/SSL_SESSION_get0_hostname.3 | 6 +-
.../man/man3/SSL_SESSION_get0_id_context.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_SESSION_get0_peer.3 | 6 +-
.../man/man3/SSL_SESSION_get_compress_id.3 | 6 +-
.../man/man3/SSL_SESSION_get_protocol_version.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_SESSION_get_time.3 | 6 +-
.../libcrypto/man/man3/SSL_SESSION_has_ticket.3 | 6 +-
.../libcrypto/man/man3/SSL_SESSION_is_resumable.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_SESSION_print.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_SESSION_set1_id.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_accept.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_alert_type_string.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_alloc_buffers.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_check_chain.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_clear.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_connect.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_do_handshake.3 | 6 +-
.../man/man3/SSL_export_keying_material.3 | 6 +-
.../libcrypto/man/man3/SSL_extension_supported.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_free.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_get0_peer_scts.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_get_SSL_CTX.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_get_all_async_fds.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_get_certificate.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_get_ciphers.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_get_client_random.3 | 6 +-
.../libcrypto/man/man3/SSL_get_current_cipher.3 | 6 +-
.../libcrypto/man/man3/SSL_get_default_timeout.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_get_error.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_get_extms_support.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_get_fd.3 | 6 +-
.../libcrypto/man/man3/SSL_get_peer_cert_chain.3 | 6 +-
.../libcrypto/man/man3/SSL_get_peer_certificate.3 | 6 +-
.../man/man3/SSL_get_peer_signature_nid.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_get_peer_tmp_key.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_get_psk_identity.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_get_rbio.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_get_session.3 | 6 +-
.../libcrypto/man/man3/SSL_get_shared_sigalgs.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_get_verify_result.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_get_version.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_group_to_name.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_in_init.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_key_update.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_library_init.3 | 6 +-
.../libcrypto/man/man3/SSL_load_client_CA_file.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_new.3 | 10 ++--
secure/lib/libcrypto/man/man3/SSL_pending.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_read.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_read_early_data.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_rstate_string.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_session_reused.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_set1_host.3 | 6 +-
.../libcrypto/man/man3/SSL_set_async_callback.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_set_bio.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_set_connect_state.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_set_fd.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_set_retry_verify.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_set_session.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_set_shutdown.3 | 6 +-
.../lib/libcrypto/man/man3/SSL_set_verify_result.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_shutdown.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_state_string.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_want.3 | 6 +-
secure/lib/libcrypto/man/man3/SSL_write.3 | 6 +-
secure/lib/libcrypto/man/man3/TS_RESP_CTX_new.3 | 6 +-
.../libcrypto/man/man3/TS_VERIFY_CTX_set_certs.3 | 6 +-
secure/lib/libcrypto/man/man3/UI_STRING.3 | 6 +-
secure/lib/libcrypto/man/man3/UI_UTIL_read_pw.3 | 6 +-
secure/lib/libcrypto/man/man3/UI_create_method.3 | 6 +-
secure/lib/libcrypto/man/man3/UI_new.3 | 6 +-
secure/lib/libcrypto/man/man3/X509V3_get_d2i.3 | 6 +-
secure/lib/libcrypto/man/man3/X509V3_set_ctx.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_ALGOR_dup.3 | 6 +-
.../libcrypto/man/man3/X509_CRL_get0_by_serial.3 | 6 +-
.../libcrypto/man/man3/X509_EXTENSION_set_object.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_LOOKUP.3 | 6 +-
.../lib/libcrypto/man/man3/X509_LOOKUP_hash_dir.3 | 6 +-
.../lib/libcrypto/man/man3/X509_LOOKUP_meth_new.3 | 6 +-
.../man/man3/X509_NAME_ENTRY_get_object.3 | 6 +-
.../man/man3/X509_NAME_add_entry_by_txt.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_NAME_get0_der.3 | 6 +-
.../man/man3/X509_NAME_get_index_by_NID.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_NAME_print_ex.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_PUBKEY_new.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_SIG_get0.3 | 6 +-
.../libcrypto/man/man3/X509_STORE_CTX_get_error.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_STORE_CTX_new.3 | 6 +-
.../man/man3/X509_STORE_CTX_set_verify_cb.3 | 6 +-
.../lib/libcrypto/man/man3/X509_STORE_add_cert.3 | 6 +-
.../lib/libcrypto/man/man3/X509_STORE_get0_param.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_STORE_new.3 | 6 +-
.../man/man3/X509_STORE_set_verify_cb_func.3 | 6 +-
.../man/man3/X509_VERIFY_PARAM_set_flags.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_add_cert.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_check_ca.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_check_host.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_check_issued.3 | 6 +-
.../libcrypto/man/man3/X509_check_private_key.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_check_purpose.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_cmp.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_cmp_time.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_digest.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_dup.3 | 6 +-
.../man/man3/X509_get0_distinguishing_id.3 | 6 +-
.../lib/libcrypto/man/man3/X509_get0_notBefore.3 | 6 +-
.../lib/libcrypto/man/man3/X509_get0_signature.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_get0_uids.3 | 6 +-
.../libcrypto/man/man3/X509_get_extension_flags.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_get_pubkey.3 | 6 +-
.../lib/libcrypto/man/man3/X509_get_serialNumber.3 | 6 +-
.../lib/libcrypto/man/man3/X509_get_subject_name.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_get_version.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_load_http.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_new.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_sign.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_verify.3 | 6 +-
secure/lib/libcrypto/man/man3/X509_verify_cert.3 | 6 +-
.../lib/libcrypto/man/man3/X509v3_get_ext_by_NID.3 | 6 +-
secure/lib/libcrypto/man/man3/b2i_PVK_bio_ex.3 | 6 +-
.../libcrypto/man/man3/d2i_PKCS8PrivateKey_bio.3 | 6 +-
secure/lib/libcrypto/man/man3/d2i_PrivateKey.3 | 6 +-
secure/lib/libcrypto/man/man3/d2i_RSAPrivateKey.3 | 12 ++--
secure/lib/libcrypto/man/man3/d2i_SSL_SESSION.3 | 6 +-
secure/lib/libcrypto/man/man3/d2i_X509.3 | 8 ++-
secure/lib/libcrypto/man/man3/i2d_CMS_bio_stream.3 | 6 +-
.../lib/libcrypto/man/man3/i2d_PKCS7_bio_stream.3 | 6 +-
secure/lib/libcrypto/man/man3/i2d_re_X509_tbs.3 | 6 +-
secure/lib/libcrypto/man/man3/o2i_SCT_LIST.3 | 6 +-
secure/lib/libcrypto/man/man3/s2i_ASN1_IA5STRING.3 | 6 +-
secure/lib/libcrypto/man/man5/config.5 | 6 +-
secure/lib/libcrypto/man/man5/fips_config.5 | 6 +-
secure/lib/libcrypto/man/man5/x509v3_config.5 | 10 ++--
.../lib/libcrypto/man/man7/EVP_ASYM_CIPHER-RSA.7 | 6 +-
.../lib/libcrypto/man/man7/EVP_ASYM_CIPHER-SM2.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-AES.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-ARIA.7 | 6 +-
.../lib/libcrypto/man/man7/EVP_CIPHER-BLOWFISH.7 | 6 +-
.../lib/libcrypto/man/man7/EVP_CIPHER-CAMELLIA.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-CAST.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-CHACHA.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-DES.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-IDEA.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-NULL.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-RC2.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-RC4.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-RC5.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-SEED.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_CIPHER-SM4.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-HKDF.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-KB.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-KRB5KDF.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF1.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF2.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-PKCS12KDF.7 | 14 +++--
secure/lib/libcrypto/man/man7/EVP_KDF-SCRYPT.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-SS.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-SSHKDF.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-TLS13_KDF.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-TLS1_PRF.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-X942-ASN1.7 | 6 +-
.../lib/libcrypto/man/man7/EVP_KDF-X942-CONCAT.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KDF-X963.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KEM-RSA.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KEYEXCH-DH.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KEYEXCH-ECDH.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_KEYEXCH-X25519.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MAC-BLAKE2.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MAC-CMAC.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MAC-GMAC.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MAC-HMAC.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MAC-KMAC.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MAC-Poly1305.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MAC-Siphash.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-BLAKE2.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-MD2.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-MD4.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-MD5-SHA1.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-MD5.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-MDC2.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-NULL.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-RIPEMD160.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-SHA1.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-SHA2.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-SHA3.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-SHAKE.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-SM3.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-WHIRLPOOL.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_MD-common.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_PKEY-DH.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_PKEY-DSA.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_PKEY-EC.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_PKEY-FFC.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_PKEY-HMAC.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_PKEY-RSA.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_PKEY-SM2.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_PKEY-X25519.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_RAND-CTR-DRBG.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_RAND-HASH-DRBG.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_RAND-HMAC-DRBG.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_RAND-SEED-SRC.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_RAND-TEST-RAND.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_RAND.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_SIGNATURE-DSA.7 | 6 +-
.../lib/libcrypto/man/man7/EVP_SIGNATURE-ECDSA.7 | 6 +-
.../lib/libcrypto/man/man7/EVP_SIGNATURE-ED25519.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_SIGNATURE-HMAC.7 | 6 +-
secure/lib/libcrypto/man/man7/EVP_SIGNATURE-RSA.7 | 6 +-
secure/lib/libcrypto/man/man7/OSSL_PROVIDER-FIPS.7 | 6 +-
secure/lib/libcrypto/man/man7/OSSL_PROVIDER-base.7 | 6 +-
.../lib/libcrypto/man/man7/OSSL_PROVIDER-default.7 | 6 +-
.../lib/libcrypto/man/man7/OSSL_PROVIDER-legacy.7 | 6 +-
secure/lib/libcrypto/man/man7/OSSL_PROVIDER-null.7 | 6 +-
secure/lib/libcrypto/man/man7/RAND.7 | 6 +-
secure/lib/libcrypto/man/man7/RSA-PSS.7 | 6 +-
secure/lib/libcrypto/man/man7/X25519.7 | 6 +-
secure/lib/libcrypto/man/man7/bio.7 | 6 +-
secure/lib/libcrypto/man/man7/crypto.7 | 6 +-
secure/lib/libcrypto/man/man7/ct.7 | 6 +-
secure/lib/libcrypto/man/man7/des_modes.7 | 6 +-
secure/lib/libcrypto/man/man7/evp.7 | 6 +-
secure/lib/libcrypto/man/man7/fips_module.7 | 14 ++---
secure/lib/libcrypto/man/man7/life_cycle-cipher.7 | 6 +-
secure/lib/libcrypto/man/man7/life_cycle-digest.7 | 6 +-
secure/lib/libcrypto/man/man7/life_cycle-kdf.7 | 6 +-
secure/lib/libcrypto/man/man7/life_cycle-mac.7 | 6 +-
secure/lib/libcrypto/man/man7/life_cycle-pkey.7 | 6 +-
secure/lib/libcrypto/man/man7/life_cycle-rand.7 | 6 +-
secure/lib/libcrypto/man/man7/migration_guide.7 | 16 +++++-
secure/lib/libcrypto/man/man7/openssl-core.h.7 | 6 +-
.../libcrypto/man/man7/openssl-core_dispatch.h.7 | 6 +-
.../lib/libcrypto/man/man7/openssl-core_names.h.7 | 6 +-
secure/lib/libcrypto/man/man7/openssl-env.7 | 6 +-
secure/lib/libcrypto/man/man7/openssl-glossary.7 | 6 +-
secure/lib/libcrypto/man/man7/openssl-threads.7 | 6 +-
.../lib/libcrypto/man/man7/openssl_user_macros.7 | 6 +-
secure/lib/libcrypto/man/man7/ossl_store-file.7 | 6 +-
secure/lib/libcrypto/man/man7/ossl_store.7 | 6 +-
.../lib/libcrypto/man/man7/passphrase-encoding.7 | 6 +-
secure/lib/libcrypto/man/man7/property.7 | 6 +-
.../lib/libcrypto/man/man7/provider-asym_cipher.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-base.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-cipher.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-decoder.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-digest.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-encoder.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-kdf.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-kem.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-keyexch.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-keymgmt.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-mac.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-object.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-rand.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-signature.7 | 6 +-
secure/lib/libcrypto/man/man7/provider-storemgmt.7 | 6 +-
secure/lib/libcrypto/man/man7/provider.7 | 6 +-
secure/lib/libcrypto/man/man7/proxy-certificates.7 | 6 +-
secure/lib/libcrypto/man/man7/ssl.7 | 6 +-
secure/lib/libcrypto/man/man7/x509.7 | 6 +-
secure/usr.bin/openssl/man/CA.pl.1 | 6 +-
secure/usr.bin/openssl/man/openssl-asn1parse.1 | 6 +-
secure/usr.bin/openssl/man/openssl-ca.1 | 8 +--
secure/usr.bin/openssl/man/openssl-ciphers.1 | 6 +-
secure/usr.bin/openssl/man/openssl-cmds.1 | 6 +-
secure/usr.bin/openssl/man/openssl-cmp.1 | 37 ++++++++-----
secure/usr.bin/openssl/man/openssl-cms.1 | 10 ++--
secure/usr.bin/openssl/man/openssl-crl.1 | 6 +-
secure/usr.bin/openssl/man/openssl-crl2pkcs7.1 | 6 +-
secure/usr.bin/openssl/man/openssl-dgst.1 | 6 +-
secure/usr.bin/openssl/man/openssl-dhparam.1 | 6 +-
secure/usr.bin/openssl/man/openssl-dsa.1 | 6 +-
secure/usr.bin/openssl/man/openssl-dsaparam.1 | 6 +-
secure/usr.bin/openssl/man/openssl-ec.1 | 6 +-
secure/usr.bin/openssl/man/openssl-ecparam.1 | 6 +-
secure/usr.bin/openssl/man/openssl-enc.1 | 6 +-
secure/usr.bin/openssl/man/openssl-engine.1 | 6 +-
secure/usr.bin/openssl/man/openssl-errstr.1 | 6 +-
secure/usr.bin/openssl/man/openssl-fipsinstall.1 | 6 +-
.../usr.bin/openssl/man/openssl-format-options.1 | 6 +-
secure/usr.bin/openssl/man/openssl-gendsa.1 | 6 +-
secure/usr.bin/openssl/man/openssl-genpkey.1 | 6 +-
secure/usr.bin/openssl/man/openssl-genrsa.1 | 6 +-
secure/usr.bin/openssl/man/openssl-info.1 | 6 +-
secure/usr.bin/openssl/man/openssl-kdf.1 | 6 +-
secure/usr.bin/openssl/man/openssl-list.1 | 6 +-
secure/usr.bin/openssl/man/openssl-mac.1 | 6 +-
.../openssl/man/openssl-namedisplay-options.1 | 6 +-
secure/usr.bin/openssl/man/openssl-nseq.1 | 6 +-
secure/usr.bin/openssl/man/openssl-ocsp.1 | 6 +-
.../openssl/man/openssl-passphrase-options.1 | 6 +-
secure/usr.bin/openssl/man/openssl-passwd.1 | 6 +-
secure/usr.bin/openssl/man/openssl-pkcs12.1 | 6 +-
secure/usr.bin/openssl/man/openssl-pkcs7.1 | 6 +-
secure/usr.bin/openssl/man/openssl-pkcs8.1 | 6 +-
secure/usr.bin/openssl/man/openssl-pkey.1 | 6 +-
secure/usr.bin/openssl/man/openssl-pkeyparam.1 | 6 +-
secure/usr.bin/openssl/man/openssl-pkeyutl.1 | 6 +-
secure/usr.bin/openssl/man/openssl-prime.1 | 6 +-
secure/usr.bin/openssl/man/openssl-rand.1 | 6 +-
secure/usr.bin/openssl/man/openssl-rehash.1 | 8 +--
secure/usr.bin/openssl/man/openssl-req.1 | 6 +-
secure/usr.bin/openssl/man/openssl-rsa.1 | 6 +-
secure/usr.bin/openssl/man/openssl-rsautl.1 | 6 +-
secure/usr.bin/openssl/man/openssl-s_client.1 | 6 +-
secure/usr.bin/openssl/man/openssl-s_server.1 | 6 +-
secure/usr.bin/openssl/man/openssl-s_time.1 | 6 +-
secure/usr.bin/openssl/man/openssl-sess_id.1 | 6 +-
secure/usr.bin/openssl/man/openssl-smime.1 | 6 +-
secure/usr.bin/openssl/man/openssl-speed.1 | 6 +-
secure/usr.bin/openssl/man/openssl-spkac.1 | 6 +-
secure/usr.bin/openssl/man/openssl-srp.1 | 6 +-
secure/usr.bin/openssl/man/openssl-storeutl.1 | 6 +-
secure/usr.bin/openssl/man/openssl-ts.1 | 10 ++--
.../openssl/man/openssl-verification-options.1 | 6 +-
secure/usr.bin/openssl/man/openssl-verify.1 | 6 +-
secure/usr.bin/openssl/man/openssl-version.1 | 6 +-
secure/usr.bin/openssl/man/openssl-x509.1 | 6 +-
secure/usr.bin/openssl/man/openssl.1 | 6 +-
secure/usr.bin/openssl/man/tsget.1 | 6 +-
868 files changed, 2999 insertions(+), 2665 deletions(-)
diff --git a/crypto/openssl/CHANGES.md b/crypto/openssl/CHANGES.md
index d5c0ba8daf1b..a26bdbdd0ad0 100644
--- a/crypto/openssl/CHANGES.md
+++ b/crypto/openssl/CHANGES.md
@@ -28,6 +28,30 @@ breaking changes, and mappings for the large list of deprecated functions.
[Migration guide]: https://github.com/openssl/openssl/tree/master/doc/man7/migration_guide.pod
+### Changes between 3.0.10 and 3.0.11 [19 Sep 2023]
+
+ * Fix POLY1305 MAC implementation corrupting XMM registers on Windows.
+
+ The POLY1305 MAC (message authentication code) implementation in OpenSSL
+ does not save the contents of non-volatile XMM registers on Windows 64
+ platform when calculating the MAC of data larger than 64 bytes. Before
+ returning to the caller all the XMM registers are set to zero rather than
+ restoring their previous content. The vulnerable code is used only on newer
+ x86_64 processors supporting the AVX512-IFMA instructions.
+
+ The consequences of this kind of internal application state corruption can
+ be various - from no consequences, if the calling application does not
+ depend on the contents of non-volatile XMM registers at all, to the worst
+ consequences, where the attacker could get complete control of the
+ application process. However given the contents of the registers are just
+ zeroized so the attacker cannot put arbitrary values inside, the most likely
+ consequence, if any, would be an incorrect result of some application
+ dependent calculations or a crash leading to a denial of service.
+
+ ([CVE-2023-4807])
+
+ *Bernd Edlinger*
+
### Changes between 3.0.9 and 3.0.10 [1 Aug 2023]
* Fix excessive time spent checking DH q parameter value.
@@ -19708,6 +19732,7 @@ ndif
<!-- Links -->
+[CVE-2023-4807]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-4807
[CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817
[CVE-2023-3446]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3446
[CVE-2023-2975]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-2975
diff --git a/crypto/openssl/NEWS.md b/crypto/openssl/NEWS.md
index feed90269760..f7ca47baff87 100644
--- a/crypto/openssl/NEWS.md
+++ b/crypto/openssl/NEWS.md
@@ -18,6 +18,11 @@ OpenSSL Releases
OpenSSL 3.0
-----------
+### Major changes between OpenSSL 3.0.10 and OpenSSL 3.0.11 [19 Sep 2023]
+
+ * Fix POLY1305 MAC implementation corrupting XMM registers on Windows
+ ([CVE-2023-4807])
+
### Major changes between OpenSSL 3.0.9 and OpenSSL 3.0.10 [1 Aug 2023]
* Fix excessive time spent checking DH q parameter value ([CVE-2023-3817])
@@ -1448,6 +1453,7 @@ OpenSSL 0.9.x
<!-- Links -->
+[CVE-2023-4807]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-4807
[CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817
[CVE-2023-3446]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3446
[CVE-2023-2975]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-2975
diff --git a/crypto/openssl/README.md b/crypto/openssl/README.md
index f2f4fd39ad05..b848d050132a 100644
--- a/crypto/openssl/README.md
+++ b/crypto/openssl/README.md
@@ -166,7 +166,7 @@ attempting to develop or distribute cryptographic code.
Copyright
=========
-Copyright (c) 1998-2022 The OpenSSL Project
+Copyright (c) 1998-2023 The OpenSSL Project
Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
diff --git a/crypto/openssl/VERSION.dat b/crypto/openssl/VERSION.dat
index 34658d316b4c..c4157a86274d 100644
--- a/crypto/openssl/VERSION.dat
+++ b/crypto/openssl/VERSION.dat
@@ -1,7 +1,7 @@
MAJOR=3
MINOR=0
-PATCH=10
+PATCH=11
PRE_RELEASE_TAG=
BUILD_METADATA=
-RELEASE_DATE="1 Aug 2023"
+RELEASE_DATE="19 Sep 2023"
SHLIB_VERSION=3
diff --git a/crypto/openssl/apps/cmp.c b/crypto/openssl/apps/cmp.c
*** 19492 LINES SKIPPED ***