From nobody Thu Oct 12 18:46:56 2023 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4S5zBn42h3z4wlsy; Thu, 12 Oct 2023 18:46:57 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4S5zBn3jHlz3VB4; Thu, 12 Oct 2023 18:46:57 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1697136417; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=BO3EDOA9pGcDMgUoReemddCDZJ/4yVELb04K26QBhHM=; b=aVIOTvzePrc9/VbwJ46bI1PR9jbQUXDt2pBCBUpsLvTne4kxogQPjEdsbcRQRmqGXmZRAZ VbDYa9w8QA4TErH1XXv9HFEshOUd+LFIQnsAvTsAUxvd1BHD4EXyyI/BP6EU2IT2jpepf1 UODGdSWaVqUBEKHRTTVcvoDb53LFwVaaWbLh46w7oD65+sb7kuaW/gytVIPuPeyy0AunKB GOASkFd/r0zQudK8EBvfItQxz89KKrBYM3WpYkq9/Ny1lIVvugYj11uRQPkjxw4GHXpW9j 4tmukZqIA23XN+AlOsIbQi61x88iMth0dGln1XiwfaSiu1JZ+bdZIm9vKLfu8Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1697136417; a=rsa-sha256; cv=none; b=lR8A8cupBHFg+NlwJVkBuvyGs7JvF8Lwk9Qd4stNLz2C+vrvCQyEySiM5rFLyF4OLOChHk k3KeIQ1SKjcCMByomEsyt7NPFEQXeOBBYg7zdnv3HLSkUjMgKnPbU6yjXsPLoaONdRO9qn 7/t1e2uYm4qSdGMBT8Ke9l0GxWkxK3ZbAPZSEjACJRwXv8K7wMDXkjRHOCj4bH2oaCy9Vh CaJtC9Ni41Mpx/iy0616+eFje/oG9BplhzvGA/t/ogWgSMAjE74+c++aYUusfdaGMz1G2r gRiHqaP/rNRFjdBXRFd6iW33YhQJYSeFBZK2PvL+aLW02N9WgVsiMKLwQX0mQA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1697136417; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=BO3EDOA9pGcDMgUoReemddCDZJ/4yVELb04K26QBhHM=; b=URZLCdDF2GpJLSwwYMwQsCFojNnUDUEozR7WRkQU+h82/64QY7bu8i4ZQTgc2OmFx5vFDv cPVSAPfAhMA1VipP2MldEd0duSIcFsF/DCPZRKSDyarFhAMr9ZusjvafSG4J3wtgzHVxhg r00EmyVl8ixTkV6v+CicjGGxcfd5vkk0aU5xyYjpSqkIkIg1912ZWpVCnWkPDpq0i1KvHg +Ahx5uBbnj79o0TPesifzvVr395I+f8LnhThiAmWrPGGRjOuwe+Q3gQZIbY89E9NGDWhX2 7JCflTUtX/JWaZnK7gtHva/iFipPbDmFO5xTtgZgSpcmC0stc/pmOchnztuTGQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4S5zBn2mWMz1g4; Thu, 12 Oct 2023 18:46:57 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 39CIkvgk023759; Thu, 12 Oct 2023 18:46:57 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 39CIku5C023756; Thu, 12 Oct 2023 18:46:56 GMT (envelope-from git) Date: Thu, 12 Oct 2023 18:46:56 GMT Message-Id: <202310121846.39CIku5C023756@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Ed Maste Subject: git: bbecb0ff6c9e - stable/14 - OpenSSL: update to 3.0.11 List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-src-all@freebsd.org X-BeenThere: dev-commits-src-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: emaste X-Git-Repository: src X-Git-Refname: refs/heads/stable/14 X-Git-Reftype: branch X-Git-Commit: bbecb0ff6c9e2fc05c096ce2ca5387df0d8e99fe Auto-Submitted: auto-generated The branch stable/14 has been updated by emaste: URL: https://cgit.FreeBSD.org/src/commit/?id=bbecb0ff6c9e2fc05c096ce2ca5387df0d8e99fe commit bbecb0ff6c9e2fc05c096ce2ca5387df0d8e99fe Author: Pierre Pronchery AuthorDate: 2023-10-09 19:00:25 +0000 Commit: Ed Maste CommitDate: 2023-10-12 18:46:11 +0000 OpenSSL: update to 3.0.11 OpenSSL 3.0.11 addresses: POLY1305 MAC implementation corrupts XMM registers on Windows (CVE-2023-4807) Relnotes: Yes Pull request: https://github.com/freebsd/freebsd-src/pull/852 Sponsored by: The FreeBSD Foundation (cherry picked from commit 6f1af0d7d2af54b339b5212434cd6d4fda628d80) --- crypto/openssl/CHANGES.md | 25 +++++++++ crypto/openssl/NEWS.md | 6 ++ crypto/openssl/README.md | 2 +- crypto/openssl/VERSION.dat | 4 +- crypto/openssl/apps/cmp.c | 2 +- crypto/openssl/apps/lib/apps.c | 13 ++--- crypto/openssl/apps/req.c | 8 +-- crypto/openssl/apps/s_server.c | 2 +- crypto/openssl/crypto/asn1/a_strnid.c | 4 +- crypto/openssl/crypto/asn1/asn1_gen.c | 11 ++-- crypto/openssl/crypto/chacha/asm/chacha-ia64.pl | 2 + crypto/openssl/crypto/cmp/cmp_asn.c | 10 ++-- crypto/openssl/crypto/cmp/cmp_client.c | 2 +- crypto/openssl/crypto/cmp/cmp_status.c | 7 ++- crypto/openssl/crypto/cms/cms_env.c | 21 ++++++- crypto/openssl/crypto/cms/cms_lib.c | 5 +- crypto/openssl/crypto/cms/cms_local.h | 3 +- crypto/openssl/crypto/cms/cms_sd.c | 6 +- crypto/openssl/crypto/conf/conf_sap.c | 3 +- crypto/openssl/crypto/encode_decode/decoder_lib.c | 7 ++- crypto/openssl/crypto/encode_decode/decoder_pkey.c | 8 ++- crypto/openssl/crypto/engine/eng_lib.c | 24 +++++--- crypto/openssl/crypto/engine/eng_list.c | 11 ++-- crypto/openssl/crypto/engine/eng_local.h | 6 +- crypto/openssl/crypto/engine/eng_table.c | 12 ++-- crypto/openssl/crypto/evp/ctrl_params_translate.c | 22 +++++--- crypto/openssl/crypto/evp/p_lib.c | 2 + crypto/openssl/crypto/http/http_client.c | 15 +++-- crypto/openssl/crypto/mem.c | 5 +- crypto/openssl/crypto/pem/pem_pkey.c | 13 ++++- crypto/openssl/crypto/perlasm/arm-xlate.pl | 2 +- crypto/openssl/crypto/pkcs12/p12_crt.c | 64 +++++++++++++++------- .../openssl/crypto/poly1305/asm/poly1305-x86_64.pl | 6 +- crypto/openssl/crypto/property/property.c | 6 +- crypto/openssl/crypto/provider_core.c | 8 +-- crypto/openssl/crypto/rsa/rsa_ameth.c | 5 +- crypto/openssl/crypto/srp/srp_vfy.c | 3 +- crypto/openssl/crypto/store/store_lib.c | 6 +- crypto/openssl/crypto/threads_pthread.c | 4 +- crypto/openssl/crypto/x509/v3_ist.c | 8 +-- crypto/openssl/crypto/x509/x509_cmp.c | 9 ++- crypto/openssl/doc/man1/openssl-cmp.pod.in | 31 +++++++---- crypto/openssl/doc/man1/openssl-cms.pod.in | 4 +- crypto/openssl/doc/man1/openssl-ts.pod.in | 4 +- crypto/openssl/doc/man3/BIO_s_mem.pod | 22 +++++++- crypto/openssl/doc/man3/CMS_sign.pod | 4 +- crypto/openssl/doc/man3/EVP_MAC.pod | 4 +- crypto/openssl/doc/man3/EVP_SIGNATURE.pod | 4 +- crypto/openssl/doc/man3/OSSL_CMP_CTX_new.pod | 30 +++++----- crypto/openssl/doc/man3/OSSL_CMP_exec_certreq.pod | 16 ++++-- crypto/openssl/doc/man3/OSSL_HTTP_REQ_CTX.pod | 12 ++-- crypto/openssl/doc/man3/OSSL_HTTP_transfer.pod | 9 ++- crypto/openssl/doc/man3/PKCS12_create.pod | 9 ++- crypto/openssl/doc/man3/PKCS12_gen_mac.pod | 2 + crypto/openssl/doc/man3/SSL_new.pod | 4 +- crypto/openssl/doc/man3/d2i_RSAPrivateKey.pod | 6 +- crypto/openssl/doc/man3/d2i_X509.pod | 2 + crypto/openssl/doc/man5/x509v3_config.pod | 4 +- crypto/openssl/doc/man7/EVP_KDF-PKCS12KDF.pod | 8 ++- crypto/openssl/doc/man7/migration_guide.pod | 9 +++ crypto/openssl/include/openssl/opensslv.h | 10 ++-- crypto/openssl/providers/fips-sources.checksums | 14 ++--- crypto/openssl/providers/fips.checksum | 2 +- .../implementations/ciphers/cipher_chacha20.c | 23 +++++++- .../implementations/encode_decode/decode_der2key.c | 6 +- .../encode_decode/decode_msblob2key.c | 22 +++++++- .../implementations/encode_decode/decode_pvk2key.c | 21 ++++++- .../implementations/encode_decode/encode_key2any.c | 7 ++- .../providers/implementations/keymgmt/dh_kmgmt.c | 3 + .../providers/implementations/keymgmt/dsa_kmgmt.c | 3 + .../providers/implementations/keymgmt/ecx_kmgmt.c | 5 +- .../implementations/keymgmt/mac_legacy_kmgmt.c | 5 +- crypto/openssl/ssl/ssl_lib.c | 10 ++-- crypto/openssl/ssl/ssl_sess.c | 5 +- crypto/openssl/ssl/statem/extensions_srvr.c | 4 +- secure/lib/libcrypto/Makefile.inc | 4 +- secure/lib/libcrypto/man/man3/ADMISSIONS.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_EXTERN_FUNCS.3 | 6 +- .../libcrypto/man/man3/ASN1_INTEGER_get_int64.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_INTEGER_new.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_ITEM_lookup.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_OBJECT_new.3 | 6 +- .../lib/libcrypto/man/man3/ASN1_STRING_TABLE_add.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_STRING_length.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_STRING_new.3 | 6 +- .../lib/libcrypto/man/man3/ASN1_STRING_print_ex.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_TIME_set.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_TYPE_get.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_aux_cb.3 | 6 +- .../lib/libcrypto/man/man3/ASN1_generate_nconf.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_item_d2i_bio.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_item_new.3 | 6 +- secure/lib/libcrypto/man/man3/ASN1_item_sign.3 | 6 +- secure/lib/libcrypto/man/man3/ASYNC_WAIT_CTX_new.3 | 6 +- secure/lib/libcrypto/man/man3/ASYNC_start_job.3 | 6 +- secure/lib/libcrypto/man/man3/BF_encrypt.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_ADDR.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_ADDRINFO.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_connect.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_ctrl.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_f_base64.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_f_buffer.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_f_cipher.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_f_md.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_f_null.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_f_prefix.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_f_readbuffer.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_f_ssl.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_find_type.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_get_data.3 | 6 +- .../lib/libcrypto/man/man3/BIO_get_ex_new_index.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_meth_new.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_new.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_new_CMS.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_parse_hostserv.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_printf.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_push.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_read.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_s_accept.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_s_bio.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_s_connect.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_s_core.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_s_datagram.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_s_fd.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_s_file.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_s_mem.3 | 31 +++++++++-- secure/lib/libcrypto/man/man3/BIO_s_null.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_s_socket.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_set_callback.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_should_retry.3 | 6 +- secure/lib/libcrypto/man/man3/BIO_socket_wait.3 | 6 +- secure/lib/libcrypto/man/man3/BN_BLINDING_new.3 | 6 +- secure/lib/libcrypto/man/man3/BN_CTX_new.3 | 6 +- secure/lib/libcrypto/man/man3/BN_CTX_start.3 | 6 +- secure/lib/libcrypto/man/man3/BN_add.3 | 6 +- secure/lib/libcrypto/man/man3/BN_add_word.3 | 6 +- secure/lib/libcrypto/man/man3/BN_bn2bin.3 | 6 +- secure/lib/libcrypto/man/man3/BN_cmp.3 | 6 +- secure/lib/libcrypto/man/man3/BN_copy.3 | 6 +- secure/lib/libcrypto/man/man3/BN_generate_prime.3 | 6 +- secure/lib/libcrypto/man/man3/BN_mod_exp_mont.3 | 6 +- secure/lib/libcrypto/man/man3/BN_mod_inverse.3 | 6 +- .../lib/libcrypto/man/man3/BN_mod_mul_montgomery.3 | 6 +- .../lib/libcrypto/man/man3/BN_mod_mul_reciprocal.3 | 6 +- secure/lib/libcrypto/man/man3/BN_new.3 | 6 +- secure/lib/libcrypto/man/man3/BN_num_bytes.3 | 6 +- secure/lib/libcrypto/man/man3/BN_rand.3 | 6 +- secure/lib/libcrypto/man/man3/BN_security_bits.3 | 6 +- secure/lib/libcrypto/man/man3/BN_set_bit.3 | 6 +- secure/lib/libcrypto/man/man3/BN_swap.3 | 6 +- secure/lib/libcrypto/man/man3/BN_zero.3 | 6 +- secure/lib/libcrypto/man/man3/BUF_MEM_new.3 | 6 +- .../libcrypto/man/man3/CMS_EncryptedData_decrypt.3 | 6 +- .../libcrypto/man/man3/CMS_EncryptedData_encrypt.3 | 6 +- .../libcrypto/man/man3/CMS_EnvelopedData_create.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_add0_cert.3 | 6 +- .../libcrypto/man/man3/CMS_add1_recipient_cert.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_add1_signer.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_compress.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_data_create.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_decrypt.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_digest_create.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_encrypt.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_final.3 | 6 +- .../libcrypto/man/man3/CMS_get0_RecipientInfos.3 | 6 +- .../lib/libcrypto/man/man3/CMS_get0_SignerInfos.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_get0_type.3 | 6 +- .../libcrypto/man/man3/CMS_get1_ReceiptRequest.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_sign.3 | 10 ++-- secure/lib/libcrypto/man/man3/CMS_sign_receipt.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_uncompress.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_verify.3 | 6 +- secure/lib/libcrypto/man/man3/CMS_verify_receipt.3 | 6 +- secure/lib/libcrypto/man/man3/CONF_modules_free.3 | 6 +- .../libcrypto/man/man3/CONF_modules_load_file.3 | 6 +- .../libcrypto/man/man3/CRYPTO_THREAD_run_once.3 | 6 +- .../libcrypto/man/man3/CRYPTO_get_ex_new_index.3 | 6 +- secure/lib/libcrypto/man/man3/CRYPTO_memcmp.3 | 6 +- .../man/man3/CTLOG_STORE_get0_log_by_id.3 | 6 +- secure/lib/libcrypto/man/man3/CTLOG_STORE_new.3 | 6 +- secure/lib/libcrypto/man/man3/CTLOG_new.3 | 6 +- .../libcrypto/man/man3/CT_POLICY_EVAL_CTX_new.3 | 6 +- secure/lib/libcrypto/man/man3/DEFINE_STACK_OF.3 | 6 +- secure/lib/libcrypto/man/man3/DES_random_key.3 | 6 +- secure/lib/libcrypto/man/man3/DH_generate_key.3 | 6 +- .../libcrypto/man/man3/DH_generate_parameters.3 | 6 +- secure/lib/libcrypto/man/man3/DH_get0_pqg.3 | 6 +- secure/lib/libcrypto/man/man3/DH_get_1024_160.3 | 6 +- secure/lib/libcrypto/man/man3/DH_meth_new.3 | 6 +- secure/lib/libcrypto/man/man3/DH_new.3 | 6 +- secure/lib/libcrypto/man/man3/DH_new_by_nid.3 | 6 +- secure/lib/libcrypto/man/man3/DH_set_method.3 | 6 +- secure/lib/libcrypto/man/man3/DH_size.3 | 6 +- secure/lib/libcrypto/man/man3/DSA_SIG_new.3 | 6 +- secure/lib/libcrypto/man/man3/DSA_do_sign.3 | 6 +- secure/lib/libcrypto/man/man3/DSA_dup_DH.3 | 6 +- secure/lib/libcrypto/man/man3/DSA_generate_key.3 | 6 +- .../libcrypto/man/man3/DSA_generate_parameters.3 | 6 +- secure/lib/libcrypto/man/man3/DSA_get0_pqg.3 | 6 +- secure/lib/libcrypto/man/man3/DSA_meth_new.3 | 6 +- secure/lib/libcrypto/man/man3/DSA_new.3 | 6 +- secure/lib/libcrypto/man/man3/DSA_set_method.3 | 6 +- secure/lib/libcrypto/man/man3/DSA_sign.3 | 6 +- secure/lib/libcrypto/man/man3/DSA_size.3 | 6 +- secure/lib/libcrypto/man/man3/DTLS_get_data_mtu.3 | 6 +- secure/lib/libcrypto/man/man3/DTLS_set_timer_cb.3 | 6 +- secure/lib/libcrypto/man/man3/DTLSv1_listen.3 | 6 +- secure/lib/libcrypto/man/man3/ECDSA_SIG_new.3 | 6 +- secure/lib/libcrypto/man/man3/ECDSA_sign.3 | 6 +- .../lib/libcrypto/man/man3/ECPKParameters_print.3 | 6 +- .../lib/libcrypto/man/man3/EC_GFp_simple_method.3 | 6 +- secure/lib/libcrypto/man/man3/EC_GROUP_copy.3 | 6 +- secure/lib/libcrypto/man/man3/EC_GROUP_new.3 | 6 +- .../lib/libcrypto/man/man3/EC_KEY_get_enc_flags.3 | 6 +- secure/lib/libcrypto/man/man3/EC_KEY_new.3 | 6 +- secure/lib/libcrypto/man/man3/EC_POINT_add.3 | 6 +- secure/lib/libcrypto/man/man3/EC_POINT_new.3 | 6 +- secure/lib/libcrypto/man/man3/ENGINE_add.3 | 6 +- secure/lib/libcrypto/man/man3/ERR_GET_LIB.3 | 6 +- secure/lib/libcrypto/man/man3/ERR_clear_error.3 | 6 +- secure/lib/libcrypto/man/man3/ERR_error_string.3 | 6 +- secure/lib/libcrypto/man/man3/ERR_get_error.3 | 6 +- .../libcrypto/man/man3/ERR_load_crypto_strings.3 | 6 +- secure/lib/libcrypto/man/man3/ERR_load_strings.3 | 6 +- secure/lib/libcrypto/man/man3/ERR_new.3 | 6 +- secure/lib/libcrypto/man/man3/ERR_print_errors.3 | 6 +- secure/lib/libcrypto/man/man3/ERR_put_error.3 | 6 +- secure/lib/libcrypto/man/man3/ERR_remove_state.3 | 6 +- secure/lib/libcrypto/man/man3/ERR_set_mark.3 | 6 +- .../lib/libcrypto/man/man3/EVP_ASYM_CIPHER_free.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_BytesToKey.3 | 6 +- .../man/man3/EVP_CIPHER_CTX_get_cipher_data.3 | 6 +- .../man/man3/EVP_CIPHER_CTX_get_original_iv.3 | 6 +- .../lib/libcrypto/man/man3/EVP_CIPHER_meth_new.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_DigestInit.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_DigestSignInit.3 | 6 +- .../lib/libcrypto/man/man3/EVP_DigestVerifyInit.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_EncodeInit.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_EncryptInit.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_KDF.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_KEM_free.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_KEYEXCH_free.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_KEYMGMT.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_MAC.3 | 10 ++-- secure/lib/libcrypto/man/man3/EVP_MD_meth_new.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_OpenInit.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PBE_CipherInit.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY2PKCS8.3 | 6 +- .../lib/libcrypto/man/man3/EVP_PKEY_ASN1_METHOD.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_ctrl.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_CTX_get0_libctx.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_CTX_get0_pkey.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_new.3 | 6 +- .../man/man3/EVP_PKEY_CTX_set1_pbe_pass.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_CTX_set_hkdf_md.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_CTX_set_params.3 | 6 +- .../man/man3/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_CTX_set_scrypt_N.3 | 6 +- .../man/man3/EVP_PKEY_CTX_set_tls1_prf_md.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_asn1_get_count.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_check.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_copy_parameters.3 | 6 +- .../lib/libcrypto/man/man3/EVP_PKEY_decapsulate.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_decrypt.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_derive.3 | 6 +- .../man/man3/EVP_PKEY_digestsign_supports_digest.3 | 6 +- .../lib/libcrypto/man/man3/EVP_PKEY_encapsulate.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_encrypt.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_fromdata.3 | 6 +- .../man/man3/EVP_PKEY_get_default_digest_nid.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_get_field_type.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_get_group_name.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_get_size.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_gettable_params.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_is_a.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_keygen.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_meth_get_count.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_meth_new.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_new.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_print_private.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_set1_RSA.3 | 6 +- .../man/man3/EVP_PKEY_set1_encoded_public_key.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_set_type.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_settable_params.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_sign.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_todata.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_PKEY_verify.3 | 6 +- .../libcrypto/man/man3/EVP_PKEY_verify_recover.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_RAND.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_SIGNATURE.3 | 10 ++-- secure/lib/libcrypto/man/man3/EVP_SealInit.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_SignInit.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_VerifyInit.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_aes_128_gcm.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_aria_128_gcm.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_bf_cbc.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_blake2b512.3 | 6 +- .../lib/libcrypto/man/man3/EVP_camellia_128_ecb.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_cast5_cbc.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_chacha20.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_des_cbc.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_desx_cbc.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_idea_cbc.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_md2.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_md4.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_md5.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_mdc2.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_rc2_cbc.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_rc4.3 | 6 +- .../lib/libcrypto/man/man3/EVP_rc5_32_12_16_cbc.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_ripemd160.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_seed_cbc.3 | 6 +- .../man/man3/EVP_set_default_properties.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_sha1.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_sha224.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_sha3_224.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_sm3.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_sm4_cbc.3 | 6 +- secure/lib/libcrypto/man/man3/EVP_whirlpool.3 | 6 +- secure/lib/libcrypto/man/man3/HMAC.3 | 6 +- secure/lib/libcrypto/man/man3/MD5.3 | 6 +- secure/lib/libcrypto/man/man3/MDC2_Init.3 | 6 +- secure/lib/libcrypto/man/man3/NCONF_new_ex.3 | 6 +- secure/lib/libcrypto/man/man3/OBJ_nid2obj.3 | 6 +- secure/lib/libcrypto/man/man3/OCSP_REQUEST_new.3 | 6 +- secure/lib/libcrypto/man/man3/OCSP_cert_to_id.3 | 6 +- .../libcrypto/man/man3/OCSP_request_add1_nonce.3 | 6 +- .../lib/libcrypto/man/man3/OCSP_resp_find_status.3 | 6 +- .../lib/libcrypto/man/man3/OCSP_response_status.3 | 6 +- secure/lib/libcrypto/man/man3/OCSP_sendreq_new.3 | 6 +- secure/lib/libcrypto/man/man3/OPENSSL_Applink.3 | 6 +- secure/lib/libcrypto/man/man3/OPENSSL_FILE.3 | 6 +- .../lib/libcrypto/man/man3/OPENSSL_LH_COMPFUNC.3 | 6 +- secure/lib/libcrypto/man/man3/OPENSSL_LH_stats.3 | 6 +- secure/lib/libcrypto/man/man3/OPENSSL_config.3 | 6 +- .../lib/libcrypto/man/man3/OPENSSL_fork_prepare.3 | 6 +- secure/lib/libcrypto/man/man3/OPENSSL_gmtime.3 | 6 +- .../lib/libcrypto/man/man3/OPENSSL_hexchar2int.3 | 6 +- secure/lib/libcrypto/man/man3/OPENSSL_ia32cap.3 | 6 +- .../lib/libcrypto/man/man3/OPENSSL_init_crypto.3 | 6 +- secure/lib/libcrypto/man/man3/OPENSSL_init_ssl.3 | 6 +- .../libcrypto/man/man3/OPENSSL_instrument_bus.3 | 6 +- .../man/man3/OPENSSL_load_builtin_modules.3 | 6 +- secure/lib/libcrypto/man/man3/OPENSSL_malloc.3 | 6 +- secure/lib/libcrypto/man/man3/OPENSSL_s390xcap.3 | 6 +- .../lib/libcrypto/man/man3/OPENSSL_secure_malloc.3 | 6 +- secure/lib/libcrypto/man/man3/OPENSSL_strcasecmp.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_ALGORITHM.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_CALLBACK.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_CMP_CTX_new.3 | 38 ++++++------- .../man/man3/OSSL_CMP_HDR_get0_transactionID.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_CMP_ITAV_set0.3 | 6 +- .../libcrypto/man/man3/OSSL_CMP_MSG_get0_header.3 | 6 +- .../libcrypto/man/man3/OSSL_CMP_MSG_http_perform.3 | 6 +- .../lib/libcrypto/man/man3/OSSL_CMP_SRV_CTX_new.3 | 6 +- .../libcrypto/man/man3/OSSL_CMP_STATUSINFO_new.3 | 6 +- .../lib/libcrypto/man/man3/OSSL_CMP_exec_certreq.3 | 22 +++++--- secure/lib/libcrypto/man/man3/OSSL_CMP_log_open.3 | 6 +- .../lib/libcrypto/man/man3/OSSL_CMP_validate_msg.3 | 6 +- .../lib/libcrypto/man/man3/OSSL_CORE_MAKE_FUNC.3 | 6 +- .../libcrypto/man/man3/OSSL_CRMF_MSG_get0_tmpl.3 | 6 +- .../man/man3/OSSL_CRMF_MSG_set0_validity.3 | 6 +- .../man/man3/OSSL_CRMF_MSG_set1_regCtrl_regToken.3 | 6 +- .../man/man3/OSSL_CRMF_MSG_set1_regInfo_certReq.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_CRMF_pbmp_new.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_DECODER.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_DECODER_CTX.3 | 6 +- .../man/man3/OSSL_DECODER_CTX_new_for_pkey.3 | 6 +- .../lib/libcrypto/man/man3/OSSL_DECODER_from_bio.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_DISPATCH.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_ENCODER.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_ENCODER_CTX.3 | 6 +- .../man/man3/OSSL_ENCODER_CTX_new_for_pkey.3 | 6 +- .../lib/libcrypto/man/man3/OSSL_ENCODER_to_bio.3 | 6 +- .../man/man3/OSSL_ESS_check_signing_certs.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_HTTP_REQ_CTX.3 | 18 +++--- .../lib/libcrypto/man/man3/OSSL_HTTP_parse_url.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_HTTP_transfer.3 | 15 +++-- secure/lib/libcrypto/man/man3/OSSL_ITEM.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_LIB_CTX.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_PARAM.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_PARAM_BLD.3 | 6 +- .../man/man3/OSSL_PARAM_allocate_from_text.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_PARAM_dup.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_PARAM_int.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_PROVIDER.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_SELF_TEST_new.3 | 6 +- .../man/man3/OSSL_SELF_TEST_set_callback.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_STORE_INFO.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_STORE_LOADER.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_STORE_SEARCH.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_STORE_attach.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_STORE_expect.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_STORE_open.3 | 6 +- secure/lib/libcrypto/man/man3/OSSL_trace_enabled.3 | 6 +- .../man/man3/OSSL_trace_get_category_num.3 | 6 +- .../libcrypto/man/man3/OSSL_trace_set_channel.3 | 6 +- .../man/man3/OpenSSL_add_all_algorithms.3 | 6 +- secure/lib/libcrypto/man/man3/OpenSSL_version.3 | 6 +- .../libcrypto/man/man3/PEM_X509_INFO_read_bio_ex.3 | 6 +- secure/lib/libcrypto/man/man3/PEM_bytes_read_bio.3 | 6 +- secure/lib/libcrypto/man/man3/PEM_read.3 | 6 +- secure/lib/libcrypto/man/man3/PEM_read_CMS.3 | 6 +- .../libcrypto/man/man3/PEM_read_bio_PrivateKey.3 | 6 +- secure/lib/libcrypto/man/man3/PEM_read_bio_ex.3 | 6 +- .../libcrypto/man/man3/PEM_write_bio_CMS_stream.3 | 6 +- .../man/man3/PEM_write_bio_PKCS7_stream.3 | 6 +- .../lib/libcrypto/man/man3/PKCS12_PBE_keyivgen.3 | 6 +- .../man/man3/PKCS12_SAFEBAG_create_cert.3 | 6 +- .../libcrypto/man/man3/PKCS12_SAFEBAG_get0_attrs.3 | 6 +- .../libcrypto/man/man3/PKCS12_SAFEBAG_get1_cert.3 | 6 +- .../libcrypto/man/man3/PKCS12_add1_attr_by_NID.3 | 6 +- .../libcrypto/man/man3/PKCS12_add_CSPName_asc.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS12_add_cert.3 | 6 +- .../man/man3/PKCS12_add_friendlyname_asc.3 | 6 +- .../lib/libcrypto/man/man3/PKCS12_add_localkeyid.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS12_add_safe.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS12_create.3 | 15 +++-- .../lib/libcrypto/man/man3/PKCS12_decrypt_skey.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS12_gen_mac.3 | 8 ++- .../libcrypto/man/man3/PKCS12_get_friendlyname.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS12_init.3 | 6 +- .../libcrypto/man/man3/PKCS12_item_decrypt_d2i.3 | 6 +- .../libcrypto/man/man3/PKCS12_key_gen_utf8_ex.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS12_newpass.3 | 6 +- .../lib/libcrypto/man/man3/PKCS12_pack_p7encdata.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS12_parse.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS5_PBE_keyivgen.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS5_PBKDF2_HMAC.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS7_decrypt.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS7_encrypt.3 | 6 +- .../libcrypto/man/man3/PKCS7_get_octet_string.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS7_sign.3 | 6 +- .../lib/libcrypto/man/man3/PKCS7_sign_add_signer.3 | 6 +- .../lib/libcrypto/man/man3/PKCS7_type_is_other.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS7_verify.3 | 6 +- secure/lib/libcrypto/man/man3/PKCS8_encrypt.3 | 6 +- .../lib/libcrypto/man/man3/PKCS8_pkey_add1_attr.3 | 6 +- secure/lib/libcrypto/man/man3/RAND_add.3 | 6 +- secure/lib/libcrypto/man/man3/RAND_bytes.3 | 6 +- secure/lib/libcrypto/man/man3/RAND_cleanup.3 | 6 +- secure/lib/libcrypto/man/man3/RAND_egd.3 | 6 +- secure/lib/libcrypto/man/man3/RAND_get0_primary.3 | 6 +- secure/lib/libcrypto/man/man3/RAND_load_file.3 | 6 +- secure/lib/libcrypto/man/man3/RAND_set_DRBG_type.3 | 6 +- .../lib/libcrypto/man/man3/RAND_set_rand_method.3 | 6 +- secure/lib/libcrypto/man/man3/RC4_set_key.3 | 6 +- secure/lib/libcrypto/man/man3/RIPEMD160_Init.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_blinding_on.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_check_key.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_generate_key.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_get0_key.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_meth_new.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_new.3 | 6 +- .../man/man3/RSA_padding_add_PKCS1_type_1.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_print.3 | 6 +- .../lib/libcrypto/man/man3/RSA_private_encrypt.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_public_encrypt.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_set_method.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_sign.3 | 6 +- .../man/man3/RSA_sign_ASN1_OCTET_STRING.3 | 6 +- secure/lib/libcrypto/man/man3/RSA_size.3 | 6 +- secure/lib/libcrypto/man/man3/SCT_new.3 | 6 +- secure/lib/libcrypto/man/man3/SCT_print.3 | 6 +- secure/lib/libcrypto/man/man3/SCT_validate.3 | 6 +- secure/lib/libcrypto/man/man3/SHA256_Init.3 | 6 +- secure/lib/libcrypto/man/man3/SMIME_read_ASN1.3 | 6 +- secure/lib/libcrypto/man/man3/SMIME_read_CMS.3 | 6 +- secure/lib/libcrypto/man/man3/SMIME_read_PKCS7.3 | 6 +- secure/lib/libcrypto/man/man3/SMIME_write_ASN1.3 | 6 +- secure/lib/libcrypto/man/man3/SMIME_write_CMS.3 | 6 +- secure/lib/libcrypto/man/man3/SMIME_write_PKCS7.3 | 6 +- secure/lib/libcrypto/man/man3/SRP_Calc_B.3 | 6 +- secure/lib/libcrypto/man/man3/SRP_VBASE_new.3 | 6 +- .../lib/libcrypto/man/man3/SRP_create_verifier.3 | 6 +- secure/lib/libcrypto/man/man3/SRP_user_pwd_new.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CIPHER_get_name.3 | 6 +- .../man/man3/SSL_COMP_add_compression_method.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CONF_CTX_new.3 | 6 +- .../libcrypto/man/man3/SSL_CONF_CTX_set1_prefix.3 | 6 +- .../libcrypto/man/man3/SSL_CONF_CTX_set_flags.3 | 6 +- .../libcrypto/man/man3/SSL_CONF_CTX_set_ssl_ctx.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CONF_cmd.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CONF_cmd_argv.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_add1_chain_cert.3 | 6 +- .../man/man3/SSL_CTX_add_extra_chain_cert.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CTX_add_session.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CTX_config.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CTX_ctrl.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CTX_dane_enable.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_flush_sessions.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CTX_free.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CTX_get0_param.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_get_verify_mode.3 | 6 +- .../man/man3/SSL_CTX_has_client_custom_ext.3 | 6 +- .../man/man3/SSL_CTX_load_verify_locations.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CTX_new.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CTX_sess_number.3 | 6 +- .../man/man3/SSL_CTX_sess_set_cache_size.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_sess_set_get_cb.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CTX_sessions.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CTX_set0_CA_list.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CTX_set1_curves.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CTX_set1_sigalgs.3 | 6 +- .../man/man3/SSL_CTX_set1_verify_cert_store.3 | 6 +- .../man/man3/SSL_CTX_set_alpn_select_cb.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CTX_set_cert_cb.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_set_cert_store.3 | 6 +- .../man/man3/SSL_CTX_set_cert_verify_callback.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_set_cipher_list.3 | 6 +- .../man/man3/SSL_CTX_set_client_cert_cb.3 | 6 +- .../man/man3/SSL_CTX_set_client_hello_cb.3 | 6 +- .../man/man3/SSL_CTX_set_ct_validation_callback.3 | 6 +- .../man/man3/SSL_CTX_set_ctlog_list_file.3 | 6 +- .../man/man3/SSL_CTX_set_default_passwd_cb.3 | 6 +- .../man/man3/SSL_CTX_set_generate_session_id.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_set_info_callback.3 | 6 +- .../man/man3/SSL_CTX_set_keylog_callback.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_set_max_cert_list.3 | 6 +- .../man/man3/SSL_CTX_set_min_proto_version.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CTX_set_mode.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_set_msg_callback.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_set_num_tickets.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CTX_set_options.3 | 6 +- .../man/man3/SSL_CTX_set_psk_client_callback.3 | 6 +- .../man/man3/SSL_CTX_set_quiet_shutdown.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_set_read_ahead.3 | 6 +- .../man/man3/SSL_CTX_set_record_padding_callback.3 | 6 +- .../man/man3/SSL_CTX_set_security_level.3 | 6 +- .../man/man3/SSL_CTX_set_session_cache_mode.3 | 6 +- .../man/man3/SSL_CTX_set_session_id_context.3 | 6 +- .../man/man3/SSL_CTX_set_session_ticket_cb.3 | 6 +- .../man/man3/SSL_CTX_set_split_send_fragment.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_set_srp_password.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_set_ssl_version.3 | 6 +- .../SSL_CTX_set_stateless_cookie_generate_cb.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CTX_set_timeout.3 | 6 +- .../man3/SSL_CTX_set_tlsext_servername_callback.3 | 6 +- .../man/man3/SSL_CTX_set_tlsext_status_cb.3 | 6 +- .../man/man3/SSL_CTX_set_tlsext_ticket_key_cb.3 | 6 +- .../man/man3/SSL_CTX_set_tlsext_use_srtp.3 | 6 +- .../man/man3/SSL_CTX_set_tmp_dh_callback.3 | 6 +- .../lib/libcrypto/man/man3/SSL_CTX_set_tmp_ecdh.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_CTX_set_verify.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_use_certificate.3 | 6 +- .../man/man3/SSL_CTX_use_psk_identity_hint.3 | 6 +- .../libcrypto/man/man3/SSL_CTX_use_serverinfo.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_SESSION_free.3 | 6 +- .../libcrypto/man/man3/SSL_SESSION_get0_cipher.3 | 6 +- .../libcrypto/man/man3/SSL_SESSION_get0_hostname.3 | 6 +- .../man/man3/SSL_SESSION_get0_id_context.3 | 6 +- .../lib/libcrypto/man/man3/SSL_SESSION_get0_peer.3 | 6 +- .../man/man3/SSL_SESSION_get_compress_id.3 | 6 +- .../man/man3/SSL_SESSION_get_protocol_version.3 | 6 +- .../lib/libcrypto/man/man3/SSL_SESSION_get_time.3 | 6 +- .../libcrypto/man/man3/SSL_SESSION_has_ticket.3 | 6 +- .../libcrypto/man/man3/SSL_SESSION_is_resumable.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_SESSION_print.3 | 6 +- .../lib/libcrypto/man/man3/SSL_SESSION_set1_id.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_accept.3 | 6 +- .../lib/libcrypto/man/man3/SSL_alert_type_string.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_alloc_buffers.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_check_chain.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_clear.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_connect.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_do_handshake.3 | 6 +- .../man/man3/SSL_export_keying_material.3 | 6 +- .../libcrypto/man/man3/SSL_extension_supported.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_free.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_get0_peer_scts.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_get_SSL_CTX.3 | 6 +- .../lib/libcrypto/man/man3/SSL_get_all_async_fds.3 | 6 +- .../lib/libcrypto/man/man3/SSL_get_certificate.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_get_ciphers.3 | 6 +- .../lib/libcrypto/man/man3/SSL_get_client_random.3 | 6 +- .../libcrypto/man/man3/SSL_get_current_cipher.3 | 6 +- .../libcrypto/man/man3/SSL_get_default_timeout.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_get_error.3 | 6 +- .../lib/libcrypto/man/man3/SSL_get_extms_support.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_get_fd.3 | 6 +- .../libcrypto/man/man3/SSL_get_peer_cert_chain.3 | 6 +- .../libcrypto/man/man3/SSL_get_peer_certificate.3 | 6 +- .../man/man3/SSL_get_peer_signature_nid.3 | 6 +- .../lib/libcrypto/man/man3/SSL_get_peer_tmp_key.3 | 6 +- .../lib/libcrypto/man/man3/SSL_get_psk_identity.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_get_rbio.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_get_session.3 | 6 +- .../libcrypto/man/man3/SSL_get_shared_sigalgs.3 | 6 +- .../lib/libcrypto/man/man3/SSL_get_verify_result.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_get_version.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_group_to_name.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_in_init.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_key_update.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_library_init.3 | 6 +- .../libcrypto/man/man3/SSL_load_client_CA_file.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_new.3 | 10 ++-- secure/lib/libcrypto/man/man3/SSL_pending.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_read.3 | 6 +- .../lib/libcrypto/man/man3/SSL_read_early_data.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_rstate_string.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_session_reused.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_set1_host.3 | 6 +- .../libcrypto/man/man3/SSL_set_async_callback.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_set_bio.3 | 6 +- .../lib/libcrypto/man/man3/SSL_set_connect_state.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_set_fd.3 | 6 +- .../lib/libcrypto/man/man3/SSL_set_retry_verify.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_set_session.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_set_shutdown.3 | 6 +- .../lib/libcrypto/man/man3/SSL_set_verify_result.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_shutdown.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_state_string.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_want.3 | 6 +- secure/lib/libcrypto/man/man3/SSL_write.3 | 6 +- secure/lib/libcrypto/man/man3/TS_RESP_CTX_new.3 | 6 +- .../libcrypto/man/man3/TS_VERIFY_CTX_set_certs.3 | 6 +- secure/lib/libcrypto/man/man3/UI_STRING.3 | 6 +- secure/lib/libcrypto/man/man3/UI_UTIL_read_pw.3 | 6 +- secure/lib/libcrypto/man/man3/UI_create_method.3 | 6 +- secure/lib/libcrypto/man/man3/UI_new.3 | 6 +- secure/lib/libcrypto/man/man3/X509V3_get_d2i.3 | 6 +- secure/lib/libcrypto/man/man3/X509V3_set_ctx.3 | 6 +- secure/lib/libcrypto/man/man3/X509_ALGOR_dup.3 | 6 +- .../libcrypto/man/man3/X509_CRL_get0_by_serial.3 | 6 +- .../libcrypto/man/man3/X509_EXTENSION_set_object.3 | 6 +- secure/lib/libcrypto/man/man3/X509_LOOKUP.3 | 6 +- .../lib/libcrypto/man/man3/X509_LOOKUP_hash_dir.3 | 6 +- .../lib/libcrypto/man/man3/X509_LOOKUP_meth_new.3 | 6 +- .../man/man3/X509_NAME_ENTRY_get_object.3 | 6 +- .../man/man3/X509_NAME_add_entry_by_txt.3 | 6 +- secure/lib/libcrypto/man/man3/X509_NAME_get0_der.3 | 6 +- .../man/man3/X509_NAME_get_index_by_NID.3 | 6 +- secure/lib/libcrypto/man/man3/X509_NAME_print_ex.3 | 6 +- secure/lib/libcrypto/man/man3/X509_PUBKEY_new.3 | 6 +- secure/lib/libcrypto/man/man3/X509_SIG_get0.3 | 6 +- .../libcrypto/man/man3/X509_STORE_CTX_get_error.3 | 6 +- secure/lib/libcrypto/man/man3/X509_STORE_CTX_new.3 | 6 +- .../man/man3/X509_STORE_CTX_set_verify_cb.3 | 6 +- .../lib/libcrypto/man/man3/X509_STORE_add_cert.3 | 6 +- .../lib/libcrypto/man/man3/X509_STORE_get0_param.3 | 6 +- secure/lib/libcrypto/man/man3/X509_STORE_new.3 | 6 +- .../man/man3/X509_STORE_set_verify_cb_func.3 | 6 +- .../man/man3/X509_VERIFY_PARAM_set_flags.3 | 6 +- secure/lib/libcrypto/man/man3/X509_add_cert.3 | 6 +- secure/lib/libcrypto/man/man3/X509_check_ca.3 | 6 +- secure/lib/libcrypto/man/man3/X509_check_host.3 | 6 +- secure/lib/libcrypto/man/man3/X509_check_issued.3 | 6 +- .../libcrypto/man/man3/X509_check_private_key.3 | 6 +- secure/lib/libcrypto/man/man3/X509_check_purpose.3 | 6 +- secure/lib/libcrypto/man/man3/X509_cmp.3 | 6 +- secure/lib/libcrypto/man/man3/X509_cmp_time.3 | 6 +- secure/lib/libcrypto/man/man3/X509_digest.3 | 6 +- secure/lib/libcrypto/man/man3/X509_dup.3 | 6 +- .../man/man3/X509_get0_distinguishing_id.3 | 6 +- .../lib/libcrypto/man/man3/X509_get0_notBefore.3 | 6 +- .../lib/libcrypto/man/man3/X509_get0_signature.3 | 6 +- secure/lib/libcrypto/man/man3/X509_get0_uids.3 | 6 +- .../libcrypto/man/man3/X509_get_extension_flags.3 | 6 +- secure/lib/libcrypto/man/man3/X509_get_pubkey.3 | 6 +- .../lib/libcrypto/man/man3/X509_get_serialNumber.3 | 6 +- .../lib/libcrypto/man/man3/X509_get_subject_name.3 | 6 +- secure/lib/libcrypto/man/man3/X509_get_version.3 | 6 +- secure/lib/libcrypto/man/man3/X509_load_http.3 | 6 +- secure/lib/libcrypto/man/man3/X509_new.3 | 6 +- secure/lib/libcrypto/man/man3/X509_sign.3 | 6 +- secure/lib/libcrypto/man/man3/X509_verify.3 | 6 +- secure/lib/libcrypto/man/man3/X509_verify_cert.3 | 6 +- .../lib/libcrypto/man/man3/X509v3_get_ext_by_NID.3 | 6 +- secure/lib/libcrypto/man/man3/b2i_PVK_bio_ex.3 | 6 +- .../libcrypto/man/man3/d2i_PKCS8PrivateKey_bio.3 | 6 +- secure/lib/libcrypto/man/man3/d2i_PrivateKey.3 | 6 +- secure/lib/libcrypto/man/man3/d2i_RSAPrivateKey.3 | 12 ++-- secure/lib/libcrypto/man/man3/d2i_SSL_SESSION.3 | 6 +- secure/lib/libcrypto/man/man3/d2i_X509.3 | 8 ++- secure/lib/libcrypto/man/man3/i2d_CMS_bio_stream.3 | 6 +- .../lib/libcrypto/man/man3/i2d_PKCS7_bio_stream.3 | 6 +- secure/lib/libcrypto/man/man3/i2d_re_X509_tbs.3 | 6 +- secure/lib/libcrypto/man/man3/o2i_SCT_LIST.3 | 6 +- secure/lib/libcrypto/man/man3/s2i_ASN1_IA5STRING.3 | 6 +- secure/lib/libcrypto/man/man5/config.5 | 6 +- secure/lib/libcrypto/man/man5/fips_config.5 | 6 +- secure/lib/libcrypto/man/man5/x509v3_config.5 | 10 ++-- .../lib/libcrypto/man/man7/EVP_ASYM_CIPHER-RSA.7 | 6 +- .../lib/libcrypto/man/man7/EVP_ASYM_CIPHER-SM2.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-AES.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-ARIA.7 | 6 +- .../lib/libcrypto/man/man7/EVP_CIPHER-BLOWFISH.7 | 6 +- .../lib/libcrypto/man/man7/EVP_CIPHER-CAMELLIA.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-CAST.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-CHACHA.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-DES.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-IDEA.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-NULL.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-RC2.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-RC4.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-RC5.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-SEED.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_CIPHER-SM4.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-HKDF.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-KB.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-KRB5KDF.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF1.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF2.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-PKCS12KDF.7 | 14 +++-- secure/lib/libcrypto/man/man7/EVP_KDF-SCRYPT.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-SS.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-SSHKDF.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-TLS13_KDF.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-TLS1_PRF.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-X942-ASN1.7 | 6 +- .../lib/libcrypto/man/man7/EVP_KDF-X942-CONCAT.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KDF-X963.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KEM-RSA.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KEYEXCH-DH.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KEYEXCH-ECDH.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_KEYEXCH-X25519.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MAC-BLAKE2.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MAC-CMAC.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MAC-GMAC.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MAC-HMAC.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MAC-KMAC.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MAC-Poly1305.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MAC-Siphash.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-BLAKE2.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-MD2.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-MD4.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-MD5-SHA1.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-MD5.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-MDC2.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-NULL.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-RIPEMD160.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-SHA1.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-SHA2.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-SHA3.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-SHAKE.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-SM3.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-WHIRLPOOL.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_MD-common.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_PKEY-DH.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_PKEY-DSA.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_PKEY-EC.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_PKEY-FFC.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_PKEY-HMAC.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_PKEY-RSA.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_PKEY-SM2.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_PKEY-X25519.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_RAND-CTR-DRBG.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_RAND-HASH-DRBG.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_RAND-HMAC-DRBG.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_RAND-SEED-SRC.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_RAND-TEST-RAND.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_RAND.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_SIGNATURE-DSA.7 | 6 +- .../lib/libcrypto/man/man7/EVP_SIGNATURE-ECDSA.7 | 6 +- .../lib/libcrypto/man/man7/EVP_SIGNATURE-ED25519.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_SIGNATURE-HMAC.7 | 6 +- secure/lib/libcrypto/man/man7/EVP_SIGNATURE-RSA.7 | 6 +- secure/lib/libcrypto/man/man7/OSSL_PROVIDER-FIPS.7 | 6 +- secure/lib/libcrypto/man/man7/OSSL_PROVIDER-base.7 | 6 +- .../lib/libcrypto/man/man7/OSSL_PROVIDER-default.7 | 6 +- .../lib/libcrypto/man/man7/OSSL_PROVIDER-legacy.7 | 6 +- secure/lib/libcrypto/man/man7/OSSL_PROVIDER-null.7 | 6 +- secure/lib/libcrypto/man/man7/RAND.7 | 6 +- secure/lib/libcrypto/man/man7/RSA-PSS.7 | 6 +- secure/lib/libcrypto/man/man7/X25519.7 | 6 +- secure/lib/libcrypto/man/man7/bio.7 | 6 +- secure/lib/libcrypto/man/man7/crypto.7 | 6 +- secure/lib/libcrypto/man/man7/ct.7 | 6 +- secure/lib/libcrypto/man/man7/des_modes.7 | 6 +- secure/lib/libcrypto/man/man7/evp.7 | 6 +- secure/lib/libcrypto/man/man7/fips_module.7 | 14 ++--- secure/lib/libcrypto/man/man7/life_cycle-cipher.7 | 6 +- secure/lib/libcrypto/man/man7/life_cycle-digest.7 | 6 +- secure/lib/libcrypto/man/man7/life_cycle-kdf.7 | 6 +- secure/lib/libcrypto/man/man7/life_cycle-mac.7 | 6 +- secure/lib/libcrypto/man/man7/life_cycle-pkey.7 | 6 +- secure/lib/libcrypto/man/man7/life_cycle-rand.7 | 6 +- secure/lib/libcrypto/man/man7/migration_guide.7 | 16 +++++- secure/lib/libcrypto/man/man7/openssl-core.h.7 | 6 +- .../libcrypto/man/man7/openssl-core_dispatch.h.7 | 6 +- .../lib/libcrypto/man/man7/openssl-core_names.h.7 | 6 +- secure/lib/libcrypto/man/man7/openssl-env.7 | 6 +- secure/lib/libcrypto/man/man7/openssl-glossary.7 | 6 +- secure/lib/libcrypto/man/man7/openssl-threads.7 | 6 +- .../lib/libcrypto/man/man7/openssl_user_macros.7 | 6 +- secure/lib/libcrypto/man/man7/ossl_store-file.7 | 6 +- secure/lib/libcrypto/man/man7/ossl_store.7 | 6 +- .../lib/libcrypto/man/man7/passphrase-encoding.7 | 6 +- secure/lib/libcrypto/man/man7/property.7 | 6 +- .../lib/libcrypto/man/man7/provider-asym_cipher.7 | 6 +- secure/lib/libcrypto/man/man7/provider-base.7 | 6 +- secure/lib/libcrypto/man/man7/provider-cipher.7 | 6 +- secure/lib/libcrypto/man/man7/provider-decoder.7 | 6 +- secure/lib/libcrypto/man/man7/provider-digest.7 | 6 +- secure/lib/libcrypto/man/man7/provider-encoder.7 | 6 +- secure/lib/libcrypto/man/man7/provider-kdf.7 | 6 +- secure/lib/libcrypto/man/man7/provider-kem.7 | 6 +- secure/lib/libcrypto/man/man7/provider-keyexch.7 | 6 +- secure/lib/libcrypto/man/man7/provider-keymgmt.7 | 6 +- secure/lib/libcrypto/man/man7/provider-mac.7 | 6 +- secure/lib/libcrypto/man/man7/provider-object.7 | 6 +- secure/lib/libcrypto/man/man7/provider-rand.7 | 6 +- secure/lib/libcrypto/man/man7/provider-signature.7 | 6 +- secure/lib/libcrypto/man/man7/provider-storemgmt.7 | 6 +- secure/lib/libcrypto/man/man7/provider.7 | 6 +- secure/lib/libcrypto/man/man7/proxy-certificates.7 | 6 +- secure/lib/libcrypto/man/man7/ssl.7 | 6 +- secure/lib/libcrypto/man/man7/x509.7 | 6 +- secure/usr.bin/openssl/man/CA.pl.1 | 6 +- secure/usr.bin/openssl/man/openssl-asn1parse.1 | 6 +- secure/usr.bin/openssl/man/openssl-ca.1 | 8 +-- secure/usr.bin/openssl/man/openssl-ciphers.1 | 6 +- secure/usr.bin/openssl/man/openssl-cmds.1 | 6 +- secure/usr.bin/openssl/man/openssl-cmp.1 | 37 ++++++++----- secure/usr.bin/openssl/man/openssl-cms.1 | 10 ++-- secure/usr.bin/openssl/man/openssl-crl.1 | 6 +- secure/usr.bin/openssl/man/openssl-crl2pkcs7.1 | 6 +- secure/usr.bin/openssl/man/openssl-dgst.1 | 6 +- secure/usr.bin/openssl/man/openssl-dhparam.1 | 6 +- secure/usr.bin/openssl/man/openssl-dsa.1 | 6 +- secure/usr.bin/openssl/man/openssl-dsaparam.1 | 6 +- secure/usr.bin/openssl/man/openssl-ec.1 | 6 +- secure/usr.bin/openssl/man/openssl-ecparam.1 | 6 +- secure/usr.bin/openssl/man/openssl-enc.1 | 6 +- secure/usr.bin/openssl/man/openssl-engine.1 | 6 +- secure/usr.bin/openssl/man/openssl-errstr.1 | 6 +- secure/usr.bin/openssl/man/openssl-fipsinstall.1 | 6 +- .../usr.bin/openssl/man/openssl-format-options.1 | 6 +- secure/usr.bin/openssl/man/openssl-gendsa.1 | 6 +- secure/usr.bin/openssl/man/openssl-genpkey.1 | 6 +- secure/usr.bin/openssl/man/openssl-genrsa.1 | 6 +- secure/usr.bin/openssl/man/openssl-info.1 | 6 +- secure/usr.bin/openssl/man/openssl-kdf.1 | 6 +- secure/usr.bin/openssl/man/openssl-list.1 | 6 +- secure/usr.bin/openssl/man/openssl-mac.1 | 6 +- .../openssl/man/openssl-namedisplay-options.1 | 6 +- secure/usr.bin/openssl/man/openssl-nseq.1 | 6 +- secure/usr.bin/openssl/man/openssl-ocsp.1 | 6 +- .../openssl/man/openssl-passphrase-options.1 | 6 +- secure/usr.bin/openssl/man/openssl-passwd.1 | 6 +- secure/usr.bin/openssl/man/openssl-pkcs12.1 | 6 +- secure/usr.bin/openssl/man/openssl-pkcs7.1 | 6 +- secure/usr.bin/openssl/man/openssl-pkcs8.1 | 6 +- secure/usr.bin/openssl/man/openssl-pkey.1 | 6 +- secure/usr.bin/openssl/man/openssl-pkeyparam.1 | 6 +- secure/usr.bin/openssl/man/openssl-pkeyutl.1 | 6 +- secure/usr.bin/openssl/man/openssl-prime.1 | 6 +- secure/usr.bin/openssl/man/openssl-rand.1 | 6 +- secure/usr.bin/openssl/man/openssl-rehash.1 | 8 +-- secure/usr.bin/openssl/man/openssl-req.1 | 6 +- secure/usr.bin/openssl/man/openssl-rsa.1 | 6 +- secure/usr.bin/openssl/man/openssl-rsautl.1 | 6 +- secure/usr.bin/openssl/man/openssl-s_client.1 | 6 +- secure/usr.bin/openssl/man/openssl-s_server.1 | 6 +- secure/usr.bin/openssl/man/openssl-s_time.1 | 6 +- secure/usr.bin/openssl/man/openssl-sess_id.1 | 6 +- secure/usr.bin/openssl/man/openssl-smime.1 | 6 +- secure/usr.bin/openssl/man/openssl-speed.1 | 6 +- secure/usr.bin/openssl/man/openssl-spkac.1 | 6 +- secure/usr.bin/openssl/man/openssl-srp.1 | 6 +- secure/usr.bin/openssl/man/openssl-storeutl.1 | 6 +- secure/usr.bin/openssl/man/openssl-ts.1 | 10 ++-- .../openssl/man/openssl-verification-options.1 | 6 +- secure/usr.bin/openssl/man/openssl-verify.1 | 6 +- secure/usr.bin/openssl/man/openssl-version.1 | 6 +- secure/usr.bin/openssl/man/openssl-x509.1 | 6 +- secure/usr.bin/openssl/man/openssl.1 | 6 +- secure/usr.bin/openssl/man/tsget.1 | 6 +- 868 files changed, 2999 insertions(+), 2665 deletions(-) diff --git a/crypto/openssl/CHANGES.md b/crypto/openssl/CHANGES.md index d5c0ba8daf1b..a26bdbdd0ad0 100644 --- a/crypto/openssl/CHANGES.md +++ b/crypto/openssl/CHANGES.md @@ -28,6 +28,30 @@ breaking changes, and mappings for the large list of deprecated functions. [Migration guide]: https://github.com/openssl/openssl/tree/master/doc/man7/migration_guide.pod +### Changes between 3.0.10 and 3.0.11 [19 Sep 2023] + + * Fix POLY1305 MAC implementation corrupting XMM registers on Windows. + + The POLY1305 MAC (message authentication code) implementation in OpenSSL + does not save the contents of non-volatile XMM registers on Windows 64 + platform when calculating the MAC of data larger than 64 bytes. Before + returning to the caller all the XMM registers are set to zero rather than + restoring their previous content. The vulnerable code is used only on newer + x86_64 processors supporting the AVX512-IFMA instructions. + + The consequences of this kind of internal application state corruption can + be various - from no consequences, if the calling application does not + depend on the contents of non-volatile XMM registers at all, to the worst + consequences, where the attacker could get complete control of the + application process. However given the contents of the registers are just + zeroized so the attacker cannot put arbitrary values inside, the most likely + consequence, if any, would be an incorrect result of some application + dependent calculations or a crash leading to a denial of service. + + ([CVE-2023-4807]) + + *Bernd Edlinger* + ### Changes between 3.0.9 and 3.0.10 [1 Aug 2023] * Fix excessive time spent checking DH q parameter value. @@ -19708,6 +19732,7 @@ ndif +[CVE-2023-4807]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-4807 [CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817 [CVE-2023-3446]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3446 [CVE-2023-2975]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-2975 diff --git a/crypto/openssl/NEWS.md b/crypto/openssl/NEWS.md index feed90269760..f7ca47baff87 100644 --- a/crypto/openssl/NEWS.md +++ b/crypto/openssl/NEWS.md @@ -18,6 +18,11 @@ OpenSSL Releases OpenSSL 3.0 ----------- +### Major changes between OpenSSL 3.0.10 and OpenSSL 3.0.11 [19 Sep 2023] + + * Fix POLY1305 MAC implementation corrupting XMM registers on Windows + ([CVE-2023-4807]) + ### Major changes between OpenSSL 3.0.9 and OpenSSL 3.0.10 [1 Aug 2023] * Fix excessive time spent checking DH q parameter value ([CVE-2023-3817]) @@ -1448,6 +1453,7 @@ OpenSSL 0.9.x +[CVE-2023-4807]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-4807 [CVE-2023-3817]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3817 [CVE-2023-3446]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-3446 [CVE-2023-2975]: https://www.openssl.org/news/vulnerabilities.html#CVE-2023-2975 diff --git a/crypto/openssl/README.md b/crypto/openssl/README.md index f2f4fd39ad05..b848d050132a 100644 --- a/crypto/openssl/README.md +++ b/crypto/openssl/README.md @@ -166,7 +166,7 @@ attempting to develop or distribute cryptographic code. Copyright ========= -Copyright (c) 1998-2022 The OpenSSL Project +Copyright (c) 1998-2023 The OpenSSL Project Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson diff --git a/crypto/openssl/VERSION.dat b/crypto/openssl/VERSION.dat index 34658d316b4c..c4157a86274d 100644 --- a/crypto/openssl/VERSION.dat +++ b/crypto/openssl/VERSION.dat @@ -1,7 +1,7 @@ MAJOR=3 MINOR=0 -PATCH=10 +PATCH=11 PRE_RELEASE_TAG= BUILD_METADATA= -RELEASE_DATE="1 Aug 2023" +RELEASE_DATE="19 Sep 2023" SHLIB_VERSION=3 diff --git a/crypto/openssl/apps/cmp.c b/crypto/openssl/apps/cmp.c *** 19492 LINES SKIPPED ***