Files
bpfire/config/rootfiles/common
Adolf Belka acf2754880 openssl: Update to version 3.3.0
- Update from version 3.2.1 to 3.3.0
- Update of rootfile
- Changelog
    3.3
	This release adds the following new features:
	  * Support for qlog for tracing QUIC connections has been added
	  * Added APIs to allow configuring the negotiated idle timeout for QUIC
	    connections, and to allow determining the number of additional streams
	    that can currently be created for a QUIC connection.
	  * Added APIs to allow disabling implicit QUIC event processing for QUIC SSL
	    objects
	  * Added APIs to allow querying the size and utilisation of a QUIC stream's
	    write buffer
	  * New API `SSL_write_ex2`, which can be used to send an end-of-stream (FIN)
	    condition in an optimised way when using QUIC.
	  * Limited support for polling of QUIC connection and stream objects in a
	    non-blocking manner.
	  * Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
	    times with different output sizes.
	  * Added exporter for CMake on Unix and Windows, alongside the pkg-config
	    exporter.
	  * The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
	    output length.
	  * The EVP_PKEY_fromdata function has been augmented to allow for the
	    derivation of CRT (Chinese Remainder Theorem) parameters when requested
	  * Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
	    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
	    is enabled
	  * Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
	    config options and the respective calls to SSL[_CTX]_set1_sigalgs() and
	    SSL[_CTX]_set1_client_sigalgs() that start with `?` character are
	    ignored and the configuration will still be used.
	  * Added `-set_issuer` and `-set_subject` options to `openssl x509` to
	    override the Issuer and Subject when creating a certificate. The `-subj`
	    option now is an alias for `-set_subject`.
	  * Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
	  * New option `SSL_OP_PREFER_NO_DHE_KEX`, which allows configuring a TLS1.3
	    server to prefer session resumption using PSK-only key exchange over PSK
	    with DHE, if both are available.
	  * New atexit configuration switch, which controls whether the OPENSSL_cleanup
	    is registered when libcrypto is unloaded.
	  * Added X509_STORE_get1_objects to avoid issues with the existing
	    X509_STORE_get0_objects API in multi-threaded applications.
	This release incorporates the following potentially significant or incompatible
	changes:
	  * Applied AES-GCM unroll8 optimisation to Microsoft Azure Cobalt 100
	  * Optimized AES-CTR for ARM Neoverse V1 and V2
	  * Enable AES and SHA3 optimisations on Applie Silicon M3-based MacOS systems
	    similar to M1/M2.
	  * Various optimizations for cryptographic routines using RISC-V vector crypto
	    extensions
	  * Added assembly implementation for md5 on loongarch64
	  * Accept longer context for TLS 1.2 exporters
	  * The activate and soft_load configuration settings for providers in
	    openssl.cnf have been updated to require a value of [1|yes|true|on]
	    (in lower or UPPER case) to enable the setting. Conversely a value
	    of [0|no|false|off] will disable the setting.
	  * In `openssl speed`, changed the default hash function used with `hmac` from
	    `md5` to `sha256`.
	  * The `-verify` option to the `openssl crl` and `openssl req` will make the
	    program exit with 1 on failure.
	  * The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(), and
	    related functions have been augmented to check for a minimum length of
	    the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
	  * OPENSSL_sk_push() and sk_<TYPE>_push() functions now return 0 instead of -1
	    if called with a NULL stack argument.
	  * New limit on HTTP response headers is introduced to HTTP client. The
	    default limit is set to 256 header lines.
	This release incorporates the following bug fixes and mitigations:
	  * The BIO_get_new_index() function can only be called 127 times before it
	    reaches its upper bound of BIO_TYPE_MASK and will now return -1 once its
	    exhausted.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
2024-08-06 09:10:28 +00:00
..
2024-07-23 17:27:42 +02:00
2024-07-23 17:27:42 +02:00
2024-07-23 17:27:42 +02:00
2024-01-31 10:27:12 +00:00
2023-04-18 21:16:24 +00:00
2023-01-23 15:21:08 +00:00
2023-04-25 12:35:52 +00:00
2023-04-18 21:17:23 +00:00
2015-12-13 22:28:15 +00:00
2008-10-11 00:50:29 +02:00
2024-04-08 10:14:55 +02:00
2021-02-12 11:54:42 +00:00
2020-05-01 19:08:38 +00:00
2017-06-07 09:55:27 +01:00
2020-05-09 12:03:23 +00:00
2024-07-02 09:18:29 +00:00
2021-11-24 09:09:47 +00:00
2017-09-22 18:56:04 +01:00
2013-08-28 11:18:37 +02:00
2021-03-29 12:53:09 +00:00
2023-01-26 23:19:05 +00:00
2018-07-14 13:43:49 +01:00
2021-05-06 09:54:21 +00:00
2023-03-05 14:15:52 +00:00
2024-07-22 15:21:21 +00:00
2024-06-14 07:47:54 +02:00
2024-07-02 09:06:23 +00:00
2022-02-11 09:17:36 +00:00
2018-06-25 10:54:36 +01:00
2022-02-23 15:46:45 +00:00
2017-04-17 12:36:49 +01:00
2021-10-22 09:59:20 +00:00
2024-03-26 07:33:40 +00:00
2021-09-05 17:48:28 +00:00
2021-03-29 12:54:50 +00:00
2024-03-12 10:15:49 +00:00
2023-03-05 15:00:03 +00:00
2021-05-20 09:47:41 +00:00
2024-03-14 18:37:58 +00:00
2021-02-03 22:23:13 +00:00
2020-11-05 23:29:18 +00:00
2021-12-09 21:04:50 +01:00
2022-02-11 09:17:46 +00:00
2015-05-03 21:51:04 +02:00
2017-06-07 09:55:16 +01:00
2013-04-12 12:43:27 +02:00
2023-09-12 16:12:53 +00:00
2021-12-09 21:08:10 +01:00
2023-07-26 16:09:00 +00:00
2023-11-21 19:09:32 +00:00
2021-10-22 16:02:22 +00:00
2024-03-12 10:15:49 +00:00
2022-01-14 13:46:00 +00:00
2024-07-22 15:21:21 +00:00
2024-03-12 10:15:49 +00:00
2023-08-08 16:02:35 +00:00
2016-08-23 13:04:47 -04:00
2024-07-02 09:05:03 +00:00
2013-07-03 21:38:17 +02:00
2012-08-20 11:39:23 +02:00
2023-07-31 09:23:03 +00:00
2020-04-30 14:52:53 +00:00
2023-11-21 19:12:54 +00:00
2018-02-11 20:56:12 +00:00
2018-07-12 10:03:34 +01:00
2024-03-12 10:15:49 +00:00
2024-03-26 07:36:02 +00:00
2024-03-14 14:07:58 +00:00
2023-01-05 10:47:40 +00:00
2023-01-18 23:23:06 +00:00
2023-01-05 10:47:09 +00:00
2010-09-15 17:43:06 +02:00
2021-11-24 09:05:10 +00:00
2023-11-21 19:01:29 +00:00
2013-10-15 16:46:15 +02:00
2023-08-29 09:51:28 +00:00
2024-06-26 15:20:48 +02:00
2023-01-09 18:36:05 +00:00
2024-04-28 21:04:28 +00:00
2024-03-12 10:15:49 +00:00
2023-08-29 09:54:23 +00:00
2009-05-17 17:24:59 +02:00
2023-12-30 07:33:44 +00:00
2012-08-24 16:22:24 +02:00
2022-04-30 08:56:30 +00:00
2023-07-31 09:19:33 +00:00
2023-06-15 09:35:38 +00:00
2021-04-26 17:08:53 +00:00
2022-12-26 08:30:22 +00:00
2021-04-26 17:10:13 +00:00
2024-03-12 10:15:49 +00:00
2024-01-11 11:58:34 +00:00
2022-12-17 17:20:45 +00:00
2019-12-29 19:09:27 +00:00
2024-01-23 14:00:08 +00:00
2022-05-16 07:11:45 +00:00
2022-12-27 16:24:23 +00:00
2023-08-10 06:34:27 +00:00
2016-09-24 13:07:13 +01:00
2022-12-27 16:34:44 +00:00
2015-12-11 18:47:20 +00:00
2015-06-23 13:37:57 +02:00
2023-09-12 16:14:53 +00:00
2022-09-01 21:16:50 +00:00
2023-05-03 07:28:37 +00:00
2024-01-31 10:28:33 +00:00
2022-12-27 20:44:38 +00:00
2014-08-20 21:45:12 +02:00
2023-11-22 21:35:32 +00:00
2024-01-11 11:59:09 +00:00
2022-11-28 13:09:53 +01:00
2023-09-12 16:15:41 +00:00
2023-01-26 23:11:22 +00:00
2023-03-05 15:13:24 +00:00
2022-01-14 20:45:24 +00:00
2021-02-22 11:28:11 +00:00
2024-01-03 21:07:37 +00:00
2022-12-26 08:40:14 +00:00
2024-01-25 10:23:03 +00:00
2023-11-22 15:26:28 +00:00
2017-04-28 13:04:19 +01:00
2023-03-05 14:53:06 +00:00
2023-11-21 19:27:56 +00:00
2023-05-03 07:48:03 +00:00
2023-01-26 23:17:50 +00:00
2021-02-05 11:24:35 +00:00
2021-02-09 12:00:04 +00:00
2021-12-03 22:51:39 +01:00
2024-07-22 15:21:21 +00:00
2020-01-04 18:23:52 +00:00
2022-11-18 14:37:25 +00:00
2024-03-14 14:08:54 +00:00
2021-01-27 21:06:57 +00:00
2013-10-24 15:20:48 +02:00
2023-08-24 13:42:04 +00:00
2012-08-07 20:21:06 +02:00
2024-07-22 15:21:21 +00:00
2021-02-08 13:51:04 +00:00
2023-06-15 09:36:10 +00:00
2024-03-12 10:15:49 +00:00
2020-12-27 10:29:55 +00:00
2018-06-30 19:51:38 +01:00
2022-03-10 10:40:37 +00:00
2024-06-27 15:48:35 +02:00
2022-06-17 10:20:18 +00:00
2024-03-12 10:15:49 +00:00
2022-04-29 18:59:39 +00:00
2024-08-06 09:10:28 +00:00
2024-06-14 14:16:41 +02:00
2023-12-30 07:25:59 +00:00
2024-06-26 15:22:23 +02:00
2024-03-12 10:15:49 +00:00
2023-04-24 18:54:21 +00:00
2014-07-23 22:57:47 +02:00
2024-03-12 10:15:49 +00:00
2021-08-16 06:52:19 +00:00
2024-07-22 15:21:21 +00:00
2024-03-12 10:15:49 +00:00
2022-09-01 21:16:51 +00:00
2022-09-01 21:16:51 +00:00
2022-09-01 21:16:51 +00:00
2022-09-01 21:16:51 +00:00
2022-09-01 21:16:51 +00:00
2022-09-01 21:16:50 +00:00
2024-03-30 12:09:14 +00:00
2022-09-01 21:16:50 +00:00
2022-09-01 21:16:50 +00:00
2024-03-12 10:15:49 +00:00
2024-03-14 14:10:15 +00:00
2021-04-10 13:39:32 +00:00
2023-08-08 16:07:28 +00:00
2008-12-12 16:19:56 +01:00
2023-09-12 16:18:08 +00:00
2024-03-30 12:14:37 +00:00
2022-12-26 08:56:24 +00:00
2023-01-19 21:38:18 +00:00
2022-02-21 21:13:50 +00:00
2023-10-30 09:53:48 +00:00
2024-03-12 10:15:49 +00:00
2022-06-17 10:20:18 +00:00
2008-10-11 00:50:29 +02:00
2023-03-05 14:15:52 +00:00
2017-05-19 17:44:13 +01:00
2020-08-16 10:29:42 +00:00
2024-08-03 09:42:07 +00:00
2022-02-02 19:43:26 +00:00
2022-02-09 13:48:03 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2022-02-09 13:48:34 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-09 13:52:30 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:26 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:24 +00:00
2022-02-02 19:43:25 +00:00
2022-02-02 19:43:27 +00:00
2022-02-02 19:43:25 +00:00
2024-06-26 15:23:45 +02:00
2012-08-12 16:39:18 -04:00
2018-07-12 10:03:34 +01:00
2024-07-22 15:21:21 +00:00
2023-04-18 21:15:28 +00:00
2020-03-29 06:34:18 +00:00
2021-03-10 13:59:29 +00:00
2021-10-13 12:13:04 +00:00
2024-03-12 10:15:49 +00:00
2021-01-06 15:21:42 +00:00
2023-11-21 19:23:18 +00:00
2024-02-10 11:56:23 +00:00
2022-11-23 12:25:36 +00:00
2021-09-05 08:42:10 +00:00
2017-01-29 19:30:13 +00:00
2022-11-29 13:42:35 +01:00
2023-10-09 08:17:23 +00:00
2024-03-12 10:15:49 +00:00
2024-03-14 14:11:22 +00:00
2023-11-22 21:41:02 +00:00
2023-03-04 14:07:22 +00:00
2023-10-30 09:53:48 +00:00
2024-05-25 10:55:20 +02:00
2017-04-06 10:06:08 +01:00
2023-11-21 19:23:58 +00:00
2009-03-28 11:01:11 +01:00
2024-06-27 08:02:51 +02:00
2020-04-30 14:56:49 +00:00
2013-12-26 14:03:31 +01:00
2016-07-16 10:53:53 +01:00
2021-04-26 17:04:00 +00:00
2024-07-02 09:15:58 +00:00
2020-10-15 15:33:44 +00:00
2024-01-31 10:29:47 +00:00
2024-07-02 09:16:27 +00:00