[Midnightbsd-cvs] [MidnightBSD/src] c62c24: Vendor import of OpenSSL 3.0.21

Wed Jul 1 15:59:45 EDT 2026

  Branch: refs/heads/stable/4.1
  Home:   https://github.com/MidnightBSD/src
  Commit: c62c244b69fc176f5d8f36ce50139102cfa69a9f
      https://github.com/MidnightBSD/src/commit/c62c244b69fc176f5d8f36ce50139102cfa69a9f
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M CHANGES.md
    M NEWS.md
    M VERSION.dat
    M apps/list.c
    M apps/s_client.c
    M apps/speed.c
    M apps/testdsa.h
    M apps/testrsa.h
    M crypto/aes/asm/aesfx-sparcv9.pl
    M crypto/asn1/a_d2i_fp.c
    M crypto/asn1/a_mbstr.c
    M crypto/asn1/asn1_lib.c
    M crypto/asn1/asn_mime.c
    M crypto/asn1/tasn_dec.c
    M crypto/bn/bn_const.c
    M crypto/bn/bn_mod.c
    M crypto/cast/cast_s.h
    M crypto/cms/cms_enc.c
    M crypto/cms/cms_env.c
    M crypto/cms/cms_err.c
    M crypto/cms/cms_local.h
    M crypto/cms/cms_pwri.c
    M crypto/crmf/crmf_lib.c
    M crypto/des/fcrypt.c
    M crypto/ec/curve448/scalar.c
    M crypto/ec/curve448/word.h
    M crypto/ec/ec_curve.c
    M crypto/ec/ec_lib.c
    M crypto/ec/ecp_s390x_nistp.c
    M crypto/err/openssl.txt
    M crypto/evp/e_aes.c
    M crypto/evp/encode.c
    M crypto/evp/evp_lib.c
    M crypto/ffc/ffc_params.c
    M crypto/http/http_client.c
    M crypto/http/http_lib.c
    M crypto/md2/md2_dgst.c
    M crypto/modes/wrap128.c
    M crypto/objects/obj_dat.c
    M crypto/param_build_set.c
    M crypto/pkcs12/p12_decr.c
    M crypto/pkcs7/pk7_smime.c
    M crypto/rc2/rc2_skey.c
    M crypto/sm2/sm2_crypt.c
    M crypto/sm2/sm2_sign.c
    M crypto/x509/v3_ist.c
    M demos/cipher/aeskeywrap.c
    M demos/cipher/ariacbc.c
    M demos/digest/EVP_MD_demo.c
    M demos/mac/cmac-aes256.c
    M demos/mac/hmac-sha512.c
    M demos/signature/EVP_Signature_demo.h
    M doc/fingerprints.txt
    M doc/man1/openssl-format-options.pod
    M doc/man1/openssl-pkcs8.pod.in
    M doc/man1/openssl-rehash.pod.in
    M doc/man1/openssl-s_client.pod.in
    M doc/man1/openssl-s_server.pod.in
    M doc/man1/openssl-smime.pod.in
    M doc/man3/BIO_s_bio.pod
    M doc/man3/BN_add.pod
    M doc/man3/EVP_EncryptInit.pod
    M doc/man3/OSSL_HTTP_REQ_CTX.pod
    M doc/man3/OSSL_HTTP_parse_url.pod
    M doc/man3/OSSL_HTTP_transfer.pod
    M doc/man3/PKCS7_decrypt.pod
    M doc/man3/SSL_CTX_set_session_cache_mode.pod
    M doc/man3/SSL_CTX_set_session_id_context.pod
    M doc/man3/SSL_CTX_set_tlsext_servername_callback.pod
    M doc/man3/d2i_X509.pod
    M doc/man7/EVP_CIPHER-AES.pod
    M doc/man7/openssl-env.pod
    M doc/man7/provider-asym_cipher.pod
    M fuzz/server.c
    M include/crypto/cmserr.h
    M include/openssl/bn.h
    M include/openssl/cmserr.h
    M include/openssl/ssl.h.in
    M providers/defltprov.c
    M providers/fips-sources.checksums
    M providers/fips.checksum
    M providers/implementations/ciphers/cipher_aes_ocb.c
    M providers/implementations/ciphers/cipher_aes_siv.c
    M providers/implementations/exchange/dh_exch.c
    M providers/implementations/include/prov/implementations.h
    M providers/implementations/keymgmt/ecx_kmgmt.c
    M providers/implementations/macs/poly1305_prov.c
    M providers/implementations/signature/rsa_sig.c
    M ssl/record/rec_layer_s3.c
    M ssl/ssl_ciph.c
    M ssl/statem/extensions_srvr.c
    M ssl/statem/statem.c
    M ssl/statem/statem_lib.c
    M test/bad_dtls_test.c
    M test/build.info
    M test/cipherlist_test.c
    A test/cms-msg/enveloped-content-type-for-aes-gcm.pem
    A test/cms-msg/make_missing_kdf_der.py
    A test/cms-msg/missing-kdf.der
    M test/cmsapitest.c
    M test/destest.c
    M test/dsatest.c
    M test/ectest.c
    M test/endecode_test.c
    M test/enginetest.c
    M test/evp_extra_test.c
    M test/evp_extra_test2.c
    M test/evp_kdf_test.c
    M test/evp_libctx_test.c
    M test/evp_pkey_provided_test.c
    M test/helpers/predefined_dhparams.c
    M test/http_test.c
    M test/ideatest.c
    M test/pbetest.c
    M test/pkcs12_format_test.c
    A test/recipes/70-test_tls13ticket.t
    M test/recipes/80-test_cms.t
    M test/recipes/80-test_cmsapi.t
    A test/recipes/80-test_cmsapi_data/cms_pwri_kek_oob.der
    M test/siphash_internal_test.c
    A test/smime-eml/pkcs7-empty-digest-set.eml
    M test/sslapitest.c
    M test/stack_test.c
    A test/tls13tickettest.c
    M util/missingcrypto.txt
    M util/missingcrypto111.txt

  Log Message:
  -----------
  Vendor import of OpenSSL 3.0.21

Import OpenSSL 3.0.21 from the upstream openssl-3.0.21 tag.

Upstream tag: openssl-3.0.21

Upstream tag object: d2a6bf8fdd03fa22182ef33814f0b7d0350f04fd

AI-Assisted-by: OpenAI Codex

  Commit: e4b5a27af2048d696e40bfabe5ab9e6ec67b46ad
      https://github.com/MidnightBSD/src/commit/e4b5a27af2048d696e40bfabe5ab9e6ec67b46ad
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M crypto/openssl/CHANGES.md
    M crypto/openssl/NEWS.md
    M crypto/openssl/VERSION.dat
    M crypto/openssl/apps/list.c
    M crypto/openssl/apps/s_client.c
    M crypto/openssl/apps/speed.c
    M crypto/openssl/apps/testdsa.h
    M crypto/openssl/apps/testrsa.h
    M crypto/openssl/crypto/aes/asm/aesfx-sparcv9.pl
    M crypto/openssl/crypto/asn1/a_d2i_fp.c
    M crypto/openssl/crypto/asn1/a_mbstr.c
    M crypto/openssl/crypto/asn1/asn1_lib.c
    M crypto/openssl/crypto/asn1/asn_mime.c
    M crypto/openssl/crypto/asn1/tasn_dec.c
    M crypto/openssl/crypto/bn/bn_const.c
    M crypto/openssl/crypto/bn/bn_mod.c
    M crypto/openssl/crypto/cast/cast_s.h
    M crypto/openssl/crypto/cms/cms_enc.c
    M crypto/openssl/crypto/cms/cms_env.c
    M crypto/openssl/crypto/cms/cms_err.c
    M crypto/openssl/crypto/cms/cms_local.h
    M crypto/openssl/crypto/cms/cms_pwri.c
    M crypto/openssl/crypto/crmf/crmf_lib.c
    M crypto/openssl/crypto/des/fcrypt.c
    M crypto/openssl/crypto/ec/curve448/scalar.c
    M crypto/openssl/crypto/ec/curve448/word.h
    M crypto/openssl/crypto/ec/ec_curve.c
    M crypto/openssl/crypto/ec/ec_lib.c
    M crypto/openssl/crypto/ec/ecp_s390x_nistp.c
    M crypto/openssl/crypto/err/openssl.txt
    M crypto/openssl/crypto/evp/e_aes.c
    M crypto/openssl/crypto/evp/encode.c
    M crypto/openssl/crypto/evp/evp_lib.c
    M crypto/openssl/crypto/ffc/ffc_params.c
    M crypto/openssl/crypto/http/http_client.c
    M crypto/openssl/crypto/http/http_lib.c
    M crypto/openssl/crypto/md2/md2_dgst.c
    M crypto/openssl/crypto/modes/wrap128.c
    M crypto/openssl/crypto/objects/obj_dat.c
    M crypto/openssl/crypto/param_build_set.c
    M crypto/openssl/crypto/pkcs12/p12_decr.c
    M crypto/openssl/crypto/pkcs7/pk7_smime.c
    M crypto/openssl/crypto/rc2/rc2_skey.c
    M crypto/openssl/crypto/sm2/sm2_crypt.c
    M crypto/openssl/crypto/sm2/sm2_sign.c
    M crypto/openssl/crypto/x509/v3_ist.c
    M crypto/openssl/demos/cipher/aeskeywrap.c
    M crypto/openssl/demos/cipher/ariacbc.c
    M crypto/openssl/demos/digest/EVP_MD_demo.c
    M crypto/openssl/demos/mac/cmac-aes256.c
    M crypto/openssl/demos/mac/hmac-sha512.c
    M crypto/openssl/demos/signature/EVP_Signature_demo.h
    M crypto/openssl/doc/fingerprints.txt
    M crypto/openssl/doc/man1/openssl-format-options.pod
    M crypto/openssl/doc/man1/openssl-pkcs8.pod.in
    M crypto/openssl/doc/man1/openssl-rehash.pod.in
    M crypto/openssl/doc/man1/openssl-s_client.pod.in
    M crypto/openssl/doc/man1/openssl-s_server.pod.in
    M crypto/openssl/doc/man1/openssl-smime.pod.in
    M crypto/openssl/doc/man3/BIO_s_bio.pod
    M crypto/openssl/doc/man3/BN_add.pod
    M crypto/openssl/doc/man3/EVP_EncryptInit.pod
    M crypto/openssl/doc/man3/OSSL_HTTP_REQ_CTX.pod
    M crypto/openssl/doc/man3/OSSL_HTTP_parse_url.pod
    M crypto/openssl/doc/man3/OSSL_HTTP_transfer.pod
    M crypto/openssl/doc/man3/PKCS7_decrypt.pod
    M crypto/openssl/doc/man3/SSL_CTX_set_session_cache_mode.pod
    M crypto/openssl/doc/man3/SSL_CTX_set_session_id_context.pod
    M crypto/openssl/doc/man3/SSL_CTX_set_tlsext_servername_callback.pod
    M crypto/openssl/doc/man3/d2i_X509.pod
    M crypto/openssl/doc/man7/EVP_CIPHER-AES.pod
    M crypto/openssl/doc/man7/openssl-env.pod
    M crypto/openssl/doc/man7/provider-asym_cipher.pod
    M crypto/openssl/fuzz/server.c
    M crypto/openssl/include/crypto/cmserr.h
    M crypto/openssl/include/openssl/bn.h
    M crypto/openssl/include/openssl/cmserr.h
    M crypto/openssl/include/openssl/ssl.h.in
    M crypto/openssl/providers/defltprov.c
    M crypto/openssl/providers/fips-sources.checksums
    M crypto/openssl/providers/fips.checksum
    M crypto/openssl/providers/implementations/ciphers/cipher_aes_ocb.c
    M crypto/openssl/providers/implementations/ciphers/cipher_aes_siv.c
    M crypto/openssl/providers/implementations/exchange/dh_exch.c
    M crypto/openssl/providers/implementations/include/prov/implementations.h
    M crypto/openssl/providers/implementations/keymgmt/ecx_kmgmt.c
    M crypto/openssl/providers/implementations/macs/poly1305_prov.c
    M crypto/openssl/providers/implementations/signature/rsa_sig.c
    M crypto/openssl/ssl/record/rec_layer_s3.c
    M crypto/openssl/ssl/ssl_ciph.c
    M crypto/openssl/ssl/statem/extensions_srvr.c
    M crypto/openssl/ssl/statem/statem.c
    M crypto/openssl/ssl/statem/statem_lib.c
    M crypto/openssl/test/bad_dtls_test.c
    M crypto/openssl/test/build.info
    M crypto/openssl/test/cipherlist_test.c
    A crypto/openssl/test/cms-msg/enveloped-content-type-for-aes-gcm.pem
    A crypto/openssl/test/cms-msg/make_missing_kdf_der.py
    A crypto/openssl/test/cms-msg/missing-kdf.der
    M crypto/openssl/test/cmsapitest.c
    M crypto/openssl/test/destest.c
    M crypto/openssl/test/dsatest.c
    M crypto/openssl/test/ectest.c
    M crypto/openssl/test/endecode_test.c
    M crypto/openssl/test/enginetest.c
    M crypto/openssl/test/evp_extra_test.c
    M crypto/openssl/test/evp_extra_test2.c
    M crypto/openssl/test/evp_kdf_test.c
    M crypto/openssl/test/evp_libctx_test.c
    M crypto/openssl/test/evp_pkey_provided_test.c
    M crypto/openssl/test/helpers/predefined_dhparams.c
    M crypto/openssl/test/http_test.c
    M crypto/openssl/test/ideatest.c
    M crypto/openssl/test/pbetest.c
    M crypto/openssl/test/pkcs12_format_test.c
    A crypto/openssl/test/recipes/70-test_tls13ticket.t
    M crypto/openssl/test/recipes/80-test_cms.t
    M crypto/openssl/test/recipes/80-test_cmsapi.t
    A crypto/openssl/test/recipes/80-test_cmsapi_data/cms_pwri_kek_oob.der
    M crypto/openssl/test/siphash_internal_test.c
    A crypto/openssl/test/smime-eml/pkcs7-empty-digest-set.eml
    M crypto/openssl/test/sslapitest.c
    M crypto/openssl/test/stack_test.c
    A crypto/openssl/test/tls13tickettest.c
    M crypto/openssl/util/missingcrypto.txt
    M crypto/openssl/util/missingcrypto111.txt

  Log Message:
  -----------
  Merge OpenSSL 3.0.21 from vendor branch

Merge vendor/openssl 3.0.21 into crypto/openssl.

Vendor commit: c62c244b69

AI-Assisted-by: OpenAI Codex

  Commit: 13ab6f1c7d7d3b7be749eec42605c9246416b511
      https://github.com/MidnightBSD/src/commit/13ab6f1c7d7d3b7be749eec42605c9246416b511
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-07-01 (Wed, 01 Jul 2026)

  Changed paths:
    M UPDATING
    M crypto/openssl/apps/progs.h
    M secure/usr.bin/openssl/Makefile
    A secure/usr.bin/openssl/app_lib_engine.c
    A secure/usr.bin/openssl/progs.c

  Log Message:
  -----------
  OpenSSL: update secure build glue for 3.0.21

Update the stable/4.1 openssl(1) build files and generated command table to match the OpenSSL 3.0.21 source layout.  Document the CVE-2026-34180 update in UPDATING.

AI-Assisted-by: OpenAI Codex

Compare: https://github.com/MidnightBSD/src/compare/70b46a38e55d...13ab6f1c7d7d

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications