en Copyright 2025 Java http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#98118af4f08a020c8c5925e933bdd523d6a6e8aa [OpenSSL] Add missing header file (openssl/ml_kem.h)Add missing header file (openssl/ml_kem.h) of OpenSSL 3.5Reviewed by: fluffy, ngieApproved by: ngie (maintainer)Differential Revision: https://reviews.freebsd.org/D56291 List of files: /src/secure/lib/libcrypto/Makefile Sun, 12 Apr 2026 18:07:14 +0000 Po-Chuan Hsieh <sunpoet@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#3797fe720a37ff9fb5b20546494ef1c4a6c01541 libcrypto: compile all PIC objects with -DOPENSSL_PIC -fPICThis change modifies the libcrypto PIC objects to always compile with`-DOPENSSL_PIC -fPIC` to restore parity with the upstream build process.This ensures that the legacy provider is built with parity to theupstream legacy provider.MFC after: 12 daysTested with: `make check` (legacy provider), `make universe`Fixes: 14b9955eDifferential Revision: https://reviews.freebsd.org/D44896 List of files: /src/secure/lib/libcrypto/Makefile Sun, 22 Mar 2026 00:39:16 +0000 Enji Cooper <ngie@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#3b6442370a17c57c4c290b9a8e1e8328da820705 openssl: add a simple smoke test for the legacy providerThis change adds a simple smoke test for the legacy provider to ensurethat the provider doesn't break in the future when performing updates.This is not a functional or system test; the OpenSSL test suite does amuch better job at doing this than we can.MFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D53045 List of files: /src/secure/lib/libcrypto/Makefile Sat, 11 Oct 2025 20:45:20 +0000 Enji Cooper <ngie@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#d5984d5f29a7c717b88ccd17a85a747792403cdf OpenSSL: update Makefiles to reflect 3.5.1 releaseThis is a targeted effort to update the INCS and SRCS entries forlibcrypto, the legacy provider, and libssl to match what upstream(OpenSSL) builds in their respective libraries.The number of stylistic changes were kept at a minimum.Another incoming change will reformat this file to make futuremaintenance easier.MFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D52554 List of files: /src/secure/lib/libcrypto/Makefile Mon, 08 Sep 2025 03:20:42 +0000 Enji Cooper <ngie@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#407c4d1eeb80caadcf24e60b827ea6686d3adf3a openssl: Disable KTLS in bootstrap librariesWe need to build OpenSSL when bootstrapping certctl. On MacOSktls_enable() isn't defined anywhere, so without this the build fails.We don't need KTLS in the bootstrap library, so just disable it.Reviewed by: khorben, ngieDifferential Revision: https://reviews.freebsd.org/D52341 List of files: /src/secure/lib/libcrypto/Makefile Thu, 04 Sep 2025 13:28:39 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#929f5966a9fd3d050c7b604513c6fb4ac9b5d335 packages: Improve handling of -lib packagesFor some packages (OpenSSL, Kerberos) we want to ship runtime librariesin a separate package, e.g. openssl and openssl-lib. Currently this isdone using PACKAGE=openssl-lib, but that creates packages with strangenames like openssl-lib-lib32.Instead, add a new LIB_PACKAGE option to bsd.lib.mk that causes runtimelibraries to be placed in a new -lib subpackage. This significantlyimproves the set of packages we create; for example, OpenSSL goes from: FreeBSD-openssl FreeBSD-openssl-dbg FreeBSD-openssl-lib FreeBSD-openssl-lib-dbg FreeBSD-openssl-lib-dbg-lib32 FreeBSD-openssl-lib-dev FreeBSD-openssl-lib-dev-lib32 FreeBSD-openssl-lib-lib32 FreeBSD-openssl-lib-man FreeBSD-openssl-manto: FreeBSD-openssl FreeBSD-openssl-dbg FreeBSD-openssl-dbg-lib32 FreeBSD-openssl-dev FreeBSD-openssl-dev-lib32 FreeBSD-openssl-lib FreeBSD-openssl-lib32 FreeBSD-openssl-manWhile here, move /usr/bin/krb5-config and /usr/bin/compile_et intothe kerberos-dev package.Reviewed by: desDifferential Revision: https://reviews.freebsd.org/D51925 List of files: /src/secure/lib/libcrypto/Makefile Fri, 22 Aug 2025 23:50:20 +0000 Lexi Winter <ivy@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#aef16fc30bb2298e65a5fcc0c503d343e428c1b2 build: remove certctl requirement for host OpenSSL libs on macOSSome platforms, like macOS, do not expose headers for the system'slibcrypto for public consumption. libcrypto is relatively heavy andneeds to know, e.g., the host system's endianness, so we scope the builddown to macOS where OpenSSL headers are known to not be present and wecan be reasonably certain that most of the systems today that would becross-building are little endian.We still don't bother if building WITHOUT_OPENSSL since the end resultis expected to be used by OpenSSL, but perhaps we could revisit thatindependently in case one, e.g., brings their own implementation.Reported by: jrtc27Reviewed by: jrtc27, ngieFixes: c340ef28fd38 ("certctl: Reimplement in C")Differential Revision: https://reviews.freebsd.org/D51935 List of files: /src/secure/lib/libcrypto/Makefile Sat, 16 Aug 2025 18:34:30 +0000 Kyle Evans <kevans@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#4757b351ea9d59d71d4a38b82506d2d16fcd560d openssl: Import version 3.5.1Migrate to OpenSSL 3.5 in advance of FreeBSD 15.0. OpenSSL 3.0 will beEOL after 2026-09-07.Approved by: philip (mentor)Sponsored by: Alpha-Omega Beach Cleaning ProjectSponsored by: The FreeBSD FoundationDifferential revision: https://reviews.freebsd.org/D51613 List of files: /src/secure/lib/libcrypto/Makefile Fri, 11 Jul 2025 21:57:10 +0000 Pierre Pronchery <khorben@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#8e35800732573de6c4bc1dd3ac420447fca96231 build: remove the last vestiges of lint supportCommit 1cbb58886a47 (shipped in 12.0.0) removed all lint infrastructure.A bunch of NO_LINT definitions remained (perhaps as a bootstrappingmeasture). Remove them.Reviewed by: emasteDifferential Revision: https://reviews.freebsd.org/D50704 List of files: /src/secure/lib/libcrypto/Makefile Thu, 05 Jun 2025 23:55:34 +0000 Brooks Davis <brooks@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#e9ac41698b2f322d55ccf9da50a3596edb2c1800 Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /src/secure/lib/libcrypto/Makefile Mon, 15 Jul 2024 04:46:32 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#b15b39521644ebffdcc091bd283ed410b0ae9274 libcrypto: complete the support for the 0.9.8 APIWhen importing OpenSSL 3 in base, some but not all source filesimplementing the deprecated 0.9.8 API were imported. With this change,it becomes possible again to compile software targeting this API.PR: 272220Fixes: b077aed33b7b ("Merge OpenSSL 3.0.9")Reviewed by: emasteMFC after: 3 daysSponsored by: The FreeBSD FoundationPull Request: https://github.com/freebsd/freebsd-src/pull/851 List of files: /src/secure/lib/libcrypto/Makefile Thu, 21 Sep 2023 11:42:06 +0000 Pierre Pronchery <pierre@freebsdfoundation.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#1a18383a52bc373e316d224cef1298debf6f7e25 libcrypto: link engines and the legacy provider to libcryptoOpenSSL's legacy provider module and engines need to link tolibcrypto.so, as it provides some of the actual implementations oflegacy routines.This is a little tricky due to build order issues. Introduce a smallhack (LIBCRYPTO_WITHOUT_SUBDIRS) that builds libcrypto.so in its usualearly phase without any OpenSSL provider modules or engines. This isintended to restore the test suite; a future change should remove thehack and replace it with a better approach.PR: 254853, 273528Discussed with: Folks at EuroBSDCon in CoimbraSponsored by: The FreeBSD Foundation List of files: /src/secure/lib/libcrypto/Makefile Fri, 15 Sep 2023 15:14:16 +0000 Pierre Pronchery <pierre@freebsdfoundation.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#47d997021fbc7b662e9507deec1897d514d1224c libcrypto: Switch back to the generated assembly in sys/crypto/opensslReviewed by: markjDifferential Revision: https://reviews.freebsd.org/D41569 List of files: /src/secure/lib/libcrypto/Makefile Tue, 29 Aug 2023 21:46:44 +0000 John Baldwin <jhb@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#73653b72af65e294dcfedc43a8ea09b2137d72ed libcrypto: Add buildasm and cleanasm targetsThese targets generate all the assembly files in sys/crypto/openssl.Reviewed by: markj, emaste (earlier version)Differential Revision: https://reviews.freebsd.org/D41590 List of files: /src/secure/lib/libcrypto/Makefile Tue, 29 Aug 2023 21:39:54 +0000 John Baldwin <jhb@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#3250c9d5272821e5b796144c63b1de982cd4e43b libcrypto: Update assembly build glue for x86 for OpenSSL 3.0.Notably, define AES_ASM which is required for any AES acceleration(OpenSSL 1.0 gated all AES acceleration on OPENSSL_CPUID_OBJ instead).Enabling this exposed that new assembly files added in OpenSSL 3.0needed to be included in the build (aes-x86-64.S and aes-586.S). Bothof these files supplant both aes_core.c and aes_cbc.c. The last filehad to be moved out of the MI SRCS line for aes and into each ASM_*for non-x86.As part of this I audited the generated configdata.pm for amd64, i386,and aarch64 and found the following additional discrepecancies that arefixed here as well:- Enabled BSAES_ASM on amd64 which requires bsase-x86_64.S- Enabled WHIRLPOOL_ASM on amd64 (asm sources already built)- Enabled CMLL_ASM on amd64 and i386 (asm sources already built)aarch64 had no discreprecancies in configdata.pm, and no *.pl asmgenerators were missing for aarch64 in Makefile.asm. I did not checkpowerpc or armv7, but for armv7 all of the asm generators seem to bepresent in Makefile.asm.Reported by: gallatin (AES-GCM using plain software on amd64)Reviewed by: gallatin, ngie, emasteDifferential Revision: https://reviews.freebsd.org/D41539 List of files: /src/secure/lib/libcrypto/Makefile Tue, 22 Aug 2023 04:02:42 +0000 John Baldwin <jhb@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#57a3b81785c0f7f458789d0baa5c8265ecfd5bac libcrypto: add rsa_depr.c to the buildIt provides the RSA_generate_key function, which is deprecated as of3.0 but is used by various ports.Reviewed by: kbowlingSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D41506 List of files: /src/secure/lib/libcrypto/Makefile Fri, 18 Aug 2023 19:03:40 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#e5e6a865358df439021caee7a0c85c086b4a11be libcrypto: add err_all_legacy.c to the buildIt provides the ERR_load_*_strings routines, which are deprecated as of3.0 but are used by various ports.PR: 272580Reviewed by: kbowlingSponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D41505 List of files: /src/secure/lib/libcrypto/Makefile Fri, 18 Aug 2023 18:28:42 +0000 Ed Maste <emaste@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /src/secure/lib/libcrypto/Makefile Wed, 16 Aug 2023 17:55:03 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#1d7ffb373c9d639c9645a6b09ae46b2b92adb2e3 pkgbase: reorganise caroot and openssl packagesThis splits out the certctl utility into a new certctl package and theopenssl libs into an openssl-lib package.PR: 272816Reviewed by: manuDifferential Revision: https://reviews.freebsd.org/D41321 List of files: /src/secure/lib/libcrypto/Makefile Mon, 31 Jul 2023 14:38:45 +0000 Doug Rabson <dfr@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libcrypto/Makefile#ebd508a0b2719e15575e8a2224f0730c4d37afec openssl: include d2i_KeyParams() and d2i_KeyParams_bio()These functions are new, and some ports (e.g.opensc) expect to have themavailable. Add the file they're defined in to the build, and add themto Version.map.PR: 270076Reviewed by: markj, emaste, pierreFixes: b077aed33b7b ("Merge OpenSSL 3.0.9")Sponsored by: Rubicon Communications, LLC ("Netgate")Differential Revision: https://reviews.freebsd.org/D40914 List of files: /src/secure/lib/libcrypto/Makefile Fri, 07 Jul 2023 19:25:34 +0000 Kristof Provost <kp@FreeBSD.org>