en Copyright 2025 Java http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#d5984d5f29a7c717b88ccd17a85a747792403cdf OpenSSL: update Makefiles to reflect 3.5.1 releaseThis is a targeted effort to update the INCS and SRCS entries forlibcrypto, the legacy provider, and libssl to match what upstream(OpenSSL) builds in their respective libraries.The number of stylistic changes were kept at a minimum.Another incoming change will reformat this file to make futuremaintenance easier.MFC after: 1 weekDifferential Revision: https://reviews.freebsd.org/D52554 List of files: /src/secure/lib/libssl/Makefile Mon, 08 Sep 2025 03:20:42 +0000 Enji Cooper <ngie@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#407c4d1eeb80caadcf24e60b827ea6686d3adf3a openssl: Disable KTLS in bootstrap librariesWe need to build OpenSSL when bootstrapping certctl. On MacOSktls_enable() isn't defined anywhere, so without this the build fails.We don't need KTLS in the bootstrap library, so just disable it.Reviewed by: khorben, ngieDifferential Revision: https://reviews.freebsd.org/D52341 List of files: /src/secure/lib/libssl/Makefile Thu, 04 Sep 2025 13:28:39 +0000 Mark Johnston <markj@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#929f5966a9fd3d050c7b604513c6fb4ac9b5d335 packages: Improve handling of -lib packagesFor some packages (OpenSSL, Kerberos) we want to ship runtime librariesin a separate package, e.g. openssl and openssl-lib. Currently this isdone using PACKAGE=openssl-lib, but that creates packages with strangenames like openssl-lib-lib32.Instead, add a new LIB_PACKAGE option to bsd.lib.mk that causes runtimelibraries to be placed in a new -lib subpackage. This significantlyimproves the set of packages we create; for example, OpenSSL goes from: FreeBSD-openssl FreeBSD-openssl-dbg FreeBSD-openssl-lib FreeBSD-openssl-lib-dbg FreeBSD-openssl-lib-dbg-lib32 FreeBSD-openssl-lib-dev FreeBSD-openssl-lib-dev-lib32 FreeBSD-openssl-lib-lib32 FreeBSD-openssl-lib-man FreeBSD-openssl-manto: FreeBSD-openssl FreeBSD-openssl-dbg FreeBSD-openssl-dbg-lib32 FreeBSD-openssl-dev FreeBSD-openssl-dev-lib32 FreeBSD-openssl-lib FreeBSD-openssl-lib32 FreeBSD-openssl-manWhile here, move /usr/bin/krb5-config and /usr/bin/compile_et intothe kerberos-dev package.Reviewed by: desDifferential Revision: https://reviews.freebsd.org/D51925 List of files: /src/secure/lib/libssl/Makefile Fri, 22 Aug 2025 23:50:20 +0000 Lexi Winter <ivy@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#439685ee69e4fc066df5c54f802248d8e3805605 libssl: unbreak building the library with KTLSThe 3.5.1 update dropped a `SRCS` entry for the MK_OPENSSL_KTLS != nocase (the source was renamed from `ktls.c` to `ktls_meth.c`). Add thenew file to SRCS in order to unbreak linking the library when KTLS isenabled.This bug isn't apparent now because KTLS is always disabled in`include/openssl/configuration.h` (this will be fixed soon).Found when doing `make universe` with KTLS enabled in`include/openssl/configuration.h`.Fixes: 4757b351ea9d59d ("openssl: Import version 3.5.1") List of files: /src/secure/lib/libssl/Makefile Thu, 21 Aug 2025 16:18:30 +0000 Enji Cooper <ngie@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#4757b351ea9d59d71d4a38b82506d2d16fcd560d openssl: Import version 3.5.1Migrate to OpenSSL 3.5 in advance of FreeBSD 15.0. OpenSSL 3.0 will beEOL after 2026-09-07.Approved by: philip (mentor)Sponsored by: Alpha-Omega Beach Cleaning ProjectSponsored by: The FreeBSD FoundationDifferential revision: https://reviews.freebsd.org/D51613 List of files: /src/secure/lib/libssl/Makefile Fri, 11 Jul 2025 21:57:10 +0000 Pierre Pronchery <khorben@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#8e35800732573de6c4bc1dd3ac420447fca96231 build: remove the last vestiges of lint supportCommit 1cbb58886a47 (shipped in 12.0.0) removed all lint infrastructure.A bunch of NO_LINT definitions remained (perhaps as a bootstrappingmeasture). Remove them.Reviewed by: emasteDifferential Revision: https://reviews.freebsd.org/D50704 List of files: /src/secure/lib/libssl/Makefile Thu, 05 Jun 2025 23:55:34 +0000 Brooks Davis <brooks@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#e9ac41698b2f322d55ccf9da50a3596edb2c1800 Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /src/secure/lib/libssl/Makefile Mon, 15 Jul 2024 04:46:32 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /src/secure/lib/libssl/Makefile Wed, 16 Aug 2023 17:55:03 +0000 Warner Losh <imp@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#1d7ffb373c9d639c9645a6b09ae46b2b92adb2e3 pkgbase: reorganise caroot and openssl packagesThis splits out the certctl utility into a new certctl package and theopenssl libs into an openssl-lib package.PR: 272816Reviewed by: manuDifferential Revision: https://reviews.freebsd.org/D41321 List of files: /src/secure/lib/libssl/Makefile Mon, 31 Jul 2023 14:38:45 +0000 Doug Rabson <dfr@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#b077aed33b7b6aefca7b17ddb250cf521f938613 Merge OpenSSL 3.0.9Migrate to OpenSSL 3.0 in advance of FreeBSD 14.0. OpenSSL 1.1.1 (theversion we were previously using) will be EOL as of 2023-09-11.Most of the base system has already been updated for a seamless switchto OpenSSL 3.0. For many components we've added`-DOPENSSL_API_COMPAT=0x10100000L` to CFLAGS to specify the API version,which avoids deprecation warnings from OpenSSL 3.0. Changes have alsobeen made to avoid OpenSSL APIs that were already deprecated in OpenSSL1.1.1. The process of updating to contemporary APIs can continue afterthis merge.Additional changes are still required for libarchive and Kerberos-related libraries or tools; workarounds will immediately follow thiscommit. Fixes are in progress in the upstream projects and will beincorporated when those are next updated.There are some performance regressions in benchmarks (certain tests in`openssl speed`) and in some OpenSSL consumers in ports (e.g. haproxy).Investigation will continue for these.Netflix's testing showed no functional regression and a rather small,albeit statistically significant, increase in CPU consumption withOpenSSL 3.0.Thanks to ngie@ and des@ for updating base system components, toantoine@ and bofh@ for ports exp-runs and port fixes/workarounds, and toNetflix and everyone who tested prior to commit or contributed to thisupdate in other ways.PR: 271615PR: 271656 [exp-run]Relnotes: YesSponsored by: The FreeBSD Foundation List of files: /src/secure/lib/libssl/Makefile Fri, 23 Jun 2023 22:53:35 +0000 Pierre Pronchery <pierre@freebsdfoundation.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#b323fa85f15268ac44b8ff90faf90bce5d87b608 openssl: install pc filesmost programs in ports are looking for .pc files in order to get thenecessary information on how to compile and link against openssl.The ports now also has a way to hide or force a path for pkgconf.Providing .pc files along with openssl in base will allow (once allthe supported version of FreeBSD has it) so improve the framework todeal with openssl in base vs openssl in ports (and libressl)This will also greatly reduce the number of patches necessary toworkaround the build systems which only knows how to detect whereopenssl is installed via pkgconf.PR: 266051MFC After: 3 weeksReviewed by: jkim, delphijExp-run by: antoineDifferential Revision: https://reviews.freebsd.org/D36360 List of files: /src/secure/lib/libssl/Makefile Fri, 26 Aug 2022 14:02:09 +0000 Baptiste Daroussin <bapt@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#ca179c4d74f2ce1e458bae1826bd77d17f28aab2 pkgbase: Put openssl in its own packageThis is useful for upgrade and also to make tiny jail so they won'tdepend on FreeBSD-utilities (where openssl was packaged before).MFC after: 1 monthDifferential Revision: https://reviews.freebsd.org/D30081 List of files: /src/secure/lib/libssl/Makefile Sun, 02 May 2021 15:46:17 +0000 Emmanuel Vadot <manu@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#aa906e2a4957db700d9e6cc60857e1afe1aecc85 OpenSSL: Support for kernel TLS offload (KTLS)This merges upstream patches from OpenSSL's master branch to addKTLS infrastructure for TLS 1.0-1.3 including both RX and TXoffload and SSL_sendfile support on both Linux and FreeBSD.Note that TLS 1.3 only supports TX offload.A new WITH/WITHOUT_OPENSSL_KTLS determines if OpenSSL is built withKTLS support. It defaults to enabled on amd64 and disabled on allother architectures.Reviewed by: jkim (earlier version)Approved by: secteamObtained from: OpenSSL (patches from master)MFC after: 1 weekRelnotes: yesSponsored by: NetflixDifferential Revision: https://reviews.freebsd.org/D28273 List of files: /src/secure/lib/libssl/Makefile Sat, 16 Jan 2021 00:17:31 +0000 John Baldwin <jhb@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#e25152834cdf3b353892835a4f3b157e066a8ed4 MFHSponsored by: Rubicon Communications, LLC (netgate.com) List of files: /src/secure/lib/libssl/Makefile Thu, 27 Aug 2020 20:25:33 +0000 Glen Barber <gjb@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#de6fc2e39bc1d88511b62ed3a6834a6f0cd6b3a4 Merge ^/head r364082 through r364250. List of files: /src/secure/lib/libssl/Makefile Sat, 15 Aug 2020 11:49:31 +0000 Dimitry Andric <dim@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#1e04d9ff3e2565a402e449eb59b30b826bb2894a Fix a typo in the cpp macro defined for PIC.In practice this isn't used in OpenSSL outside of some sparc-specificcode.Reviewed by: delphijDifferential Revision: https://reviews.freebsd.org/D26058 List of files: /src/secure/lib/libssl/Makefile Thu, 13 Aug 2020 20:28:35 +0000 John Baldwin <jhb@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#80a315ffb6053e5e2b1a0d07d7571fad0e0a64bd Replace OPENSSL_NO_SSL3_METHODs with dummiesSSLv3 has been deprecated since 2015 (and broken since 2014: "POODLE"); itshould not have shipped in FreeBSD 11 (2016) or 12 (2018). No one should useit, and if they must, they can use some implementation outside of base.There are three symbols removed with OPENSSL_NO_SSL3_METHOD:SSLv3_client_methodSSLv3_methodSSLv3_server_methodThese symbols exist to request an explicit SSLv3 connection to a server.There is no good reason for an application to link or invoke these symbolsinstead of TLS_method(), et al (née SSLv23_method, et al). Applicationsthat do so have broken cryptography.Define these symbols for some pedantic definition of ABI stability, butremove the functionality again (r361392) after r362620.Reviewed by: gordon, jhb (earlier-but-equivalent version both)Discussed with: bjk, kibDifferential Revision: https://reviews.freebsd.org/D25493 List of files: /src/secure/lib/libssl/Makefile Wed, 01 Jul 2020 00:59:28 +0000 Conrad Meyer <cem@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#fda9adafa3167c28ce29bf051ada259a9f4690e1 Merge ^/head r339670 through r339812. List of files: /src/secure/lib/libssl/Makefile Sat, 27 Oct 2018 14:44:39 +0000 Dimitry Andric <dim@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#89250cff0c9af8a2c976020468fbe9637b846dd3 Bump base OpenSSL libraries versions to avoid conflict with port's libraries.Reported by: manyReviewed by: gjbSponsored by: The FreeBSD FoundationMFC after: 3 hours List of files: /src/secure/lib/libssl/Makefile Thu, 25 Oct 2018 13:37:57 +0000 Konstantin Belousov <kib@FreeBSD.org> http://opengrok.net:8080/history/src/secure/lib/libssl/Makefile#c6879c6c14eedbd060ba588a3129a6c60ebbe783 Merge ^/head r339015 through r339669. List of files: /src/secure/lib/libssl/Makefile Tue, 23 Oct 2018 21:09:37 +0000 Dimitry Andric <dim@FreeBSD.org>