CVS commit: pkgsrc/security/openssl

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Sun Mar 22 18:23:35 UTC 2020

Modified Files:
        pkgsrc/security/openssl: Makefile PLIST distinfo

Log Message:
openssl: update to 1.1.1e.

  Major changes between OpenSSL 1.1.1d and OpenSSL 1.1.1e [17 Mar 2020]

      o Fixed an overflow bug in the x64_64 Montgomery squaring procedure
        used in exponentiation with 512-bit moduli (CVE-2019-1551)


To generate a diff of this commit:
cvs rdiff -u -r1.254 -r1.255 pkgsrc/security/openssl/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/security/openssl/PLIST
cvs rdiff -u -r1.137 -r1.138 pkgsrc/security/openssl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/openssl/Makefile
diff -u pkgsrc/security/openssl/Makefile:1.254 pkgsrc/security/openssl/Makefile:1.255
--- pkgsrc/security/openssl/Makefile:1.254      Wed Feb 12 19:49:23 2020
+++ pkgsrc/security/openssl/Makefile    Sun Mar 22 18:23:34 2020
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.254 2020/02/12 19:49:23 jperkin Exp $
+# $NetBSD: Makefile,v 1.255 2020/03/22 18:23:34 wiz Exp $
 
-DISTNAME=      openssl-1.1.1d
-PKGREVISION=   2
+DISTNAME=      openssl-1.1.1e
 CATEGORIES=    security
 MASTER_SITES=  https://www.openssl.org/source/
 

Index: pkgsrc/security/openssl/PLIST
diff -u pkgsrc/security/openssl/PLIST:1.3 pkgsrc/security/openssl/PLIST:1.4
--- pkgsrc/security/openssl/PLIST:1.3   Thu Jan 16 13:31:15 2020
+++ pkgsrc/security/openssl/PLIST       Sun Mar 22 18:23:34 2020
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.3 2020/01/16 13:31:15 jperkin Exp $
+@comment $NetBSD: PLIST,v 1.4 2020/03/22 18:23:34 wiz Exp $
 bin/c_rehash
 bin/openssl
 include/openssl/aes.h
@@ -722,6 +722,7 @@ man/man3/CRYPTO_mem_leaks_fp.3
 man/man3/CRYPTO_memcmp.3
 man/man3/CRYPTO_new_ex_data.3
 man/man3/CRYPTO_realloc.3
+man/man3/CRYPTO_secure_allocated.3
 man/man3/CRYPTO_secure_clear_free.3
 man/man3/CRYPTO_secure_free.3
 man/man3/CRYPTO_secure_malloc.3
@@ -1295,6 +1296,7 @@ man/man3/EVP_DecryptFinal_ex.3
 man/man3/EVP_DecryptInit.3
 man/man3/EVP_DecryptInit_ex.3
 man/man3/EVP_DecryptUpdate.3
+man/man3/EVP_Digest.3
 man/man3/EVP_DigestFinal.3
 man/man3/EVP_DigestFinalXOF.3
 man/man3/EVP_DigestFinal_ex.3
@@ -1331,13 +1333,17 @@ man/man3/EVP_MD_CTX_free.3
 man/man3/EVP_MD_CTX_md.3
 man/man3/EVP_MD_CTX_md_data.3
 man/man3/EVP_MD_CTX_new.3
+man/man3/EVP_MD_CTX_pkey_ctx.3
 man/man3/EVP_MD_CTX_reset.3
 man/man3/EVP_MD_CTX_set_flags.3
 man/man3/EVP_MD_CTX_set_pkey_ctx.3
+man/man3/EVP_MD_CTX_set_update_fn.3
 man/man3/EVP_MD_CTX_size.3
 man/man3/EVP_MD_CTX_test_flags.3
 man/man3/EVP_MD_CTX_type.3
+man/man3/EVP_MD_CTX_update_fn.3
 man/man3/EVP_MD_block_size.3
+man/man3/EVP_MD_flags.3
 man/man3/EVP_MD_meth_dup.3
 man/man3/EVP_MD_meth_free.3
 man/man3/EVP_MD_meth_get_app_datasize.3
@@ -1424,6 +1430,8 @@ man/man3/EVP_PKEY_CTX_set_dh_paramgen_ty
 man/man3/EVP_PKEY_CTX_set_dh_rfc5114.3
 man/man3/EVP_PKEY_CTX_set_dhx_rfc5114.3
 man/man3/EVP_PKEY_CTX_set_dsa_paramgen_bits.3
+man/man3/EVP_PKEY_CTX_set_dsa_paramgen_md.3
+man/man3/EVP_PKEY_CTX_set_dsa_paramgen_q_bits.3
 man/man3/EVP_PKEY_CTX_set_ec_param_enc.3
 man/man3/EVP_PKEY_CTX_set_ec_paramgen_curve_nid.3
 man/man3/EVP_PKEY_CTX_set_ecdh_cofactor_mode.3
@@ -1481,6 +1489,7 @@ man/man3/EVP_PKEY_assign_POLY1305.3
 man/man3/EVP_PKEY_assign_RSA.3
 man/man3/EVP_PKEY_assign_SIPHASH.3
 man/man3/EVP_PKEY_base_id.3
+man/man3/EVP_PKEY_bits.3
 man/man3/EVP_PKEY_check.3
 man/man3/EVP_PKEY_cmp.3
 man/man3/EVP_PKEY_cmp_parameters.3
@@ -1527,6 +1536,8 @@ man/man3/EVP_PKEY_meth_get_ctrl.3
 man/man3/EVP_PKEY_meth_get_decrypt.3
 man/man3/EVP_PKEY_meth_get_derive.3
 man/man3/EVP_PKEY_meth_get_digest_custom.3
+man/man3/EVP_PKEY_meth_get_digestsign.3
+man/man3/EVP_PKEY_meth_get_digestverify.3
 man/man3/EVP_PKEY_meth_get_encrypt.3
 man/man3/EVP_PKEY_meth_get_init.3
 man/man3/EVP_PKEY_meth_get_keygen.3
@@ -1547,6 +1558,8 @@ man/man3/EVP_PKEY_meth_set_ctrl.3
 man/man3/EVP_PKEY_meth_set_decrypt.3
 man/man3/EVP_PKEY_meth_set_derive.3
 man/man3/EVP_PKEY_meth_set_digest_custom.3
+man/man3/EVP_PKEY_meth_set_digestsign.3
+man/man3/EVP_PKEY_meth_set_digestverify.3
 man/man3/EVP_PKEY_meth_set_encrypt.3
 man/man3/EVP_PKEY_meth_set_init.3
 man/man3/EVP_PKEY_meth_set_keygen.3
@@ -2144,6 +2157,7 @@ man/man3/PEM_read_bio_PKCS7.3
 man/man3/PEM_read_bio_PKCS8.3
 man/man3/PEM_read_bio_PKCS8_PRIV_KEY_INFO.3
 man/man3/PEM_read_bio_PUBKEY.3
+man/man3/PEM_read_bio_Parameters.3
 man/man3/PEM_read_bio_PrivateKey.3
 man/man3/PEM_read_bio_RSAPrivateKey.3
 man/man3/PEM_read_bio_RSAPublicKey.3
@@ -2200,6 +2214,7 @@ man/man3/PEM_write_bio_PKCS8PrivateKey.3
 man/man3/PEM_write_bio_PKCS8PrivateKey_nid.3
 man/man3/PEM_write_bio_PKCS8_PRIV_KEY_INFO.3
 man/man3/PEM_write_bio_PUBKEY.3
+man/man3/PEM_write_bio_Parameters.3
 man/man3/PEM_write_bio_PrivateKey.3
 man/man3/PEM_write_bio_PrivateKey_traditional.3
 man/man3/PEM_write_bio_RSAPrivateKey.3
@@ -2366,6 +2381,7 @@ man/man3/RSA_get0_multi_prime_crt_params
 man/man3/RSA_get0_multi_prime_factors.3
 man/man3/RSA_get0_n.3
 man/man3/RSA_get0_p.3
+man/man3/RSA_get0_pss_params.3
 man/man3/RSA_get0_q.3
 man/man3/RSA_get_default_method.3
 man/man3/RSA_get_ex_data.3
@@ -2646,6 +2662,8 @@ man/man3/SSL_CTX_set_ciphersuites.3
 man/man3/SSL_CTX_set_client_CA_list.3
 man/man3/SSL_CTX_set_client_cert_cb.3
 man/man3/SSL_CTX_set_client_hello_cb.3
+man/man3/SSL_CTX_set_cookie_generate_cb.3
+man/man3/SSL_CTX_set_cookie_verify_cb.3
 man/man3/SSL_CTX_set_ct_validation_callback.3
 man/man3/SSL_CTX_set_ctlog_list_file.3
 man/man3/SSL_CTX_set_current_cert.3
@@ -2765,6 +2783,8 @@ man/man3/SSL_add1_chain_cert.3
 man/man3/SSL_add1_host.3
 man/man3/SSL_add1_to_CA_list.3
 man/man3/SSL_add_client_CA.3
+man/man3/SSL_add_dir_cert_subjects_to_stack.3
+man/man3/SSL_add_file_cert_subjects_to_stack.3
 man/man3/SSL_alert_desc_string.3
 man/man3/SSL_alert_desc_string_long.3
 man/man3/SSL_alert_type_string.3
@@ -3223,8 +3243,18 @@ man/man3/X509_EXTENSION_new.3
 man/man3/X509_EXTENSION_set_critical.3
 man/man3/X509_EXTENSION_set_data.3
 man/man3/X509_EXTENSION_set_object.3
+man/man3/X509_LOOKUP.3
+man/man3/X509_LOOKUP_METHOD.3
+man/man3/X509_LOOKUP_TYPE.3
+man/man3/X509_LOOKUP_add_dir.3
+man/man3/X509_LOOKUP_by_alias.3
+man/man3/X509_LOOKUP_by_fingerprint.3
+man/man3/X509_LOOKUP_by_issuer_serial.3
+man/man3/X509_LOOKUP_by_subject.3
+man/man3/X509_LOOKUP_ctrl.3
 man/man3/X509_LOOKUP_ctrl_fn.3
 man/man3/X509_LOOKUP_file.3
+man/man3/X509_LOOKUP_free.3
 man/man3/X509_LOOKUP_get_by_alias_fn.3
 man/man3/X509_LOOKUP_get_by_fingerprint_fn.3
 man/man3/X509_LOOKUP_get_by_issuer_serial_fn.3
@@ -3232,6 +3262,8 @@ man/man3/X509_LOOKUP_get_by_subject_fn.3
 man/man3/X509_LOOKUP_get_method_data.3
 man/man3/X509_LOOKUP_get_store.3
 man/man3/X509_LOOKUP_hash_dir.3
+man/man3/X509_LOOKUP_init.3
+man/man3/X509_LOOKUP_load_file.3
 man/man3/X509_LOOKUP_meth_free.3
 man/man3/X509_LOOKUP_meth_get_ctrl.3
 man/man3/X509_LOOKUP_meth_get_free.3
@@ -3252,7 +3284,9 @@ man/man3/X509_LOOKUP_meth_set_get_by_sub
 man/man3/X509_LOOKUP_meth_set_init.3
 man/man3/X509_LOOKUP_meth_set_new_item.3
 man/man3/X509_LOOKUP_meth_set_shutdown.3
+man/man3/X509_LOOKUP_new.3
 man/man3/X509_LOOKUP_set_method_data.3
+man/man3/X509_LOOKUP_shutdown.3
 man/man3/X509_NAME_ENTRY_create_by_NID.3
 man/man3/X509_NAME_ENTRY_create_by_OBJ.3
 man/man3/X509_NAME_ENTRY_create_by_txt.3
@@ -3336,6 +3370,7 @@ man/man3/X509_SIG_free.3
 man/man3/X509_SIG_get0.3
 man/man3/X509_SIG_getm.3
 man/man3/X509_SIG_new.3
+man/man3/X509_STORE.3
 man/man3/X509_STORE_CTX_cert_crl_fn.3
 man/man3/X509_STORE_CTX_check_crl_fn.3
 man/man3/X509_STORE_CTX_check_issued_fn.3
@@ -3390,6 +3425,7 @@ man/man3/X509_STORE_CTX_verify_cb.3
 man/man3/X509_STORE_CTX_verify_fn.3
 man/man3/X509_STORE_add_cert.3
 man/man3/X509_STORE_add_crl.3
+man/man3/X509_STORE_add_lookup.3
 man/man3/X509_STORE_free.3
 man/man3/X509_STORE_get0_objects.3
 man/man3/X509_STORE_get0_param.3
@@ -3990,6 +4026,7 @@ man/man7/evp.7
 man/man7/ossl_store-file.7
 man/man7/ossl_store.7
 man/man7/passphrase-encoding.7
+man/man7/proxy-certificates.7
 man/man7/scrypt.7
 man/man7/ssl.7
 man/man7/x509.7

Index: pkgsrc/security/openssl/distinfo
diff -u pkgsrc/security/openssl/distinfo:1.137 pkgsrc/security/openssl/distinfo:1.138
--- pkgsrc/security/openssl/distinfo:1.137      Thu Jan 16 13:30:29 2020
+++ pkgsrc/security/openssl/distinfo    Sun Mar 22 18:23:34 2020
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.137 2020/01/16 13:30:29 jperkin Exp $
+$NetBSD: distinfo,v 1.138 2020/03/22 18:23:34 wiz Exp $
 
-SHA1 (openssl-1.1.1d.tar.gz) = 056057782325134b76d1931c48f2c7e6595d7ef4
-RMD160 (openssl-1.1.1d.tar.gz) = 86401a37e3e36c63d3619e3e699a3bfd9ea1e042
-SHA512 (openssl-1.1.1d.tar.gz) = 2bc9f528c27fe644308eb7603c992bac8740e9f0c3601a130af30c9ffebbf7e0f5c28b76a00bbb478bad40fbe89b4223a58d604001e1713da71ff4b7fe6a08a7
-Size (openssl-1.1.1d.tar.gz) = 8845861 bytes
+SHA1 (openssl-1.1.1e.tar.gz) = e7105567d3e7e6353a0110f1adc81f69dbc8f732
+RMD160 (openssl-1.1.1e.tar.gz) = 54a5963b9eca73f502d0a821ed2aa85b51b8a464
+SHA512 (openssl-1.1.1e.tar.gz) = dbc2124f6ce9f1927e2f5e03101ed565d4e52ef09d620200f5cd9372c88c65dd7d74b24b31a8bf404713a5adfab80e0c3b25bf538c52702c4c3af1d80aef16c2
+Size (openssl-1.1.1e.tar.gz) = 9792634 bytes
 SHA1 (patch-Configurations_unix-Makefile.tmpl) = 160466226b58f391c5096e0ba38ee298002296dc