openssl: Update to version 3.3.0

- Update from version 3.2.1 to 3.3.0
- Update of rootfile
- Changelog
    3.3
	This release adds the following new features:
	  * Support for qlog for tracing QUIC connections has been added
	  * Added APIs to allow configuring the negotiated idle timeout for QUIC
	    connections, and to allow determining the number of additional streams
	    that can currently be created for a QUIC connection.
	  * Added APIs to allow disabling implicit QUIC event processing for QUIC SSL
	    objects
	  * Added APIs to allow querying the size and utilisation of a QUIC stream's
	    write buffer
	  * New API `SSL_write_ex2`, which can be used to send an end-of-stream (FIN)
	    condition in an optimised way when using QUIC.
	  * Limited support for polling of QUIC connection and stream objects in a
	    non-blocking manner.
	  * Added a new EVP_DigestSqueeze() API. This allows SHAKE to squeeze multiple
	    times with different output sizes.
	  * Added exporter for CMake on Unix and Windows, alongside the pkg-config
	    exporter.
	  * The BLAKE2s hash algorithm matches BLAKE2b's support for configurable
	    output length.
	  * The EVP_PKEY_fromdata function has been augmented to allow for the
	    derivation of CRT (Chinese Remainder Theorem) parameters when requested
	  * Added API functions SSL_SESSION_get_time_ex(), SSL_SESSION_set_time_ex()
	    using time_t which is Y2038 safe on 32 bit systems when 64 bit time
	    is enabled
	  * Unknown entries in TLS SignatureAlgorithms, ClientSignatureAlgorithms
	    config options and the respective calls to SSL[_CTX]_set1_sigalgs() and
	    SSL[_CTX]_set1_client_sigalgs() that start with `?` character are
	    ignored and the configuration will still be used.
	  * Added `-set_issuer` and `-set_subject` options to `openssl x509` to
	    override the Issuer and Subject when creating a certificate. The `-subj`
	    option now is an alias for `-set_subject`.
	  * Added several new features of CMPv3 defined in RFC 9480 and RFC 9483
	  * New option `SSL_OP_PREFER_NO_DHE_KEX`, which allows configuring a TLS1.3
	    server to prefer session resumption using PSK-only key exchange over PSK
	    with DHE, if both are available.
	  * New atexit configuration switch, which controls whether the OPENSSL_cleanup
	    is registered when libcrypto is unloaded.
	  * Added X509_STORE_get1_objects to avoid issues with the existing
	    X509_STORE_get0_objects API in multi-threaded applications.
	This release incorporates the following potentially significant or incompatible
	changes:
	  * Applied AES-GCM unroll8 optimisation to Microsoft Azure Cobalt 100
	  * Optimized AES-CTR for ARM Neoverse V1 and V2
	  * Enable AES and SHA3 optimisations on Applie Silicon M3-based MacOS systems
	    similar to M1/M2.
	  * Various optimizations for cryptographic routines using RISC-V vector crypto
	    extensions
	  * Added assembly implementation for md5 on loongarch64
	  * Accept longer context for TLS 1.2 exporters
	  * The activate and soft_load configuration settings for providers in
	    openssl.cnf have been updated to require a value of [1|yes|true|on]
	    (in lower or UPPER case) to enable the setting. Conversely a value
	    of [0|no|false|off] will disable the setting.
	  * In `openssl speed`, changed the default hash function used with `hmac` from
	    `md5` to `sha256`.
	  * The `-verify` option to the `openssl crl` and `openssl req` will make the
	    program exit with 1 on failure.
	  * The d2i_ASN1_GENERALIZEDTIME(), d2i_ASN1_UTCTIME(), ASN1_TIME_check(), and
	    related functions have been augmented to check for a minimum length of
	    the input string, in accordance with ITU-T X.690 section 11.7 and 11.8.
	  * OPENSSL_sk_push() and sk_<TYPE>_push() functions now return 0 instead of -1
	    if called with a NULL stack argument.
	  * New limit on HTTP response headers is introduced to HTTP client. The
	    default limit is set to 256 header lines.
	This release incorporates the following bug fixes and mitigations:
	  * The BIO_get_new_index() function can only be called 127 times before it
	    reaches its upper bound of BIO_TYPE_MASK and will now return -1 once its
	    exhausted.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Reviewed-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl
index d5f4f38144d7813be4c9af5816358c939d9ceea4..d9595bef943f2281c64b183ec61fdd4930fc89df 100644 (file)
--- a/config/rootfiles/common/openssl
+++ b/config/rootfiles/common/openssl
@@ -152,6 +152,10 @@ usr/bin/openssl
 #usr/include/openssl/x509err.h
 #usr/include/openssl/x509v3.h
 #usr/include/openssl/x509v3err.h
+#usr/lib/cmake
+usr/lib/cmake/OpenSSL
+usr/lib/cmake/OpenSSL/OpenSSLConfig.cmake
+usr/lib/cmake/OpenSSL/OpenSSLConfigVersion.cmake
 #usr/lib/engines-3
 usr/lib/engines-3/afalg.so
 usr/lib/engines-3/capi.so
@@ -769,6 +773,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/SSL_get_shared_sigalgs.html
 #usr/share/doc/openssl/html/man3/SSL_get_stream_id.html
 #usr/share/doc/openssl/html/man3/SSL_get_stream_read_state.html
+#usr/share/doc/openssl/html/man3/SSL_get_value_uint.html
 #usr/share/doc/openssl/html/man3/SSL_get_verify_result.html
 #usr/share/doc/openssl/html/man3/SSL_get_version.html
 #usr/share/doc/openssl/html/man3/SSL_group_to_name.html
@@ -781,6 +786,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/SSL_new.html
 #usr/share/doc/openssl/html/man3/SSL_new_stream.html
 #usr/share/doc/openssl/html/man3/SSL_pending.html
+#usr/share/doc/openssl/html/man3/SSL_poll.html
 #usr/share/doc/openssl/html/man3/SSL_read.html
 #usr/share/doc/openssl/html/man3/SSL_read_early_data.html
 #usr/share/doc/openssl/html/man3/SSL_rstate_string.html
@@ -994,6 +1000,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man7/openssl-core_names.h.html
 #usr/share/doc/openssl/html/man7/openssl-env.html
 #usr/share/doc/openssl/html/man7/openssl-glossary.html
+#usr/share/doc/openssl/html/man7/openssl-qlog.html
 #usr/share/doc/openssl/html/man7/openssl-quic.html
 #usr/share/doc/openssl/html/man7/openssl-threads.html
 #usr/share/doc/openssl/html/man7/openssl_user_macros.html
@@ -2421,6 +2428,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/ERR_peek_last_error_func.3ossl
 #usr/share/man/man3/ERR_peek_last_error_line.3ossl
 #usr/share/man/man3/ERR_peek_last_error_line_data.3ossl
+#usr/share/man/man3/ERR_pop.3ossl
 #usr/share/man/man3/ERR_pop_to_mark.3ossl
 #usr/share/man/man3/ERR_print_errors.3ossl
 #usr/share/man/man3/ERR_print_errors_cb.3ossl
@@ -2589,6 +2597,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_DigestSignInit.3ossl
 #usr/share/man/man3/EVP_DigestSignInit_ex.3ossl
 #usr/share/man/man3/EVP_DigestSignUpdate.3ossl
+#usr/share/man/man3/EVP_DigestSqueeze.3ossl
 #usr/share/man/man3/EVP_DigestUpdate.3ossl
 #usr/share/man/man3/EVP_DigestVerify.3ossl
 #usr/share/man/man3/EVP_DigestVerifyFinal.3ossl
@@ -3590,6 +3599,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_LH_delete.3ossl
 #usr/share/man/man3/OPENSSL_LH_doall.3ossl
 #usr/share/man/man3/OPENSSL_LH_doall_arg.3ossl
+#usr/share/man/man3/OPENSSL_LH_doall_arg_thunk.3ossl
 #usr/share/man/man3/OPENSSL_LH_error.3ossl
 #usr/share/man/man3/OPENSSL_LH_flush.3ossl
 #usr/share/man/man3/OPENSSL_LH_free.3ossl
@@ -3603,6 +3613,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_LH_num_items.3ossl
 #usr/share/man/man3/OPENSSL_LH_retrieve.3ossl
 #usr/share/man/man3/OPENSSL_LH_set_down_load.3ossl
+#usr/share/man/man3/OPENSSL_LH_set_thunks.3ossl
 #usr/share/man/man3/OPENSSL_LH_stats.3ossl
 #usr/share/man/man3/OPENSSL_LH_stats_bio.3ossl
 #usr/share/man/man3/OPENSSL_LINE.3ossl
@@ -3701,6 +3712,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_CMP_CR.3ossl
 #usr/share/man/man3/OSSL_CMP_CTX_build_cert_chain.3ossl
 #usr/share/man/man3/OSSL_CMP_CTX_free.3ossl
+#usr/share/man/man3/OSSL_CMP_CTX_get0_geninfo_ITAVs.3ossl
 #usr/share/man/man3/OSSL_CMP_CTX_get0_libctx.3ossl
 #usr/share/man/man3/OSSL_CMP_CTX_get0_newCert.3ossl
 #usr/share/man/man3/OSSL_CMP_CTX_get0_newPkey.3ossl
@@ -3765,6 +3777,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_CMP_CTX_set_transfer_cb_arg.3ossl
 #usr/share/man/man3/OSSL_CMP_CTX_setup_CRM.3ossl
 #usr/share/man/man3/OSSL_CMP_CTX_snprint_PKIStatus.3ossl
+#usr/share/man/man3/OSSL_CMP_HDR_get0_geninfo_ITAVs.3ossl
 #usr/share/man/man3/OSSL_CMP_HDR_get0_recipNonce.3ossl
 #usr/share/man/man3/OSSL_CMP_HDR_get0_transactionID.3ossl
 #usr/share/man/man3/OSSL_CMP_IR.3ossl
@@ -3772,10 +3785,12 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_CMP_ITAV_dup.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_free.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_caCerts.3ossl
+#usr/share/man/man3/OSSL_CMP_ITAV_get0_certProfile.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_rootCaCert.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_rootCaKeyUpdate.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_type.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_value.3ossl
+#usr/share/man/man3/OSSL_CMP_ITAV_new0_certProfile.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_new_caCerts.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_new_rootCaCert.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_new_rootCaKeyUpdate.3ossl
@@ -3793,6 +3808,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_CMP_LOG_WARNING.3ossl
 #usr/share/man/man3/OSSL_CMP_MSG_dup.3ossl
 #usr/share/man/man3/OSSL_CMP_MSG_free.3ossl
+#usr/share/man/man3/OSSL_CMP_MSG_get0_certreq_publickey.3ossl
 #usr/share/man/man3/OSSL_CMP_MSG_get0_header.3ossl
 #usr/share/man/man3/OSSL_CMP_MSG_get_bodytype.3ossl
 #usr/share/man/man3/OSSL_CMP_MSG_http_perform.3ossl
@@ -3814,6 +3830,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_CMP_SRV_CTX_get0_cmp_ctx.3ossl
 #usr/share/man/man3/OSSL_CMP_SRV_CTX_get0_custom_ctx.3ossl
 #usr/share/man/man3/OSSL_CMP_SRV_CTX_init.3ossl
+#usr/share/man/man3/OSSL_CMP_SRV_CTX_init_trans.3ossl
 #usr/share/man/man3/OSSL_CMP_SRV_CTX_new.3ossl
 #usr/share/man/man3/OSSL_CMP_SRV_CTX_set_accept_raverified.3ossl
 #usr/share/man/man3/OSSL_CMP_SRV_CTX_set_accept_unprotected.3ossl
@@ -3821,6 +3838,8 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_CMP_SRV_CTX_set_send_unprotected_errors.3ossl
 #usr/share/man/man3/OSSL_CMP_SRV_certConf_cb_t.3ossl
 #usr/share/man/man3/OSSL_CMP_SRV_cert_request_cb_t.3ossl
+#usr/share/man/man3/OSSL_CMP_SRV_clean_transaction_cb_t.3ossl
+#usr/share/man/man3/OSSL_CMP_SRV_delayed_delivery_cb_t.3ossl
 #usr/share/man/man3/OSSL_CMP_SRV_error_cb_t.3ossl
 #usr/share/man/man3/OSSL_CMP_SRV_genm_cb_t.3ossl
 #usr/share/man/man3/OSSL_CMP_SRV_pollReq_cb_t.3ossl
@@ -4044,6 +4063,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_HTTP_REQ_CTX_new.3ossl
 #usr/share/man/man3/OSSL_HTTP_REQ_CTX_set1_req.3ossl
 #usr/share/man/man3/OSSL_HTTP_REQ_CTX_set_expected.3ossl
+#usr/share/man/man3/OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines.3ossl
 #usr/share/man/man3/OSSL_HTTP_REQ_CTX_set_max_response_length.3ossl
 #usr/share/man/man3/OSSL_HTTP_REQ_CTX_set_request_line.3ossl
 #usr/share/man/man3/OSSL_HTTP_adapt_proxy.3ossl
@@ -4187,6 +4207,27 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_PROVIDER_try_load_ex.3ossl
 #usr/share/man/man3/OSSL_PROVIDER_unload.3ossl
 #usr/share/man/man3/OSSL_PROVIDER_unquery_operation.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_AEAD_LIMIT_REACHED.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_APPLICATION_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_CONNECTION_REFUSED.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_CRYPTO_ERR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_CRYPTO_ERR_END.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_FINAL_SIZE_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_FLOW_CONTROL_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_FRAME_ENCODING_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_INTERNAL_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_INVALID_TOKEN.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_KEY_UPDATE_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_NO_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_NO_VIABLE_PATH.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_PROTOCOL_VIOLATION.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_STREAM_LIMIT_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_STREAM_STATE_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR.3ossl
+#usr/share/man/man3/OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT.3ossl
 #usr/share/man/man3/OSSL_QUIC_client_method.3ossl
 #usr/share/man/man3/OSSL_QUIC_client_thread_method.3ossl
 #usr/share/man/man3/OSSL_SELF_TEST_free.3ossl
@@ -5145,6 +5186,29 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_INCOMING_STREAM_POLICY_AUTO.3ossl
 #usr/share/man/man3/SSL_INCOMING_STREAM_POLICY_REJECT.3ossl
 #usr/share/man/man3/SSL_OP_BIT.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_E.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_EC.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_ECD.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_ER.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_EW.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_F.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_I.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_IS.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_ISB.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_ISE.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_ISU.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_NONE.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_OS.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_OSB.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_OSE.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_OSU.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_R.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_RE.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_RW.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_RWE.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_W.3ossl
+#usr/share/man/man3/SSL_POLL_EVENT_WE.3ossl
+#usr/share/man/man3/SSL_POLL_FLAG_NO_HANDLE_EVENTS.3ossl
 #usr/share/man/man3/SSL_SESSION_dup.3ossl
 #usr/share/man/man3/SSL_SESSION_free.3ossl
 #usr/share/man/man3/SSL_SESSION_get0_alpn_selected.3ossl
@@ -5166,6 +5230,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_SESSION_get_protocol_version.3ossl
 #usr/share/man/man3/SSL_SESSION_get_ticket_lifetime_hint.3ossl
 #usr/share/man/man3/SSL_SESSION_get_time.3ossl
+#usr/share/man/man3/SSL_SESSION_get_time_ex.3ossl
 #usr/share/man/man3/SSL_SESSION_get_timeout.3ossl
 #usr/share/man/man3/SSL_SESSION_has_ticket.3ossl
 #usr/share/man/man3/SSL_SESSION_is_resumable.3ossl
@@ -5185,6 +5250,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_SESSION_set_max_early_data.3ossl
 #usr/share/man/man3/SSL_SESSION_set_protocol_version.3ossl
 #usr/share/man/man3/SSL_SESSION_set_time.3ossl
+#usr/share/man/man3/SSL_SESSION_set_time_ex.3ossl
 #usr/share/man/man3/SSL_SESSION_set_timeout.3ossl
 #usr/share/man/man3/SSL_SESSION_up_ref.3ossl
 #usr/share/man/man3/SSL_STREAM_FLAG_ADVANCE.3ossl
@@ -5201,6 +5267,23 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_STREAM_TYPE_NONE.3ossl
 #usr/share/man/man3/SSL_STREAM_TYPE_READ.3ossl
 #usr/share/man/man3/SSL_STREAM_TYPE_WRITE.3ossl
+#usr/share/man/man3/SSL_VALUE_CLASS_FEATURE_NEGOTIATED.3ossl
+#usr/share/man/man3/SSL_VALUE_CLASS_FEATURE_PEER_REQUEST.3ossl
+#usr/share/man/man3/SSL_VALUE_CLASS_FEATURE_REQUEST.3ossl
+#usr/share/man/man3/SSL_VALUE_CLASS_GENERIC.3ossl
+#usr/share/man/man3/SSL_VALUE_EVENT_HANDLING_MODE.3ossl
+#usr/share/man/man3/SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT.3ossl
+#usr/share/man/man3/SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT.3ossl
+#usr/share/man/man3/SSL_VALUE_EVENT_HANDLING_MODE_INHERIT.3ossl
+#usr/share/man/man3/SSL_VALUE_QUIC_IDLE_TIMEOUT.3ossl
+#usr/share/man/man3/SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL.3ossl
+#usr/share/man/man3/SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL.3ossl
+#usr/share/man/man3/SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL.3ossl
+#usr/share/man/man3/SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL.3ossl
+#usr/share/man/man3/SSL_VALUE_STREAM_WRITE_BUF_AVAIL.3ossl
+#usr/share/man/man3/SSL_VALUE_STREAM_WRITE_BUF_SIZE.3ossl
+#usr/share/man/man3/SSL_VALUE_STREAM_WRITE_BUF_USED.3ossl
+#usr/share/man/man3/SSL_WRITE_FLAG_CONCLUDE.3ossl
 #usr/share/man/man3/SSL_accept.3ossl
 #usr/share/man/man3/SSL_accept_stream.3ossl
 #usr/share/man/man3/SSL_add0_chain_cert.3ossl
@@ -5312,12 +5395,17 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_get_default_timeout.3ossl
 #usr/share/man/man3/SSL_get_early_data_status.3ossl
 #usr/share/man/man3/SSL_get_error.3ossl
+#usr/share/man/man3/SSL_get_event_handling_mode.3ossl
 #usr/share/man/man3/SSL_get_event_timeout.3ossl
 #usr/share/man/man3/SSL_get_ex_data.3ossl
 #usr/share/man/man3/SSL_get_ex_data_X509_STORE_CTX_idx.3ossl
 #usr/share/man/man3/SSL_get_ex_new_index.3ossl
 #usr/share/man/man3/SSL_get_extms_support.3ossl
 #usr/share/man/man3/SSL_get_fd.3ossl
+#usr/share/man/man3/SSL_get_feature_negotiated_uint.3ossl
+#usr/share/man/man3/SSL_get_feature_peer_request_uint.3ossl
+#usr/share/man/man3/SSL_get_feature_request_uint.3ossl
+#usr/share/man/man3/SSL_get_generic_value_uint.3ossl
 #usr/share/man/man3/SSL_get_handshake_rtt.3ossl
 #usr/share/man/man3/SSL_get_info_callback.3ossl
 #usr/share/man/man3/SSL_get_key_update_type.3ossl
@@ -5340,6 +5428,10 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_get_privatekey.3ossl
 #usr/share/man/man3/SSL_get_psk_identity.3ossl
 #usr/share/man/man3/SSL_get_psk_identity_hint.3ossl
+#usr/share/man/man3/SSL_get_quic_stream_bidi_local_avail.3ossl
+#usr/share/man/man3/SSL_get_quic_stream_bidi_remote_avail.3ossl
+#usr/share/man/man3/SSL_get_quic_stream_uni_local_avail.3ossl
+#usr/share/man/man3/SSL_get_quic_stream_uni_remote_avail.3ossl
 #usr/share/man/man3/SSL_get_quiet_shutdown.3ossl
 #usr/share/man/man3/SSL_get_rbio.3ossl
 #usr/share/man/man3/SSL_get_read_ahead.3ossl
@@ -5375,6 +5467,9 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_get_stream_read_error_code.3ossl
 #usr/share/man/man3/SSL_get_stream_read_state.3ossl
 #usr/share/man/man3/SSL_get_stream_type.3ossl
+#usr/share/man/man3/SSL_get_stream_write_buf_avail.3ossl
+#usr/share/man/man3/SSL_get_stream_write_buf_size.3ossl
+#usr/share/man/man3/SSL_get_stream_write_buf_used.3ossl
 #usr/share/man/man3/SSL_get_stream_write_error_code.3ossl
 #usr/share/man/man3/SSL_get_stream_write_state.3ossl
 #usr/share/man/man3/SSL_get_time.3ossl
@@ -5382,6 +5477,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_get_tlsext_status_ocsp_resp.3ossl
 #usr/share/man/man3/SSL_get_tlsext_status_type.3ossl
 #usr/share/man/man3/SSL_get_tmp_key.3ossl
+#usr/share/man/man3/SSL_get_value_uint.3ossl
 #usr/share/man/man3/SSL_get_verify_callback.3ossl
 #usr/share/man/man3/SSL_get_verify_depth.3ossl
 #usr/share/man/man3/SSL_get_verify_mode.3ossl
@@ -5419,6 +5515,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_peek.3ossl
 #usr/share/man/man3/SSL_peek_ex.3ossl
 #usr/share/man/man3/SSL_pending.3ossl
+#usr/share/man/man3/SSL_poll.3ossl
 #usr/share/man/man3/SSL_psk_client_cb_func.3ossl
 #usr/share/man/man3/SSL_psk_find_session_cb_func.3ossl
 #usr/share/man/man3/SSL_psk_server_cb_func.3ossl
@@ -5483,9 +5580,12 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_set_default_stream_mode.3ossl
 #usr/share/man/man3/SSL_set_dh_auto.3ossl
 #usr/share/man/man3/SSL_set_ecdh_auto.3ossl
+#usr/share/man/man3/SSL_set_event_handling_mode.3ossl
 #usr/share/man/man3/SSL_set_ex_data.3ossl
 #usr/share/man/man3/SSL_set_fd.3ossl
+#usr/share/man/man3/SSL_set_feature_request_uint.3ossl
 #usr/share/man/man3/SSL_set_generate_session_id.3ossl
+#usr/share/man/man3/SSL_set_generic_value_uint.3ossl
 #usr/share/man/man3/SSL_set_hostflags.3ossl
 #usr/share/man/man3/SSL_set_incoming_stream_policy.3ossl
 #usr/share/man/man3/SSL_set_info_callback.3ossl
@@ -5534,6 +5634,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_set_tmp_dh_callback.3ossl
 #usr/share/man/man3/SSL_set_tmp_ecdh.3ossl
 #usr/share/man/man3/SSL_set_trust.3ossl
+#usr/share/man/man3/SSL_set_value_uint.3ossl
 #usr/share/man/man3/SSL_set_verify.3ossl
 #usr/share/man/man3/SSL_set_verify_depth.3ossl
 #usr/share/man/man3/SSL_set_verify_result.3ossl
@@ -5575,6 +5676,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_write.3ossl
 #usr/share/man/man3/SSL_write_early_data.3ossl
 #usr/share/man/man3/SSL_write_ex.3ossl
+#usr/share/man/man3/SSL_write_ex2.3ossl
 #usr/share/man/man3/SSLv23_client_method.3ossl
 #usr/share/man/man3/SSLv23_method.3ossl
 #usr/share/man/man3/SSLv23_server_method.3ossl
@@ -6011,6 +6113,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/X509_STORE_get0_objects.3ossl
 #usr/share/man/man3/X509_STORE_get0_param.3ossl
 #usr/share/man/man3/X509_STORE_get1_all_certs.3ossl
+#usr/share/man/man3/X509_STORE_get1_objects.3ossl
 #usr/share/man/man3/X509_STORE_get_cert_crl.3ossl
 #usr/share/man/man3/X509_STORE_get_check_crl.3ossl
 #usr/share/man/man3/X509_STORE_get_check_issued.3ossl
@@ -6857,6 +6960,7 @@ usr/lib/ossl-modules/legacy.so
 #usr/share/man/man7/openssl-core_names.h.7ossl
 #usr/share/man/man7/openssl-env.7ossl
 #usr/share/man/man7/openssl-glossary.7ossl
+#usr/share/man/man7/openssl-qlog.7ossl
 #usr/share/man/man7/openssl-quic.7ossl
 #usr/share/man/man7/openssl-threads.7ossl
 #usr/share/man/man7/openssl_user_macros.7ossl

diff --git a/lfs/openssl b/lfs/openssl
index d6f565df2c23e3ac1da4cb763c3404036250958e..a714d4dcd1ba3c0e18c16e670001f1218d612b44 100644 (file)
--- a/lfs/openssl
+++ b/lfs/openssl
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 3.2.2
+VER        = 3.3.0
 
 THISAPP    = openssl-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -72,7 +72,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = f42d44f31dc9ccf26ffe1fdd4a0119506a211808f92e860a34118109eae2ee7bcb5b0f43cbdf9eb811cd185cb53e092e62d652f7c0c0ce55b13289f7489073c9
+$(DL_FILE)_BLAKE2 = c68efaf8aca87961f396e305acc767b56d651b9adf4fd2c9d9b5a3266e35da4b856c6ed34be47d656c782aade975f20317a6759913b33d29d7eb088e638fa501
 
 install : $(TARGET)