Update OpenSSL from 1.1.1l to 1.1.1n #2593

pmenzel · 2022-03-15T20:42:22Z

Simple test:

@serotimor:~$ openssl version
OpenSSL 1.1.1n  15 Mar 2022

openssl1.be0

1. https://www.openssl.org/news/secadv/20220315.txt 2. https://www.openssl.org/news/cl111.txt > Changes between 1.1.1m and 1.1.1n [xx XXX xxxx] > > *) Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK (RFC 5489) > to the list of ciphersuites providing Perfect Forward Secrecy as > required by SECLEVEL >= 3. > > [Dmitry Belyavskiy, Nicola Tuveri] > > Changes between 1.1.1l and 1.1.1m [14 Dec 2021] > > *) Avoid loading of a dynamic engine twice. > > [Bernd Edlinger] > > *) Fixed building on Debian with kfreebsd kernels > > [Mattias Ellert] > > *) Prioritise DANE TLSA issuer certs over peer certs > > [Viktor Dukhovni] > > *) Fixed random API for MacOS prior to 10.12 > > These MacOS versions don't support the CommonCrypto APIs > > [Lenny Primak]

pmenzel commented Mar 15, 2022

View reviewed changes

openssl1.be0 Outdated Show resolved Hide resolved

pmenzel added the not ready for merge label Mar 15, 2022

pmenzel force-pushed the update-openssl1-from-1.1.1l-to-1.1.1n branch from 1ae3aa6 to acdd461 Compare March 15, 2022 20:57

pmenzel removed the not ready for merge label Mar 15, 2022

pmenzel merged commit f0fa0a8 into master Mar 15, 2022

Update OpenSSL from 1.1.1l to 1.1.1n #2593

Update OpenSSL from 1.1.1l to 1.1.1n #2593

Conversation

pmenzel commented Mar 15, 2022 • edited

pmenzel commented Mar 15, 2022 •

edited