]> code.ossystems Code Review - openembedded-core.git/commit
openssl: upgrade to 3.0.1
authorRoss Burton <ross@burtonini.com>
Mon, 20 Dec 2021 18:05:59 +0000 (18:05 +0000)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 21 Dec 2021 12:01:03 +0000 (12:01 +0000)
commit5cd40648b0ba88cd9905800e748ae98f08c10ac7
tree70c5e359dee54382728250439592b85470142a67
parent4c644708798f258d45dbcfa01909626de32710d4
openssl: upgrade to 3.0.1

Major changes in 3.0.1:

  * Fixed invalid handling of X509_verify_cert() internal errors in libssl
    ([CVE-2021-4044])
  * Allow fetching an operation from the provider that owns an unexportable key
    as a fallback if that is still allowed by the property query.

Drop patches which were backported.

Add sed to openssl-ptest as the tests use 'sed -u', which isn't supported
by busybox.

Ensure that we package the dummy async engine, needed by the test suite.

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-connectivity/openssl/openssl/0001-Fix-EVP_PKEY_CTX_get_rsa_pss_saltlen-no.patch [deleted file]
meta/recipes-connectivity/openssl/openssl/armv8-32bit.patch [deleted file]
meta/recipes-connectivity/openssl/openssl_3.0.1.bb [moved from meta/recipes-connectivity/openssl/openssl_3.0.0.bb with 93% similarity]