difos/package/libs/openssl
John Audia e2cdcf8e46 openssl: update to 3.5.1
Automatically rebased: 100-Configure-afalg-support.patch

Changes between 3.5.0 and 3.5.1:
Fix x509 application adds trusted use instead of rejected use.
Issue summary: Use of -addreject option with the openssl x509 application
adds a trusted use instead of a rejected use for a certificate.

Impact summary: If a user intends to make a trusted certificate rejected
for a particular use it will be instead marked as trusted for that use.
(CVE-2025-4575)

Aligned the behaviour of TLS and DTLS in the event of a no_renegotiation
alert being received. Older versions of OpenSSL failed with DTLS if a
no_renegotiation alert was received. All versions of OpenSSL do this for TLS.
From 3.2 a bug was exposed that meant that DTLS ignored no_rengotiation.
We have now restored the original behaviour and brought DTLS back into line
with TLS.

Signed-off-by: John Audia <therealgraysky@proton.me>
Link: https://github.com/openwrt/openwrt/pull/19283
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-07-03 13:03:39 +02:00
..
files openssl: add legacy provider 2023-04-05 08:24:49 -03:00
patches openssl: update to 3.5.1 2025-07-03 13:03:39 +02:00
Config.in openssl: add legacy provider 2023-04-05 08:24:49 -03:00
Makefile openssl: update to 3.5.1 2025-07-03 13:03:39 +02:00