OpenBSD/src HvuyC1Osbin/isakmpd x509.c

   isakmpd: avoid direct ASN1_STRING accesses

   Since this transforms notBefore and notAfter into a string to be used in
   a keynote assertion, existing libcrypto interfaces aren't directly suitable,
   so I kept this mechanical by assigning the data and length fields to local
   variables via accessors and replacing tm->data by data and tm->length by
   len, only occasionally fixing up whitespace and omitting parentheses.

   probably ok beck claudio
VersionDeltaFile
1.128+77-72sbin/isakmpd/x509.c
+77-721 files

OpenBSD/src qRZqcl1sbin/pfctl parse.y, sbin/ping ping.c

   allow network programs select DSCP_VA for network ToS

   OK stsp@
VersionDeltaFile
1.721+2-1sbin/pfctl/parse.y
1.250+2-1sbin/ping/ping.c
1.236+2-1usr.bin/nc/netcat.c
1.211+2-1usr.bin/ssh/misc.c
1.75+2-1usr.bin/tcpbench/tcpbench.c
1.486+2-1usr.sbin/bgpd/parse.y
+12-61 files not shown
+14-77 files

OpenBSD/src ipRRMdusys/netinet ip.h

   DSCP_VA define for use in network ToS

   OK stsp@
VersionDeltaFile
1.21+2-1sys/netinet/ip.h
+2-11 files

OpenBSD/src zRhtg7pregress/lib/libcrypto/man check_complete.pl

   check_complete: remove the BN_*FMT1 macros as well
VersionDeltaFile
1.41+1-4regress/lib/libcrypto/man/check_complete.pl
+1-41 files

OpenBSD/src zfLfxmwlib/libcrypto/bn bn.h

   libcrypto: remove BN_{DEC,HEX}_FMT1

   It appears that these were only ever used in bn_test.c...
VersionDeltaFile
1.85+1-5lib/libcrypto/bn/bn.h
+1-51 files

OpenBSD/ports LlEAJEPwww/tor-browser/browser/patches patch-intl_lwbrk_LineBreaker_cpp

   www/tor-browser/browser: fix build with ICU 78, from #2000225
VersionDeltaFile
1.4+10-18www/tor-browser/browser/patches/patch-intl_lwbrk_LineBreaker_cpp
+10-181 files

OpenBSD/ports GDy30eBwww/seamonkey/patches patch-intl_lwbrk_LineBreaker_cpp

   www/seamonkey: fix build with ICU 78, from #2000225
VersionDeltaFile
1.2+5-1www/seamonkey/patches/patch-intl_lwbrk_LineBreaker_cpp
+5-11 files

OpenBSD/ports a9CUlI4mail/mozilla-thunderbird/patches patch-intl_lwbrk_LineBreaker_cpp

   mail/mozilla-thunderbird: fix build with ICU 78, from #2000225
VersionDeltaFile
1.4+10-16mail/mozilla-thunderbird/patches/patch-intl_lwbrk_LineBreaker_cpp
+10-161 files

OpenBSD/ports uVy3F7kwww/firefox-esr/patches patch-intl_lwbrk_LineBreaker_cpp

   www/firefox-esr: fix build with ICU 78, from #2000225
VersionDeltaFile
1.4+10-18www/firefox-esr/patches/patch-intl_lwbrk_LineBreaker_cpp
+10-181 files

OpenBSD/ports yX8CQUHwww/mozilla-firefox/patches patch-intl_lwbrk_LineBreaker_cpp

   www/mozilla-firefox: fix build with ICU 78, from #2000225
VersionDeltaFile
1.5+10-19www/mozilla-firefox/patches/patch-intl_lwbrk_LineBreaker_cpp
+10-191 files

OpenBSD/ports r9DYIvWtextproc/icu4c Makefile distinfo, textproc/icu4c/patches patch-source_common_unicode_umachine_h

   Update to icu4c-78.1.
VersionDeltaFile
1.106+6-4textproc/icu4c/Makefile
1.48+2-2textproc/icu4c/distinfo
1.5+1-1textproc/icu4c/patches/patch-source_common_unicode_umachine_h
1.16+2-0textproc/icu4c/pkg/PLIST-main
+11-74 files

OpenBSD/src Hq7MZEcregress/lib/libcrypto/man check_complete.pl

   check_complete: adjust for BN_ macro removal

   pointed out by kenjiro
VersionDeltaFile
1.40+2-5regress/lib/libcrypto/man/check_complete.pl
+2-51 files

OpenBSD/ports n0PUi1Xdatabases/pgbouncer Makefile, databases/pgbouncer/patches patch-lib_usual_tls_tls_compat_c patch-lib_usual_tls_tls_conninfo_c

   pgbouncer: avoid direct ASN1_STRING accesses

   https://github.com/pgbouncer/pgbouncer/pull/1440
   https://github.com/openssl/openssl/issues/29117
VersionDeltaFile
1.1+23-0databases/pgbouncer/patches/patch-lib_usual_tls_tls_compat_c
1.1+17-0databases/pgbouncer/patches/patch-lib_usual_tls_tls_conninfo_c
1.48+1-0databases/pgbouncer/Makefile
+41-03 files

OpenBSD/ports qGyba9xsysutils/login_duo Makefile, sysutils/login_duo/patches patch-lib_https_c

   login_duo: add patch for upcoming removal of ASN1_STRING_data()

   ok jturner (maintainer)

   https://github.com/openssl/openssl/issues/29117
   https://github.com/openssl/openssl/pull/29149
VersionDeltaFile
1.9+19-0sysutils/login_duo/patches/patch-lib_https_c
1.44+1-0sysutils/login_duo/Makefile
+20-02 files

OpenBSD/ports Devh91Zdevel/fossil Makefile, devel/fossil/patches patch-src_http_ssl_c

   fossil: pull in upstreamed patch for opaque ASN1_STRING

   ok jturner (maintainer)

   https://github.com/openssl/openssl/issues/29117
   https://fossil-scm.org/home/info/0d239b52b0db10be
VersionDeltaFile
1.1+22-0devel/fossil/patches/patch-src_http_ssl_c
1.97+1-0devel/fossil/Makefile
+23-02 files

OpenBSD/ports wFsISIVaudio Makefile

   Link audio/siosw to the build.
VersionDeltaFile
1.519+1-0audio/Makefile
+1-01 files

OpenBSD/ports YCYGFUHaudio/siosw Makefile distinfo, audio/siosw/pkg PLIST DESCR

   Initial revision
VersionDeltaFile
1.1+17-0audio/siosw/Makefile
1.1+2-0audio/siosw/distinfo
1.1+1-0audio/siosw/pkg/PLIST
1.1+1-0audio/siosw/pkg/DESCR
1.1.1.1+0-0audio/siosw/pkg/DESCR
1.1.1.1+0-0audio/siosw/Makefile
+21-02 files not shown
+21-08 files

OpenBSD/src A4rWnFKusr.sbin/vmd vm.c

   Fix vmd reboots broken by my pause barrier changes.

   Reported by bluhm@.

   Long story is vmd has some complexity in how the decision to "reboot"
   a vm process is made. The pause barrier diff clobbered a return
   value that bubbled up to a value passed to exit(3) and picked up
   by the parent vmd process (the "vmm" process) that determines if a
   process exit should result in relaunching the vm process or not.

   For now, just stop clobbering the value and don't report the error
   returned by pthread_barrier_destroy(3).
VersionDeltaFile
1.122+3-4usr.sbin/vmd/vm.c
+3-41 files

OpenBSD/ports JG76jg6devel/kf5/khtml Makefile, devel/kf5/khtml/patches patch-src_html_kopenssl_cpp patch-src_html_kopenssl_h

   khtml: replace K_ASN1_STRING_data() with K_ASN1_STRING_get0_data()
VersionDeltaFile
1.5+32-9devel/kf5/khtml/patches/patch-src_html_kopenssl_cpp
1.1+15-0devel/kf5/khtml/patches/patch-src_html_kopenssl_h
1.20+1-0devel/kf5/khtml/Makefile
+48-93 files

OpenBSD/ports qhPjvq3audio/portmidi Makefile distinfo, audio/portmidi/patches patch-CMakeLists_txt patch-pm_common_CMakeLists_txt

   update to portmidi-2.0.8

   ok sthen@
VersionDeltaFile
1.10+1-3audio/portmidi/Makefile
1.4+2-2audio/portmidi/distinfo
1.5+2-2audio/portmidi/patches/patch-CMakeLists_txt
1.5+1-1audio/portmidi/patches/patch-pm_common_CMakeLists_txt
+6-84 files

OpenBSD/src UKaYGSOlib/libcrypto/asn1 a_type.c p8_pkey.c, lib/libcrypto/ts ts_rsp_verify.c ts_lib.c

   Replace trivial uses of ASN1_STRING_data()

   Almost entirely mechanical diff that ensures that for read-only accesses
   we use the const correct ASN1_STRING_get0_data(). Arguably, in most
   places the better fix would be to reach into ASN1_STRING but then we
   have to think and bikeshed...

   ok beck kenjiro
VersionDeltaFile
1.29+4-4lib/libcrypto/asn1/a_type.c
1.32+3-3lib/libcrypto/ts/ts_rsp_verify.c
1.26+2-2lib/libcrypto/asn1/p8_pkey.c
1.16+2-2lib/libcrypto/ts/ts_lib.c
1.16+2-2lib/libcrypto/ts/ts_verify_ctx.c
+13-135 files

OpenBSD/src XWcve9Klib/libcrypto/bn bn.h bn_local.h, lib/libcrypto/ec ec_internal.h

   libcrypto: make most of the BN_* macro pollution internal

   This is a first sweep of reducing the number of terribly named macros
   in bn.h More can go away. Those we need internally go to bn_local.h.
   Annoyingly bn_internal.h uses some of them, so it includes bn_local.h
   now. This can be cleaned up later.

   ok jsing kenjiro
VersionDeltaFile
1.84+1-26lib/libcrypto/bn/bn.h
1.61+15-1lib/libcrypto/bn/bn_local.h
1.25+9-1lib/libcrypto/bn/bn_convert.c
1.3+2-2lib/libcrypto/ec/ec_internal.h
1.21+2-1lib/libcrypto/bn/bn_internal.h
+29-315 files

OpenBSD/src JVuy1Uwregress/lib/libcrypto/bn bn_word.c

   bn_word.c: include bn_local.h in preparation for an upcoming change
VersionDeltaFile
1.3+3-1regress/lib/libcrypto/bn/bn_word.c
+3-11 files

OpenBSD/ports 1UXbgkesecurity/qca-qt6 Makefile

   qca-qt6: another REVISION bump that didn't want to be committed
VersionDeltaFile
1.6+1-0security/qca-qt6/Makefile
+1-01 files

OpenBSD/ports hOqNv4Rsecurity/qca-qt6/patches patch-plugins_qca-ossl_qca-ossl_cpp

   qca-qt6: convert to opaque ASN1_STRING

   prompted by https://github.com/openssl/openssl/issues/29117
VersionDeltaFile
1.3+78-2security/qca-qt6/patches/patch-plugins_qca-ossl_qca-ossl_cpp
+78-21 files

OpenBSD/ports lc5AtZ7security/qca-qt5 Makefile, security/qca-qt5/patches patch-plugins_qca-ossl_qca-ossl_cpp

   qca-qt5: convert to opaque ASN1_STRING

   prompted by https://github.com/openssl/openssl/issues/29117
VersionDeltaFile
1.12+78-2security/qca-qt5/patches/patch-plugins_qca-ossl_qca-ossl_cpp
1.22+1-0security/qca-qt5/Makefile
+79-22 files

OpenBSD/ports GBMHpmGdevel/kf5/kdelibs4support Makefile, devel/kf5/kdelibs4support/patches patch-src_kssl_kopenssl_cpp patch-src_kssl_ksslcertificate_cpp

   kdelibs4support: convert the K_ version of the q_ horror

   This again uses accessors and replaces K_ASN1_STRING_data() with
   K_ASN1_STRING_get0_data().
VersionDeltaFile
1.8+32-0devel/kf5/kdelibs4support/patches/patch-src_kssl_kopenssl_cpp
1.5+24-1devel/kf5/kdelibs4support/patches/patch-src_kssl_ksslcertificate_cpp
1.3+12-0devel/kf5/kdelibs4support/patches/patch-src_kssl_kopenssl_h
1.40+1-1devel/kf5/kdelibs4support/Makefile
+69-24 files

OpenBSD/ports swepIvMx11/qt6/qtbase Makefile

   qt6/qtbase: another missed bump
VersionDeltaFile
1.48+1-1x11/qt6/qtbase/Makefile
+1-11 files

OpenBSD/ports Q5tjWdJx11/qt6/qtbase/patches patch-src_plugins_tls_openssl_qx509_openssl_cpp

   qt6/qtbase: convert to opaque ASN1_STRING

   This is a bit simpler for qt6 than for qt5 since some code disappeared.
VersionDeltaFile
1.9+37-0x11/qt6/qtbase/patches/patch-src_plugins_tls_openssl_qx509_openssl_cpp
+37-01 files

OpenBSD/ports 8lcwcjJx11/qt5/qtbase Makefile, x11/qt5/qtbase/patches patch-src_network_ssl_qsslsocket_openssl_symbols_cpp patch-src_network_ssl_qsslcertificate_openssl_cpp

   qt5/qtbase: convert to opaque ASN1_STRING

   Similar to what was done to the bundled qt4 in wkhtmltopdf: const correct
   q_ASN1_STRING_length(), add _type() and use them where needed.

   Prompted by https://github.com/openssl/openssl/issues/29117
VersionDeltaFile
1.21+47-3x11/qt5/qtbase/patches/patch-src_network_ssl_qsslsocket_openssl_symbols_cpp
1.10+40-9x11/qt5/qtbase/patches/patch-src_network_ssl_qsslcertificate_openssl_cpp
1.18+11-1x11/qt5/qtbase/patches/patch-src_network_ssl_qsslsocket_openssl_symbols_p_h
1.80+2-0x11/qt5/qtbase/Makefile
+100-134 files