deps: upgrade openssl sources to openssl-3.0.17

deps: upgrade openssl sources to openssl-3.0.17 · nodejs/node@fb52d0d

92 files changed

lines changed

Original file line number	Diff line number	Diff line change
`@@ -28,6 +28,10 @@ breaking changes, and mappings for the large list of deprecated functions.`
`28`	`28`
`29`	`29`	`[Migration guide]: https://github.com/openssl/openssl/tree/master/doc/man7/migration_guide.pod`
`30`	`30`
	`31`	`+### Changes between 3.0.16 and 3.0.17 [1 Jul 2025]`
	`32`	`+`
	`33`	`+ * none yet`
	`34`	`+`
`31`	`35`	`### Changes between 3.0.15 and 3.0.16 [11 Feb 2025]`
`32`	`36`
`33`	`37`	`* Fixed timing side-channel in ECDSA signature computation.`
`@@ -3273,7 +3277,7 @@ OpenSSL 1.1.1`
`3273`	`3277`	`* Support for TLSv1.3 added. Note that users upgrading from an earlier`
`3274`	`3278`	`version of OpenSSL should review their configuration settings to ensure`
`3275`	`3279`	`that they are still appropriate for TLSv1.3. For further information see:`
`3276`		`-<https://wiki.openssl.org/index.php/TLS1.3>`
	`3280`	`+<https://github.com/openssl/openssl/wiki/TLS1.3>`
`3277`	`3281`
`3278`	`3282`	`Matt Caswell`
`3279`	`3283`
`@@ -4561,7 +4565,7 @@ OpenSSL 1.1.0`
`4561`	`4565`
`4562`	`4566`	`* The GOST engine was out of date and therefore it has been removed. An up`
`4563`	`4567`	`to date GOST engine is now being maintained in an external repository.`
`4564`		`- See: <https://wiki.openssl.org/index.php/Binaries>. Libssl still retains`
	`4568`	`+ See: <https://github.com/openssl/openssl/wiki/Binaries>. Libssl still retains`
`4565`	`4569`	`support for GOST ciphersuites (these are only activated if a GOST engine`
`4566`	`4570`	`is present).`
`4567`	`4571`
`@@ -5340,6 +5344,11 @@ OpenSSL 1.1.0`
`5340`	`5344`
`5341`	`5345`	`Rob Percival <robpercival@google.com>`
`5342`	`5346`
	`5347`	`+ * SSLv3 is by default disabled at build-time. Builds that are not`
	`5348`	`+ configured with "enable-ssl3" will not support SSLv3.`
	`5349`	`+`
	`5350`	`+ Kurt Roeckx`
	`5351`	`+`
`5343`	`5352`	`OpenSSL 1.0.2`
`5344`	`5353`	`-------------`
`5345`	`5354`

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`#! /usr/bin/env perl`
`2`	`2`	`# -- mode: perl; --`
`3`		`-# Copyright 2016-2024 The OpenSSL Project Authors. All Rights Reserved.`
	`3`	`+# Copyright 2016-2025 The OpenSSL Project Authors. All Rights Reserved.`
`4`	`4`	`#`
`5`	`5`	`# Licensed under the Apache License 2.0 (the "License"). You may not use`
`6`	`6`	`# this file except in compliance with the License. You can obtain a copy`
`@@ -157,6 +157,7 @@ my @gcc_devteam_warn = qw(`
`157`	`157`	`-Wextra`
`158`	`158`	`-Wno-unused-parameter`
`159`	`159`	`-Wno-missing-field-initializers`
	`160`	`+ -Wno-unterminated-string-initialization`
`160`	`161`	`-Wswitch`
`161`	`162`	`-Wsign-compare`
`162`	`163`	`-Wshadow`

Original file line number	Diff line number	Diff line change
`@@ -18,6 +18,14 @@ OpenSSL Releases`
`18`	`18`	`OpenSSL 3.0`
`19`	`19`	`-----------`
`20`	`20`
	`21`	`+### Major changes between OpenSSL 3.0.16 and OpenSSL 3.0.17 [1 Jul 2025]`
	`22`	`+`
	`23`	`+OpenSSL 3.0.17 is a bug fix release.`
	`24`	`+`
	`25`	`+This release incorporates the following bug fixes and mitigations:`
	`26`	`+`
	`27`	`+* Miscellaneous minor bug fixes.`
	`28`	`+`
`21`	`29`	`### Major changes between OpenSSL 3.0.15 and OpenSSL 3.0.16 [11 Feb 2025]`
`22`	`30`
`23`	`31`	`OpenSSL 3.0.16 is a security patch release. The most severe CVE fixed in this`
`@@ -329,7 +337,7 @@ OpenSSL 1.1.1`
`329`	`337`	`* Rewrite of the packet construction code for "safer" packet handling`
`330`	`338`	`* Rewrite of the extension handling code`
`331`	`339`	`For further important information, see the [TLS1.3 page](`
`332`		`-https://wiki.openssl.org/index.php/TLS1.3) in the OpenSSL Wiki.`
	`340`	`+https://github.com/openssl/openssl/wiki/TLS1.3) in the OpenSSL Wiki.`
`333`	`341`
`334`	`342`	`* Complete rewrite of the OpenSSL random number generator to introduce the`
`335`	`343`	`following capabilities`

Original file line number	Diff line number	Diff line change
`@@ -79,6 +79,11 @@ Quick start`
`79`	`79`	`OpenSSL or`
`80`	`80`	- `perl Configure` to let Configure figure out the platform
`81`	`81`
	`82`	`+ a. If you don't plan to develop OpenSSL yourself and don't need to rebuild,`
	`83`	`+ in other words, if you always do a new build, turning off the build`
	`84`	`+ dependency feature can speed up build times by up to 50%:`
	`85`	+`perl Configure no-makedepend`
	`86`	`+`
`82`	`87`	6. `nmake`
`83`	`88`
`84`	`89`	7. `nmake test`

Original file line number	Diff line number	Diff line change
`@@ -128,8 +128,7 @@ available online.`
`128`	`128`	`Wiki`
`129`	`129`	`----`
`130`	`130`
`131`		`-There is a Wiki at [wiki.openssl.org] which is currently not very active.`
`132`		`-It contains a lot of useful information, not all of which is up to date.`
	`131`	`+There is a [GitHub Wiki] which is currently not very active.`
`133`	`132`
`134`	`133`	`License`
`135`	`134`	`=======`
`@@ -178,8 +177,8 @@ All rights reserved.`
`178`	`177`	`<https://github.com/openssl/openssl>`
`179`	`178`	`"OpenSSL GitHub Mirror"`
`180`	`179`
`181`		`-[wiki.openssl.org]:`
`182`		`-<https://wiki.openssl.org>`
	`180`	`+[GitHub Wiki]:`
	`181`	`+<https://github.com/openssl/openssl/wiki>`
`183`	`182`	`"OpenSSL Wiki"`
`184`	`183`
`185`	`184`	`[migration_guide(7ossl)]:`

Original file line number	Diff line number	Diff line change
`@@ -1,7 +1,7 @@`
`1`	`1`	`MAJOR=3`
`2`	`2`	`MINOR=0`
`3`		`-PATCH=16`
	`3`	`+PATCH=17`
`4`	`4`	`PRE_RELEASE_TAG=`
`5`	`5`	`BUILD_METADATA=`
`6`		`-RELEASE_DATE="11 Feb 2025"`
	`6`	`+RELEASE_DATE="1 Jul 2025"`
`7`	`7`	`SHLIB_VERSION=3`