diff mbox series

openssl: Update to version 3.4.0

Message ID 20241120214909.2717383-7-adolf.belka@ipfire.org
State New
Headers
Series openssl: Update to version 3.4.0 |

Commit Message

Adolf Belka Nov. 20, 2024, 9:49 p.m. UTC 
  - Update from version 3.3.2 to 3.4.0
- Update of rootfile
- Changelog
    3.4.0
	This release incorporates the following potentially significant or incompatible
	changes:
	  * Deprecation of TS_VERIFY_CTX_set_* functions and addition of replacement
	    TS_VERIFY_CTX_set0_* functions with improved semantics
	  * Redesigned use of OPENSSLDIR/ENGINESDIR/MODULESDIR on Windows such that
	    what were formerly build time locations can now be defined at run time
	    with registry keys
	  * The X25519 and X448 key exchange implementation in the FIPS provider
	    is unapproved and has `fips=no` property.
	  * SHAKE-128 and SHAKE-256 implementations have no default digest length
	    anymore. That means these algorithms cannot be used with
	    EVP_DigestFinal/_ex() unless the `xoflen` param is set before.
	  * Setting `config_diagnostics=1` in the config file will cause errors to
	    be returned from SSL_CTX_new() and SSL_CTX_new_ex() if there is an error
	    in the ssl module configuration.
	  * An empty renegotiate extension will be used in TLS client hellos instead
	    of the empty renegotiation SCSV, for all connections with a minimum TLS
	    version > 1.0.
	  * Deprecation of SSL_SESSION_get_time(), SSL_SESSION_set_time() and
	    SSL_CTX_flush_sessions() functions in favor of their respective `_ex`
	    functions which are Y2038-safe on platforms with Y2038-safe `time_t`
	This release adds the following new features:
	  * Support for directly fetched composite signature algorithms such as
	    RSA-SHA2-256 including new API functions
	  * FIPS indicators support in the FIPS provider and various updates of the FIPS
	    provider required for future FIPS 140-3 validations
	  * Implementation of RFC 9579 (PBMAC1) in PKCS#12
	  * An optional additional random seed source RNG `JITTER` using a statically
	    linked jitterentropy library
	  * New options `-not_before` and `-not_after` for explicit setting start and
	    end dates of certificates created with the `req` and `x509` apps
	  * Support for integrity-only cipher suites TLS_SHA256_SHA256 and
	    TLS_SHA384_SHA384 in TLS 1.3, as defined in RFC 9150
	  * Support for requesting CRL in CMP
	  * Support for additional X.509v3 extensions related to Attribute Certificates
	  * Initial Attribute Certificate (RFC 5755) support
	  * Possibility to customize ECC groups initialization to use precomputed values
	    to save CPU time and use of this feature by the P-256 implementation
   3.3.3
	security patch release.
	The most severe CVE fixed in this release is Low.
	This release incorporates the following bug fixes and mitigations:
	  * Fixed possible OOB memory access with invalid low-level GF(2^m) elliptic
	    curve parameters.
	    ([CVE-2024-9143])

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/openssl | 254 +++++++++++++++++++++++++++++++-
 lfs/openssl                     |   4 +-
 2 files changed, 255 insertions(+), 3 deletions(-)
diff mbox series

Patch

diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl
index d9595bef9..9773c0fa1 100644
--- a/config/rootfiles/common/openssl
+++ b/config/rootfiles/common/openssl
@@ -84,6 +84,7 @@  usr/bin/openssl
 #usr/include/openssl/http.h
 #usr/include/openssl/httperr.h
 #usr/include/openssl/idea.h
+#usr/include/openssl/indicator.h
 #usr/include/openssl/kdf.h
 #usr/include/openssl/kdferr.h
 #usr/include/openssl/lhash.h
@@ -148,6 +149,7 @@  usr/bin/openssl
 #usr/include/openssl/uierr.h
 #usr/include/openssl/whrlpool.h
 #usr/include/openssl/x509.h
+#usr/include/openssl/x509_acert.h
 #usr/include/openssl/x509_vfy.h
 #usr/include/openssl/x509err.h
 #usr/include/openssl/x509v3.h
@@ -315,6 +317,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/BN_swap.html
 #usr/share/doc/openssl/html/man3/BN_zero.html
 #usr/share/doc/openssl/html/man3/BUF_MEM_new.html
+#usr/share/doc/openssl/html/man3/CMAC_CTX.html
 #usr/share/doc/openssl/html/man3/CMS_EncryptedData_decrypt.html
 #usr/share/doc/openssl/html/man3/CMS_EncryptedData_encrypt.html
 #usr/share/doc/openssl/html/man3/CMS_EnvelopedData_create.html
@@ -419,6 +422,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_ctrl.html
 #usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_get0_libctx.html
 #usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_get0_pkey.html
+#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_get_algor.html
 #usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_new.html
 #usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set1_pbe_pass.html
 #usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_hkdf_md.html
@@ -487,6 +491,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/EVP_sm3.html
 #usr/share/doc/openssl/html/man3/EVP_sm4_cbc.html
 #usr/share/doc/openssl/html/man3/EVP_whirlpool.html
+#usr/share/doc/openssl/html/man3/GENERAL_NAME.html
 #usr/share/doc/openssl/html/man3/HMAC.html
 #usr/share/doc/openssl/html/man3/MD5.html
 #usr/share/doc/openssl/html/man3/MDC2_Init.html
@@ -512,11 +517,13 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/OPENSSL_instrument_bus.html
 #usr/share/doc/openssl/html/man3/OPENSSL_load_builtin_modules.html
 #usr/share/doc/openssl/html/man3/OPENSSL_malloc.html
+#usr/share/doc/openssl/html/man3/OPENSSL_riscvcap.html
 #usr/share/doc/openssl/html/man3/OPENSSL_s390xcap.html
 #usr/share/doc/openssl/html/man3/OPENSSL_secure_malloc.html
 #usr/share/doc/openssl/html/man3/OPENSSL_strcasecmp.html
 #usr/share/doc/openssl/html/man3/OSSL_ALGORITHM.html
 #usr/share/doc/openssl/html/man3/OSSL_CALLBACK.html
+#usr/share/doc/openssl/html/man3/OSSL_CMP_ATAV_set0.html
 #usr/share/doc/openssl/html/man3/OSSL_CMP_CTX_new.html
 #usr/share/doc/openssl/html/man3/OSSL_CMP_HDR_get0_transactionID.html
 #usr/share/doc/openssl/html/man3/OSSL_CMP_ITAV_new_caCerts.html
@@ -545,12 +552,17 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/OSSL_ENCODER_to_bio.html
 #usr/share/doc/openssl/html/man3/OSSL_ERR_STATE_save.html
 #usr/share/doc/openssl/html/man3/OSSL_ESS_check_signing_certs.html
+#usr/share/doc/openssl/html/man3/OSSL_GENERAL_NAMES_print.html
 #usr/share/doc/openssl/html/man3/OSSL_HPKE_CTX_new.html
 #usr/share/doc/openssl/html/man3/OSSL_HTTP_REQ_CTX.html
 #usr/share/doc/openssl/html/man3/OSSL_HTTP_parse_url.html
 #usr/share/doc/openssl/html/man3/OSSL_HTTP_transfer.html
+#usr/share/doc/openssl/html/man3/OSSL_IETF_ATTR_SYNTAX.html
+#usr/share/doc/openssl/html/man3/OSSL_IETF_ATTR_SYNTAX_print.html
+#usr/share/doc/openssl/html/man3/OSSL_INDICATOR_set_callback.html
 #usr/share/doc/openssl/html/man3/OSSL_ITEM.html
 #usr/share/doc/openssl/html/man3/OSSL_LIB_CTX.html
+#usr/share/doc/openssl/html/man3/OSSL_LIB_CTX_set_conf_diagnostics.html
 #usr/share/doc/openssl/html/man3/OSSL_PARAM.html
 #usr/share/doc/openssl/html/man3/OSSL_PARAM_BLD.html
 #usr/share/doc/openssl/html/man3/OSSL_PARAM_allocate_from_text.html
@@ -572,6 +584,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/OSSL_trace_set_channel.html
 #usr/share/doc/openssl/html/man3/OpenSSL_add_all_algorithms.html
 #usr/share/doc/openssl/html/man3/OpenSSL_version.html
+#usr/share/doc/openssl/html/man3/PBMAC1_get1_pbkdf2_param.html
 #usr/share/doc/openssl/html/man3/PEM_X509_INFO_read_bio_ex.html
 #usr/share/doc/openssl/html/man3/PEM_bytes_read_bio.html
 #usr/share/doc/openssl/html/man3/PEM_read.html
@@ -749,6 +762,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/SSL_get0_group_name.html
 #usr/share/doc/openssl/html/man3/SSL_get0_peer_rpk.html
 #usr/share/doc/openssl/html/man3/SSL_get0_peer_scts.html
+#usr/share/doc/openssl/html/man3/SSL_get1_builtin_sigalgs.html
 #usr/share/doc/openssl/html/man3/SSL_get_SSL_CTX.html
 #usr/share/doc/openssl/html/man3/SSL_get_all_async_fds.html
 #usr/share/doc/openssl/html/man3/SSL_get_certificate.html
@@ -813,13 +827,18 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man3/SSL_want.html
 #usr/share/doc/openssl/html/man3/SSL_write.html
 #usr/share/doc/openssl/html/man3/TS_RESP_CTX_new.html
-#usr/share/doc/openssl/html/man3/TS_VERIFY_CTX_set_certs.html
+#usr/share/doc/openssl/html/man3/TS_VERIFY_CTX.html
 #usr/share/doc/openssl/html/man3/UI_STRING.html
 #usr/share/doc/openssl/html/man3/UI_UTIL_read_pw.html
 #usr/share/doc/openssl/html/man3/UI_create_method.html
 #usr/share/doc/openssl/html/man3/UI_new.html
 #usr/share/doc/openssl/html/man3/X509V3_get_d2i.html
 #usr/share/doc/openssl/html/man3/X509V3_set_ctx.html
+#usr/share/doc/openssl/html/man3/X509_ACERT_add1_attr.html
+#usr/share/doc/openssl/html/man3/X509_ACERT_add_attr_nconf.html
+#usr/share/doc/openssl/html/man3/X509_ACERT_get0_holder_baseCertId.html
+#usr/share/doc/openssl/html/man3/X509_ACERT_get_attr.html
+#usr/share/doc/openssl/html/man3/X509_ACERT_print_ex.html
 #usr/share/doc/openssl/html/man3/X509_ALGOR_dup.html
 #usr/share/doc/openssl/html/man3/X509_ATTRIBUTE.html
 #usr/share/doc/openssl/html/man3/X509_CRL_get0_by_serial.html
@@ -957,9 +976,11 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man7/EVP_PKEY-RSA.html
 #usr/share/doc/openssl/html/man7/EVP_PKEY-SM2.html
 #usr/share/doc/openssl/html/man7/EVP_PKEY-X25519.html
+#usr/share/doc/openssl/html/man7/EVP_RAND-CRNG-TEST.html
 #usr/share/doc/openssl/html/man7/EVP_RAND-CTR-DRBG.html
 #usr/share/doc/openssl/html/man7/EVP_RAND-HASH-DRBG.html
 #usr/share/doc/openssl/html/man7/EVP_RAND-HMAC-DRBG.html
+#usr/share/doc/openssl/html/man7/EVP_RAND-JITTER.html
 #usr/share/doc/openssl/html/man7/EVP_RAND-SEED-SRC.html
 #usr/share/doc/openssl/html/man7/EVP_RAND-TEST-RAND.html
 #usr/share/doc/openssl/html/man7/EVP_RAND.html
@@ -1016,6 +1037,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/doc/openssl/html/man7/ossl-guide-tls-client-block.html
 #usr/share/doc/openssl/html/man7/ossl-guide-tls-client-non-block.html
 #usr/share/doc/openssl/html/man7/ossl-guide-tls-introduction.html
+#usr/share/doc/openssl/html/man7/ossl-guide-tls-server-block.html
 #usr/share/doc/openssl/html/man7/ossl_store-file.html
 #usr/share/doc/openssl/html/man7/ossl_store.html
 #usr/share/doc/openssl/html/man7/passphrase-encoding.html
@@ -1753,6 +1775,16 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/BUF_reverse.3ossl
 #usr/share/man/man3/CERTIFICATEPOLICIES_free.3ossl
 #usr/share/man/man3/CERTIFICATEPOLICIES_new.3ossl
+#usr/share/man/man3/CMAC_CTX.3ossl
+#usr/share/man/man3/CMAC_CTX_cleanup.3ossl
+#usr/share/man/man3/CMAC_CTX_copy.3ossl
+#usr/share/man/man3/CMAC_CTX_free.3ossl
+#usr/share/man/man3/CMAC_CTX_get0_cipher_ctx.3ossl
+#usr/share/man/man3/CMAC_CTX_new.3ossl
+#usr/share/man/man3/CMAC_Final.3ossl
+#usr/share/man/man3/CMAC_Init.3ossl
+#usr/share/man/man3/CMAC_Update.3ossl
+#usr/share/man/man3/CMAC_resume.3ossl
 #usr/share/man/man3/CMS_AuthEnvelopedData_create.3ossl
 #usr/share/man/man3/CMS_AuthEnvelopedData_create_ex.3ossl
 #usr/share/man/man3/CMS_ContentInfo_free.3ossl
@@ -1880,11 +1912,15 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/CRYPTO_THREAD_run_once.3ossl
 #usr/share/man/man3/CRYPTO_THREAD_unlock.3ossl
 #usr/share/man/man3/CRYPTO_THREAD_write_lock.3ossl
+#usr/share/man/man3/CRYPTO_aligned_alloc.3ossl
 #usr/share/man/man3/CRYPTO_alloc_ex_data.3ossl
 #usr/share/man/man3/CRYPTO_atomic_add.3ossl
+#usr/share/man/man3/CRYPTO_atomic_add64.3ossl
+#usr/share/man/man3/CRYPTO_atomic_and.3ossl
 #usr/share/man/man3/CRYPTO_atomic_load.3ossl
 #usr/share/man/man3/CRYPTO_atomic_load_int.3ossl
 #usr/share/man/man3/CRYPTO_atomic_or.3ossl
+#usr/share/man/man3/CRYPTO_atomic_store.3ossl
 #usr/share/man/man3/CRYPTO_clear_free.3ossl
 #usr/share/man/man3/CRYPTO_clear_realloc.3ossl
 #usr/share/man/man3/CRYPTO_free.3ossl
@@ -2054,6 +2090,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/DIRECTORYSTRING_new.3ossl
 #usr/share/man/man3/DISPLAYTEXT_free.3ossl
 #usr/share/man/man3/DISPLAYTEXT_new.3ossl
+#usr/share/man/man3/DIST_POINT_NAME_dup.3ossl
 #usr/share/man/man3/DIST_POINT_NAME_free.3ossl
 #usr/share/man/man3/DIST_POINT_NAME_new.3ossl
 #usr/share/man/man3/DIST_POINT_free.3ossl
@@ -2484,6 +2521,8 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_CIPHER_CTX_get0_cipher.3ossl
 #usr/share/man/man3/EVP_CIPHER_CTX_get0_name.3ossl
 #usr/share/man/man3/EVP_CIPHER_CTX_get1_cipher.3ossl
+#usr/share/man/man3/EVP_CIPHER_CTX_get_algor.3ossl
+#usr/share/man/man3/EVP_CIPHER_CTX_get_algor_params.3ossl
 #usr/share/man/man3/EVP_CIPHER_CTX_get_app_data.3ossl
 #usr/share/man/man3/EVP_CIPHER_CTX_get_block_size.3ossl
 #usr/share/man/man3/EVP_CIPHER_CTX_get_cipher_data.3ossl
@@ -2509,6 +2548,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_CIPHER_CTX_num.3ossl
 #usr/share/man/man3/EVP_CIPHER_CTX_original_iv.3ossl
 #usr/share/man/man3/EVP_CIPHER_CTX_reset.3ossl
+#usr/share/man/man3/EVP_CIPHER_CTX_set_algor_params.3ossl
 #usr/share/man/man3/EVP_CIPHER_CTX_set_app_data.3ossl
 #usr/share/man/man3/EVP_CIPHER_CTX_set_cipher_data.3ossl
 #usr/share/man/man3/EVP_CIPHER_CTX_set_flags.3ossl
@@ -2671,6 +2711,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_KEYMGMT_do_all_provided.3ossl
 #usr/share/man/man3/EVP_KEYMGMT_fetch.3ossl
 #usr/share/man/man3/EVP_KEYMGMT_free.3ossl
+#usr/share/man/man3/EVP_KEYMGMT_gen_gettable_params.3ossl
 #usr/share/man/man3/EVP_KEYMGMT_gen_settable_params.3ossl
 #usr/share/man/man3/EVP_KEYMGMT_get0_description.3ossl
 #usr/share/man/man3/EVP_KEYMGMT_get0_name.3ossl
@@ -2724,6 +2765,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_MD_CTX_get_params.3ossl
 #usr/share/man/man3/EVP_MD_CTX_get_pkey_ctx.3ossl
 #usr/share/man/man3/EVP_MD_CTX_get_size.3ossl
+#usr/share/man/man3/EVP_MD_CTX_get_size_ex.3ossl
 #usr/share/man/man3/EVP_MD_CTX_get_type.3ossl
 #usr/share/man/man3/EVP_MD_CTX_gettable_params.3ossl
 #usr/share/man/man3/EVP_MD_CTX_md.3ossl
@@ -2788,6 +2830,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_MD_size.3ossl
 #usr/share/man/man3/EVP_MD_type.3ossl
 #usr/share/man/man3/EVP_MD_up_ref.3ossl
+#usr/share/man/man3/EVP_MD_xof.3ossl
 #usr/share/man/man3/EVP_OpenFinal.3ossl
 #usr/share/man/man3/EVP_OpenInit.3ossl
 #usr/share/man/man3/EVP_OpenUpdate.3ossl
@@ -2822,6 +2865,8 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_PKEY_CTX_get0_rsa_oaep_label.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_get1_id.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_get1_id_len.3ossl
+#usr/share/man/man3/EVP_PKEY_CTX_get_algor.3ossl
+#usr/share/man/man3/EVP_PKEY_CTX_get_algor_params.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_get_app_data.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_get_cb.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_get_dh_kdf_md.3ossl
@@ -2859,6 +2904,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_PKEY_CTX_set1_rsa_keygen_pubexp.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_set1_scrypt_salt.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_set1_tls1_prf_secret.3ossl
+#usr/share/man/man3/EVP_PKEY_CTX_set_algor_params.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_set_app_data.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_set_cb.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_set_dh_kdf_md.3ossl
@@ -2911,6 +2957,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_PKEY_CTX_set_scrypt_maxmem_bytes.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_set_scrypt_p.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_set_scrypt_r.3ossl
+#usr/share/man/man3/EVP_PKEY_CTX_set_signature.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_set_signature_md.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_set_tls1_prf_md.3ossl
 #usr/share/man/man3/EVP_PKEY_CTX_settable_params.3ossl
@@ -3128,6 +3175,10 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_PKEY_sign.3ossl
 #usr/share/man/man3/EVP_PKEY_sign_init.3ossl
 #usr/share/man/man3/EVP_PKEY_sign_init_ex.3ossl
+#usr/share/man/man3/EVP_PKEY_sign_init_ex2.3ossl
+#usr/share/man/man3/EVP_PKEY_sign_message_final.3ossl
+#usr/share/man/man3/EVP_PKEY_sign_message_init.3ossl
+#usr/share/man/man3/EVP_PKEY_sign_message_update.3ossl
 #usr/share/man/man3/EVP_PKEY_size.3ossl
 #usr/share/man/man3/EVP_PKEY_todata.3ossl
 #usr/share/man/man3/EVP_PKEY_type.3ossl
@@ -3136,9 +3187,14 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EVP_PKEY_verify.3ossl
 #usr/share/man/man3/EVP_PKEY_verify_init.3ossl
 #usr/share/man/man3/EVP_PKEY_verify_init_ex.3ossl
+#usr/share/man/man3/EVP_PKEY_verify_init_ex2.3ossl
+#usr/share/man/man3/EVP_PKEY_verify_message_final.3ossl
+#usr/share/man/man3/EVP_PKEY_verify_message_init.3ossl
+#usr/share/man/man3/EVP_PKEY_verify_message_update.3ossl
 #usr/share/man/man3/EVP_PKEY_verify_recover.3ossl
 #usr/share/man/man3/EVP_PKEY_verify_recover_init.3ossl
 #usr/share/man/man3/EVP_PKEY_verify_recover_init_ex.3ossl
+#usr/share/man/man3/EVP_PKEY_verify_recover_init_ex2.3ossl
 #usr/share/man/man3/EVP_Q_digest.3ossl
 #usr/share/man/man3/EVP_Q_mac.3ossl
 #usr/share/man/man3/EVP_RAND.3ossl
@@ -3405,11 +3461,13 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/EXTENDED_KEY_USAGE_free.3ossl
 #usr/share/man/man3/EXTENDED_KEY_USAGE_new.3ossl
 #usr/share/man/man3/EXT_UTF8STRING.3ossl
+#usr/share/man/man3/GENERAL_NAME.3ossl
 #usr/share/man/man3/GENERAL_NAMES_free.3ossl
 #usr/share/man/man3/GENERAL_NAMES_new.3ossl
 #usr/share/man/man3/GENERAL_NAME_dup.3ossl
 #usr/share/man/man3/GENERAL_NAME_free.3ossl
 #usr/share/man/man3/GENERAL_NAME_new.3ossl
+#usr/share/man/man3/GENERAL_NAME_set1_X509_NAME.3ossl
 #usr/share/man/man3/GENERAL_SUBTREE_free.3ossl
 #usr/share/man/man3/GENERAL_SUBTREE_new.3ossl
 #usr/share/man/man3/GEN_SESSION_CB.3ossl
@@ -3629,6 +3687,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_VERSION_PREREQ.3ossl
 #usr/share/man/man3/OPENSSL_VERSION_PRE_RELEASE.3ossl
 #usr/share/man/man3/OPENSSL_VERSION_TEXT.3ossl
+#usr/share/man/man3/OPENSSL_aligned_alloc.3ossl
 #usr/share/man/man3/OPENSSL_atexit.3ossl
 #usr/share/man/man3/OPENSSL_buf2hexstr.3ossl
 #usr/share/man/man3/OPENSSL_buf2hexstr_ex.3ossl
@@ -3662,6 +3721,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_memdup.3ossl
 #usr/share/man/man3/OPENSSL_no_config.3ossl
 #usr/share/man/man3/OPENSSL_realloc.3ossl
+#usr/share/man/man3/OPENSSL_riscvcap.3ossl
 #usr/share/man/man3/OPENSSL_s390xcap.3ossl
 #usr/share/man/man3/OPENSSL_secure_actual_size.3ossl
 #usr/share/man/man3/OPENSSL_secure_clear_free.3ossl
@@ -3699,6 +3759,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_strlcpy.3ossl
 #usr/share/man/man3/OPENSSL_strncasecmp.3ossl
 #usr/share/man/man3/OPENSSL_strndup.3ossl
+#usr/share/man/man3/OPENSSL_strtoul.3ossl
 #usr/share/man/man3/OPENSSL_thread_stop.3ossl
 #usr/share/man/man3/OPENSSL_thread_stop_ex.3ossl
 #usr/share/man/man3/OPENSSL_version_build_metadata.3ossl
@@ -3708,8 +3769,33 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OPENSSL_version_pre_release.3ossl
 #usr/share/man/man3/OPENSSL_zalloc.3ossl
 #usr/share/man/man3/OSSL_ALGORITHM.3ossl
+#usr/share/man/man3/OSSL_ATTRIBUTES_SYNTAX_free.3ossl
+#usr/share/man/man3/OSSL_ATTRIBUTES_SYNTAX_it.3ossl
+#usr/share/man/man3/OSSL_ATTRIBUTES_SYNTAX_new.3ossl
+#usr/share/man/man3/OSSL_BASIC_ATTR_CONSTRAINTS_free.3ossl
+#usr/share/man/man3/OSSL_BASIC_ATTR_CONSTRAINTS_it.3ossl
+#usr/share/man/man3/OSSL_BASIC_ATTR_CONSTRAINTS_new.3ossl
 #usr/share/man/man3/OSSL_CALLBACK.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAVS.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAVS_free.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAVS_it.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAVS_new.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV_create.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV_free.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV_get0_algId.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV_get0_type.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV_get0_value.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV_get_rsaKeyLen.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV_new_algId.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV_new_rsaKeyLen.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV_push1.3ossl
+#usr/share/man/man3/OSSL_CMP_ATAV_set0.3ossl
 #usr/share/man/man3/OSSL_CMP_CR.3ossl
+#usr/share/man/man3/OSSL_CMP_CRLSTATUS_create.3ossl
+#usr/share/man/man3/OSSL_CMP_CRLSTATUS_free.3ossl
+#usr/share/man/man3/OSSL_CMP_CRLSTATUS_get0.3ossl
+#usr/share/man/man3/OSSL_CMP_CRLSTATUS_new1.3ossl
 #usr/share/man/man3/OSSL_CMP_CTX_build_cert_chain.3ossl
 #usr/share/man/man3/OSSL_CMP_CTX_free.3ossl
 #usr/share/man/man3/OSSL_CMP_CTX_get0_geninfo_ITAVs.3ossl
@@ -3786,12 +3872,18 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_CMP_ITAV_free.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_caCerts.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_certProfile.3ossl
+#usr/share/man/man3/OSSL_CMP_ITAV_get0_crlStatusList.3ossl
+#usr/share/man/man3/OSSL_CMP_ITAV_get0_crls.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_rootCaCert.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_rootCaKeyUpdate.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_type.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_get0_value.3ossl
+#usr/share/man/man3/OSSL_CMP_ITAV_get1_certReqTemplate.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_new0_certProfile.3ossl
+#usr/share/man/man3/OSSL_CMP_ITAV_new0_certReqTemplate.3ossl
+#usr/share/man/man3/OSSL_CMP_ITAV_new0_crlStatusList.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_new_caCerts.3ossl
+#usr/share/man/man3/OSSL_CMP_ITAV_new_crls.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_new_rootCaCert.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_new_rootCaKeyUpdate.3ossl
 #usr/share/man/man3/OSSL_CMP_ITAV_push0_stack_item.3ossl
@@ -3856,6 +3948,8 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_CMP_exec_RR_ses.3ossl
 #usr/share/man/man3/OSSL_CMP_exec_certreq.3ossl
 #usr/share/man/man3/OSSL_CMP_get1_caCerts.3ossl
+#usr/share/man/man3/OSSL_CMP_get1_certReqTemplate.3ossl
+#usr/share/man/man3/OSSL_CMP_get1_crlUpdate.3ossl
 #usr/share/man/man3/OSSL_CMP_get1_rootCaKeyUpdate.3ossl
 #usr/share/man/man3/OSSL_CMP_log_cb_t.3ossl
 #usr/share/man/man3/OSSL_CMP_log_close.3ossl
@@ -3869,6 +3963,8 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_CMP_validate_cert_path.3ossl
 #usr/share/man/man3/OSSL_CMP_validate_msg.3ossl
 #usr/share/man/man3/OSSL_CORE_MAKE_FUNC.3ossl
+#usr/share/man/man3/OSSL_CRMF_ATTRIBUTETYPEANDVALUE_dup.3ossl
+#usr/share/man/man3/OSSL_CRMF_ATTRIBUTETYPEANDVALUE_free.3ossl
 #usr/share/man/man3/OSSL_CRMF_CERTID_dup.3ossl
 #usr/share/man/man3/OSSL_CRMF_CERTID_free.3ossl
 #usr/share/man/man3/OSSL_CRMF_CERTID_gen.3ossl
@@ -3876,6 +3972,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_CRMF_CERTID_get0_serialNumber.3ossl
 #usr/share/man/man3/OSSL_CRMF_CERTID_it.3ossl
 #usr/share/man/man3/OSSL_CRMF_CERTID_new.3ossl
+#usr/share/man/man3/OSSL_CRMF_CERTTEMPLATE_dup.3ossl
 #usr/share/man/man3/OSSL_CRMF_CERTTEMPLATE_fill.3ossl
 #usr/share/man/man3/OSSL_CRMF_CERTTEMPLATE_free.3ossl
 #usr/share/man/man3/OSSL_CRMF_CERTTEMPLATE_get0_extensions.3ossl
@@ -4032,6 +4129,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_ESS_check_signing_certs.3ossl
 #usr/share/man/man3/OSSL_ESS_signing_cert_new_init.3ossl
 #usr/share/man/man3/OSSL_ESS_signing_cert_v2_new_init.3ossl
+#usr/share/man/man3/OSSL_GENERAL_NAMES_print.3ossl
 #usr/share/man/man3/OSSL_HPKE_CTX_free.3ossl
 #usr/share/man/man3/OSSL_HPKE_CTX_get_seq.3ossl
 #usr/share/man/man3/OSSL_HPKE_CTX_new.3ossl
@@ -4077,15 +4175,45 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_HTTP_proxy_connect.3ossl
 #usr/share/man/man3/OSSL_HTTP_set1_request.3ossl
 #usr/share/man/man3/OSSL_HTTP_transfer.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_VALUE_free.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_VALUE_it.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_VALUE_new.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_add1_value.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_free.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_get0_policyAuthority.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_get0_value.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_get_value_num.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_it.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_new.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_print.3ossl
+#usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_set0_policyAuthority.3ossl
+#usr/share/man/man3/OSSL_INDICATOR_get_callback.3ossl
+#usr/share/man/man3/OSSL_INDICATOR_set_callback.3ossl
+#usr/share/man/man3/OSSL_ISSUER_SERIAL_free.3ossl
+#usr/share/man/man3/OSSL_ISSUER_SERIAL_get0_issuer.3ossl
+#usr/share/man/man3/OSSL_ISSUER_SERIAL_get0_issuerUID.3ossl
+#usr/share/man/man3/OSSL_ISSUER_SERIAL_get0_serial.3ossl
+#usr/share/man/man3/OSSL_ISSUER_SERIAL_new.3ossl
+#usr/share/man/man3/OSSL_ISSUER_SERIAL_set1_issuer.3ossl
+#usr/share/man/man3/OSSL_ISSUER_SERIAL_set1_issuerUID.3ossl
+#usr/share/man/man3/OSSL_ISSUER_SERIAL_set1_serial.3ossl
 #usr/share/man/man3/OSSL_ITEM.3ossl
 #usr/share/man/man3/OSSL_LIB_CTX.3ossl
 #usr/share/man/man3/OSSL_LIB_CTX_free.3ossl
 #usr/share/man/man3/OSSL_LIB_CTX_get0_global_default.3ossl
+#usr/share/man/man3/OSSL_LIB_CTX_get_conf_diagnostics.3ossl
+#usr/share/man/man3/OSSL_LIB_CTX_get_data.3ossl
 #usr/share/man/man3/OSSL_LIB_CTX_load_config.3ossl
 #usr/share/man/man3/OSSL_LIB_CTX_new.3ossl
 #usr/share/man/man3/OSSL_LIB_CTX_new_child.3ossl
 #usr/share/man/man3/OSSL_LIB_CTX_new_from_dispatch.3ossl
 #usr/share/man/man3/OSSL_LIB_CTX_set0_default.3ossl
+#usr/share/man/man3/OSSL_LIB_CTX_set_conf_diagnostics.3ossl
+#usr/share/man/man3/OSSL_OBJECT_DIGEST_INFO_free.3ossl
+#usr/share/man/man3/OSSL_OBJECT_DIGEST_INFO_get0_digest.3ossl
+#usr/share/man/man3/OSSL_OBJECT_DIGEST_INFO_new.3ossl
+#usr/share/man/man3/OSSL_OBJECT_DIGEST_INFO_set1_digest.3ossl
 #usr/share/man/man3/OSSL_PARAM.3ossl
 #usr/share/man/man3/OSSL_PARAM_BLD.3ossl
 #usr/share/man/man3/OSSL_PARAM_BLD_free.3ossl
@@ -4327,6 +4455,18 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_STORE_register_loader.3ossl
 #usr/share/man/man3/OSSL_STORE_supports_search.3ossl
 #usr/share/man/man3/OSSL_STORE_unregister_loader.3ossl
+#usr/share/man/man3/OSSL_TARGETING_INFORMATION_free.3ossl
+#usr/share/man/man3/OSSL_TARGETING_INFORMATION_it.3ossl
+#usr/share/man/man3/OSSL_TARGETING_INFORMATION_new.3ossl
+#usr/share/man/man3/OSSL_TARGETS_free.3ossl
+#usr/share/man/man3/OSSL_TARGETS_it.3ossl
+#usr/share/man/man3/OSSL_TARGETS_new.3ossl
+#usr/share/man/man3/OSSL_TARGET_CERT_free.3ossl
+#usr/share/man/man3/OSSL_TARGET_CERT_it.3ossl
+#usr/share/man/man3/OSSL_TARGET_CERT_new.3ossl
+#usr/share/man/man3/OSSL_TARGET_free.3ossl
+#usr/share/man/man3/OSSL_TARGET_it.3ossl
+#usr/share/man/man3/OSSL_TARGET_new.3ossl
 #usr/share/man/man3/OSSL_THREAD_SUPPORT_FLAG_DEFAULT_SPAWN.3ossl
 #usr/share/man/man3/OSSL_THREAD_SUPPORT_FLAG_THREAD_POOL.3ossl
 #usr/share/man/man3/OSSL_TRACE.3ossl
@@ -4346,6 +4486,9 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/OSSL_TRACE_END.3ossl
 #usr/share/man/man3/OSSL_TRACE_STRING.3ossl
 #usr/share/man/man3/OSSL_TRACE_STRING_MAX.3ossl
+#usr/share/man/man3/OSSL_USER_NOTICE_SYNTAX_free.3ossl
+#usr/share/man/man3/OSSL_USER_NOTICE_SYNTAX_it.3ossl
+#usr/share/man/man3/OSSL_USER_NOTICE_SYNTAX_new.3ossl
 #usr/share/man/man3/OSSL_default_cipher_list.3ossl
 #usr/share/man/man3/OSSL_default_ciphersuites.3ossl
 #usr/share/man/man3/OSSL_get_max_threads.3ossl
@@ -4378,6 +4521,10 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/PBEPARAM_new.3ossl
 #usr/share/man/man3/PBKDF2PARAM_free.3ossl
 #usr/share/man/man3/PBKDF2PARAM_new.3ossl
+#usr/share/man/man3/PBMAC1PARAM_free.3ossl
+#usr/share/man/man3/PBMAC1PARAM_it.3ossl
+#usr/share/man/man3/PBMAC1PARAM_new.3ossl
+#usr/share/man/man3/PBMAC1_get1_pbkdf2_param.3ossl
 #usr/share/man/man3/PEM_FLAG_EAY_COMPATIBLE.3ossl
 #usr/share/man/man3/PEM_FLAG_ONLY_B64.3ossl
 #usr/share/man/man3/PEM_FLAG_SECURE.3ossl
@@ -4411,6 +4558,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/PEM_read_RSA_PUBKEY.3ossl
 #usr/share/man/man3/PEM_read_SSL_SESSION.3ossl
 #usr/share/man/man3/PEM_read_X509.3ossl
+#usr/share/man/man3/PEM_read_X509_ACERT.3ossl
 #usr/share/man/man3/PEM_read_X509_AUX.3ossl
 #usr/share/man/man3/PEM_read_X509_CRL.3ossl
 #usr/share/man/man3/PEM_read_X509_PUBKEY.3ossl
@@ -4438,6 +4586,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/PEM_read_bio_RSA_PUBKEY.3ossl
 #usr/share/man/man3/PEM_read_bio_SSL_SESSION.3ossl
 #usr/share/man/man3/PEM_read_bio_X509.3ossl
+#usr/share/man/man3/PEM_read_bio_X509_ACERT.3ossl
 #usr/share/man/man3/PEM_read_bio_X509_AUX.3ossl
 #usr/share/man/man3/PEM_read_bio_X509_CRL.3ossl
 #usr/share/man/man3/PEM_read_bio_X509_PUBKEY.3ossl
@@ -4468,6 +4617,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/PEM_write_RSA_PUBKEY.3ossl
 #usr/share/man/man3/PEM_write_SSL_SESSION.3ossl
 #usr/share/man/man3/PEM_write_X509.3ossl
+#usr/share/man/man3/PEM_write_X509_ACERT.3ossl
 #usr/share/man/man3/PEM_write_X509_AUX.3ossl
 #usr/share/man/man3/PEM_write_X509_CRL.3ossl
 #usr/share/man/man3/PEM_write_X509_PUBKEY.3ossl
@@ -4502,6 +4652,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/PEM_write_bio_RSA_PUBKEY.3ossl
 #usr/share/man/man3/PEM_write_bio_SSL_SESSION.3ossl
 #usr/share/man/man3/PEM_write_bio_X509.3ossl
+#usr/share/man/man3/PEM_write_bio_X509_ACERT.3ossl
 #usr/share/man/man3/PEM_write_bio_X509_AUX.3ossl
 #usr/share/man/man3/PEM_write_bio_X509_CRL.3ossl
 #usr/share/man/man3/PEM_write_bio_X509_PUBKEY.3ossl
@@ -4560,6 +4711,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/PKCS12_decrypt_skey_ex.3ossl
 #usr/share/man/man3/PKCS12_free.3ossl
 #usr/share/man/man3/PKCS12_gen_mac.3ossl
+#usr/share/man/man3/PKCS12_get0_mac.3ossl
 #usr/share/man/man3/PKCS12_get_attr_gen.3ossl
 #usr/share/man/man3/PKCS12_get_friendlyname.3ossl
 #usr/share/man/man3/PKCS12_init.3ossl
@@ -4582,6 +4734,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/PKCS12_pbe_crypt.3ossl
 #usr/share/man/man3/PKCS12_pbe_crypt_ex.3ossl
 #usr/share/man/man3/PKCS12_set_mac.3ossl
+#usr/share/man/man3/PKCS12_set_pbmac1_pbkdf2.3ossl
 #usr/share/man/man3/PKCS12_setup_mac.3ossl
 #usr/share/man/man3/PKCS12_verify_mac.3ossl
 #usr/share/man/man3/PKCS5_PBE_keyivgen.3ossl
@@ -4972,6 +5125,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_CTX_disable_ct.3ossl
 #usr/share/man/man3/SSL_CTX_enable_ct.3ossl
 #usr/share/man/man3/SSL_CTX_flush_sessions.3ossl
+#usr/share/man/man3/SSL_CTX_flush_sessions_ex.3ossl
 #usr/share/man/man3/SSL_CTX_free.3ossl
 #usr/share/man/man3/SSL_CTX_generate_session_ticket_fn.3ossl
 #usr/share/man/man3/SSL_CTX_get0_CA_list.3ossl
@@ -5080,6 +5234,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_CTX_set_async_callback.3ossl
 #usr/share/man/man3/SSL_CTX_set_async_callback_arg.3ossl
 #usr/share/man/man3/SSL_CTX_set_block_padding.3ossl
+#usr/share/man/man3/SSL_CTX_set_block_padding_ex.3ossl
 #usr/share/man/man3/SSL_CTX_set_cert_cb.3ossl
 #usr/share/man/man3/SSL_CTX_set_cert_store.3ossl
 #usr/share/man/man3/SSL_CTX_set_cert_verify_callback.3ossl
@@ -5365,6 +5520,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_get0_session.3ossl
 #usr/share/man/man3/SSL_get0_verified_chain.3ossl
 #usr/share/man/man3/SSL_get0_verify_cert_store.3ossl
+#usr/share/man/man3/SSL_get1_builtin_sigalgs.3ossl
 #usr/share/man/man3/SSL_get1_compressed_cert.3ossl
 #usr/share/man/man3/SSL_get1_curves.3ossl
 #usr/share/man/man3/SSL_get1_groups.3ossl
@@ -5566,6 +5722,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/SSL_set_async_callback_arg.3ossl
 #usr/share/man/man3/SSL_set_bio.3ossl
 #usr/share/man/man3/SSL_set_block_padding.3ossl
+#usr/share/man/man3/SSL_set_block_padding_ex.3ossl
 #usr/share/man/man3/SSL_set_blocking_mode.3ossl
 #usr/share/man/man3/SSL_set_cert_cb.3ossl
 #usr/share/man/man3/SSL_set_cipher_list.3ossl
@@ -5723,7 +5880,21 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/TS_TST_INFO_free.3ossl
 #usr/share/man/man3/TS_TST_INFO_new.3ossl
 #usr/share/man/man3/TS_VERIFY_CTS_set_certs.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_add_flags.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_cleanup.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_free.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_init.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_new.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_set0_certs.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_set0_data.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_set0_imprint.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_set0_store.3ossl
 #usr/share/man/man3/TS_VERIFY_CTX_set_certs.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_set_data.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_set_flags.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_set_imprint.3ossl
+#usr/share/man/man3/TS_VERIFY_CTX_set_store.3ossl
 #usr/share/man/man3/UI.3ossl
 #usr/share/man/man3/UI_METHOD.3ossl
 #usr/share/man/man3/UI_OpenSSL.3ossl
@@ -5801,6 +5972,53 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/X509V3_get_d2i.3ossl
 #usr/share/man/man3/X509V3_set_ctx.3ossl
 #usr/share/man/man3/X509V3_set_issuer_pkey.3ossl
+#usr/share/man/man3/X509_ACERT_INFO_free.3ossl
+#usr/share/man/man3/X509_ACERT_INFO_it.3ossl
+#usr/share/man/man3/X509_ACERT_INFO_new.3ossl
+#usr/share/man/man3/X509_ACERT_ISSUER_V2FORM_free.3ossl
+#usr/share/man/man3/X509_ACERT_ISSUER_V2FORM_new.3ossl
+#usr/share/man/man3/X509_ACERT_add1_attr.3ossl
+#usr/share/man/man3/X509_ACERT_add1_attr_by_NID.3ossl
+#usr/share/man/man3/X509_ACERT_add1_attr_by_OBJ.3ossl
+#usr/share/man/man3/X509_ACERT_add1_attr_by_txt.3ossl
+#usr/share/man/man3/X509_ACERT_add1_ext_i2d.3ossl
+#usr/share/man/man3/X509_ACERT_add_attr_nconf.3ossl
+#usr/share/man/man3/X509_ACERT_delete_attr.3ossl
+#usr/share/man/man3/X509_ACERT_dup.3ossl
+#usr/share/man/man3/X509_ACERT_free.3ossl
+#usr/share/man/man3/X509_ACERT_get0_extensions.3ossl
+#usr/share/man/man3/X509_ACERT_get0_holder_baseCertId.3ossl
+#usr/share/man/man3/X509_ACERT_get0_holder_digest.3ossl
+#usr/share/man/man3/X509_ACERT_get0_holder_entityName.3ossl
+#usr/share/man/man3/X509_ACERT_get0_info_sigalg.3ossl
+#usr/share/man/man3/X509_ACERT_get0_issuerName.3ossl
+#usr/share/man/man3/X509_ACERT_get0_issuerUID.3ossl
+#usr/share/man/man3/X509_ACERT_get0_notAfter.3ossl
+#usr/share/man/man3/X509_ACERT_get0_notBefore.3ossl
+#usr/share/man/man3/X509_ACERT_get0_serialNumber.3ossl
+#usr/share/man/man3/X509_ACERT_get0_signature.3ossl
+#usr/share/man/man3/X509_ACERT_get_attr.3ossl
+#usr/share/man/man3/X509_ACERT_get_attr_by_NID.3ossl
+#usr/share/man/man3/X509_ACERT_get_attr_by_OBJ.3ossl
+#usr/share/man/man3/X509_ACERT_get_attr_count.3ossl
+#usr/share/man/man3/X509_ACERT_get_ext_d2i.3ossl
+#usr/share/man/man3/X509_ACERT_get_signature_nid.3ossl
+#usr/share/man/man3/X509_ACERT_get_version.3ossl
+#usr/share/man/man3/X509_ACERT_it.3ossl
+#usr/share/man/man3/X509_ACERT_new.3ossl
+#usr/share/man/man3/X509_ACERT_print.3ossl
+#usr/share/man/man3/X509_ACERT_print_ex.3ossl
+#usr/share/man/man3/X509_ACERT_set0_holder_baseCertId.3ossl
+#usr/share/man/man3/X509_ACERT_set0_holder_digest.3ossl
+#usr/share/man/man3/X509_ACERT_set0_holder_entityName.3ossl
+#usr/share/man/man3/X509_ACERT_set1_issuerName.3ossl
+#usr/share/man/man3/X509_ACERT_set1_notAfter.3ossl
+#usr/share/man/man3/X509_ACERT_set1_notBefore.3ossl
+#usr/share/man/man3/X509_ACERT_set1_serialNumber.3ossl
+#usr/share/man/man3/X509_ACERT_set_version.3ossl
+#usr/share/man/man3/X509_ACERT_sign.3ossl
+#usr/share/man/man3/X509_ACERT_sign_ctx.3ossl
+#usr/share/man/man3/X509_ACERT_verify.3ossl
 #usr/share/man/man3/X509_ALGOR_cmp.3ossl
 #usr/share/man/man3/X509_ALGOR_copy.3ossl
 #usr/share/man/man3/X509_ALGOR_dup.3ossl
@@ -6299,6 +6517,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/X509at_get_attr_by_OBJ.3ossl
 #usr/share/man/man3/X509at_get_attr_count.3ossl
 #usr/share/man/man3/X509v3_add_ext.3ossl
+#usr/share/man/man3/X509v3_add_extensions.3ossl
 #usr/share/man/man3/X509v3_delete_ext.3ossl
 #usr/share/man/man3/X509v3_get_ext.3ossl
 #usr/share/man/man3/X509v3_get_ext_by_NID.3ossl
@@ -6412,6 +6631,9 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/d2i_OCSP_SERVICELOC.3ossl
 #usr/share/man/man3/d2i_OCSP_SIGNATURE.3ossl
 #usr/share/man/man3/d2i_OCSP_SINGLERESP.3ossl
+#usr/share/man/man3/d2i_OSSL_ATTRIBUTES_SYNTAX.3ossl
+#usr/share/man/man3/d2i_OSSL_BASIC_ATTR_CONSTRAINTS.3ossl
+#usr/share/man/man3/d2i_OSSL_CMP_ATAVS.3ossl
 #usr/share/man/man3/d2i_OSSL_CMP_MSG.3ossl
 #usr/share/man/man3/d2i_OSSL_CMP_MSG_bio.3ossl
 #usr/share/man/man3/d2i_OSSL_CMP_PKIHEADER.3ossl
@@ -6424,10 +6646,19 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/d2i_OSSL_CRMF_PBMPARAMETER.3ossl
 #usr/share/man/man3/d2i_OSSL_CRMF_PKIPUBLICATIONINFO.3ossl
 #usr/share/man/man3/d2i_OSSL_CRMF_SINGLEPUBINFO.3ossl
+#usr/share/man/man3/d2i_OSSL_IETF_ATTR_SYNTAX.3ossl
+#usr/share/man/man3/d2i_OSSL_ISSUER_SERIAL.3ossl
+#usr/share/man/man3/d2i_OSSL_OBJECT_DIGEST_INFO.3ossl
+#usr/share/man/man3/d2i_OSSL_TARGET.3ossl
+#usr/share/man/man3/d2i_OSSL_TARGETING_INFORMATION.3ossl
+#usr/share/man/man3/d2i_OSSL_TARGETS.3ossl
+#usr/share/man/man3/d2i_OSSL_TARGET_CERT.3ossl
+#usr/share/man/man3/d2i_OSSL_USER_NOTICE_SYNTAX.3ossl
 #usr/share/man/man3/d2i_OTHERNAME.3ossl
 #usr/share/man/man3/d2i_PBE2PARAM.3ossl
 #usr/share/man/man3/d2i_PBEPARAM.3ossl
 #usr/share/man/man3/d2i_PBKDF2PARAM.3ossl
+#usr/share/man/man3/d2i_PBMAC1PARAM.3ossl
 #usr/share/man/man3/d2i_PKCS12.3ossl
 #usr/share/man/man3/d2i_PKCS12_BAGS.3ossl
 #usr/share/man/man3/d2i_PKCS12_MAC_DATA.3ossl
@@ -6505,6 +6736,9 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/d2i_TS_TST_INFO_fp.3ossl
 #usr/share/man/man3/d2i_USERNOTICE.3ossl
 #usr/share/man/man3/d2i_X509.3ossl
+#usr/share/man/man3/d2i_X509_ACERT.3ossl
+#usr/share/man/man3/d2i_X509_ACERT_bio.3ossl
+#usr/share/man/man3/d2i_X509_ACERT_fp.3ossl
 #usr/share/man/man3/d2i_X509_ALGOR.3ossl
 #usr/share/man/man3/d2i_X509_ALGORS.3ossl
 #usr/share/man/man3/d2i_X509_ATTRIBUTE.3ossl
@@ -6634,6 +6868,9 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/i2d_OCSP_SERVICELOC.3ossl
 #usr/share/man/man3/i2d_OCSP_SIGNATURE.3ossl
 #usr/share/man/man3/i2d_OCSP_SINGLERESP.3ossl
+#usr/share/man/man3/i2d_OSSL_ATTRIBUTES_SYNTAX.3ossl
+#usr/share/man/man3/i2d_OSSL_BASIC_ATTR_CONSTRAINTS.3ossl
+#usr/share/man/man3/i2d_OSSL_CMP_ATAVS.3ossl
 #usr/share/man/man3/i2d_OSSL_CMP_MSG.3ossl
 #usr/share/man/man3/i2d_OSSL_CMP_MSG_bio.3ossl
 #usr/share/man/man3/i2d_OSSL_CMP_PKIHEADER.3ossl
@@ -6646,10 +6883,19 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/i2d_OSSL_CRMF_PBMPARAMETER.3ossl
 #usr/share/man/man3/i2d_OSSL_CRMF_PKIPUBLICATIONINFO.3ossl
 #usr/share/man/man3/i2d_OSSL_CRMF_SINGLEPUBINFO.3ossl
+#usr/share/man/man3/i2d_OSSL_IETF_ATTR_SYNTAX.3ossl
+#usr/share/man/man3/i2d_OSSL_ISSUER_SERIAL.3ossl
+#usr/share/man/man3/i2d_OSSL_OBJECT_DIGEST_INFO.3ossl
+#usr/share/man/man3/i2d_OSSL_TARGET.3ossl
+#usr/share/man/man3/i2d_OSSL_TARGETING_INFORMATION.3ossl
+#usr/share/man/man3/i2d_OSSL_TARGETS.3ossl
+#usr/share/man/man3/i2d_OSSL_TARGET_CERT.3ossl
+#usr/share/man/man3/i2d_OSSL_USER_NOTICE_SYNTAX.3ossl
 #usr/share/man/man3/i2d_OTHERNAME.3ossl
 #usr/share/man/man3/i2d_PBE2PARAM.3ossl
 #usr/share/man/man3/i2d_PBEPARAM.3ossl
 #usr/share/man/man3/i2d_PBKDF2PARAM.3ossl
+#usr/share/man/man3/i2d_PBMAC1PARAM.3ossl
 #usr/share/man/man3/i2d_PKCS12.3ossl
 #usr/share/man/man3/i2d_PKCS12_BAGS.3ossl
 #usr/share/man/man3/i2d_PKCS12_MAC_DATA.3ossl
@@ -6726,6 +6972,9 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man3/i2d_TS_TST_INFO_fp.3ossl
 #usr/share/man/man3/i2d_USERNOTICE.3ossl
 #usr/share/man/man3/i2d_X509.3ossl
+#usr/share/man/man3/i2d_X509_ACERT.3ossl
+#usr/share/man/man3/i2d_X509_ACERT_bio.3ossl
+#usr/share/man/man3/i2d_X509_ACERT_fp.3ossl
 #usr/share/man/man3/i2d_X509_ALGOR.3ossl
 #usr/share/man/man3/i2d_X509_ALGORS.3ossl
 #usr/share/man/man3/i2d_X509_ATTRIBUTE.3ossl
@@ -6911,9 +7160,11 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man7/EVP_PKEY-Siphash.7ossl
 #usr/share/man/man7/EVP_PKEY-X25519.7ossl
 #usr/share/man/man7/EVP_PKEY-X448.7ossl
+#usr/share/man/man7/EVP_RAND-CRNG-TEST.7ossl
 #usr/share/man/man7/EVP_RAND-CTR-DRBG.7ossl
 #usr/share/man/man7/EVP_RAND-HASH-DRBG.7ossl
 #usr/share/man/man7/EVP_RAND-HMAC-DRBG.7ossl
+#usr/share/man/man7/EVP_RAND-JITTER.7ossl
 #usr/share/man/man7/EVP_RAND-SEED-SRC.7ossl
 #usr/share/man/man7/EVP_RAND-TEST-RAND.7ossl
 #usr/share/man/man7/EVP_RAND.7ossl
@@ -6976,6 +7227,7 @@  usr/lib/ossl-modules/legacy.so
 #usr/share/man/man7/ossl-guide-tls-client-block.7ossl
 #usr/share/man/man7/ossl-guide-tls-client-non-block.7ossl
 #usr/share/man/man7/ossl-guide-tls-introduction.7ossl
+#usr/share/man/man7/ossl-guide-tls-server-block.7ossl
 #usr/share/man/man7/ossl_store-file.7ossl
 #usr/share/man/man7/ossl_store.7ossl
 #usr/share/man/man7/passphrase-encoding.7ossl
diff --git a/lfs/openssl b/lfs/openssl
index 22a670118..e14722c0c 100644
--- a/lfs/openssl
+++ b/lfs/openssl
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 3.3.2
+VER        = 3.4.0
 
 THISAPP    = openssl-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -72,7 +72,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = cc53d45418673bc2a406d6697b8bd17ff6c726463c4ccc87bb2fa5a6592d0d178dc8cfeb2fbb980ea354a5dc2c86f31c48453427c6937896c7221273e623c9b5
+$(DL_FILE)_BLAKE2 = 1c3a0dfd0a2ed902d4d289bad0f63f20fe1825abe388fc40aad1a0ab5782f385bf52eed2fa98e04f0fb8c53ea42974f5b2203cbe290ab2736bfdbe43bd90c9e8
 
 install : $(TARGET)