git: ca66129a2c8a - stable/14 - openssl: update to 3.0.21

From: Enji Cooper <ngie_at_FreeBSD.org>
Date: Thu, 11 Jun 2026 04:08:10 UTC
The branch stable/14 has been updated by ngie:

URL: https://cgit.FreeBSD.org/src/commit/?id=ca66129a2c8ace5af1b76b24f48e27ba5c9eac8b

commit ca66129a2c8ace5af1b76b24f48e27ba5c9eac8b
Author:     Enji Cooper <ngie@FreeBSD.org>
AuthorDate: 2026-06-11 03:59:58 +0000
Commit:     Enji Cooper <ngie@FreeBSD.org>
CommitDate: 2026-06-11 04:07:34 +0000

    openssl: update to 3.0.21
    
    This change is a security release which resolves several issues with OpenSSL 3.0,
    the highest severity issue being ranked "High". Users are strongly encouraged to
    update to this release.
    
    More information about the release (from a high level) can be found in
    the release notes [1].
    
    Tested with:    (make tinderbox; spotchecks on dev hosts)
    
    1. https://github.com/openssl/openssl/blob/openssl-3.0.21/NEWS.md
    
    - :main and :stable/15 run OpenSSL 3.5 and :stable/14, et al runs
      OpenSSL 3.0.
    - This is not a merge commit because our pre-receive checkers still
      don't allow direct MFVs without going through :main first.
    - This is a direct commit to stable/14.
---
 crypto/openssl/CHANGES.md                          |  193 +
 crypto/openssl/NEWS.md                             |   48 +-
 crypto/openssl/VERSION.dat                         |    4 +-
 crypto/openssl/apps/list.c                         |    5 +-
 crypto/openssl/apps/s_client.c                     |   10 +-
 crypto/openssl/apps/speed.c                        |    5 +-
 crypto/openssl/apps/testdsa.h                      | 1476 +-----
 crypto/openssl/apps/testrsa.h                      | 4916 ++------------------
 crypto/openssl/crypto/aes/asm/aesfx-sparcv9.pl     |   17 +-
 crypto/openssl/crypto/asn1/a_d2i_fp.c              |   66 +-
 crypto/openssl/crypto/asn1/a_mbstr.c               |    2 +-
 crypto/openssl/crypto/asn1/asn1_lib.c              |    4 +-
 crypto/openssl/crypto/asn1/asn_mime.c              |   16 +-
 crypto/openssl/crypto/asn1/tasn_dec.c              |    2 +-
 crypto/openssl/crypto/bn/README.pod                |  241 -
 crypto/openssl/crypto/bn/bn_const.c                |  251 +-
 crypto/openssl/crypto/bn/bn_mod.c                  |   14 +-
 crypto/openssl/crypto/cast/cast_s.h                | 2306 +--------
 crypto/openssl/crypto/cms/cms_enc.c                |    2 +-
 crypto/openssl/crypto/cms/cms_env.c                |    2 +-
 crypto/openssl/crypto/cms/cms_pwri.c               |    2 +-
 crypto/openssl/crypto/crmf/crmf_lib.c              |   13 +-
 crypto/openssl/crypto/des/fcrypt.c                 |  143 +-
 crypto/openssl/crypto/ec/curve448/scalar.c         |    3 +-
 crypto/openssl/crypto/ec/curve448/word.h           |    9 +-
 crypto/openssl/crypto/ec/ec_curve.c                |  236 +-
 crypto/openssl/crypto/ec/ec_lib.c                  |    3 +-
 crypto/openssl/crypto/ec/ecp_s390x_nistp.c         |   36 +-
 crypto/openssl/crypto/evp/e_aes.c                  |    2 +-
 crypto/openssl/crypto/evp/encode.c                 |  284 +-
 crypto/openssl/crypto/evp/evp_lib.c                |    2 +-
 crypto/openssl/crypto/ffc/ffc_params.c             |   10 +-
 crypto/openssl/crypto/http/http_client.c           |   28 +-
 crypto/openssl/crypto/http/http_lib.c              |    3 +
 crypto/openssl/crypto/md2/md2_dgst.c               |  284 +-
 crypto/openssl/crypto/modes/wrap128.c              |   15 +-
 crypto/openssl/crypto/objects/obj_dat.c            |    6 +-
 crypto/openssl/crypto/param_build_set.c            |    7 +-
 crypto/openssl/crypto/pkcs12/p12_decr.c            |    2 +-
 crypto/openssl/crypto/pkcs7/pk7_smime.c            |    2 +-
 crypto/openssl/crypto/rc2/rc2_skey.c               |  284 +-
 crypto/openssl/crypto/sm2/sm2_crypt.c              |   17 +-
 crypto/openssl/crypto/sm2/sm2_sign.c               |    6 +-
 crypto/openssl/crypto/x509/v3_ist.c                |    4 -
 crypto/openssl/demos/cipher/aeskeywrap.c           |  100 +-
 crypto/openssl/demos/cipher/ariacbc.c              |   20 +-
 crypto/openssl/demos/digest/EVP_MD_demo.c          |   75 +-
 crypto/openssl/demos/mac/cmac-aes256.c             |   56 +-
 crypto/openssl/demos/mac/hmac-sha512.c             |  144 +-
 .../openssl/demos/signature/EVP_Signature_demo.h   |  772 +--
 crypto/openssl/doc/fingerprints.txt                |    3 +
 crypto/openssl/doc/man1/openssl-format-options.pod |    4 +-
 crypto/openssl/doc/man1/openssl-pkcs8.pod.in       |    4 +-
 crypto/openssl/doc/man1/openssl-rehash.pod.in      |    6 +-
 crypto/openssl/doc/man1/openssl-s_client.pod.in    |   11 +-
 crypto/openssl/doc/man1/openssl-s_server.pod.in    |   15 +-
 crypto/openssl/doc/man1/openssl-smime.pod.in       |    7 +-
 crypto/openssl/doc/man3/BIO_s_bio.pod              |   83 +-
 crypto/openssl/doc/man3/BN_add.pod                 |    8 +-
 crypto/openssl/doc/man3/EVP_EncryptInit.pod        |    3 +-
 crypto/openssl/doc/man3/OSSL_HTTP_REQ_CTX.pod      |    6 +-
 crypto/openssl/doc/man3/OSSL_HTTP_parse_url.pod    |   18 +-
 crypto/openssl/doc/man3/OSSL_HTTP_transfer.pod     |    7 +-
 crypto/openssl/doc/man3/PKCS7_decrypt.pod          |    5 +-
 .../doc/man3/SSL_CTX_set_session_cache_mode.pod    |    6 +-
 .../doc/man3/SSL_CTX_set_session_id_context.pod    |   28 +-
 .../SSL_CTX_set_tlsext_servername_callback.pod     |    8 +-
 crypto/openssl/doc/man3/d2i_X509.pod               |   40 +-
 crypto/openssl/doc/man7/EVP_CIPHER-AES.pod         |    6 +-
 crypto/openssl/doc/man7/openssl-env.pod            |    2 +
 crypto/openssl/doc/man7/provider-asym_cipher.pod   |    6 +-
 crypto/openssl/fuzz/server.c                       | 2213 +--------
 crypto/openssl/include/openssl/bn.h                |    6 +-
 crypto/openssl/include/openssl/opensslv.h          |   10 +-
 crypto/openssl/include/openssl/ssl.h               |    4 +-
 crypto/openssl/include/openssl/ssl.h.in            |    4 +-
 crypto/openssl/providers/defltprov.c               |   10 +-
 crypto/openssl/providers/fips-sources.checksums    |   30 +-
 crypto/openssl/providers/fips.checksum             |    2 +-
 .../implementations/ciphers/cipher_aes_siv.c       |    2 +-
 .../providers/implementations/exchange/dh_exch.c   |    2 +-
 .../implementations/include/prov/implementations.h |    4 +-
 .../providers/implementations/keymgmt/ecx_kmgmt.c  |   38 +-
 .../providers/implementations/macs/poly1305_prov.c |    8 +-
 .../providers/implementations/signature/rsa_sig.c  |   23 +-
 crypto/openssl/ssl/record/rec_layer_s3.c           |    5 +-
 crypto/openssl/ssl/ssl_ciph.c                      |    6 +-
 crypto/openssl/ssl/statem/extensions_srvr.c        |   17 +-
 crypto/openssl/ssl/statem/statem.c                 |   26 +-
 crypto/openssl/ssl/statem/statem_lib.c             |   42 +-
 crypto/openssl/test/bad_dtls_test.c                |  193 +-
 crypto/openssl/test/build.info                     |    7 +
 crypto/openssl/test/cipherlist_test.c              |   57 +-
 .../openssl/test/cms-msg/make_missing_kdf_der.py   |  137 +
 crypto/openssl/test/cmsapitest.c                   |  196 +-
 crypto/openssl/test/destest.c                      |  118 +-
 crypto/openssl/test/dsatest.c                      |  188 +-
 crypto/openssl/test/ectest.c                       |  511 +-
 crypto/openssl/test/endecode_test.c                |   35 +-
 crypto/openssl/test/enginetest.c                   |   13 +-
 crypto/openssl/test/evp_extra_test.c               |  451 +-
 crypto/openssl/test/evp_extra_test2.c              | 2438 +---------
 crypto/openssl/test/evp_kdf_test.c                 |  420 +-
 crypto/openssl/test/evp_libctx_test.c              |  180 +-
 crypto/openssl/test/evp_pkey_provided_test.c       |   81 +-
 crypto/openssl/test/helpers/predefined_dhparams.c  |  525 +--
 crypto/openssl/test/http_test.c                    |   63 +
 crypto/openssl/test/ideatest.c                     |   20 +-
 crypto/openssl/test/pbetest.c                      |  101 +-
 crypto/openssl/test/pkcs12_format_test.c           | 3105 ++-----------
 crypto/openssl/test/recipes/70-test_tls13ticket.t  |   26 +
 crypto/openssl/test/recipes/80-test_cms.t          |   37 +-
 crypto/openssl/test/siphash_internal_test.c        | 1922 +-------
 .../test/smime-eml/pkcs7-empty-digest-set.eml      |   45 +
 crypto/openssl/test/sslapitest.c                   |  101 +
 crypto/openssl/test/stack_test.c                   |   64 +-
 crypto/openssl/test/tls13tickettest.c              |  157 +
 crypto/openssl/util/missingcrypto.txt              |    4 -
 crypto/openssl/util/missingcrypto111.txt           |    4 -
 secure/lib/libcrypto/man/man3/ADMISSIONS.3         |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_EXTERN_FUNCS.3  |    2 +-
 .../libcrypto/man/man3/ASN1_INTEGER_get_int64.3    |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_INTEGER_new.3   |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_ITEM_lookup.3   |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_OBJECT_new.3    |    2 +-
 .../lib/libcrypto/man/man3/ASN1_STRING_TABLE_add.3 |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_STRING_length.3 |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_STRING_new.3    |    2 +-
 .../lib/libcrypto/man/man3/ASN1_STRING_print_ex.3  |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_TIME_set.3      |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_TYPE_get.3      |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_aux_cb.3        |    2 +-
 .../lib/libcrypto/man/man3/ASN1_generate_nconf.3   |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_item_d2i_bio.3  |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_item_new.3      |    2 +-
 secure/lib/libcrypto/man/man3/ASN1_item_sign.3     |    2 +-
 secure/lib/libcrypto/man/man3/ASYNC_WAIT_CTX_new.3 |    2 +-
 secure/lib/libcrypto/man/man3/ASYNC_start_job.3    |    2 +-
 secure/lib/libcrypto/man/man3/BF_encrypt.3         |    2 +-
 secure/lib/libcrypto/man/man3/BIO_ADDR.3           |    2 +-
 secure/lib/libcrypto/man/man3/BIO_ADDRINFO.3       |    2 +-
 secure/lib/libcrypto/man/man3/BIO_connect.3        |    2 +-
 secure/lib/libcrypto/man/man3/BIO_ctrl.3           |    2 +-
 secure/lib/libcrypto/man/man3/BIO_f_base64.3       |    2 +-
 secure/lib/libcrypto/man/man3/BIO_f_buffer.3       |    2 +-
 secure/lib/libcrypto/man/man3/BIO_f_cipher.3       |    2 +-
 secure/lib/libcrypto/man/man3/BIO_f_md.3           |    2 +-
 secure/lib/libcrypto/man/man3/BIO_f_null.3         |    2 +-
 secure/lib/libcrypto/man/man3/BIO_f_prefix.3       |    2 +-
 secure/lib/libcrypto/man/man3/BIO_f_readbuffer.3   |    2 +-
 secure/lib/libcrypto/man/man3/BIO_f_ssl.3          |    2 +-
 secure/lib/libcrypto/man/man3/BIO_find_type.3      |    2 +-
 secure/lib/libcrypto/man/man3/BIO_get_data.3       |    2 +-
 .../lib/libcrypto/man/man3/BIO_get_ex_new_index.3  |    2 +-
 secure/lib/libcrypto/man/man3/BIO_meth_new.3       |    2 +-
 secure/lib/libcrypto/man/man3/BIO_new.3            |    2 +-
 secure/lib/libcrypto/man/man3/BIO_new_CMS.3        |    2 +-
 secure/lib/libcrypto/man/man3/BIO_parse_hostserv.3 |    2 +-
 secure/lib/libcrypto/man/man3/BIO_printf.3         |    2 +-
 secure/lib/libcrypto/man/man3/BIO_push.3           |    2 +-
 secure/lib/libcrypto/man/man3/BIO_read.3           |    2 +-
 secure/lib/libcrypto/man/man3/BIO_s_accept.3       |    2 +-
 secure/lib/libcrypto/man/man3/BIO_s_bio.3          |   88 +-
 secure/lib/libcrypto/man/man3/BIO_s_connect.3      |    2 +-
 secure/lib/libcrypto/man/man3/BIO_s_core.3         |    2 +-
 secure/lib/libcrypto/man/man3/BIO_s_datagram.3     |    2 +-
 secure/lib/libcrypto/man/man3/BIO_s_fd.3           |    2 +-
 secure/lib/libcrypto/man/man3/BIO_s_file.3         |    2 +-
 secure/lib/libcrypto/man/man3/BIO_s_mem.3          |    2 +-
 secure/lib/libcrypto/man/man3/BIO_s_null.3         |    2 +-
 secure/lib/libcrypto/man/man3/BIO_s_socket.3       |    2 +-
 secure/lib/libcrypto/man/man3/BIO_set_callback.3   |    2 +-
 secure/lib/libcrypto/man/man3/BIO_set_flags.3      |    2 +-
 secure/lib/libcrypto/man/man3/BIO_should_retry.3   |    2 +-
 secure/lib/libcrypto/man/man3/BIO_socket_wait.3    |    2 +-
 secure/lib/libcrypto/man/man3/BN_BLINDING_new.3    |    2 +-
 secure/lib/libcrypto/man/man3/BN_CTX_new.3         |    2 +-
 secure/lib/libcrypto/man/man3/BN_CTX_start.3       |    2 +-
 secure/lib/libcrypto/man/man3/BN_add.3             |   10 +-
 secure/lib/libcrypto/man/man3/BN_add_word.3        |    2 +-
 secure/lib/libcrypto/man/man3/BN_bn2bin.3          |    2 +-
 secure/lib/libcrypto/man/man3/BN_cmp.3             |    2 +-
 secure/lib/libcrypto/man/man3/BN_copy.3            |    2 +-
 secure/lib/libcrypto/man/man3/BN_generate_prime.3  |    2 +-
 secure/lib/libcrypto/man/man3/BN_mod_exp_mont.3    |    2 +-
 secure/lib/libcrypto/man/man3/BN_mod_inverse.3     |    2 +-
 .../lib/libcrypto/man/man3/BN_mod_mul_montgomery.3 |    2 +-
 .../lib/libcrypto/man/man3/BN_mod_mul_reciprocal.3 |    2 +-
 secure/lib/libcrypto/man/man3/BN_new.3             |    2 +-
 secure/lib/libcrypto/man/man3/BN_num_bytes.3       |    2 +-
 secure/lib/libcrypto/man/man3/BN_rand.3            |    2 +-
 secure/lib/libcrypto/man/man3/BN_security_bits.3   |    2 +-
 secure/lib/libcrypto/man/man3/BN_set_bit.3         |    2 +-
 secure/lib/libcrypto/man/man3/BN_swap.3            |    2 +-
 secure/lib/libcrypto/man/man3/BN_zero.3            |    2 +-
 secure/lib/libcrypto/man/man3/BUF_MEM_new.3        |    2 +-
 .../libcrypto/man/man3/CMS_EncryptedData_decrypt.3 |    2 +-
 .../libcrypto/man/man3/CMS_EncryptedData_encrypt.3 |    2 +-
 .../man/man3/CMS_EncryptedData_set1_key.3          |    2 +-
 .../libcrypto/man/man3/CMS_EnvelopedData_create.3  |    2 +-
 secure/lib/libcrypto/man/man3/CMS_add0_cert.3      |    2 +-
 .../libcrypto/man/man3/CMS_add1_recipient_cert.3   |    2 +-
 secure/lib/libcrypto/man/man3/CMS_add1_signer.3    |    2 +-
 secure/lib/libcrypto/man/man3/CMS_compress.3       |    2 +-
 secure/lib/libcrypto/man/man3/CMS_data_create.3    |    2 +-
 secure/lib/libcrypto/man/man3/CMS_decrypt.3        |    2 +-
 secure/lib/libcrypto/man/man3/CMS_digest_create.3  |    2 +-
 secure/lib/libcrypto/man/man3/CMS_encrypt.3        |    2 +-
 secure/lib/libcrypto/man/man3/CMS_final.3          |    2 +-
 .../libcrypto/man/man3/CMS_get0_RecipientInfos.3   |    2 +-
 .../lib/libcrypto/man/man3/CMS_get0_SignerInfos.3  |    2 +-
 secure/lib/libcrypto/man/man3/CMS_get0_type.3      |    2 +-
 .../libcrypto/man/man3/CMS_get1_ReceiptRequest.3   |    2 +-
 secure/lib/libcrypto/man/man3/CMS_sign.3           |    2 +-
 secure/lib/libcrypto/man/man3/CMS_sign_receipt.3   |    2 +-
 .../lib/libcrypto/man/man3/CMS_signed_get_attr.3   |    2 +-
 secure/lib/libcrypto/man/man3/CMS_uncompress.3     |    2 +-
 secure/lib/libcrypto/man/man3/CMS_verify.3         |    2 +-
 secure/lib/libcrypto/man/man3/CMS_verify_receipt.3 |    2 +-
 secure/lib/libcrypto/man/man3/CONF_modules_free.3  |    2 +-
 .../libcrypto/man/man3/CONF_modules_load_file.3    |    2 +-
 .../libcrypto/man/man3/CRYPTO_THREAD_run_once.3    |    2 +-
 .../libcrypto/man/man3/CRYPTO_get_ex_new_index.3   |    2 +-
 secure/lib/libcrypto/man/man3/CRYPTO_memcmp.3      |    2 +-
 .../man/man3/CTLOG_STORE_get0_log_by_id.3          |    2 +-
 secure/lib/libcrypto/man/man3/CTLOG_STORE_new.3    |    2 +-
 secure/lib/libcrypto/man/man3/CTLOG_new.3          |    2 +-
 .../libcrypto/man/man3/CT_POLICY_EVAL_CTX_new.3    |    2 +-
 secure/lib/libcrypto/man/man3/DEFINE_STACK_OF.3    |    2 +-
 secure/lib/libcrypto/man/man3/DES_random_key.3     |    2 +-
 secure/lib/libcrypto/man/man3/DH_generate_key.3    |    2 +-
 .../libcrypto/man/man3/DH_generate_parameters.3    |    2 +-
 secure/lib/libcrypto/man/man3/DH_get0_pqg.3        |    2 +-
 secure/lib/libcrypto/man/man3/DH_get_1024_160.3    |    2 +-
 secure/lib/libcrypto/man/man3/DH_meth_new.3        |    2 +-
 secure/lib/libcrypto/man/man3/DH_new.3             |    2 +-
 secure/lib/libcrypto/man/man3/DH_new_by_nid.3      |    2 +-
 secure/lib/libcrypto/man/man3/DH_set_method.3      |    2 +-
 secure/lib/libcrypto/man/man3/DH_size.3            |    2 +-
 secure/lib/libcrypto/man/man3/DSA_SIG_new.3        |    2 +-
 secure/lib/libcrypto/man/man3/DSA_do_sign.3        |    2 +-
 secure/lib/libcrypto/man/man3/DSA_dup_DH.3         |    2 +-
 secure/lib/libcrypto/man/man3/DSA_generate_key.3   |    2 +-
 .../libcrypto/man/man3/DSA_generate_parameters.3   |    2 +-
 secure/lib/libcrypto/man/man3/DSA_get0_pqg.3       |    2 +-
 secure/lib/libcrypto/man/man3/DSA_meth_new.3       |    2 +-
 secure/lib/libcrypto/man/man3/DSA_new.3            |    2 +-
 secure/lib/libcrypto/man/man3/DSA_set_method.3     |    2 +-
 secure/lib/libcrypto/man/man3/DSA_sign.3           |    2 +-
 secure/lib/libcrypto/man/man3/DSA_size.3           |    2 +-
 secure/lib/libcrypto/man/man3/DTLS_get_data_mtu.3  |    2 +-
 secure/lib/libcrypto/man/man3/DTLS_set_timer_cb.3  |    2 +-
 secure/lib/libcrypto/man/man3/DTLSv1_listen.3      |    2 +-
 secure/lib/libcrypto/man/man3/ECDSA_SIG_new.3      |    2 +-
 secure/lib/libcrypto/man/man3/ECDSA_sign.3         |    2 +-
 .../lib/libcrypto/man/man3/ECPKParameters_print.3  |    2 +-
 .../lib/libcrypto/man/man3/EC_GFp_simple_method.3  |    2 +-
 secure/lib/libcrypto/man/man3/EC_GROUP_copy.3      |    2 +-
 secure/lib/libcrypto/man/man3/EC_GROUP_new.3       |    2 +-
 .../lib/libcrypto/man/man3/EC_KEY_get_enc_flags.3  |    2 +-
 secure/lib/libcrypto/man/man3/EC_KEY_new.3         |    2 +-
 secure/lib/libcrypto/man/man3/EC_POINT_add.3       |    2 +-
 secure/lib/libcrypto/man/man3/EC_POINT_new.3       |    2 +-
 secure/lib/libcrypto/man/man3/ENGINE_add.3         |    2 +-
 secure/lib/libcrypto/man/man3/ERR_GET_LIB.3        |    2 +-
 secure/lib/libcrypto/man/man3/ERR_clear_error.3    |    2 +-
 secure/lib/libcrypto/man/man3/ERR_error_string.3   |    2 +-
 secure/lib/libcrypto/man/man3/ERR_get_error.3      |    2 +-
 .../libcrypto/man/man3/ERR_load_crypto_strings.3   |    2 +-
 secure/lib/libcrypto/man/man3/ERR_load_strings.3   |    2 +-
 secure/lib/libcrypto/man/man3/ERR_new.3            |    2 +-
 secure/lib/libcrypto/man/man3/ERR_print_errors.3   |    2 +-
 secure/lib/libcrypto/man/man3/ERR_put_error.3      |    2 +-
 secure/lib/libcrypto/man/man3/ERR_remove_state.3   |    2 +-
 secure/lib/libcrypto/man/man3/ERR_set_mark.3       |    2 +-
 .../lib/libcrypto/man/man3/EVP_ASYM_CIPHER_free.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_BytesToKey.3     |    2 +-
 .../man/man3/EVP_CIPHER_CTX_get_app_data.3         |    2 +-
 .../man/man3/EVP_CIPHER_CTX_get_cipher_data.3      |    2 +-
 .../man/man3/EVP_CIPHER_CTX_get_original_iv.3      |    2 +-
 .../lib/libcrypto/man/man3/EVP_CIPHER_meth_new.3   |    2 +-
 secure/lib/libcrypto/man/man3/EVP_DigestInit.3     |    2 +-
 secure/lib/libcrypto/man/man3/EVP_DigestSignInit.3 |    2 +-
 .../lib/libcrypto/man/man3/EVP_DigestVerifyInit.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_EncodeInit.3     |    2 +-
 secure/lib/libcrypto/man/man3/EVP_EncryptInit.3    |    5 +-
 secure/lib/libcrypto/man/man3/EVP_KDF.3            |    2 +-
 secure/lib/libcrypto/man/man3/EVP_KEM_free.3       |    2 +-
 secure/lib/libcrypto/man/man3/EVP_KEYEXCH_free.3   |    2 +-
 secure/lib/libcrypto/man/man3/EVP_KEYMGMT.3        |    2 +-
 secure/lib/libcrypto/man/man3/EVP_MAC.3            |    2 +-
 secure/lib/libcrypto/man/man3/EVP_MD_meth_new.3    |    2 +-
 secure/lib/libcrypto/man/man3/EVP_OpenInit.3       |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PBE_CipherInit.3 |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY2PKCS8.3     |    2 +-
 .../lib/libcrypto/man/man3/EVP_PKEY_ASN1_METHOD.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_ctrl.3  |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_CTX_get0_libctx.3  |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_CTX_get0_pkey.3    |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_CTX_new.3   |    2 +-
 .../man/man3/EVP_PKEY_CTX_set1_pbe_pass.3          |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_CTX_set_hkdf_md.3  |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_CTX_set_params.3   |    2 +-
 .../man/man3/EVP_PKEY_CTX_set_rsa_pss_keygen_md.3  |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_CTX_set_scrypt_N.3 |    2 +-
 .../man/man3/EVP_PKEY_CTX_set_tls1_prf_md.3        |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_asn1_get_count.3   |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_check.3     |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_copy_parameters.3  |    2 +-
 .../lib/libcrypto/man/man3/EVP_PKEY_decapsulate.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_decrypt.3   |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_derive.3    |    2 +-
 .../man/man3/EVP_PKEY_digestsign_supports_digest.3 |    2 +-
 .../lib/libcrypto/man/man3/EVP_PKEY_encapsulate.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_encrypt.3   |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_fromdata.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_get_attr.3  |    2 +-
 .../man/man3/EVP_PKEY_get_default_digest_nid.3     |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_get_field_type.3   |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_get_group_name.3   |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_get_size.3  |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_gettable_params.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_is_a.3      |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_keygen.3    |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_meth_get_count.3   |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_meth_new.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_new.3       |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_print_private.3    |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_set1_RSA.3  |    2 +-
 .../man/man3/EVP_PKEY_set1_encoded_public_key.3    |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_set_type.3  |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_settable_params.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_sign.3      |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_todata.3    |    2 +-
 secure/lib/libcrypto/man/man3/EVP_PKEY_verify.3    |    2 +-
 .../libcrypto/man/man3/EVP_PKEY_verify_recover.3   |    2 +-
 secure/lib/libcrypto/man/man3/EVP_RAND.3           |    2 +-
 secure/lib/libcrypto/man/man3/EVP_SIGNATURE.3      |    2 +-
 secure/lib/libcrypto/man/man3/EVP_SealInit.3       |    2 +-
 secure/lib/libcrypto/man/man3/EVP_SignInit.3       |    2 +-
 secure/lib/libcrypto/man/man3/EVP_VerifyInit.3     |    2 +-
 secure/lib/libcrypto/man/man3/EVP_aes_128_gcm.3    |    2 +-
 secure/lib/libcrypto/man/man3/EVP_aria_128_gcm.3   |    2 +-
 secure/lib/libcrypto/man/man3/EVP_bf_cbc.3         |    2 +-
 secure/lib/libcrypto/man/man3/EVP_blake2b512.3     |    2 +-
 .../lib/libcrypto/man/man3/EVP_camellia_128_ecb.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_cast5_cbc.3      |    2 +-
 secure/lib/libcrypto/man/man3/EVP_chacha20.3       |    2 +-
 secure/lib/libcrypto/man/man3/EVP_des_cbc.3        |    2 +-
 secure/lib/libcrypto/man/man3/EVP_desx_cbc.3       |    2 +-
 secure/lib/libcrypto/man/man3/EVP_idea_cbc.3       |    2 +-
 secure/lib/libcrypto/man/man3/EVP_md2.3            |    2 +-
 secure/lib/libcrypto/man/man3/EVP_md4.3            |    2 +-
 secure/lib/libcrypto/man/man3/EVP_md5.3            |    2 +-
 secure/lib/libcrypto/man/man3/EVP_mdc2.3           |    2 +-
 secure/lib/libcrypto/man/man3/EVP_rc2_cbc.3        |    2 +-
 secure/lib/libcrypto/man/man3/EVP_rc4.3            |    2 +-
 .../lib/libcrypto/man/man3/EVP_rc5_32_12_16_cbc.3  |    2 +-
 secure/lib/libcrypto/man/man3/EVP_ripemd160.3      |    2 +-
 secure/lib/libcrypto/man/man3/EVP_seed_cbc.3       |    2 +-
 .../man/man3/EVP_set_default_properties.3          |    2 +-
 secure/lib/libcrypto/man/man3/EVP_sha1.3           |    2 +-
 secure/lib/libcrypto/man/man3/EVP_sha224.3         |    2 +-
 secure/lib/libcrypto/man/man3/EVP_sha3_224.3       |    2 +-
 secure/lib/libcrypto/man/man3/EVP_sm3.3            |    2 +-
 secure/lib/libcrypto/man/man3/EVP_sm4_cbc.3        |    2 +-
 secure/lib/libcrypto/man/man3/EVP_whirlpool.3      |    2 +-
 secure/lib/libcrypto/man/man3/HMAC.3               |    2 +-
 secure/lib/libcrypto/man/man3/MD5.3                |    2 +-
 secure/lib/libcrypto/man/man3/MDC2_Init.3          |    2 +-
 secure/lib/libcrypto/man/man3/NCONF_new_ex.3       |    2 +-
 secure/lib/libcrypto/man/man3/OBJ_nid2obj.3        |    2 +-
 secure/lib/libcrypto/man/man3/OCSP_REQUEST_new.3   |    2 +-
 secure/lib/libcrypto/man/man3/OCSP_cert_to_id.3    |    2 +-
 .../libcrypto/man/man3/OCSP_request_add1_nonce.3   |    2 +-
 .../lib/libcrypto/man/man3/OCSP_resp_find_status.3 |    2 +-
 .../lib/libcrypto/man/man3/OCSP_response_status.3  |    2 +-
 secure/lib/libcrypto/man/man3/OCSP_sendreq_new.3   |    2 +-
 secure/lib/libcrypto/man/man3/OPENSSL_Applink.3    |    2 +-
 secure/lib/libcrypto/man/man3/OPENSSL_FILE.3       |    2 +-
 .../lib/libcrypto/man/man3/OPENSSL_LH_COMPFUNC.3   |    2 +-
 secure/lib/libcrypto/man/man3/OPENSSL_LH_stats.3   |    2 +-
 secure/lib/libcrypto/man/man3/OPENSSL_config.3     |    2 +-
 .../lib/libcrypto/man/man3/OPENSSL_fork_prepare.3  |    2 +-
 secure/lib/libcrypto/man/man3/OPENSSL_gmtime.3     |    2 +-
 .../lib/libcrypto/man/man3/OPENSSL_hexchar2int.3   |    2 +-
 secure/lib/libcrypto/man/man3/OPENSSL_ia32cap.3    |    2 +-
 .../lib/libcrypto/man/man3/OPENSSL_init_crypto.3   |    2 +-
 secure/lib/libcrypto/man/man3/OPENSSL_init_ssl.3   |    2 +-
 .../libcrypto/man/man3/OPENSSL_instrument_bus.3    |    2 +-
 .../man/man3/OPENSSL_load_builtin_modules.3        |    2 +-
 secure/lib/libcrypto/man/man3/OPENSSL_malloc.3     |    2 +-
 secure/lib/libcrypto/man/man3/OPENSSL_s390xcap.3   |    2 +-
 .../lib/libcrypto/man/man3/OPENSSL_secure_malloc.3 |    2 +-
 secure/lib/libcrypto/man/man3/OPENSSL_strcasecmp.3 |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_ALGORITHM.3     |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_CALLBACK.3      |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_CMP_CTX_new.3   |    2 +-
 .../man/man3/OSSL_CMP_HDR_get0_transactionID.3     |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_CMP_ITAV_set0.3 |    2 +-
 .../libcrypto/man/man3/OSSL_CMP_MSG_get0_header.3  |    2 +-
 .../libcrypto/man/man3/OSSL_CMP_MSG_http_perform.3 |    2 +-
 .../lib/libcrypto/man/man3/OSSL_CMP_SRV_CTX_new.3  |    2 +-
 .../libcrypto/man/man3/OSSL_CMP_STATUSINFO_new.3   |    2 +-
 .../lib/libcrypto/man/man3/OSSL_CMP_exec_certreq.3 |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_CMP_log_open.3  |    2 +-
 .../lib/libcrypto/man/man3/OSSL_CMP_validate_msg.3 |    2 +-
 .../lib/libcrypto/man/man3/OSSL_CORE_MAKE_FUNC.3   |    2 +-
 .../libcrypto/man/man3/OSSL_CRMF_MSG_get0_tmpl.3   |    2 +-
 .../man/man3/OSSL_CRMF_MSG_set0_validity.3         |    2 +-
 .../man/man3/OSSL_CRMF_MSG_set1_regCtrl_regToken.3 |    2 +-
 .../man/man3/OSSL_CRMF_MSG_set1_regInfo_certReq.3  |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_CRMF_pbmp_new.3 |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_DECODER.3       |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_DECODER_CTX.3   |    2 +-
 .../man/man3/OSSL_DECODER_CTX_new_for_pkey.3       |    2 +-
 .../lib/libcrypto/man/man3/OSSL_DECODER_from_bio.3 |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_DISPATCH.3      |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_ENCODER.3       |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_ENCODER_CTX.3   |    2 +-
 .../man/man3/OSSL_ENCODER_CTX_new_for_pkey.3       |    2 +-
 .../lib/libcrypto/man/man3/OSSL_ENCODER_to_bio.3   |    2 +-
 .../man/man3/OSSL_ESS_check_signing_certs.3        |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_HTTP_REQ_CTX.3  |    8 +-
 .../lib/libcrypto/man/man3/OSSL_HTTP_parse_url.3   |   20 +-
 secure/lib/libcrypto/man/man3/OSSL_HTTP_transfer.3 |    9 +-
 secure/lib/libcrypto/man/man3/OSSL_ITEM.3          |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_LIB_CTX.3       |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_PARAM.3         |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_PARAM_BLD.3     |    2 +-
 .../man/man3/OSSL_PARAM_allocate_from_text.3       |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_PARAM_dup.3     |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_PARAM_int.3     |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_PROVIDER.3      |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_SELF_TEST_new.3 |    2 +-
 .../man/man3/OSSL_SELF_TEST_set_callback.3         |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_STORE_INFO.3    |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_STORE_LOADER.3  |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_STORE_SEARCH.3  |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_STORE_attach.3  |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_STORE_expect.3  |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_STORE_open.3    |    2 +-
 secure/lib/libcrypto/man/man3/OSSL_trace_enabled.3 |    2 +-
 .../man/man3/OSSL_trace_get_category_num.3         |    2 +-
 .../libcrypto/man/man3/OSSL_trace_set_channel.3    |    2 +-
 .../man/man3/OpenSSL_add_all_algorithms.3          |    2 +-
 secure/lib/libcrypto/man/man3/OpenSSL_version.3    |    2 +-
 .../libcrypto/man/man3/PEM_X509_INFO_read_bio_ex.3 |    2 +-
 secure/lib/libcrypto/man/man3/PEM_bytes_read_bio.3 |    2 +-
 secure/lib/libcrypto/man/man3/PEM_read.3           |    2 +-
 secure/lib/libcrypto/man/man3/PEM_read_CMS.3       |    2 +-
 .../libcrypto/man/man3/PEM_read_bio_PrivateKey.3   |    2 +-
 secure/lib/libcrypto/man/man3/PEM_read_bio_ex.3    |    2 +-
 .../libcrypto/man/man3/PEM_write_bio_CMS_stream.3  |    2 +-
 .../man/man3/PEM_write_bio_PKCS7_stream.3          |    2 +-
 .../lib/libcrypto/man/man3/PKCS12_PBE_keyivgen.3   |    2 +-
 .../man/man3/PKCS12_SAFEBAG_create_cert.3          |    2 +-
 .../libcrypto/man/man3/PKCS12_SAFEBAG_get0_attrs.3 |    2 +-
 .../libcrypto/man/man3/PKCS12_SAFEBAG_get1_cert.3  |    2 +-
 .../libcrypto/man/man3/PKCS12_add1_attr_by_NID.3   |    2 +-
 .../libcrypto/man/man3/PKCS12_add_CSPName_asc.3    |    2 +-
 secure/lib/libcrypto/man/man3/PKCS12_add_cert.3    |    2 +-
 .../man/man3/PKCS12_add_friendlyname_asc.3         |    2 +-
 .../lib/libcrypto/man/man3/PKCS12_add_localkeyid.3 |    2 +-
 secure/lib/libcrypto/man/man3/PKCS12_add_safe.3    |    2 +-
 secure/lib/libcrypto/man/man3/PKCS12_create.3      |    2 +-
 .../lib/libcrypto/man/man3/PKCS12_decrypt_skey.3   |    2 +-
 secure/lib/libcrypto/man/man3/PKCS12_gen_mac.3     |    2 +-
 .../libcrypto/man/man3/PKCS12_get_friendlyname.3   |    2 +-
 secure/lib/libcrypto/man/man3/PKCS12_init.3        |    2 +-
 .../libcrypto/man/man3/PKCS12_item_decrypt_d2i.3   |    2 +-
 .../libcrypto/man/man3/PKCS12_key_gen_utf8_ex.3    |    2 +-
 secure/lib/libcrypto/man/man3/PKCS12_newpass.3     |    2 +-
 .../lib/libcrypto/man/man3/PKCS12_pack_p7encdata.3 |    2 +-
 secure/lib/libcrypto/man/man3/PKCS12_parse.3       |    2 +-
 secure/lib/libcrypto/man/man3/PKCS5_PBE_keyivgen.3 |    2 +-
 secure/lib/libcrypto/man/man3/PKCS5_PBKDF2_HMAC.3  |    2 +-
 secure/lib/libcrypto/man/man3/PKCS7_decrypt.3      |    7 +-
 secure/lib/libcrypto/man/man3/PKCS7_encrypt.3      |    2 +-
 .../libcrypto/man/man3/PKCS7_get_octet_string.3    |    2 +-
 secure/lib/libcrypto/man/man3/PKCS7_sign.3         |    2 +-
 .../lib/libcrypto/man/man3/PKCS7_sign_add_signer.3 |    2 +-
 .../lib/libcrypto/man/man3/PKCS7_type_is_other.3   |    2 +-
 secure/lib/libcrypto/man/man3/PKCS7_verify.3       |    2 +-
 secure/lib/libcrypto/man/man3/PKCS8_encrypt.3      |    2 +-
 .../lib/libcrypto/man/man3/PKCS8_pkey_add1_attr.3  |    2 +-
 secure/lib/libcrypto/man/man3/RAND_add.3           |    2 +-
 secure/lib/libcrypto/man/man3/RAND_bytes.3         |    2 +-
 secure/lib/libcrypto/man/man3/RAND_cleanup.3       |    2 +-
 secure/lib/libcrypto/man/man3/RAND_egd.3           |    2 +-
 secure/lib/libcrypto/man/man3/RAND_get0_primary.3  |    2 +-
 secure/lib/libcrypto/man/man3/RAND_load_file.3     |    2 +-
 secure/lib/libcrypto/man/man3/RAND_set_DRBG_type.3 |    2 +-
 .../lib/libcrypto/man/man3/RAND_set_rand_method.3  |    2 +-
 secure/lib/libcrypto/man/man3/RC4_set_key.3        |    2 +-
 secure/lib/libcrypto/man/man3/RIPEMD160_Init.3     |    2 +-
 secure/lib/libcrypto/man/man3/RSA_blinding_on.3    |    2 +-
 secure/lib/libcrypto/man/man3/RSA_check_key.3      |    2 +-
 secure/lib/libcrypto/man/man3/RSA_generate_key.3   |    2 +-
 secure/lib/libcrypto/man/man3/RSA_get0_key.3       |    2 +-
 secure/lib/libcrypto/man/man3/RSA_meth_new.3       |    2 +-
 secure/lib/libcrypto/man/man3/RSA_new.3            |    2 +-
 .../man/man3/RSA_padding_add_PKCS1_type_1.3        |    2 +-
 secure/lib/libcrypto/man/man3/RSA_print.3          |    2 +-
 .../lib/libcrypto/man/man3/RSA_private_encrypt.3   |    2 +-
 secure/lib/libcrypto/man/man3/RSA_public_encrypt.3 |    2 +-
 secure/lib/libcrypto/man/man3/RSA_set_method.3     |    2 +-
 secure/lib/libcrypto/man/man3/RSA_sign.3           |    2 +-
 .../man/man3/RSA_sign_ASN1_OCTET_STRING.3          |    2 +-
 secure/lib/libcrypto/man/man3/RSA_size.3           |    2 +-
 secure/lib/libcrypto/man/man3/SCT_new.3            |    2 +-
 secure/lib/libcrypto/man/man3/SCT_print.3          |    2 +-
 secure/lib/libcrypto/man/man3/SCT_validate.3       |    2 +-
 secure/lib/libcrypto/man/man3/SHA256_Init.3        |    2 +-
 secure/lib/libcrypto/man/man3/SMIME_read_ASN1.3    |    2 +-
 secure/lib/libcrypto/man/man3/SMIME_read_CMS.3     |    2 +-
 secure/lib/libcrypto/man/man3/SMIME_read_PKCS7.3   |    2 +-
 secure/lib/libcrypto/man/man3/SMIME_write_ASN1.3   |    2 +-
 secure/lib/libcrypto/man/man3/SMIME_write_CMS.3    |    2 +-
 secure/lib/libcrypto/man/man3/SMIME_write_PKCS7.3  |    2 +-
 secure/lib/libcrypto/man/man3/SRP_Calc_B.3         |    2 +-
 secure/lib/libcrypto/man/man3/SRP_VBASE_new.3      |    2 +-
 .../lib/libcrypto/man/man3/SRP_create_verifier.3   |    2 +-
 secure/lib/libcrypto/man/man3/SRP_user_pwd_new.3   |    2 +-
 .../lib/libcrypto/man/man3/SSL_CIPHER_get_name.3   |    2 +-
 .../man/man3/SSL_COMP_add_compression_method.3     |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CONF_CTX_new.3   |    2 +-
 .../libcrypto/man/man3/SSL_CONF_CTX_set1_prefix.3  |    2 +-
 .../libcrypto/man/man3/SSL_CONF_CTX_set_flags.3    |    2 +-
 .../libcrypto/man/man3/SSL_CONF_CTX_set_ssl_ctx.3  |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CONF_cmd.3       |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CONF_cmd_argv.3  |    2 +-
 .../libcrypto/man/man3/SSL_CTX_add1_chain_cert.3   |    2 +-
 .../man/man3/SSL_CTX_add_extra_chain_cert.3        |    2 +-
 .../lib/libcrypto/man/man3/SSL_CTX_add_session.3   |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CTX_config.3     |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CTX_ctrl.3       |    2 +-
 .../lib/libcrypto/man/man3/SSL_CTX_dane_enable.3   |    2 +-
 .../libcrypto/man/man3/SSL_CTX_flush_sessions.3    |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CTX_free.3       |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CTX_get0_param.3 |    2 +-
 .../libcrypto/man/man3/SSL_CTX_get_verify_mode.3   |    2 +-
 .../man/man3/SSL_CTX_has_client_custom_ext.3       |    2 +-
 .../man/man3/SSL_CTX_load_verify_locations.3       |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CTX_new.3        |    2 +-
 .../lib/libcrypto/man/man3/SSL_CTX_sess_number.3   |    2 +-
 .../man/man3/SSL_CTX_sess_set_cache_size.3         |    2 +-
 .../libcrypto/man/man3/SSL_CTX_sess_set_get_cb.3   |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CTX_sessions.3   |    2 +-
 .../lib/libcrypto/man/man3/SSL_CTX_set0_CA_list.3  |    2 +-
 .../lib/libcrypto/man/man3/SSL_CTX_set1_curves.3   |    2 +-
 .../lib/libcrypto/man/man3/SSL_CTX_set1_sigalgs.3  |    2 +-
 .../man/man3/SSL_CTX_set1_verify_cert_store.3      |    2 +-
 .../man/man3/SSL_CTX_set_alpn_select_cb.3          |    2 +-
 .../lib/libcrypto/man/man3/SSL_CTX_set_cert_cb.3   |    2 +-
 .../libcrypto/man/man3/SSL_CTX_set_cert_store.3    |    2 +-
 .../man/man3/SSL_CTX_set_cert_verify_callback.3    |    2 +-
 .../libcrypto/man/man3/SSL_CTX_set_cipher_list.3   |    2 +-
 .../man/man3/SSL_CTX_set_client_cert_cb.3          |    2 +-
 .../man/man3/SSL_CTX_set_client_hello_cb.3         |    2 +-
 .../man/man3/SSL_CTX_set_ct_validation_callback.3  |    2 +-
 .../man/man3/SSL_CTX_set_ctlog_list_file.3         |    2 +-
 .../man/man3/SSL_CTX_set_default_passwd_cb.3       |    2 +-
 .../man/man3/SSL_CTX_set_generate_session_id.3     |    2 +-
 .../libcrypto/man/man3/SSL_CTX_set_info_callback.3 |    2 +-
 .../man/man3/SSL_CTX_set_keylog_callback.3         |    2 +-
 .../libcrypto/man/man3/SSL_CTX_set_max_cert_list.3 |    2 +-
 .../man/man3/SSL_CTX_set_min_proto_version.3       |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CTX_set_mode.3   |    2 +-
 .../libcrypto/man/man3/SSL_CTX_set_msg_callback.3  |    2 +-
 .../libcrypto/man/man3/SSL_CTX_set_num_tickets.3   |    2 +-
 .../lib/libcrypto/man/man3/SSL_CTX_set_options.3   |    2 +-
 .../man/man3/SSL_CTX_set_psk_client_callback.3     |    2 +-
 .../man/man3/SSL_CTX_set_quiet_shutdown.3          |    2 +-
 .../libcrypto/man/man3/SSL_CTX_set_read_ahead.3    |    2 +-
 .../man/man3/SSL_CTX_set_record_padding_callback.3 |    2 +-
 .../man/man3/SSL_CTX_set_security_level.3          |    2 +-
 .../man/man3/SSL_CTX_set_session_cache_mode.3      |    8 +-
 .../man/man3/SSL_CTX_set_session_id_context.3      |   29 +-
 .../man/man3/SSL_CTX_set_session_ticket_cb.3       |    2 +-
 .../man/man3/SSL_CTX_set_split_send_fragment.3     |    2 +-
 .../libcrypto/man/man3/SSL_CTX_set_srp_password.3  |    2 +-
 .../libcrypto/man/man3/SSL_CTX_set_ssl_version.3   |    2 +-
 .../SSL_CTX_set_stateless_cookie_generate_cb.3     |    2 +-
 .../lib/libcrypto/man/man3/SSL_CTX_set_timeout.3   |    2 +-
 .../man3/SSL_CTX_set_tlsext_servername_callback.3  |   10 +-
 .../man/man3/SSL_CTX_set_tlsext_status_cb.3        |    2 +-
 .../man/man3/SSL_CTX_set_tlsext_ticket_key_cb.3    |    2 +-
 .../man/man3/SSL_CTX_set_tlsext_use_srtp.3         |    2 +-
 .../man/man3/SSL_CTX_set_tmp_dh_callback.3         |    2 +-
 .../lib/libcrypto/man/man3/SSL_CTX_set_tmp_ecdh.3  |    2 +-
 secure/lib/libcrypto/man/man3/SSL_CTX_set_verify.3 |    2 +-
 .../libcrypto/man/man3/SSL_CTX_use_certificate.3   |    2 +-
 .../man/man3/SSL_CTX_use_psk_identity_hint.3       |    2 +-
 .../libcrypto/man/man3/SSL_CTX_use_serverinfo.3    |    2 +-
 secure/lib/libcrypto/man/man3/SSL_SESSION_free.3   |    2 +-
 .../libcrypto/man/man3/SSL_SESSION_get0_cipher.3   |    2 +-
 .../libcrypto/man/man3/SSL_SESSION_get0_hostname.3 |    2 +-
 .../man/man3/SSL_SESSION_get0_id_context.3         |    2 +-
 .../lib/libcrypto/man/man3/SSL_SESSION_get0_peer.3 |    2 +-
 .../man/man3/SSL_SESSION_get_compress_id.3         |    2 +-
 .../man/man3/SSL_SESSION_get_protocol_version.3    |    2 +-
 .../lib/libcrypto/man/man3/SSL_SESSION_get_time.3  |    2 +-
 .../libcrypto/man/man3/SSL_SESSION_has_ticket.3    |    2 +-
 .../libcrypto/man/man3/SSL_SESSION_is_resumable.3  |    2 +-
 secure/lib/libcrypto/man/man3/SSL_SESSION_print.3  |    2 +-
 .../lib/libcrypto/man/man3/SSL_SESSION_set1_id.3   |    2 +-
 secure/lib/libcrypto/man/man3/SSL_accept.3         |    2 +-
 .../lib/libcrypto/man/man3/SSL_alert_type_string.3 |    2 +-
 secure/lib/libcrypto/man/man3/SSL_alloc_buffers.3  |    2 +-
 secure/lib/libcrypto/man/man3/SSL_check_chain.3    |    2 +-
 secure/lib/libcrypto/man/man3/SSL_clear.3          |    2 +-
 secure/lib/libcrypto/man/man3/SSL_connect.3        |    2 +-
 secure/lib/libcrypto/man/man3/SSL_do_handshake.3   |    2 +-
 .../man/man3/SSL_export_keying_material.3          |    2 +-
 .../libcrypto/man/man3/SSL_extension_supported.3   |    2 +-
 secure/lib/libcrypto/man/man3/SSL_free.3           |    2 +-
 secure/lib/libcrypto/man/man3/SSL_get0_peer_scts.3 |    2 +-
 secure/lib/libcrypto/man/man3/SSL_get_SSL_CTX.3    |    2 +-
 .../lib/libcrypto/man/man3/SSL_get_all_async_fds.3 |    2 +-
 .../lib/libcrypto/man/man3/SSL_get_certificate.3   |    2 +-
 secure/lib/libcrypto/man/man3/SSL_get_ciphers.3    |    2 +-
 .../lib/libcrypto/man/man3/SSL_get_client_random.3 |    2 +-
 .../libcrypto/man/man3/SSL_get_current_cipher.3    |    2 +-
 .../libcrypto/man/man3/SSL_get_default_timeout.3   |    2 +-
 secure/lib/libcrypto/man/man3/SSL_get_error.3      |    2 +-
 .../lib/libcrypto/man/man3/SSL_get_extms_support.3 |    2 +-
 secure/lib/libcrypto/man/man3/SSL_get_fd.3         |    2 +-
 .../libcrypto/man/man3/SSL_get_peer_cert_chain.3   |    2 +-
 .../libcrypto/man/man3/SSL_get_peer_certificate.3  |    2 +-
 .../man/man3/SSL_get_peer_signature_nid.3          |    2 +-
 .../lib/libcrypto/man/man3/SSL_get_peer_tmp_key.3  |    2 +-
 .../lib/libcrypto/man/man3/SSL_get_psk_identity.3  |    2 +-
 secure/lib/libcrypto/man/man3/SSL_get_rbio.3       |    2 +-
 secure/lib/libcrypto/man/man3/SSL_get_session.3    |    2 +-
 .../libcrypto/man/man3/SSL_get_shared_sigalgs.3    |    2 +-
 .../lib/libcrypto/man/man3/SSL_get_verify_result.3 |    2 +-
 secure/lib/libcrypto/man/man3/SSL_get_version.3    |    2 +-
 secure/lib/libcrypto/man/man3/SSL_group_to_name.3  |    2 +-
 secure/lib/libcrypto/man/man3/SSL_in_init.3        |    2 +-
 secure/lib/libcrypto/man/man3/SSL_key_update.3     |    2 +-
 secure/lib/libcrypto/man/man3/SSL_library_init.3   |    2 +-
 .../libcrypto/man/man3/SSL_load_client_CA_file.3   |    2 +-
 secure/lib/libcrypto/man/man3/SSL_new.3            |    2 +-
 secure/lib/libcrypto/man/man3/SSL_pending.3        |    2 +-
 secure/lib/libcrypto/man/man3/SSL_read.3           |    2 +-
 .../lib/libcrypto/man/man3/SSL_read_early_data.3   |    2 +-
 secure/lib/libcrypto/man/man3/SSL_rstate_string.3  |    2 +-
 secure/lib/libcrypto/man/man3/SSL_session_reused.3 |    2 +-
 secure/lib/libcrypto/man/man3/SSL_set1_host.3      |    2 +-
 .../libcrypto/man/man3/SSL_set_async_callback.3    |    2 +-
 secure/lib/libcrypto/man/man3/SSL_set_bio.3        |    2 +-
 .../lib/libcrypto/man/man3/SSL_set_connect_state.3 |    2 +-
 secure/lib/libcrypto/man/man3/SSL_set_fd.3         |    2 +-
 .../lib/libcrypto/man/man3/SSL_set_retry_verify.3  |    2 +-
 secure/lib/libcrypto/man/man3/SSL_set_session.3    |    2 +-
 secure/lib/libcrypto/man/man3/SSL_set_shutdown.3   |    2 +-
 .../lib/libcrypto/man/man3/SSL_set_verify_result.3 |    2 +-
 secure/lib/libcrypto/man/man3/SSL_shutdown.3       |    2 +-
 secure/lib/libcrypto/man/man3/SSL_state_string.3   |    2 +-
 secure/lib/libcrypto/man/man3/SSL_want.3           |    2 +-
 secure/lib/libcrypto/man/man3/SSL_write.3          |    2 +-
 secure/lib/libcrypto/man/man3/TS_RESP_CTX_new.3    |    2 +-
 .../libcrypto/man/man3/TS_VERIFY_CTX_set_certs.3   |    2 +-
 secure/lib/libcrypto/man/man3/UI_STRING.3          |    2 +-
 secure/lib/libcrypto/man/man3/UI_UTIL_read_pw.3    |    2 +-
 secure/lib/libcrypto/man/man3/UI_create_method.3   |    2 +-
 secure/lib/libcrypto/man/man3/UI_new.3             |    2 +-
 secure/lib/libcrypto/man/man3/X509V3_get_d2i.3     |    2 +-
 secure/lib/libcrypto/man/man3/X509V3_set_ctx.3     |    2 +-
 secure/lib/libcrypto/man/man3/X509_ALGOR_dup.3     |    2 +-
 secure/lib/libcrypto/man/man3/X509_ATTRIBUTE.3     |    2 +-
 .../libcrypto/man/man3/X509_CRL_get0_by_serial.3   |    2 +-
 .../libcrypto/man/man3/X509_EXTENSION_set_object.3 |    2 +-
 secure/lib/libcrypto/man/man3/X509_LOOKUP.3        |    2 +-
 .../lib/libcrypto/man/man3/X509_LOOKUP_hash_dir.3  |    2 +-
 .../lib/libcrypto/man/man3/X509_LOOKUP_meth_new.3  |    2 +-
 .../man/man3/X509_NAME_ENTRY_get_object.3          |    2 +-
 .../man/man3/X509_NAME_add_entry_by_txt.3          |    2 +-
 secure/lib/libcrypto/man/man3/X509_NAME_get0_der.3 |    2 +-
 .../man/man3/X509_NAME_get_index_by_NID.3          |    2 +-
 secure/lib/libcrypto/man/man3/X509_NAME_print_ex.3 |    2 +-
 secure/lib/libcrypto/man/man3/X509_PUBKEY_new.3    |    2 +-
 secure/lib/libcrypto/man/man3/X509_REQ_get_attr.3  |    2 +-
 .../libcrypto/man/man3/X509_REQ_get_extensions.3   |    2 +-
 secure/lib/libcrypto/man/man3/X509_SIG_get0.3      |    2 +-
 .../libcrypto/man/man3/X509_STORE_CTX_get_error.3  |    2 +-
 secure/lib/libcrypto/man/man3/X509_STORE_CTX_new.3 |    2 +-
 .../man/man3/X509_STORE_CTX_set_verify_cb.3        |    2 +-
 .../lib/libcrypto/man/man3/X509_STORE_add_cert.3   |    2 +-
 .../lib/libcrypto/man/man3/X509_STORE_get0_param.3 |    2 +-
 secure/lib/libcrypto/man/man3/X509_STORE_new.3     |    2 +-
 .../man/man3/X509_STORE_set_verify_cb_func.3       |    2 +-
 .../man/man3/X509_VERIFY_PARAM_set_flags.3         |    2 +-
 secure/lib/libcrypto/man/man3/X509_add_cert.3      |    2 +-
 secure/lib/libcrypto/man/man3/X509_check_ca.3      |    2 +-
 secure/lib/libcrypto/man/man3/X509_check_host.3    |    2 +-
 secure/lib/libcrypto/man/man3/X509_check_issued.3  |    2 +-
 .../libcrypto/man/man3/X509_check_private_key.3    |    2 +-
 secure/lib/libcrypto/man/man3/X509_check_purpose.3 |    2 +-
 secure/lib/libcrypto/man/man3/X509_cmp.3           |    2 +-
 secure/lib/libcrypto/man/man3/X509_cmp_time.3      |    2 +-
 secure/lib/libcrypto/man/man3/X509_digest.3        |    2 +-
 secure/lib/libcrypto/man/man3/X509_dup.3           |    2 +-
 .../man/man3/X509_get0_distinguishing_id.3         |    2 +-
 .../lib/libcrypto/man/man3/X509_get0_notBefore.3   |    2 +-
 .../lib/libcrypto/man/man3/X509_get0_signature.3   |    2 +-
 secure/lib/libcrypto/man/man3/X509_get0_uids.3     |    2 +-
 .../libcrypto/man/man3/X509_get_extension_flags.3  |    2 +-
 secure/lib/libcrypto/man/man3/X509_get_pubkey.3    |    2 +-
 .../lib/libcrypto/man/man3/X509_get_serialNumber.3 |    2 +-
 .../lib/libcrypto/man/man3/X509_get_subject_name.3 |    2 +-
 secure/lib/libcrypto/man/man3/X509_get_version.3   |    2 +-
 secure/lib/libcrypto/man/man3/X509_load_http.3     |    2 +-
 secure/lib/libcrypto/man/man3/X509_new.3           |    2 +-
 secure/lib/libcrypto/man/man3/X509_sign.3          |    2 +-
 secure/lib/libcrypto/man/man3/X509_verify.3        |    2 +-
 secure/lib/libcrypto/man/man3/X509_verify_cert.3   |    2 +-
 .../lib/libcrypto/man/man3/X509v3_get_ext_by_NID.3 |    2 +-
 secure/lib/libcrypto/man/man3/b2i_PVK_bio_ex.3     |    2 +-
 .../libcrypto/man/man3/d2i_PKCS8PrivateKey_bio.3   |    2 +-
 secure/lib/libcrypto/man/man3/d2i_PrivateKey.3     |    2 +-
 secure/lib/libcrypto/man/man3/d2i_RSAPrivateKey.3  |    2 +-
 secure/lib/libcrypto/man/man3/d2i_SSL_SESSION.3    |    2 +-
 secure/lib/libcrypto/man/man3/d2i_X509.3           |   42 +-
 secure/lib/libcrypto/man/man3/i2d_CMS_bio_stream.3 |    2 +-
 .../lib/libcrypto/man/man3/i2d_PKCS7_bio_stream.3  |    2 +-
 secure/lib/libcrypto/man/man3/i2d_re_X509_tbs.3    |    2 +-
 secure/lib/libcrypto/man/man3/o2i_SCT_LIST.3       |    2 +-
 secure/lib/libcrypto/man/man3/s2i_ASN1_IA5STRING.3 |    2 +-
 secure/lib/libcrypto/man/man5/config.5             |    2 +-
 secure/lib/libcrypto/man/man5/fips_config.5        |    2 +-
 secure/lib/libcrypto/man/man5/x509v3_config.5      |    2 +-
 .../lib/libcrypto/man/man7/EVP_ASYM_CIPHER-RSA.7   |    2 +-
 .../lib/libcrypto/man/man7/EVP_ASYM_CIPHER-SM2.7   |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-AES.7     |    8 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-ARIA.7    |    2 +-
 .../lib/libcrypto/man/man7/EVP_CIPHER-BLOWFISH.7   |    2 +-
 .../lib/libcrypto/man/man7/EVP_CIPHER-CAMELLIA.7   |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-CAST.7    |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-CHACHA.7  |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-DES.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-IDEA.7    |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-NULL.7    |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-RC2.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-RC4.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-RC5.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-SEED.7    |    2 +-
 secure/lib/libcrypto/man/man7/EVP_CIPHER-SM4.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-HKDF.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-KB.7         |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-KRB5KDF.7    |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF1.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-PBKDF2.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-PKCS12KDF.7  |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-SCRYPT.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-SS.7         |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-SSHKDF.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-TLS13_KDF.7  |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-TLS1_PRF.7   |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-X942-ASN1.7  |    2 +-
 .../lib/libcrypto/man/man7/EVP_KDF-X942-CONCAT.7   |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KDF-X963.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KEM-RSA.7        |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KEYEXCH-DH.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KEYEXCH-ECDH.7   |    2 +-
 secure/lib/libcrypto/man/man7/EVP_KEYEXCH-X25519.7 |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MAC-BLAKE2.7     |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MAC-CMAC.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MAC-GMAC.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MAC-HMAC.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MAC-KMAC.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MAC-Poly1305.7   |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MAC-Siphash.7    |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-BLAKE2.7      |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-MD2.7         |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-MD4.7         |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-MD5-SHA1.7    |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-MD5.7         |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-MDC2.7        |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-NULL.7        |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-RIPEMD160.7   |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-SHA1.7        |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-SHA2.7        |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-SHA3.7        |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-SHAKE.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-SM3.7         |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-WHIRLPOOL.7   |    2 +-
 secure/lib/libcrypto/man/man7/EVP_MD-common.7      |    2 +-
 secure/lib/libcrypto/man/man7/EVP_PKEY-DH.7        |    2 +-
 secure/lib/libcrypto/man/man7/EVP_PKEY-DSA.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_PKEY-EC.7        |    2 +-
 secure/lib/libcrypto/man/man7/EVP_PKEY-FFC.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_PKEY-HMAC.7      |    2 +-
 secure/lib/libcrypto/man/man7/EVP_PKEY-RSA.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_PKEY-SM2.7       |    2 +-
 secure/lib/libcrypto/man/man7/EVP_PKEY-X25519.7    |    2 +-
 secure/lib/libcrypto/man/man7/EVP_RAND-CTR-DRBG.7  |    2 +-
 secure/lib/libcrypto/man/man7/EVP_RAND-HASH-DRBG.7 |    2 +-
 secure/lib/libcrypto/man/man7/EVP_RAND-HMAC-DRBG.7 |    2 +-
 secure/lib/libcrypto/man/man7/EVP_RAND-SEED-SRC.7  |    2 +-
 secure/lib/libcrypto/man/man7/EVP_RAND-TEST-RAND.7 |    2 +-
 secure/lib/libcrypto/man/man7/EVP_RAND.7           |    2 +-
 secure/lib/libcrypto/man/man7/EVP_SIGNATURE-DSA.7  |    2 +-
 .../lib/libcrypto/man/man7/EVP_SIGNATURE-ECDSA.7   |    2 +-
 .../lib/libcrypto/man/man7/EVP_SIGNATURE-ED25519.7 |    2 +-
 secure/lib/libcrypto/man/man7/EVP_SIGNATURE-HMAC.7 |    2 +-
 secure/lib/libcrypto/man/man7/EVP_SIGNATURE-RSA.7  |    2 +-
 secure/lib/libcrypto/man/man7/OSSL_PROVIDER-FIPS.7 |    2 +-
 secure/lib/libcrypto/man/man7/OSSL_PROVIDER-base.7 |    2 +-
 .../lib/libcrypto/man/man7/OSSL_PROVIDER-default.7 |    2 +-
 .../lib/libcrypto/man/man7/OSSL_PROVIDER-legacy.7  |    2 +-
 secure/lib/libcrypto/man/man7/OSSL_PROVIDER-null.7 |    2 +-
 secure/lib/libcrypto/man/man7/RAND.7               |    2 +-
 secure/lib/libcrypto/man/man7/RSA-PSS.7            |    2 +-
 secure/lib/libcrypto/man/man7/X25519.7             |    2 +-
 secure/lib/libcrypto/man/man7/bio.7                |    2 +-
 secure/lib/libcrypto/man/man7/crypto.7             |    2 +-
 secure/lib/libcrypto/man/man7/ct.7                 |    2 +-
 secure/lib/libcrypto/man/man7/des_modes.7          |    2 +-
 secure/lib/libcrypto/man/man7/evp.7                |    2 +-
 secure/lib/libcrypto/man/man7/fips_module.7        |    2 +-
 secure/lib/libcrypto/man/man7/life_cycle-cipher.7  |    2 +-
 secure/lib/libcrypto/man/man7/life_cycle-digest.7  |    2 +-
 secure/lib/libcrypto/man/man7/life_cycle-kdf.7     |    2 +-
 secure/lib/libcrypto/man/man7/life_cycle-mac.7     |    2 +-
 secure/lib/libcrypto/man/man7/life_cycle-pkey.7    |    2 +-
 secure/lib/libcrypto/man/man7/life_cycle-rand.7    |    2 +-
 secure/lib/libcrypto/man/man7/migration_guide.7    |    2 +-
 secure/lib/libcrypto/man/man7/openssl-core.h.7     |    2 +-
 .../libcrypto/man/man7/openssl-core_dispatch.h.7   |    2 +-
 .../lib/libcrypto/man/man7/openssl-core_names.h.7  |    2 +-
 secure/lib/libcrypto/man/man7/openssl-env.7        |    4 +-
 secure/lib/libcrypto/man/man7/openssl-glossary.7   |    2 +-
 secure/lib/libcrypto/man/man7/openssl-threads.7    |    2 +-
 .../lib/libcrypto/man/man7/openssl_user_macros.7   |    2 +-
 secure/lib/libcrypto/man/man7/ossl_store-file.7    |    2 +-
 secure/lib/libcrypto/man/man7/ossl_store.7         |    2 +-
 .../lib/libcrypto/man/man7/passphrase-encoding.7   |    2 +-
 secure/lib/libcrypto/man/man7/property.7           |    2 +-
 .../lib/libcrypto/man/man7/provider-asym_cipher.7  |    8 +-
 secure/lib/libcrypto/man/man7/provider-base.7      |    2 +-
 secure/lib/libcrypto/man/man7/provider-cipher.7    |    2 +-
 secure/lib/libcrypto/man/man7/provider-decoder.7   |    2 +-
 secure/lib/libcrypto/man/man7/provider-digest.7    |    2 +-
 secure/lib/libcrypto/man/man7/provider-encoder.7   |    2 +-
 secure/lib/libcrypto/man/man7/provider-kdf.7       |    2 +-
 secure/lib/libcrypto/man/man7/provider-kem.7       |    2 +-
 secure/lib/libcrypto/man/man7/provider-keyexch.7   |    2 +-
 secure/lib/libcrypto/man/man7/provider-keymgmt.7   |    2 +-
 secure/lib/libcrypto/man/man7/provider-mac.7       |    2 +-
 secure/lib/libcrypto/man/man7/provider-object.7    |    2 +-
 secure/lib/libcrypto/man/man7/provider-rand.7      |    2 +-
 secure/lib/libcrypto/man/man7/provider-signature.7 |    2 +-
 secure/lib/libcrypto/man/man7/provider-storemgmt.7 |    2 +-
 secure/lib/libcrypto/man/man7/provider.7           |    2 +-
 secure/lib/libcrypto/man/man7/proxy-certificates.7 |    2 +-
 secure/lib/libcrypto/man/man7/ssl.7                |    2 +-
 secure/lib/libcrypto/man/man7/x509.7               |    2 +-
 secure/usr.bin/openssl/man/CA.pl.1                 |    2 +-
 secure/usr.bin/openssl/man/openssl-asn1parse.1     |    2 +-
 secure/usr.bin/openssl/man/openssl-ca.1            |    2 +-
 secure/usr.bin/openssl/man/openssl-ciphers.1       |    2 +-
 secure/usr.bin/openssl/man/openssl-cmds.1          |    2 +-
 secure/usr.bin/openssl/man/openssl-cmp.1           |    2 +-
 secure/usr.bin/openssl/man/openssl-cms.1           |    2 +-
 secure/usr.bin/openssl/man/openssl-crl.1           |    2 +-
 secure/usr.bin/openssl/man/openssl-crl2pkcs7.1     |    2 +-
 secure/usr.bin/openssl/man/openssl-dgst.1          |    2 +-
 secure/usr.bin/openssl/man/openssl-dhparam.1       |    2 +-
 secure/usr.bin/openssl/man/openssl-dsa.1           |    2 +-
 secure/usr.bin/openssl/man/openssl-dsaparam.1      |    2 +-
 secure/usr.bin/openssl/man/openssl-ec.1            |    2 +-
 secure/usr.bin/openssl/man/openssl-ecparam.1       |    2 +-
 secure/usr.bin/openssl/man/openssl-enc.1           |    2 +-
 secure/usr.bin/openssl/man/openssl-engine.1        |    2 +-
 secure/usr.bin/openssl/man/openssl-errstr.1        |    2 +-
 secure/usr.bin/openssl/man/openssl-fipsinstall.1   |    2 +-
 .../usr.bin/openssl/man/openssl-format-options.1   |    6 +-
 secure/usr.bin/openssl/man/openssl-gendsa.1        |    2 +-
 secure/usr.bin/openssl/man/openssl-genpkey.1       |    2 +-
 secure/usr.bin/openssl/man/openssl-genrsa.1        |    2 +-
 secure/usr.bin/openssl/man/openssl-info.1          |    2 +-
 secure/usr.bin/openssl/man/openssl-kdf.1           |    2 +-
 secure/usr.bin/openssl/man/openssl-list.1          |    2 +-
 secure/usr.bin/openssl/man/openssl-mac.1           |    2 +-
 .../openssl/man/openssl-namedisplay-options.1      |    2 +-
 secure/usr.bin/openssl/man/openssl-nseq.1          |    2 +-
 secure/usr.bin/openssl/man/openssl-ocsp.1          |    2 +-
 .../openssl/man/openssl-passphrase-options.1       |    2 +-
 secure/usr.bin/openssl/man/openssl-passwd.1        |    2 +-
 secure/usr.bin/openssl/man/openssl-pkcs12.1        |    2 +-
 secure/usr.bin/openssl/man/openssl-pkcs7.1         |    2 +-
 secure/usr.bin/openssl/man/openssl-pkcs8.1         |    6 +-
 secure/usr.bin/openssl/man/openssl-pkey.1          |    2 +-
 secure/usr.bin/openssl/man/openssl-pkeyparam.1     |    2 +-
 secure/usr.bin/openssl/man/openssl-pkeyutl.1       |    2 +-
 secure/usr.bin/openssl/man/openssl-prime.1         |    2 +-
 secure/usr.bin/openssl/man/openssl-rand.1          |    2 +-
 secure/usr.bin/openssl/man/openssl-rehash.1        |    8 +-
 secure/usr.bin/openssl/man/openssl-req.1           |    2 +-
 secure/usr.bin/openssl/man/openssl-rsa.1           |    2 +-
 secure/usr.bin/openssl/man/openssl-rsautl.1        |    2 +-
 secure/usr.bin/openssl/man/openssl-s_client.1      |   13 +-
 secure/usr.bin/openssl/man/openssl-s_server.1      |   17 +-
 secure/usr.bin/openssl/man/openssl-s_time.1        |    2 +-
 secure/usr.bin/openssl/man/openssl-sess_id.1       |    2 +-
 secure/usr.bin/openssl/man/openssl-smime.1         |    9 +-
 secure/usr.bin/openssl/man/openssl-speed.1         |    2 +-
 secure/usr.bin/openssl/man/openssl-spkac.1         |    2 +-
 secure/usr.bin/openssl/man/openssl-srp.1           |    2 +-
 secure/usr.bin/openssl/man/openssl-storeutl.1      |    2 +-
 secure/usr.bin/openssl/man/openssl-ts.1            |    2 +-
 .../openssl/man/openssl-verification-options.1     |    2 +-
 secure/usr.bin/openssl/man/openssl-verify.1        |    2 +-
 secure/usr.bin/openssl/man/openssl-version.1       |    2 +-
 secure/usr.bin/openssl/man/openssl-x509.1          |    2 +-
 secure/usr.bin/openssl/man/openssl.1               |    2 +-
 secure/usr.bin/openssl/man/tsget.1                 |    2 +-
 919 files changed, 5383 insertions(+), 22567 deletions(-)

diff --git a/crypto/openssl/CHANGES.md b/crypto/openssl/CHANGES.md
index 5d99e5fecdd7..6cf7fa7636a9 100644
--- a/crypto/openssl/CHANGES.md
+++ b/crypto/openssl/CHANGES.md
@@ -28,6 +28,186 @@ breaking changes, and mappings for the large list of deprecated functions.
 
 [Migration guide]: https://github.com/openssl/openssl/tree/master/doc/man7/migration_guide.pod
 
+### Changes between 3.0.20 and 3.0.21 [9 Jun 2026]
+
+ * Fixed heap use-after-free in `PKCS7_verify()`.
+
+   Severity: High
+
+   Issue summary: A specially crafted PKCS#7 or S/MIME signed message could
+   trigger a use-after-free during PKCS#7 signature verification.
+
+   Impact summary: A use-after-free may result in process crashes, heap
+   corruption, or, potentially, remote code execution.
+
+   Reported by: Thai Duong (Calif.io in collaboration with Claude
+   and Anthropic Research).
+
+   ([CVE-2026-45447])
+
+   *Igor Ustinov*
+
+ * Fixed CMS `AuthEnvelopedData` processing may accept forged messages.
+
+   Severity: Moderate
+
+   Issue Summary: Cryptographic Message Services (CMS) processing fails
+   to perform sufficient input validation on the cipher and tag length fields
+   of `AuthEnvelopedData` containers, leading to various potential compromises.
+
+   Impact Summary: Attackers making use of these vulnerabilities may achieve
+   key-equivalent functionality for a given CMS recipient and/or bypass
*** 39865 LINES SKIPPED ***