chore(deps): update rust crate openssl to v0.10.78

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
openssl	dependencies	patch	0.10.68 → 0.10.78

---

Release Notes

rust-openssl/rust-openssl (openssl)

v0.10.78

Compare Source

What's Changed

• Fix Suite B flag assignments in verify.rs by @​alex in #​2592
• Use cvt_p for OPENSSL_malloc error handling by @​alex in #​2593
• Mark BIO_get_mem_data on AWS-LC to be unsafe by @​alex in #​2594
• Set timeout for package installation step by @​alex in #​2595
• Panic in Crypter::new when IV is required but not provided by @​alex in #​2596
• openssl 4 support by @​reaperhulk in #​2591
• Avoid panic for overlong OIDs by @​botovq in #​2598
• Fix dangling stack pointer in custom extension add callback by @​alex in #​2599
• Add support for LibreSSL 4.3.x by @​botovq in #​2603
• fix inverted bounds assertion in AES key unwrap by @​reaperhulk in #​2604
• Reject oversized length returns from password callback trampoline by @​alex in #​2605
• Validate callback-returned lengths in PSK and cookie trampolines by @​alex in #​2607
• Error for short out in MdCtxRef::digest_final() by @​botovq in #​2608
• Check derive output buffer length on OpenSSL 1.1.x by @​alex in #​2606
• Release openssl v0.10.78 and openssl-sys v0.9.114 by @​alex in #​2609

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.77...openssl-v0.10.78

v0.10.77

Compare Source

What's Changed

• CI: Hash-pin all action usage, avoid credential persistence in actions/checkout by @​woodruffw in #​2587
• Bump aws-lc-sys to 0.39 by @​goffrie in #​2588
• md_ctx: enable sign/verify/reset on BoringSSL, LibreSSL, and AWS-LC by @​alex in #​2589
• Release openssl v0.10.77 and openssl-sys v0.9.113 by @​alex in #​2590

New Contributors

• @​woodruffw made their first contribution in #​2587

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.76...openssl-v0.10.77

v0.10.76

Compare Source

What's Changed

• feat: New methods EVP_PKEY_new_raw_*_key_ex and EVP_PKEY_is_a by @​FinnRG in #​2521
• Fix invalid value parsing of OCSP revocation reason by @​danpashin in #​2523
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​2524
• Bump aws-lc-sys from 0.27 to 0.34 by @​goffrie in #​2526
• Expose X509_NAME_dup on all versions of OpenSSL by @​alex in #​2529
• Unconditionally expose some *_dup() functions by @​botovq in #​2530
• reintroduce dir_name support for subject_alt_names by @​mqqz in #​2528
• Fix cipher comparison with NID instead of pointers by @​lwestlund in #​2531
• Remove ASN1_STRING_data for LibreSSL 4.3.0 by @​botovq in #​2534
• drop openssl 1.0.2 by @​alex in #​2545
• Bump actions/cache from 4 to 5 by @​dependabot[bot] in #​2542
• Add Debug implementation for EcdsaSig{,Ref} by @​buytenh in #​2540
• Add HKDF support by @​Zenkibou in #​2543
• Enhance Debug implementation for Nid by @​buytenh in #​2547
• Remove X509_VERIFY_PARAM_ID for LibreSSL 4.3.0 by @​botovq in #​2549
• Add UpperHex implementation for BigNum{,Ref} by @​buytenh in #​2550
• Add Debug implementation for EcGroup{,Ref} by @​buytenh in #​2548
• test against openssl 3.6.0 in ci by @​alex in #​2546
• Remove more OpenSSL 1.0.2 complications by @​botovq in #​2559
• Still more OpenSSL 1.0.2 complications by @​botovq in #​2560
• Remove more dead config branches by @​botovq in #​2561
• Let AWS-LC use the BoringSSL path for BIO_METHOD by @​botovq in #​2562
• Two small LibreSSL tweaks by @​botovq in #​2563
• Upgrade ctest to 0.5 by @​alex in #​2569
• add more brainpool curve NID constants by @​butteronarchbtw in #​2567
• fix min-version CI by @​alex in #​2573
• Fix use-after-free of error strings on BoringSSL/aws-lc by @​alex in #​2572
• Pin quote to 1.0.44 for min-version CI by @​alex in #​2579
• Constify from_raw by @​DarkaMaul in #​2580
• Support pregenerated Rust bindings from AWS-LC installations by @​justsmth in #​2578
• Bump aws-lc-sys to 0.38 by @​goffrie in #​2581
• Release openssl v0.10.76 and openssl-sys v0.9.112 by @​weihanglo in #​2582

New Contributors

• @​FinnRG made their first contribution in #​2521
• @​danpashin made their first contribution in #​2523
• @​mqqz made their first contribution in #​2528
• @​lwestlund made their first contribution in #​2531
• @​buytenh made their first contribution in #​2540
• @​Zenkibou made their first contribution in #​2543
• @​butteronarchbtw made their first contribution in #​2567
• @​DarkaMaul made their first contribution in #​2580
• @​weihanglo made their first contribution in #​2582

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.75...openssl-v0.10.76

v0.10.75

Compare Source

What's Changed

• Fix a few typos (most of them found with codespell) by @​botovq in #​2502
• Use SHA256 test variant instead of SHA1 by @​abbra in #​2504
• pin home to an older version on MSRV CI by @​alex in #​2509
• Implement set_rsa_oaep_label for AWS-LC/BoringSSL by @​goffrie in #​2508
• sys/evp: add EVP_MAC symbols by @​huwcbjones in #​2510
• CI: bump LibreSSL 4.x branches to latest releases by @​botovq in #​2513
• Fix unsound OCSP find_status handling of optional next_update field by @​alex in #​2517
• Release openssl v0.10.75 and openssl-sys v0.9.111 by @​alex in #​2518

New Contributors

• @​abbra made their first contribution in #​2504
• @​goffrie made their first contribution in #​2508

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.74...openssl-v0.10.75

v0.10.74

Compare Source

What's Changed

• [AIX] use /usr to find_openssl_dir by @​daltenty in #​2401
• Improve support for OPENSSL_NO_COMP and OPENSSL_NO_SRTP by @​justsmth in #​2423
• Add aws-lc-fips feature to allow linking the aws-lc-fips-sys crate by @​skmcgrail in #​2424
• variety of fixes for warnings in new rust by @​alex in #​2427
• Some API adjustments for LibreSSL 4.2.0 by @​botovq in #​2426
• Update OpenSSL documentation URLs to new docs.openssl.org domain by @​alex in #​2430
• pkey_ctx: add ability to generate DSA params & keys by @​huwcbjones in #​2432
• Run tests on windows-11-arm by @​saschanaz in #​2407
• pkey_ctx: add ability to generate EC params & keys by @​huwcbjones in #​2434
• pkey_ctx: add ability to generate DH params & keys by @​huwcbjones in #​2433
• pkey_ctx: add ability to generate RSA keys by @​huwcbjones in #​2431
• expose more verifier flags/errors for libressl by @​botovq in #​2441
• sys/evp: set/get params bindings by @​huwcbjones in #​2436
• Add support for argon2d and argon2i variants by @​greateggsgreg in #​2416
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​2443
• Update bindgen; Update MSRV to 1.70 by @​justsmth in #​2438
• macros: fully qualify imports by @​huwcbjones in #​2445
• Disable AES-CFB128 ciphers for BoringSSL by @​alebastr in #​2447
• Fix missing "__off_t" on NetBSD 10 by @​alebastr in #​2448
• ML-KEM/ML-DSA part 1: openssl-sys changes by @​swenson in #​2450
• sys: add symbols to construct an EVP_PKEY from a param builder by @​huwcbjones in #​2453
• ec-point: add set_affine_coordinates by @​huwcbjones in #​2455
• openssl-sys: add more functions to replace non-deprecated ones by @​huwcbjones in #​2457
• ML-KEM/ML-DSA part 2: param builder by @​swenson in #​2451
• ML-KEM/ML-DSA part 3: param array locate octet string by @​swenson in #​2458
• sys: add encoder & decoder symbols by @​huwcbjones in #​2454
• Add bindings for SSL_CIPHER_get_protocol_id by @​jedenastka in #​2462
• sys/evp: add EVP_PKEY_eq and EVP_PKEY_parameters_eq by @​huwcbjones in #​2463
• openssl-sys: make it work without deprecated symbols by @​huwcbjones in #​2452
• drop old libressl versions by @​botovq in #​2473
• Remove support for LibreSSL < 2.8 by @​botovq in #​2475
• Sort OpenSSL version checks in ascending order by @​alex in #​2476
• Update GitHub repository URLs from sfackler org to rust-openssl org by @​alex in #​2477
• Remove support for LibreSSL < 2.9 by @​botovq in #​2478
• remove branch for libressl 2.6.1 by @​alex in #​2479
• remove pointless libressl cfg check by @​alex in #​2480
• Expose SSL_get0_group_name by @​toddabrams in #​2482
• Remove support for LibreSSL < 3.0 by @​botovq in #​2481
• Remove support for LibreSSL < 3.2 by @​botovq in #​2483
• Remove and simplify a ton of cfgs that weren't required by @​alex in #​2484
• clippy fixes + don't build locking code on libressl by @​alex in #​2485
• remove unneeded cfg and expose X509::append_entry on boringssl/awslc by @​alex in #​2486
• Expose EcGroup::order_bits on Boring, Libre, and AWS-LC by @​alex in #​2487
• Remove support for LibreSSL < 3.3 by @​botovq in #​2488
• add mlkem headers to boringssl bindgen by @​reaperhulk in #​2492
• bump boringssl commit hash in CI by @​reaperhulk in #​2493
• raise boringssl version in CI by @​alex in #​2494
• Bump minimum OpenSSL version to 1.0.2 by @​alex in #​2491
• Enable xof_squeeze on AWS-LC by @​alex in #​2471
• avoid cancelling sequential jobs on master by @​alex in #​2495
• Remove support for LibreSSL < 3.4 by @​botovq in #​2490
• Simplify 'cfg(any(ossl102, ossl110))' by @​botovq in #​2497
• Add support for LibreSSL 4.2 (stable release) by @​botovq in #​2498
• Remove support for LibreSSL < 3.5 by @​botovq in #​2499
• Release openssl v0.10.74 and openssl-sys v0.9.110 by @​alex in #​2500

New Contributors

• @​daltenty made their first contribution in #​2401
• @​justsmth made their first contribution in #​2423
• @​huwcbjones made their first contribution in #​2432
• @​saschanaz made their first contribution in #​2407
• @​greateggsgreg made their first contribution in #​2416
• @​dependabot[bot] made their first contribution in #​2443
• @​alebastr made their first contribution in #​2447
• @​swenson made their first contribution in #​2450
• @​jedenastka made their first contribution in #​2462
• @​toddabrams made their first contribution in #​2482

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.73...openssl-v0.10.74

v0.10.73

Compare Source

What's Changed

• test against openssl 3.5.0 by @​alex in sfackler#2392
• Support Libressl 4.1 by @​botovq in sfackler#2398
• Release openssl-sys v0.9.108 by @​alex in sfackler#2399
• Replace ctest2 with ctest by @​botovq in sfackler#2403
• fixed building on the latest boringssl by @​alex in sfackler#2414
• Release openssl v0.10.73 and openssl-sys v0.9.109 by @​alex in sfackler#2415

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.72...openssl-v0.10.73

v0.10.72

Compare Source

What's Changed

• make set_rsa_oaep_md visible to boringssl config by @​frncs-rss in sfackler#2372
• Fix typo in openssl-sys build script by @​rushilmehra in sfackler#2375
• Unify the two BoringSSL codepaths a bit and simplify init by @​davidben in sfackler#2377
• pkey_ctx: Fix link to the corresponding OpenSSL function by @​Jakuje in sfackler#2378
• fix test on MSRV by @​alex in sfackler#2383
• Add support for AWS-LC to openssl and openssl-sys crates by @​skmcgrail in sfackler#1805
• Enable additional capabilities for AWS-LC by @​skmcgrail in sfackler#2386
• Use --experimental with bindgen-cli with aws-lc build by @​skmcgrail in sfackler#2389
• Fixed two UAFs and bumped versions for release by @​alex in sfackler#2390

New Contributors

• @​Jakuje made their first contribution in sfackler#2378
• @​skmcgrail made their first contribution in sfackler#1805

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.71...openssl-v0.10.72

v0.10.71

Compare Source

What's Changed

• Expose rc2 ciphers on symm::Cipher by @​alex in sfackler#2361
• add full Apache license file to openssl by @​frncs-rss in sfackler#2366
• Release openssl v0.10.71 and openssl-sys v0.9.106 by @​alex in sfackler#2369

New Contributors

• @​frncs-rss made their first contribution in sfackler#2366

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.70...openssl-v0.10.71

v0.10.70: openssl v0.10.70

Compare Source

What's Changed

• Attempt to fix CI by pinning to the Ubuntu 22.04 image by @​alex in sfackler#2357
• Remove EC_METHOD and EC_GROUP_new for LibreSSL 4.1 by @​botovq in sfackler#2356
• Test against 3.4.0 final release by @​alex in sfackler#2359
• Expose SslMethod::{dtls_client,dtls_server} by @​alex in sfackler#2358
• Fix lifetimes in ssl::select_next_proto by @​sfackler in sfackler#2360

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.69...openssl-v0.10.70

v0.10.69: openssl v0.10.69

Compare Source

What's Changed

• build(deps): Update openssl-macro to version 0.1.1 by @​caspermeijn in sfackler#2324
• Enable set_alpn_select_callback for BoringSSL by @​ViktoriiaKovalova in sfackler#2327
• Switch the test to use prime256v1 based key by @​dcermak in sfackler#2330
• Expose EVP_DigestSqueeze from Hasher by @​initsecret in sfackler#2275
• Expose SSL_CTX_load_verify_locations by @​sfackler in sfackler#2353

New Contributors

• @​caspermeijn made their first contribution in sfackler#2324
• @​ViktoriiaKovalova made their first contribution in sfackler#2327

Full Changelog: rust-openssl/rust-openssl@openssl-v0.10.68...openssl-v0.10.69

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.