openssl, branch openssl-3.4.0

Prepare for release of 3.4.0

2024-10-22T12:26:59Z

Reviewed-by: Richard Levitte Release: yes

make update

2024-10-22T12:26:58Z

Reviewed-by: Richard Levitte Release: yes

Copyright year updates

2024-10-22T12:25:18Z

Reviewed-by: Richard Levitte Release: yes

Remove a statement saying 3.4 is in development in NEWS.md

2024-10-22T09:53:23Z

3.4 is about to be released and is no longer in development. Reviewed-by: Richard Levitte Reviewed-by: Tomas Mraz Reviewed-by: Saša Nedvědický (Merged from https://github.com/openssl/openssl/pull/25752)

Add CHANGES.md and NEWS.md entries for CVE-2024-9143

2024-10-22T09:44:09Z

Reviewed-by: Tom Cosgrove Reviewed-by: Viktor Dukhovni Reviewed-by: Bernd Edlinger (Merged from https://github.com/openssl/openssl/pull/25734)

ecdh_cofactor_derive_test(): Skip the test if the curve is not supported

2024-10-21T13:58:05Z

It will not be supported if the fips provider was built with no-ec2m. Fixes #25729 Reviewed-by: Tim Hudson Reviewed-by: Paul Dale Reviewed-by: Richard Levitte Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/25731) (cherry picked from commit 1f0cb850473048eef5dc597d8cd42dd7c3cf5a5f)

run-checker-merge.yml: Combine no-ec2m with enable-fips

2024-10-21T13:58:05Z

This can reveal more errors than just no-ec2m. Reviewed-by: Tim Hudson Reviewed-by: Paul Dale Reviewed-by: Richard Levitte Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/25731) (cherry picked from commit dfc5ba8afa39bdb8be430858425d6726c03aa515)

Revert API change of OPENSSL_version()

2024-10-17T11:38:54Z

There was an API change done as part of PR #24450. This patch reverts it. Fixes #25690 Reviewed-by: Saša Nedvědický Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/25692) (cherry picked from commit f4c467452694e1211395d17c2c027d99c35ee1e1)

[DOC] Document the OPENSSL_WINCTX type for OpenSSL_version()

2024-10-17T11:34:30Z

Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/25693) (cherry picked from commit 0f8ff8fc25340205cdd5b724f3e414bdf931e8bb)

fix: let util/mkbuildinf.pl use SOURCE_DATE_EPOCH, even if it's zero

2024-10-17T10:50:58Z

Doing this allows reproducible builds, for those who want this. Fixes #25475 Reviewed-by: Tomas Mraz Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/25699) (cherry picked from commit 7b36037e2201ea6927458c1b5fc31502d0747b6f)