chore(deps): update rust crate openssl-sys to v0.9.117

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
openssl-sys	dependencies	patch	0.9.108 → 0.9.117

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

rust-openssl/rust-openssl (openssl-sys)

v0.9.117

Compare Source

What's Changed

• Bump aws-ls-sys to 0.41 by @​joshgodsiff in #​2640
• Add brainpoolP224r1 and brainpoolP224t1 NID constants by @​sfarestam-iproov in #​2642
• x509: add minimal support for CRL building by @​DavidFontaineOcd in #​2538
• add mldsa.h to the boringssl bindgen by @​reaperhulk in #​2650
• Deprecate Asn1StringRef::as_utf8 in favor of a NUL-safe to_string by @​alex in #​2652
• Fix verify_mode() panic on unmodeled verify mode bits by @​alex in #​2651
• Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​2653
• Release openssl 0.10.81 and openssl-sys 0.9.117 by @​reaperhulk in #​2655

New Contributors

• @​joshgodsiff made their first contribution in #​2640
• @​sfarestam-iproov made their first contribution in #​2642
• @​DavidFontaineOcd made their first contribution in #​2538

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.116...openssl-sys-v0.9.117

v0.9.116

Compare Source

What's Changed

• Prefer Homebrew openssl@​4 and stop looking for openssl@​1.1 by @​alex in #​2633
• Fix output buffer overflow in cipher_update_inplace for AES key-wrap-with-padding by @​alex in #​2638
• Release openssl 0.10.80 and openssl-sys 0.9.116 by @​alex in #​2639

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.115...openssl-sys-v0.9.116

v0.9.115

Compare Source

What's Changed

• Bump actions/cache from 5.0.4 to 5.0.5 by @​dependabot[bot] in #​2610
• Try to fix OpenSSL 1.1.0l download by @​botovq in #​2614
• Require &mut BigNumContextRef for EcPointRef mul/invert by @​alex in #​2615
• Fix UB in EcGroupRef::generator on groups without a generator by @​alex in #​2617
• Replace use libc::*; with targeted imports in openssl-sys by @​alex in #​2618
• Add PKeyRef::is_a and KeyType for name-based key identification by @​reaperhulk in #​2619
• Add PKey::{public,private}_key_from_raw_bytes_ex by @​reaperhulk in #​2620
• Bump MSRV to 1.80 by @​reaperhulk in #​2622
• Drop once_cell in favor of std::sync::{LazyLock, OnceLock} by @​reaperhulk in #​2623
• Add PKey::private_key_from_seed for ML-DSA/ML-KEM key import by @​reaperhulk in #​2621
• parallelize more builds in CI for cold caches by @​reaperhulk in #​2625
• Add PKeyRef::seed_into for ML-DSA/ML-KEM seed extraction by @​reaperhulk in #​2626
• Fix process abort when verify/PSK callbacks fire after SSL_CTX swap by @​alex in #​2624
• Bind OSSL_PARAM_modified and use it for seed_into by @​reaperhulk in #​2628
• Add PkeyCtxRef::set_context_string for ML-DSA by @​reaperhulk in #​2629
• Reject non-UTF-8 OCSP responder URLs in X509Ref::ocsp_responders by @​alex in #​2631
• Fix output buffer overflow for AES key-wrap-with-padding ciphers by @​alex in #​2630
• Release openssl 0.10.79 and openssl-sys 0.9.115 by @​reaperhulk in #​2632

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.114...openssl-sys-v0.9.115

v0.9.114

Compare Source

What's Changed

• Fix Suite B flag assignments in verify.rs by @​alex in #​2592
• Use cvt_p for OPENSSL_malloc error handling by @​alex in #​2593
• Mark BIO_get_mem_data on AWS-LC to be unsafe by @​alex in #​2594
• Set timeout for package installation step by @​alex in #​2595
• Panic in Crypter::new when IV is required but not provided by @​alex in #​2596
• openssl 4 support by @​reaperhulk in #​2591
• Avoid panic for overlong OIDs by @​botovq in #​2598
• Fix dangling stack pointer in custom extension add callback by @​alex in #​2599
• Add support for LibreSSL 4.3.x by @​botovq in #​2603
• fix inverted bounds assertion in AES key unwrap by @​reaperhulk in #​2604
• Reject oversized length returns from password callback trampoline by @​alex in #​2605
• Validate callback-returned lengths in PSK and cookie trampolines by @​alex in #​2607
• Error for short out in MdCtxRef::digest_final() by @​botovq in #​2608
• Check derive output buffer length on OpenSSL 1.1.x by @​alex in #​2606
• Release openssl v0.10.78 and openssl-sys v0.9.114 by @​alex in #​2609

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.113...openssl-sys-v0.9.114

v0.9.113

Compare Source

What's Changed

• CI: Hash-pin all action usage, avoid credential persistence in actions/checkout by @​woodruffw in #​2587
• Bump aws-lc-sys to 0.39 by @​goffrie in #​2588
• md_ctx: enable sign/verify/reset on BoringSSL, LibreSSL, and AWS-LC by @​alex in #​2589
• Release openssl v0.10.77 and openssl-sys v0.9.113 by @​alex in #​2590

New Contributors

• @​woodruffw made their first contribution in #​2587

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.112...openssl-sys-v0.9.113

v0.9.112

Compare Source

What's Changed

• feat: New methods EVP_PKEY_new_raw_*_key_ex and EVP_PKEY_is_a by @​FinnRG in #​2521
• Fix invalid value parsing of OCSP revocation reason by @​danpashin in #​2523
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​2524
• Bump aws-lc-sys from 0.27 to 0.34 by @​goffrie in #​2526
• Expose X509_NAME_dup on all versions of OpenSSL by @​alex in #​2529
• Unconditionally expose some *_dup() functions by @​botovq in #​2530
• reintroduce dir_name support for subject_alt_names by @​mqqz in #​2528
• Fix cipher comparison with NID instead of pointers by @​lwestlund in #​2531
• Remove ASN1_STRING_data for LibreSSL 4.3.0 by @​botovq in #​2534
• drop openssl 1.0.2 by @​alex in #​2545
• Bump actions/cache from 4 to 5 by @​dependabot[bot] in #​2542
• Add Debug implementation for EcdsaSig{,Ref} by @​buytenh in #​2540
• Add HKDF support by @​Zenkibou in #​2543
• Enhance Debug implementation for Nid by @​buytenh in #​2547
• Remove X509_VERIFY_PARAM_ID for LibreSSL 4.3.0 by @​botovq in #​2549
• Add UpperHex implementation for BigNum{,Ref} by @​buytenh in #​2550
• Add Debug implementation for EcGroup{,Ref} by @​buytenh in #​2548
• test against openssl 3.6.0 in ci by @​alex in #​2546
• Remove more OpenSSL 1.0.2 complications by @​botovq in #​2559
• Still more OpenSSL 1.0.2 complications by @​botovq in #​2560
• Remove more dead config branches by @​botovq in #​2561
• Let AWS-LC use the BoringSSL path for BIO_METHOD by @​botovq in #​2562
• Two small LibreSSL tweaks by @​botovq in #​2563
• Upgrade ctest to 0.5 by @​alex in #​2569
• add more brainpool curve NID constants by @​butteronarchbtw in #​2567
• fix min-version CI by @​alex in #​2573
• Fix use-after-free of error strings on BoringSSL/aws-lc by @​alex in #​2572
• Pin quote to 1.0.44 for min-version CI by @​alex in #​2579
• Constify from_raw by @​DarkaMaul in #​2580
• Support pregenerated Rust bindings from AWS-LC installations by @​justsmth in #​2578
• Bump aws-lc-sys to 0.38 by @​goffrie in #​2581
• Release openssl v0.10.76 and openssl-sys v0.9.112 by @​weihanglo in #​2582

New Contributors

• @​FinnRG made their first contribution in #​2521
• @​danpashin made their first contribution in #​2523
• @​mqqz made their first contribution in #​2528
• @​lwestlund made their first contribution in #​2531
• @​buytenh made their first contribution in #​2540
• @​Zenkibou made their first contribution in #​2543
• @​butteronarchbtw made their first contribution in #​2567
• @​DarkaMaul made their first contribution in #​2580
• @​weihanglo made their first contribution in #​2582

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.111...openssl-sys-v0.9.112

v0.9.111

Compare Source

What's Changed

• Fix a few typos (most of them found with codespell) by @​botovq in #​2502
• Use SHA256 test variant instead of SHA1 by @​abbra in #​2504
• pin home to an older version on MSRV CI by @​alex in #​2509
• Implement set_rsa_oaep_label for AWS-LC/BoringSSL by @​goffrie in #​2508
• sys/evp: add EVP_MAC symbols by @​huwcbjones in #​2510
• CI: bump LibreSSL 4.x branches to latest releases by @​botovq in #​2513
• Fix unsound OCSP find_status handling of optional next_update field by @​alex in #​2517
• Release openssl v0.10.75 and openssl-sys v0.9.111 by @​alex in #​2518

New Contributors

• @​abbra made their first contribution in #​2504
• @​goffrie made their first contribution in #​2508

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.110...openssl-sys-v0.9.111

v0.9.110

Compare Source

What's Changed

• [AIX] use /usr to find_openssl_dir by @​daltenty in #​2401
• Improve support for OPENSSL_NO_COMP and OPENSSL_NO_SRTP by @​justsmth in #​2423
• Add aws-lc-fips feature to allow linking the aws-lc-fips-sys crate by @​skmcgrail in #​2424
• variety of fixes for warnings in new rust by @​alex in #​2427
• Some API adjustments for LibreSSL 4.2.0 by @​botovq in #​2426
• Update OpenSSL documentation URLs to new docs.openssl.org domain by @​alex in #​2430
• pkey_ctx: add ability to generate DSA params & keys by @​huwcbjones in #​2432
• Run tests on windows-11-arm by @​saschanaz in #​2407
• pkey_ctx: add ability to generate EC params & keys by @​huwcbjones in #​2434
• pkey_ctx: add ability to generate DH params & keys by @​huwcbjones in #​2433
• pkey_ctx: add ability to generate RSA keys by @​huwcbjones in #​2431
• expose more verifier flags/errors for libressl by @​botovq in #​2441
• sys/evp: set/get params bindings by @​huwcbjones in #​2436
• Add support for argon2d and argon2i variants by @​greateggsgreg in #​2416
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​2443
• Update bindgen; Update MSRV to 1.70 by @​justsmth in #​2438
• macros: fully qualify imports by @​huwcbjones in #​2445
• Disable AES-CFB128 ciphers for BoringSSL by @​alebastr in #​2447
• Fix missing "__off_t" on NetBSD 10 by @​alebastr in #​2448
• ML-KEM/ML-DSA part 1: openssl-sys changes by @​swenson in #​2450
• sys: add symbols to construct an EVP_PKEY from a param builder by @​huwcbjones in #​2453
• ec-point: add set_affine_coordinates by @​huwcbjones in #​2455
• openssl-sys: add more functions to replace non-deprecated ones by @​huwcbjones in #​2457
• ML-KEM/ML-DSA part 2: param builder by @​swenson in #​2451
• ML-KEM/ML-DSA part 3: param array locate octet string by @​swenson in #​2458
• sys: add encoder & decoder symbols by @​huwcbjones in #​2454
• Add bindings for SSL_CIPHER_get_protocol_id by @​jedenastka in #​2462
• sys/evp: add EVP_PKEY_eq and EVP_PKEY_parameters_eq by @​huwcbjones in #​2463
• openssl-sys: make it work without deprecated symbols by @​huwcbjones in #​2452
• drop old libressl versions by @​botovq in #​2473
• Remove support for LibreSSL < 2.8 by @​botovq in #​2475
• Sort OpenSSL version checks in ascending order by @​alex in #​2476
• Update GitHub repository URLs from sfackler org to rust-openssl org by @​alex in #​2477
• Remove support for LibreSSL < 2.9 by @​botovq in #​2478
• remove branch for libressl 2.6.1 by @​alex in #​2479
• remove pointless libressl cfg check by @​alex in #​2480
• Expose SSL_get0_group_name by @​toddabrams in #​2482
• Remove support for LibreSSL < 3.0 by @​botovq in #​2481
• Remove support for LibreSSL < 3.2 by @​botovq in #​2483
• Remove and simplify a ton of cfgs that weren't required by @​alex in #​2484
• clippy fixes + don't build locking code on libressl by @​alex in #​2485
• remove unneeded cfg and expose X509::append_entry on boringssl/awslc by @​alex in #​2486
• Expose EcGroup::order_bits on Boring, Libre, and AWS-LC by @​alex in #​2487
• Remove support for LibreSSL < 3.3 by @​botovq in #​2488
• add mlkem headers to boringssl bindgen by @​reaperhulk in #​2492
• bump boringssl commit hash in CI by @​reaperhulk in #​2493
• raise boringssl version in CI by @​alex in #​2494
• Bump minimum OpenSSL version to 1.0.2 by @​alex in #​2491
• Enable xof_squeeze on AWS-LC by @​alex in #​2471
• avoid cancelling sequential jobs on master by @​alex in #​2495
• Remove support for LibreSSL < 3.4 by @​botovq in #​2490
• Simplify 'cfg(any(ossl102, ossl110))' by @​botovq in #​2497
• Add support for LibreSSL 4.2 (stable release) by @​botovq in #​2498
• Remove support for LibreSSL < 3.5 by @​botovq in #​2499
• Release openssl v0.10.74 and openssl-sys v0.9.110 by @​alex in #​2500

New Contributors

• @​daltenty made their first contribution in #​2401
• @​justsmth made their first contribution in #​2423
• @​huwcbjones made their first contribution in #​2432
• @​saschanaz made their first contribution in #​2407
• @​greateggsgreg made their first contribution in #​2416
• @​dependabot[bot] made their first contribution in #​2443
• @​alebastr made their first contribution in #​2447
• @​swenson made their first contribution in #​2450
• @​jedenastka made their first contribution in #​2462
• @​toddabrams made their first contribution in #​2482

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.109...openssl-sys-v0.9.110

v0.9.109

Compare Source

What's Changed

• Replace ctest2 with ctest by @​botovq in sfackler#2403
• fixed building on the latest boringssl by @​alex in sfackler#2414
• Release openssl v0.10.73 and openssl-sys v0.9.109 by @​alex in sfackler#2415

Full Changelog: rust-openssl/rust-openssl@openssl-sys-v0.9.108...openssl-sys-v0.9.109

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}