uringmachine 0.16 → 0.18

data/vendor/libressl/man/update_links.sh

@@ -0,0 +1,25 @@
+#!/bin/sh
+
+# Run this periodically to ensure that the manpage links are up to date
+(
+    cd /usr/src/usr.bin/mandoc/
+    make obj
+    make cleandir
+    make depend
+    make
+    cd /usr/src/regress/usr.bin/mandoc/db/mlinks/
+    make obj
+    make cleandir
+    make
+)
+
+makewhatis -a .
+
+# We have to filter out some links that fail on case-insensitive filesystems
+# Running makewhatis with the right arguments should work on mandoc systems.
+echo "# This is an auto-generated file by $0" > links
+/usr/src/regress/usr.bin/mandoc/db/mlinks/obj/mlinks mandoc.db | \
+    grep -v OCSP_crlID_new | \
+    grep -v bn_print | \
+    grep -v "<type>" | \
+    sort >> links

data/vendor/libressl/openssl.pc.in

@@ -0,0 +1,11 @@
+#openssl pkg-config source file
+
+prefix=@prefix@
+exec_prefix=@exec_prefix@
+libdir=@libdir@
+includedir=@includedir@
+
+Name: LibreSSL
+Description: Secure Sockets Layer and cryptography libraries and tools
+Version: @VERSION@
+Requires: libssl libcrypto

data/vendor/libressl/patches/bn_shift.patch

@@ -0,0 +1,34 @@
+--- tests/bn_shift.c.orig	2023-02-13 20:06:27.295678033 -0600
++++ tests/bn_shift.c	2023-02-13 20:08:08.335677654 -0600
+@@ -355,6 +355,8 @@
+ 	return failed;
+ }
+ 
++#if 0
++
+ static void
+ benchmark_bn_lshift1(BIGNUM *bn)
+ {
+@@ -620,9 +622,12 @@
+ 	BN_free(bn);
+ }
+ 
++#endif
++
+ static void
+ benchmark_bn_shift(void)
+ {
++#if 0
+ 	const struct benchmark *bm;
+ 	size_t i;
+ 
+@@ -630,6 +635,9 @@
+ 		bm = &benchmarks[i];
+ 		benchmark_run(bm, 5);
+ 	}
++#else
++	return;
++#endif
+ }
+ 
+ int

data/vendor/libressl/patches/crypto_arch.h.patch

@@ -0,0 +1,34 @@
+--- crypto/arch/amd64/crypto_arch.h.orig	Fri Feb 14 06:00:43 2025
++++ crypto/arch/amd64/crypto_arch.h	Fri Feb 14 06:01:13 2025
+@@ -40,6 +40,7 @@ extern uint64_t crypto_cpu_caps_amd64;
+ #define HAVE_RC4_INTERNAL
+ #define HAVE_RC4_SET_KEY_INTERNAL
+ 
++#if 0
+ #define HAVE_SHA1_BLOCK_DATA_ORDER
+ #define HAVE_SHA1_BLOCK_GENERIC
+ 
+@@ -48,6 +49,7 @@ extern uint64_t crypto_cpu_caps_amd64;
+ 
+ #define HAVE_SHA512_BLOCK_DATA_ORDER
+ #define HAVE_SHA512_BLOCK_GENERIC
++#endif
+ 
+ #endif
+ 
+--- crypto/arch/aarch64/crypto_arch.h.orig	Thu Mar 13 05:42:37 2025
++++ crypto/arch/aarch64/crypto_arch.h	Thu Mar 13 05:47:39 2025
+@@ -33,11 +33,13 @@
+ #define CRYPTO_CPU_CAPS_AARCH64_SHA512	(1ULL << 4)
+ #define CRYPTO_CPU_CAPS_AARCH64_SHA3	(1ULL << 5)
+ 
++#if 0
+ #ifndef OPENSSL_NO_ASM
+ 
+ #define HAVE_SHA256_BLOCK_DATA_ORDER
+ #define HAVE_SHA512_BLOCK_DATA_ORDER
+ 
++#endif
+ #endif
+ 
+ #endif

data/vendor/libressl/patches/crypto_namespace.h.patch

@@ -0,0 +1,22 @@
+--- crypto/hidden/crypto_namespace.h.orig	Fri Aug  2 23:52:55 2024
++++ crypto/hidden/crypto_namespace.h	Fri Aug  2 23:53:17 2024
+@@ -24,6 +24,12 @@
+  * external calls use the latter name.
+  */
+ 
++#ifdef _MSC_VER
++# define LCRYPTO_UNUSED(x)
++# define LCRYPTO_USED(x)
++# define LCRYPTO_ALIAS1(pre, x)
++# define LCRYPTO_ALIAS(x)
++#else
+ #ifdef LIBRESSL_NAMESPACE
+ #ifdef LIBRESSL_CRYPTO_NAMESPACE
+ #  define LCRYPTO_UNUSED(x)	__attribute__((deprecated))		\
+@@ -47,5 +53,6 @@
+ # define LCRYPTO_ALIAS1(pre,x)
+ # define LCRYPTO_ALIAS(x)	asm("")
+ #endif
++#endif /* _MSC_VER */
+ 
+ #endif	/* _LIBCRYPTO_CRYPTO_NAMESPACE_H_ */

data/vendor/libressl/patches/netcat.c.patch

@@ -0,0 +1,178 @@
+--- apps/nc/netcat.c.orig	Sat May 31 03:18:05 2025
++++ apps/nc/netcat.c	Sat May 31 03:18:17 2025
+@@ -93,9 +93,13 @@ int	zflag;					/* Port Scan Flag */
+ int	Dflag;					/* sodebug */
+ int	Iflag;					/* TCP receive buffer size */
+ int	Oflag;					/* TCP send buffer size */
++#ifdef TCP_MD5SIG
+ int	Sflag;					/* TCP MD5 signature option */
++#endif
+ int	Tflag = -1;				/* IP Type of Service */
++#ifdef SO_RTABLE
+ int	rtableid = -1;
++#endif
+ 
+ int	usetls;					/* use TLS */
+ const char    *Cflag;				/* Public cert file */
+@@ -270,12 +274,14 @@ main(int argc, char *argv[])
+ 		case 'u':
+ 			uflag = 1;
+ 			break;
++#ifdef SO_RTABLE
+ 		case 'V':
+ 			rtableid = (int)strtonum(optarg, 0,
+ 			    RT_TABLEID_MAX, &errstr);
+ 			if (errstr)
+ 				errx(1, "rtable %s: %s", errstr, optarg);
+ 			break;
++#endif
+ 		case 'v':
+ 			vflag = 1;
+ 			break;
+@@ -322,9 +328,11 @@ main(int argc, char *argv[])
+ 		case 'o':
+ 			oflag = optarg;
+ 			break;
++#ifdef TCP_MD5SIG
+ 		case 'S':
+ 			Sflag = 1;
+ 			break;
++#endif
+ 		case 'T':
+ 			errstr = NULL;
+ 			errno = 0;
+@@ -348,9 +356,11 @@ main(int argc, char *argv[])
+ 	argc -= optind;
+ 	argv += optind;
+ 
++#ifdef SO_RTABLE
+ 	if (rtableid >= 0)
+ 		if (setrtable(rtableid) == -1)
+ 			err(1, "setrtable");
++#endif
+ 
+ 	/* Cruft to make sure options are clean, and used properly. */
+ 	if (argc == 1 && family == AF_UNIX) {
+@@ -925,7 +935,10 @@ remote_connect(const char *host, const char *port, str
+     char *ipaddr)
+ {
+ 	struct addrinfo *res, *res0;
+-	int s = -1, error, herr, on = 1, save_errno;
++	int s = -1, error, herr, save_errno;
++#ifdef SO_BINDANY
++	int on = 1;
++#endif
+ 
+ 	if ((error = getaddrinfo(host, port, &hints, &res0)))
+ 		errx(1, "getaddrinfo for host \"%s\" port %s: %s", host,
+@@ -940,8 +953,10 @@ remote_connect(const char *host, const char *port, str
+ 		if (sflag || pflag) {
+ 			struct addrinfo ahints, *ares;
+ 
++#ifdef SO_BINDANY
+ 			/* try SO_BINDANY, but don't insist */
+ 			setsockopt(s, SOL_SOCKET, SO_BINDANY, &on, sizeof(on));
++#endif
+ 			memset(&ahints, 0, sizeof(struct addrinfo));
+ 			ahints.ai_family = res->ai_family;
+ 			ahints.ai_socktype = uflag ? SOCK_DGRAM : SOCK_STREAM;
+@@ -1033,7 +1048,10 @@ int
+ local_listen(const char *host, const char *port, struct addrinfo hints)
+ {
+ 	struct addrinfo *res, *res0;
+-	int s = -1, ret, x = 1, save_errno;
++	int s = -1, save_errno;
++#ifdef SO_REUSEPORT
++	int ret, x = 1;
++#endif
+ 	int error;
+ 
+ 	/* Allow nodename to be null. */
+@@ -1054,9 +1072,11 @@ local_listen(const char *host, const char *port, struc
+ 		    res->ai_protocol)) == -1)
+ 			continue;
+ 
++#ifdef SO_REUSEPORT
+ 		ret = setsockopt(s, SOL_SOCKET, SO_REUSEPORT, &x, sizeof(x));
+ 		if (ret == -1)
+ 			err(1, NULL);
++#endif
+ 
+ 		set_common_sockopts(s, res->ai_family);
+ 
+@@ -1561,11 +1581,13 @@ set_common_sockopts(int s, int af)
+ {
+ 	int x = 1;
+ 
++#ifdef TCP_MD5SIG
+ 	if (Sflag) {
+ 		if (setsockopt(s, IPPROTO_TCP, TCP_MD5SIG,
+ 		    &x, sizeof(x)) == -1)
+ 			err(1, NULL);
+ 	}
++#endif
+ 	if (Dflag) {
+ 		if (setsockopt(s, SOL_SOCKET, SO_DEBUG,
+ 		    &x, sizeof(x)) == -1)
+@@ -1576,9 +1598,16 @@ set_common_sockopts(int s, int af)
+ 		    IP_TOS, &Tflag, sizeof(Tflag)) == -1)
+ 			err(1, "set IP ToS");
+ 
++#ifdef IPV6_TCLASS
+ 		else if (af == AF_INET6 && setsockopt(s, IPPROTO_IPV6,
+ 		    IPV6_TCLASS, &Tflag, sizeof(Tflag)) == -1)
+ 			err(1, "set IPv6 traffic class");
++#else
++		else if (af == AF_INET6) {
++			errno = ENOPROTOOPT;
++			err(1, "set IPv6 traffic class not supported");
++		}
++#endif
+ 	}
+ 	if (Iflag) {
+ 		if (setsockopt(s, SOL_SOCKET, SO_RCVBUF,
+@@ -1602,13 +1631,17 @@ set_common_sockopts(int s, int af)
+ 	}
+ 
+ 	if (minttl != -1) {
++#ifdef IP_MINTTL
+ 		if (af == AF_INET && setsockopt(s, IPPROTO_IP,
+ 		    IP_MINTTL, &minttl, sizeof(minttl)))
+ 			err(1, "set IP min TTL");
++#endif
+ 
+-		else if (af == AF_INET6 && setsockopt(s, IPPROTO_IPV6,
++#ifdef IPV6_MINHOPCOUNT
++		if (af == AF_INET6 && setsockopt(s, IPPROTO_IPV6,
+ 		    IPV6_MINHOPCOUNT, &minttl, sizeof(minttl)))
+ 			err(1, "set IPv6 min hop count");
++#endif
+ 	}
+ }
+ 
+@@ -1835,15 +1868,19 @@ help(void)
+ 	\t-P proxyuser\tUsername for proxy authentication\n\
+ 	\t-p port\t	Specify local port for remote connects\n\
+ 	\t-R CAfile	CA bundle\n\
+-	\t-r		Randomize remote ports\n\
+-	\t-S		Enable the TCP MD5 signature option\n\
+-	\t-s sourceaddr	Local source address\n\
++	\t-r		Randomize remote ports\n"
++#ifdef TCP_MD5SIG
++	"\t-S		Enable the TCP MD5 signature option\n"
++#endif
++	"\t-s sourceaddr	Local source address\n\
+ 	\t-T keyword	TOS value or TLS options\n\
+ 	\t-t		Answer TELNET negotiation\n\
+ 	\t-U		Use UNIX domain socket\n\
+-	\t-u		UDP mode\n\
+-	\t-V rtable	Specify alternate routing table\n\
+-	\t-v		Verbose\n\
++	\t-u		UDP mode\n"
++#ifdef SO_RTABLE
++	"\t-V rtable	Specify alternate routing table\n"
++#endif
++	"\t-v		Verbose\n\
+ 	\t-W recvlimit	Terminate after receiving a number of packets\n\
+ 	\t-w timeout	Timeout for connects and final net reads\n\
+ 	\t-X proto	Proxy protocol: \"4\", \"4A\", \"5\" (SOCKS) or \"connect\"\n\

data/vendor/libressl/patches/openssl.c.patch

@@ -0,0 +1,12 @@
+--- apps/openssl/openssl.c.orig	Sat May 31 03:18:05 2025
++++ apps/openssl/openssl.c	Sat May 31 03:18:17 2025
+@@ -341,7 +341,9 @@ BIO *bio_err = NULL;
+ static void
+ openssl_startup(void)
+ {
++#ifndef _WIN32
+ 	signal(SIGPIPE, SIG_IGN);
++#endif
+ 
+ 	OpenSSL_add_all_algorithms();
+ 	SSL_library_init();

data/vendor/libressl/patches/opensslfeatures.h.patch

@@ -0,0 +1,49 @@
+--- include/openssl/opensslfeatures.h.orig	Fri Jul 28 06:04:42 2023
++++ include/openssl/opensslfeatures.h	Fri Jul 28 06:09:00 2023
+@@ -8,6 +8,13 @@
+ #define LIBRESSL_HAS_TLS1_3
+ #define LIBRESSL_HAS_DTLS1_2
+ 
++/*
++ * Used for compatibility with compilers lacking __attribute__
++ */
++#if defined(_MSC_VER) && !defined(__clang__) && !defined(__attribute__)
++#define __attribute__(a)
++#endif
++
+ #define OPENSSL_THREADS
+ 
+ #define OPENSSL_NO_BUF_FREELISTS
+--- crypto/crypto_internal.h.orig	Sat Dec 14 14:15:39 2024
++++ crypto/crypto_internal.h	Sat Dec 14 14:15:52 2024
+@@ -15,6 +15,8 @@
+  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+  */
+ 
++#include <openssl/opensslfeatures.h>
++
+ #include <endian.h>
+ #include <stddef.h>
+ #include <stdint.h>
+--- tests/parse_test_file.h.orig	Thu Dec 26 01:13:00 2024
++++ tests/parse_test_file.h	Thu Dec 26 01:13:27 2024
+@@ -22,6 +22,8 @@
+ #include <stdint.h>
+ #include <stdio.h>
+ 
++#include <openssl/opensslfeatures.h>
++
+ #include "bytestring.h"
+ 
+ #if defined(__cplusplus)
+--- tests/test.h.orig	Sat May 31 04:48:09 2025
++++ tests/test.h	Sat May 31 04:48:31 2025
+@@ -18,6 +18,8 @@
+ #ifndef HEADER_TEST_H
+ #define HEADER_TEST_H
+ 
++#include <openssl/opensslfeatures.h>
++
+ #include <stddef.h>
+ #include <stdint.h>
+ 

data/vendor/libressl/patches/patch-amd64-crypto-cpu-caps.c.patch

@@ -0,0 +1,20 @@
+--- crypto/arch/amd64/crypto_cpu_caps.c.orig	Sat Dec 14 13:45:16 2024
++++ crypto/arch/amd64/crypto_cpu_caps.c	Sat Dec 14 13:54:06 2024
+@@ -37,7 +37,7 @@ cpuid(uint32_t eax, uint32_t *out_eax, uint32_t *out_e
+ {
+ 	uint32_t ebx = 0, ecx = 0, edx = 0;
+ 
+-#ifndef OPENSSL_NO_ASM
++#if defined(__GNUC__) && !defined(OPENSSL_NO_ASM)
+ 	__asm__ ("cpuid": "+a"(eax), "+b"(ebx), "+c"(ecx), "+d"(edx));
+ #else
+ 	eax = 0;
+@@ -58,7 +58,7 @@ xgetbv(uint32_t ecx, uint32_t *out_eax, uint32_t *out_
+ {
+ 	uint32_t eax = 0, edx = 0;
+ 
+-#ifndef OPENSSL_NO_ASM
++#if defined(__GNUC__) && !defined(OPENSSL_NO_ASM)
+ 	__asm__ ("xgetbv": "+a"(eax), "+c"(ecx), "+d"(edx));
+ #endif
+ 

data/vendor/libressl/patches/patch-i386-crypto-cpu-caps.c.patch

@@ -0,0 +1,20 @@
+--- crypto/arch/i386/crypto_cpu_caps.c.orig	Fri Oct 18 17:35:20 2024
++++ crypto/arch/i386/crypto_cpu_caps.c	Fri Oct 18 17:39:13 2024
+@@ -33,7 +33,7 @@ cpuid(uint32_t eax, uint32_t *out_eax, uint32_t *out_e
+ {
+ 	uint32_t ebx = 0, ecx = 0, edx = 0;
+ 
+-#ifndef OPENSSL_NO_ASM
++#if defined(__GNUC__) && !defined(OPENSSL_NO_ASM)
+ 	__asm__ ("cpuid": "+a"(eax), "+b"(ebx), "+c"(ecx), "+d"(edx));
+ #else
+ 	eax = 0;
+@@ -54,7 +54,7 @@ xgetbv(uint32_t ecx, uint32_t *out_eax, uint32_t *out_
+ {
+ 	uint32_t eax = 0, edx = 0;
+ 
+-#ifndef OPENSSL_NO_ASM
++#if defined(__GNUC__) && !defined(OPENSSL_NO_ASM)
+ 	__asm__ ("xgetbv": "+a"(eax), "+c"(ecx), "+d"(edx));
+ #endif
+ 

data/vendor/libressl/patches/speed.c.patch

@@ -0,0 +1,114 @@
+--- apps/openssl/speed.c.orig	Sat May 31 03:18:05 2025
++++ apps/openssl/speed.c	Sat May 31 03:18:17 2025
+@@ -154,7 +154,16 @@ static void
+ pkey_print_message(const char *str, const char *str2,
+     long num, int bits, int sec);
+ static void print_result(int alg, int run_no, int count, double time_used);
++#ifndef _WIN32
+ static int do_multi(int multi);
++#else
++void speed_signal(int sigcatch, void (*func)(int sigraised));
++unsigned int speed_alarm(unsigned int seconds);
++void speed_alarm_free(int run);
++#define SIGALRM		14
++#define signal(sigcatch, func)	speed_signal((sigcatch), (func))
++#define alarm(seconds)		speed_alarm((seconds))
++#endif
+ 
+ #define ALGOR_NUM	31
+ #define SIZE_NUM	5
+@@ -1087,8 +1096,10 @@ speed_main(int argc, char **argv)
+ 	const EVP_CIPHER *evp_cipher = NULL;
+ 	const EVP_MD *evp_md = NULL;
+ 	int decrypt = 0;
++#ifndef _WIN32
+ 	int multi = 0;
+ 	struct sigaction sa;
++#endif
+ 	const char *errstr = NULL;
+ 
+ 	if (pledge("stdio proc", NULL) == -1) {
+@@ -1163,6 +1174,7 @@ speed_main(int argc, char **argv)
+ 			decrypt = 1;
+ 			j--;	/* Otherwise, -decrypt gets confused with an
+ 				 * algorithm. */
++#ifndef _WIN32
+ 		} else if (argc > 0 && strcmp(*argv, "-multi") == 0) {
+ 			argc--;
+ 			argv++;
+@@ -1177,6 +1189,7 @@ speed_main(int argc, char **argv)
+ 			}
+ 			j--;	/* Otherwise, -multi gets confused with an
+ 				 * algorithm. */
++#endif
+ 		} else if (argc > 0 && strcmp(*argv, "-unaligned") == 0) {
+ 			argc--;
+ 			argv++;
+@@ -1491,7 +1504,9 @@ speed_main(int argc, char **argv)
+ 			BIO_printf(bio_err, "-evp e          use EVP e.\n");
+ 			BIO_printf(bio_err, "-decrypt        time decryption instead of encryption (only EVP).\n");
+ 			BIO_printf(bio_err, "-mr             produce machine readable output.\n");
++#ifndef _WIN32
+ 			BIO_printf(bio_err, "-multi n        run n benchmarks in parallel.\n");
++#endif
+ 			BIO_printf(bio_err, "-unaligned n    use buffers with offset n from proper alignment.\n");
+ 			goto end;
+ 		}
+@@ -1500,8 +1515,10 @@ speed_main(int argc, char **argv)
+ 		j++;
+ 	}
+ 
++#ifndef _WIN32
+ 	if (multi && do_multi(multi))
+ 		goto show_res;
++#endif
+ 
+ 	if (j == 0) {
+ 		for (i = 0; i < ALGOR_NUM; i++) {
+@@ -1573,11 +1590,13 @@ speed_main(int argc, char **argv)
+ #define COND(c)	(run && count<0x7fffffff)
+ #define COUNT(d) (count)
+ 
++#ifndef _WIN32
+ 	memset(&sa, 0, sizeof(sa));
+ 	sigemptyset(&sa.sa_mask);
+ 	sa.sa_flags = SA_RESTART;
+ 	sa.sa_handler = sig_done;
+ 	sigaction(SIGALRM, &sa, NULL);
++#endif
+ 
+ #ifndef OPENSSL_NO_MD4
+ 	if (doit[D_MD4]) {
+@@ -2370,7 +2389,9 @@ speed_main(int argc, char **argv)
+ 				ecdh_doit[j] = 0;
+ 		}
+ 	}
++#ifndef _WIN32
+ show_res:
++#endif
+ 	if (!mr) {
+ 		fprintf(stdout, "%s\n", SSLeay_version(SSLEAY_VERSION));
+ 		fprintf(stdout, "%s\n", SSLeay_version(SSLEAY_BUILT_ON));
+@@ -2526,11 +2547,15 @@ pkey_print_message(const char *str, const char *str2, 
+ static void
+ print_result(int alg, int run_no, int count, double time_used)
+ {
++#ifdef _WIN32
++	speed_alarm_free(run);
++#endif
+ 	BIO_printf(bio_err, mr ? "+R:%d:%s:%f\n"
+ 	    : "%d %s in %.2fs\n", count, names[alg], time_used);
+ 	results[alg][run_no] = ((double) count) / time_used * lengths[run_no];
+ }
+ 
++#ifndef _WIN32
+ static char *
+ sstrsep(char **string, const char *delim)
+ {
+@@ -2731,5 +2756,6 @@ do_multi(int multi)
+ 	free(fds);
+ 	return 1;
+ }
++#endif
+ 
+ #endif /* OPENSSL_NO_SPEED */

data/vendor/libressl/patches/ssl_namespace.h.patch

@@ -0,0 +1,21 @@
+--- ssl/hidden/ssl_namespace.h.orig	Fri Aug  2 23:52:55 2024
++++ ssl/hidden/ssl_namespace.h	Fri Aug  2 23:53:17 2024
+@@ -23,6 +23,11 @@
+  * and we alias that to the normal name.
+  */
+ 
++#ifdef _MSC_VER
++#define LSSL_UNUSED(x)
++#define LSSL_USED(x)
++#define LSSL_ALIAS(x)
++#else
+ #ifdef LIBRESSL_NAMESPACE
+ #define LSSL_UNUSED(x)		typeof(x) x __attribute__((deprecated))
+ #define LSSL_USED(x)		__attribute__((visibility("hidden")))	\
+@@ -37,5 +42,6 @@
+ #define LSSL_USED(x)
+ #define LSSL_ALIAS(x)		asm("")
+ #endif
++#endif /* _MSC_VER */
+ 
+ #endif	/* _LIBSSL_SSL_NAMESPACE_H_ */

data/vendor/libressl/patches/tls.h.patch

@@ -0,0 +1,16 @@
+--- include/tls.h.orig	2017-02-13 20:19:55.918636579 +0900
++++ include/tls.h	2017-02-13 20:21:18.313073161 +0900
+@@ -22,6 +22,13 @@
+ extern "C" {
+ #endif
+
++#ifdef _MSC_VER
++#ifndef LIBRESSL_INTERNAL
++#include <basetsd.h>
++typedef SSIZE_T ssize_t;
++#endif
++#endif
++
+ #include <sys/types.h>
+
+ #include <stddef.h>

data/vendor/libressl/patches/tls_config.c.patch

@@ -0,0 +1,15 @@
+uid_t can be 64-bit
+
+--- tls/tls_config.c.orig	2024-11-02 21:19:47.090322191 +0100
++++ tls/tls_config.c	2024-11-02 21:38:22.527071689 +0100
+@@ -742,8 +742,8 @@
+ 
+ 	if (sb.st_uid != getuid()) {
+ 		tls_config_set_errorx(config, TLS_ERROR_UNKNOWN,
+-		    "session file has incorrect owner (uid %u != %u)",
+-		    sb.st_uid, getuid());
++		    "session file has incorrect owner (uid %llu != %llu)",
++		    (unsigned long long)sb.st_uid, (unsigned long long)getuid());
+ 		return (-1);
+ 	}
+ 	mugo = sb.st_mode & (S_IRWXU|S_IRWXG|S_IRWXO);

data/vendor/libressl/patches/win32_amd64_bn_arch.h.patch

@@ -0,0 +1,28 @@
+We should consider a OPENSSL_NO_BN_ASM if we can't figure
+out how to fix BIGNUM on this OS
+
+--- crypto/bn/arch/amd64/bn_arch.h.orig	Wed Mar 27 22:17:03 2024
++++ crypto/bn/arch/amd64/bn_arch.h	Wed Mar 27 22:17:31 2024
+@@ -20,8 +20,14 @@
+ #ifndef HEADER_BN_ARCH_H
+ #define HEADER_BN_ARCH_H
+ 
++#ifdef _WIN32
+ #ifndef OPENSSL_NO_ASM
++#define OPENSSL_NO_ASM
++#endif
++#else
+ 
++#ifndef OPENSSL_NO_ASM
++
+ #define HAVE_BN_ADD
+ #define HAVE_BN_ADD_WORDS
+ 
+@@ -104,6 +110,7 @@ bn_subw(BN_ULONG a, BN_ULONG b, BN_ULONG *out_borrow, 
+ }
+ 
+ #endif /* __GNUC__ */
++#endif /* _WIN32 */
+ 
+ #endif
+ #endif

data/vendor/libressl/patches/windows_headers.patch

@@ -0,0 +1,80 @@
+--- include/openssl/dtls1.h.orig	Wed Nov  1 13:15:36 2023
++++ include/openssl/dtls1.h	Wed Nov  1 13:15:54 2023
+@@ -60,7 +60,11 @@
+ #ifndef HEADER_DTLS1_H
+ #define HEADER_DTLS1_H
+ 
++#if defined(_WIN32)
++#include <winsock2.h>
++#else
+ #include <sys/time.h>
++#endif
+ 
+ #include <stdio.h>
+ #include <stdlib.h>
+--- include/openssl/ossl_typ.h.orig	Wed Nov  1 13:15:36 2023
++++ include/openssl/ossl_typ.h	Wed Nov  1 13:18:23 2023
+@@ -82,6 +82,21 @@ typedef struct asn1_object_st ASN1_OBJECT;
+ typedef struct ASN1_ITEM_st ASN1_ITEM;
+ typedef struct asn1_pctx_st ASN1_PCTX;
+ 
++#if defined(_WIN32) && defined(__WINCRYPT_H__)
++#if !defined(LIBRESSL_INTERNAL) && !defined(LIBRESSL_DISABLE_OVERRIDE_WINCRYPT_DEFINES_WARNING)
++#ifdef _MSC_VER
++#pragma message("Warning, overriding WinCrypt defines")
++#else
++#warning overriding WinCrypt defines
++#endif
++#endif
++#undef X509_NAME
++#undef X509_EXTENSIONS
++#undef OCSP_REQUEST
++#undef OCSP_RESPONSE
++#undef PKCS7_ISSUER_AND_SERIAL
++#endif
++
+ #ifdef BIGNUM
+ #undef BIGNUM
+ #endif
+--- include/openssl/pkcs7.h.orig	Wed Nov  1 13:15:36 2023
++++ include/openssl/pkcs7.h	Wed Nov  1 13:17:58 2023
+@@ -69,6 +69,18 @@
+ extern "C" {
+ #endif
+ 
++#if defined(_WIN32) && defined(__WINCRYPT_H__)
++#if !defined(LIBRESSL_INTERNAL) && !defined(LIBRESSL_DISABLE_OVERRIDE_WINCRYPT_DEFINES_WARNING)
++#ifdef _MSC_VER
++#pragma message("Warning, overriding WinCrypt defines")
++#else
++#warning overriding WinCrypt defines
++#endif
++#endif
++#undef PKCS7_ISSUER_AND_SERIAL
++#undef PKCS7_SIGNER_INFO
++#endif
++
+ /*
+ Encryption_ID		DES-CBC
+ Digest_ID		MD5
+--- include/openssl/x509.h.orig	Wed Nov  1 13:15:36 2023
++++ include/openssl/x509.h	Wed Nov  1 13:18:44 2023
+@@ -100,6 +100,18 @@
+ extern "C" {
+ #endif
+ 
++#if defined(_WIN32) && defined(__WINCRYPT_H__)
++#if !defined(LIBRESSL_INTERNAL) && !defined(LIBRESSL_DISABLE_OVERRIDE_WINCRYPT_DEFINES_WARNING)
++#ifdef _MSC_VER
++#pragma message("Warning, overriding WinCrypt defines")
++#else
++#warning overriding WinCrypt defines
++#endif
++#endif
++#undef X509_NAME
++#undef X509_EXTENSIONS
++#endif
++
+ #define X509_FILETYPE_PEM	1
+ #define X509_FILETYPE_ASN1	2
+ #define X509_FILETYPE_DEFAULT	3