Update 4 packages

libopenssl (3.1.2-1 -> 3.1.3-1) mingw-w64-i686-openssl (3.1.2-1 -> 3.1.3-1) mingw-w64-x86_64-openssl (3.1.2-1 -> 3.1.3-1) openssl (3.1.2-1 -> 3.1.3-1) Signed-off-by: Git for Windows Build Agent <ci@git-for-windows.build>
git-for-windows · Sep 20, 2023 · 86cc84f · 86cc84f
1 parent 3fc2d80
commit 86cc84f
Show file tree

Hide file tree

Showing 11,337 changed files with 251 additions and 193 deletions.
diff --git a/mingw32/bin/c_rehash b/mingw32/bin/c_rehash
@@ -1,7 +1,7 @@
 #!/usr/bin/env perl
 
 # WARNING: do not edit!
-# Generated by Makefile from ../openssl-3.1.2/tools/c_rehash.in
+# Generated by Makefile from ../openssl-3.1.3/tools/c_rehash.in
 # Copyright 1999-2022 The OpenSSL Project Authors. All Rights Reserved.
 #
 # Licensed under the Apache License 2.0 (the "License").  You may not use

diff --git a/mingw32/bin/libcrypto-3.dll b/mingw32/bin/libcrypto-3.dll
diff --git a/mingw32/bin/libssl-3.dll b/mingw32/bin/libssl-3.dll
diff --git a/mingw32/bin/openssl.exe b/mingw32/bin/openssl.exe
diff --git a/mingw32/etc/ssl/misc/CA.pl b/mingw32/etc/ssl/misc/CA.pl
@@ -10,7 +10,7 @@
 # Wrapper around the ca to make it easier to use
 #
 # WARNING: do not edit!
-# Generated by Makefile from ../openssl-3.1.2/apps/CA.pl.in
+# Generated by Makefile from ../openssl-3.1.3/apps/CA.pl.in
 
 use strict;
 use warnings;

diff --git a/mingw32/etc/ssl/misc/tsget b/mingw32/etc/ssl/misc/tsget
@@ -47,7 +47,7 @@ sub create_curl {
     $curl->setopt(CURLOPT_VERBOSE, 1) if $options{d};
     $curl->setopt(CURLOPT_FAILONERROR, 1);
     $curl->setopt(CURLOPT_USERAGENT,
-        "OpenTSA tsget.pl/openssl-3.1.2");
+        "OpenTSA tsget.pl/openssl-3.1.3");
 
     # Options for POST method.
     $curl->setopt(CURLOPT_UPLOAD, 1);

diff --git a/mingw32/etc/ssl/misc/tsget.pl b/mingw32/etc/ssl/misc/tsget.pl
@@ -47,7 +47,7 @@ sub create_curl {
     $curl->setopt(CURLOPT_VERBOSE, 1) if $options{d};
     $curl->setopt(CURLOPT_FAILONERROR, 1);
     $curl->setopt(CURLOPT_USERAGENT,
-        "OpenTSA tsget.pl/openssl-3.1.2");
+        "OpenTSA tsget.pl/openssl-3.1.3");
 
     # Options for POST method.
     $curl->setopt(CURLOPT_UPLOAD, 1);

diff --git a/mingw32/include/openssl/asn1.h b/mingw32/include/openssl/asn1.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/asn1.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/asn1.h.in
  *
  * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/asn1t.h b/mingw32/include/openssl/asn1t.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/asn1t.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/asn1t.h.in
  *
  * Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/bio.h b/mingw32/include/openssl/bio.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/bio.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/bio.h.in
  *
  * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/cmp.h b/mingw32/include/openssl/cmp.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/cmp.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/cmp.h.in
  *
  * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019

diff --git a/mingw32/include/openssl/cms.h b/mingw32/include/openssl/cms.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/cms.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/cms.h.in
  *
  * Copyright 2008-2021 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/conf.h b/mingw32/include/openssl/conf.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/conf.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/conf.h.in
  *
  * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/configuration.h b/mingw32/include/openssl/configuration.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by configdata.pm from ../openssl-3.1.2/Configurations/common0.tmpl, ../openssl-3.1.2/Configurations/unix-Makefile.tmpl
+ * Generated by configdata.pm from ../openssl-3.1.3/Configurations/common0.tmpl, ../openssl-3.1.3/Configurations/unix-Makefile.tmpl
  * via Makefile.in
  *
  * Copyright 2016-2021 The OpenSSL Project Authors. All Rights Reserved.

diff --git a/mingw32/include/openssl/crmf.h b/mingw32/include/openssl/crmf.h
@@ -1,6 +1,6 @@
 /*-
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/crmf.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/crmf.h.in
  *
  * Copyright 2007-2021 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019

diff --git a/mingw32/include/openssl/crypto.h b/mingw32/include/openssl/crypto.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/crypto.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/crypto.h.in
  *
  * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved

diff --git a/mingw32/include/openssl/ct.h b/mingw32/include/openssl/ct.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/ct.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/ct.h.in
  *
  * Copyright 2016-2020 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/ess.h b/mingw32/include/openssl/ess.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/ess.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/ess.h.in
  *
  * Copyright 2019-2021 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/fipskey.h b/mingw32/include/openssl/fipskey.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/fipskey.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/fipskey.h.in
  *
  * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/ocsp.h b/mingw32/include/openssl/ocsp.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/ocsp.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/ocsp.h.in
  *
  * Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/opensslv.h b/mingw32/include/openssl/opensslv.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/opensslv.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/opensslv.h.in
  *
  * Copyright 1999-2020 The OpenSSL Project Authors. All Rights Reserved.
  *
@@ -29,7 +29,7 @@ extern "C" {
  */
 # define OPENSSL_VERSION_MAJOR  3
 # define OPENSSL_VERSION_MINOR  1
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_PATCH  3
 
 /*
  * Additional version information
@@ -74,21 +74,21 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.1.2"
-# define OPENSSL_FULL_VERSION_STR "3.1.2"
+# define OPENSSL_VERSION_STR "3.1.3"
+# define OPENSSL_FULL_VERSION_STR "3.1.3"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
  *
  * These strings are defined separately to allow them to be parsable.
  */
-# define OPENSSL_RELEASE_DATE "1 Aug 2023"
+# define OPENSSL_RELEASE_DATE "19 Sep 2023"
 
 /*
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.1.2 1 Aug 2023"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.1.3 19 Sep 2023"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE

diff --git a/mingw32/include/openssl/pkcs12.h b/mingw32/include/openssl/pkcs12.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/pkcs12.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/pkcs12.h.in
  *
  * Copyright 1999-2022 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/pkcs7.h b/mingw32/include/openssl/pkcs7.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/pkcs7.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/pkcs7.h.in
  *
  * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/safestack.h b/mingw32/include/openssl/safestack.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/safestack.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/safestack.h.in
  *
  * Copyright 1999-2021 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/srp.h b/mingw32/include/openssl/srp.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/srp.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/srp.h.in
  *
  * Copyright 2004-2021 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2004, EdelKey Project. All Rights Reserved.

diff --git a/mingw32/include/openssl/ssl.h b/mingw32/include/openssl/ssl.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/ssl.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/ssl.h.in
  *
  * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved

diff --git a/mingw32/include/openssl/ui.h b/mingw32/include/openssl/ui.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/ui.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/ui.h.in
  *
  * Copyright 2001-2020 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/x509.h b/mingw32/include/openssl/x509.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/x509.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/x509.h.in
  *
  * Copyright 1995-2022 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved

diff --git a/mingw32/include/openssl/x509_vfy.h b/mingw32/include/openssl/x509_vfy.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/x509_vfy.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/x509_vfy.h.in
  *
  * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/include/openssl/x509v3.h b/mingw32/include/openssl/x509v3.h
@@ -1,6 +1,6 @@
 /*
  * WARNING: do not edit!
- * Generated by Makefile from ../openssl-3.1.2/include/openssl/x509v3.h.in
+ * Generated by Makefile from ../openssl-3.1.3/include/openssl/x509v3.h.in
  *
  * Copyright 1999-2023 The OpenSSL Project Authors. All Rights Reserved.
  *

diff --git a/mingw32/lib/engines-3/capi.dll b/mingw32/lib/engines-3/capi.dll
diff --git a/mingw32/lib/engines-3/loader_attic.dll b/mingw32/lib/engines-3/loader_attic.dll
diff --git a/mingw32/lib/engines-3/padlock.dll b/mingw32/lib/engines-3/padlock.dll
diff --git a/mingw32/lib/libcrypto.a b/mingw32/lib/libcrypto.a
diff --git a/mingw32/lib/libssl.a b/mingw32/lib/libssl.a
diff --git a/mingw32/lib/ossl-modules/legacy.dll b/mingw32/lib/ossl-modules/legacy.dll
diff --git a/mingw32/lib/pkgconfig/libcrypto.pc b/mingw32/lib/pkgconfig/libcrypto.pc
@@ -7,7 +7,7 @@ modulesdir=${libdir}/ossl-modules
 
 Name: OpenSSL-libcrypto
 Description: OpenSSL cryptography library
-Version: 3.1.2
+Version: 3.1.3
 Libs: -L${libdir} -lcrypto
 Libs.private: -lws2_32 -lgdi32 -lcrypt32 
 Cflags: -I${includedir}
diff --git a/mingw32/lib/pkgconfig/libssl.pc b/mingw32/lib/pkgconfig/libssl.pc
@@ -5,7 +5,7 @@ includedir=${prefix}/include
 
 Name: OpenSSL-libssl
 Description: Secure Sockets Layer and cryptography libraries
-Version: 3.1.2
+Version: 3.1.3
 Requires.private: libcrypto
 Libs: -L${libdir} -lssl
 Cflags: -I${includedir}
diff --git a/mingw32/lib/pkgconfig/openssl.pc b/mingw32/lib/pkgconfig/openssl.pc
@@ -5,5 +5,5 @@ includedir=${prefix}/include
 
 Name: OpenSSL
 Description: Secure Sockets Layer and cryptography libraries and tools
-Version: 3.1.2
+Version: 3.1.3
 Requires: libssl libcrypto
diff --git a/mingw32/share/doc/openssl/html/man1/openssl-cmp.html b/mingw32/share/doc/openssl/html/man1/openssl-cmp.html
@@ -551,7 +551,7 @@ <h2 id="Client-authentication-options">Client authentication options</h2>
 <dt id="secret-arg"><b>-secret</b> <i>arg</i></dt>
 <dd>
 
-<p>Prefer PBM-based message protection with given source of a secret value. The secret is used for creating PBM-based protection of outgoing messages and (as far as needed) for validating PBM-based protection of incoming messages. PBM stands for Password-Based Message Authentication Code. This takes precedence over the <b>-cert</b> and <b>-key</b> options.</p>
+<p>Provides the source of a secret value to use with MAC-based message protection. This takes precedence over the <b>-cert</b> and <b>-key</b> options. The secret is used for creating MAC-based protection of outgoing messages and for validating incoming messages that have MAC-based protection. The algorithm used by default is Password-Based Message Authentication Code (PBM) as defined in RFC 4210 section 5.1.3.1.</p>
 
 <p>For more information about the format of <i>arg</i> see <a href="../man1/openssl-passphrase-options.html">openssl-passphrase-options(1)</a>.</p>
 
@@ -567,7 +567,7 @@ <h2 id="Client-authentication-options">Client authentication options</h2>
 
 <p>The issuer of this certificate is used as one of the recipient fallback values and as fallback issuer entry in the certificate template of IR/CR/KUR messages.</p>
 
-<p>When using signature-based message protection, this &quot;protection certificate&quot; will be included first in the extraCerts field of outgoing messages and the signature is done with the corresponding key. In Initialization Request (IR) messages this can be used for authenticating using an external entity certificate as defined in appendix E.7 of RFC 4210.</p>
+<p>When performing signature-based message protection, this &quot;protection certificate&quot;, also called &quot;signer certificate&quot;, will be included first in the extraCerts field of outgoing messages and the signature is done with the corresponding key. In Initialization Request (IR) messages this can be used for authenticating using an external entity certificate as defined in appendix E.7 of RFC 4210.</p>
 
 <p>For Key Update Request (KUR) messages this is also used as the certificate to be updated if the <b>-oldcert</b> option is not given.</p>
 
@@ -587,7 +587,7 @@ <h2 id="Client-authentication-options">Client authentication options</h2>
 <dt id="key-filename-uri"><b>-key</b> <i>filename</i>|<i>uri</i></dt>
 <dd>
 
-<p>The corresponding private key file for the client&#39;s current certificate given in the <b>-cert</b> option. This will be used for signature-based message protection unless the <b>-secret</b> option indicating PBM or <b>-unprotected_requests</b> is given.</p>
+<p>The corresponding private key file for the client&#39;s current certificate given in the <b>-cert</b> option. This will be used for signature-based message protection unless the <b>-secret</b> option indicating MAC-based protection or <b>-unprotected_requests</b> is given.</p>
 
 <p>It is also used as a fallback for the <b>-newkey</b> option with IR/CR/KUR messages.</p>
 
@@ -603,13 +603,13 @@ <h2 id="Client-authentication-options">Client authentication options</h2>
 <dt id="digest-name"><b>-digest</b> <i>name</i></dt>
 <dd>
 
-<p>Specifies name of supported digest to use in RFC 4210&#39;s MSG_SIG_ALG and as the one-way function (OWF) in MSG_MAC_ALG. If applicable, this is used for message protection and proof-of-possession (POPO) signatures. To see the list of supported digests, use <code>openssl list -digest-commands</code>. Defaults to <code>sha256</code>.</p>
+<p>Specifies name of supported digest to use in RFC 4210&#39;s MSG_SIG_ALG and as the one-way function (OWF) in <code>MSG_MAC_ALG</code>. If applicable, this is used for message protection and proof-of-possession (POPO) signatures. To see the list of supported digests, use <code>openssl list -digest-commands</code>. Defaults to <code>sha256</code>.</p>
 
 </dd>
 <dt id="mac-name"><b>-mac</b> <i>name</i></dt>
 <dd>
 
-<p>Specifies the name of the MAC algorithm in MSG_MAC_ALG. To get the names of supported MAC algorithms use <code>openssl list -mac-algorithms</code> and possibly combine such a name with the name of a supported digest algorithm, e.g., hmacWithSHA256. Defaults to <code>hmac-sha1</code> as per RFC 4210.</p>
+<p>Specifies the name of the MAC algorithm in <code>MSG_MAC_ALG</code>. To get the names of supported MAC algorithms use <code>openssl list -mac-algorithms</code> and possibly combine such a name with the name of a supported digest algorithm, e.g., hmacWithSHA256. Defaults to <code>hmac-sha1</code> as per RFC 4210.</p>
 
 </dd>
 <dt id="extracerts-filenames-uris"><b>-extracerts</b> <i>filenames</i>|<i>uris</i></dt>
@@ -1004,6 +1004,8 @@ <h2 id="Certificate-verification-options-for-both-CMP-and-TLS">Certificate verif
 
 <h1 id="NOTES">NOTES</h1>
 
+<p>When a client obtains from a CMP server CA certificates that it is going to trust, for instance via the <code>caPubs</code> field of a certificate response, authentication of the CMP server is particularly critical. So special care must be taken setting up server authentication using <b>-trusted</b> and related options for certificate-based authentication or <b>-secret</b> for MAC-based protection.</p>
+
 <p>When setting up CMP configurations and experimenting with enrollment options typically various errors occur until the configuration is correct and complete. When the CMP server reports an error the client will by default check the protection of the CMP response message. Yet some CMP services tend not to protect negative responses. In this case the client will reject them, and thus their contents are not shown although they usually contain hints that would be helpful for diagnostics. For assisting in such cases the CMP client offers a workaround via the <b>-unprotected_errors</b> option, which allows accepting such negative messages.</p>
 
 <p>If OpenSSL was built with trace support enabled and the environment variable <b>OPENSSL_TRACE</b> includes <b>HTTP</b>, the request and response headers of HTTP transfers are printed.</p>
@@ -1047,7 +1049,7 @@ <h2 id="Simple-examples-using-the-default-OpenSSL-configuration-file">Simple exa
 
 <pre><code>openssl cmp -section insta,kur</code></pre>
 
-<p>using with PBM-based protection or</p>
+<p>using MAC-based protection with PBM or</p>
 
 <pre><code>openssl cmp -section insta,kur,signature</code></pre>
 
@@ -1090,7 +1092,7 @@ <h2 id="Certificate-update">Certificate update</h2>
   -newkey cl_key_new.pem -certout cl_cert.pem
 cp cl_key_new.pem cl_key.pem</code></pre>
 
-<p>This command sequence can be repated as often as needed.</p>
+<p>This command sequence can be repeated as often as needed.</p>
 
 <h2 id="Requesting-information-from-CMP-server">Requesting information from CMP server</h2>
 

diff --git a/mingw32/share/doc/openssl/html/man1/openssl-cms.html b/mingw32/share/doc/openssl/html/man1/openssl-cms.html
@@ -385,7 +385,7 @@ <h2 id="Encryption-and-decryption-options">Encryption and decryption options</h2
 <dt id="recipient-cert"><i>recipient-cert</i> ...</dt>
 <dd>
 
-<p>This is an alternative to using the <b>-recip</b> option when encrypting a message. One or more certificate filennames may be given.</p>
+<p>This is an alternative to using the <b>-recip</b> option when encrypting a message. One or more certificate filenames may be given.</p>
 
 </dd>
 <dt id="cipher"><b>-<i>cipher</i></b></dt>
@@ -866,7 +866,7 @@ <h1 id="HISTORY">HISTORY</h1>
 
 <h1 id="COPYRIGHT">COPYRIGHT</h1>
 
-<p>Copyright 2008-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
+<p>Copyright 2008-2023 The OpenSSL Project Authors. All Rights Reserved.</p>
 
 <p>Licensed under the Apache License 2.0 (the &quot;License&quot;). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>
 

diff --git a/mingw32/share/doc/openssl/html/man1/openssl-ts.html b/mingw32/share/doc/openssl/html/man1/openssl-ts.html
@@ -466,7 +466,7 @@ <h1 id="CONFIGURATION-FILE-OPTIONS">CONFIGURATION FILE OPTIONS</h1>
 <dt id="ess_cert_id_alg"><b>ess_cert_id_alg</b></dt>
 <dd>
 
-<p>This option specifies the hash function to be used to calculate the TSA&#39;s public key certificate identifier. Default is sha256. (Optional)</p>
+<p>This option specifies the hash function to be used to calculate the TSA&#39;s public key certificate identifier. Default is sha1. (Optional)</p>
 
 </dd>
 </dl>
@@ -584,7 +584,7 @@ <h1 id="SEE-ALSO">SEE ALSO</h1>
 
 <h1 id="COPYRIGHT">COPYRIGHT</h1>
 
-<p>Copyright 2006-2021 The OpenSSL Project Authors. All Rights Reserved.</p>
+<p>Copyright 2006-2023 The OpenSSL Project Authors. All Rights Reserved.</p>
 
 <p>Licensed under the Apache License 2.0 (the &quot;License&quot;). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <a href="https://www.openssl.org/source/license.html">https://www.openssl.org/source/license.html</a>.</p>