chore(deps): update dependency aws/aws-lc to v1.70.0 - autoclosed

[openvpn-inc-ci]

This PR contains the following updates:

Package	Update	Change
aws/aws-lc	minor	v1.67.0 → v1.70.0

---

Release Notes

aws/aws-lc (aws/aws-lc)

v1.70.0

Compare Source

What's Changed

• Cache peer CA names on client side after handshake by @​WillChilds-Klein in #​2994
• Add NULL checks for MakeUnique in SSL cipher list inheritance by @​geedo0 in #​3065
• Fix gRPC integration by @​justsmth in #​3070
• Latent memory leaks in KEM_KEY setter functions by @​justsmth in #​3041
• Fix PKCS8_decrypt to handle all negative pass_len values by @​geedo0 in #​3039
• Fix PKCS12_verify_mac OOB read with invalid password_len by @​geedo0 in #​3051
• Cleanup EVP_DH asn1 parsing by @​justsmth in #​3047
• Add INT_MAX bounds check before EVP_CipherUpdate in PKCS8/PKCS12 encryption by @​geedo0 in #​3043
• Fix PKCS8_encrypt crash when pass is NULL with negative pass_len_in by @​geedo0 in #​3052
• Fix CMake 4.0 CI jobs by @​justsmth in #​3068
• IWYU: guard stdint.h in fips_shared_support.c by @​skmcgrail in #​3027
• Use proper function type for different callback types by @​torben-hansen in #​3066
• Zeroize intermediate values for ed25519 by @​justsmth in #​3075
• Bump github.com/cloudflare/circl from 1.6.2 to 1.6.3 in /util/vecgen by @​dependabot[bot] in #​3046
• Fix sizeof-on-pointer bugs in FIPS assertion failure messages by @​justsmth in #​3074
• Remove dead declarations in public headers by @​skmcgrail in #​3053
• TLS Transfer Serialization Findings by @​skmcgrail in #​3071
• XOF fixes by @​manastasova in #​3064
• Add a test that arbitrary curves can be wrapped in EVP_PKEY by @​nebeid in #​3055
• Improve type safety and bounds checking in EVP cipher ctrl handlers by @​justsmth in #​3034
• Fix uninitialized EVP_MD_CTX and harden bn_dup_into by @​justsmth in #​3033
• Add ACVP Support for KAS-ECC by @​nhatnghiho in #​3010
• Add ACVP Support for KTS-IFC by @​nhatnghiho in #​3009
• Various Small Additions to ACVP Tool by @​nhatnghiho in #​3024
• Clean up CLI code by @​nhatnghiho in #​2927
• Fix NetBSD AArch64 CPU feature detection on big.LITTLE systems by @​justsmth in #​3082
• Prepare v1.70.0 by @​nhatnghiho in #​3086

Full Changelog: aws/aws-lc@v1.69.0...v1.70.0

v1.69.0

Compare Source

What's Changed

• Fix FIPS delocator handling of floating-point immediates on aarch64 by @​justsmth in #​3029
• Fix link in README.md by @​ofek in #​2945
• Various PKCS7 fixups by @​WillChilds-Klein in #​3035
• Fix error reporting and document EC explicit params single-cert beha… by @​justsmth in #​3044
• Fix PKCS7 verify content memleak by @​WillChilds-Klein in #​3036
• Retain flag after custom critical extensions check by @​samuel40791765 in #​3030
• Update ACVP documentation by @​samuel40791765 in #​2960
• Fix error return values for no-op UI_xxx stub functions by @​justsmth in #​3025
• Key state consistency in PQDSA_KEY setter functions by @​justsmth in #​3040
• Simplify d2i_PKCS7 by removing redundant BER-to-DER conversion by @​justsmth in #​3037
• Prepare v1.69.0 by @​torben-hansen in #​3049
• Ensure all signer certificate chains are verified by @​torben-hansen in #​3059
• Use CRYPTO_memcmp instead of OPENSSL_memcmp for tag verification by @​torben-hansen in #​3060
• Return correct error value when parsing PKCS7 authenticated attributes fails by @​torben-hansen in #​3061

New Contributors

• @​ofek made their first contribution in #​2945

Full Changelog: aws/aws-lc@v1.68.0...v1.69.0

v1.68.0

Compare Source

What's Changed

• Bump urllib3 from 2.6.0 to 2.6.3 in /tests/ci by @​dependabot[bot] in #​2932
• Add weekly automated check for outdated third-party test vectors by @​sgmenda in #​2933
• Enable Hybrid PQ KeyShares by default by @​alexw91 in #​2531
• Remove AVX conditional from cmake script by @​torben-hansen in #​2958
• openssl-ca command implementation for self-sign certificates by @​skmcgrail in #​2937
• Initial Framework for Using Doxygen to Document Public Header Files by @​m271828 in #​2908
• Move md4 out of FIPS module by @​torben-hansen in #​2956
• Fix image-build-windows workflow to only push on workflow_call and workflow_dispatch by @​skmcgrail in #​2961
• Remove FIPS counter framework and other tidying up by @​torben-hansen in #​2947
• Model Device Farm CI Resources in CDK by @​skmcgrail in #​2965
• Adds a new randomness generation API by @​torben-hansen in #​2963
• Migrate Android Testing to GitHub Actions by @​skmcgrail in #​2969
• Ensure pkcs7 checks ASN1_TYPE->type by @​skmcgrail in #​2968
• Fix checkout logic for android-omnibus by @​skmcgrail in #​2970
• Add missing env vars to check-vectors workflow step by @​sgmenda in #​2962
• Shorten Windows Build Directory Path by @​skmcgrail in #​2974
• Bump mysql cluster version by @​WillChilds-Klein in #​2967
• Integrate Wycheproof ML-DSA test vectors by @​sgmenda in #​2973
• Simplify FIPS conditional in top-level build script by @​torben-hansen in #​2976
• Fix aws-lc-rs CI job by @​justsmth in #​2966
• Add method to get type of ML-DSA instance configured under EVP PKEY by @​torben-hansen in #​2980
• Nmap build needs liblinear by @​justsmth in #​2985
• Disable SLP vectorizer for FIPS shared library builds on GCC 14+ by @​geedo0 in #​2977
• Update Wycheproof ECDSA test vectors and fix workflow typo by @​sgmenda in #​2972
• Address some CMake findings by @​skmcgrail in #​2979
• Bump bytes from 1.7.1 to 1.11.1 in /tests/ci/lambda by @​dependabot[bot] in #​2983
• Support GCC 4.8 for aarch64 by @​justsmth in #​2964
• Free potential memory before assigning new pointer by @​torben-hansen in #​2989
• Add PyOpenSSL integration test by @​WillChilds-Klein in #​2992
• Ensure index argument is not negative in ASN1_BIT_STRING_set_bit by @​torben-hansen in #​2987
• Ensure no overflow in signed output length in do_buf by @​torben-hansen in #​2988
• Remove redundant CPython 3.9 integration test by @​WillChilds-Klein in #​2996
• Ensure public key is set before verifying through ML-DSA verify by @​torben-hansen in #​2990
• Correct CCM nids in object definition by @​torben-hansen in #​2991
• Address Reported Bug Findings by @​skmcgrail in #​3000
• Fix CI: gcc-4.8 by @​justsmth in #​3011
• Fix Windows CI: use cd /d in run_windows_tests.bat to handle cross-drive paths by @​justsmth in #​3012
• Fix OPENSSL_memchr per C23 by @​justsmth in #​3008
• Fix argument order in hmac_copy by @​justsmth in #​3014
• Miscellaneous CI improvements by @​skmcgrail in #​2978
• Fix CI: mariadb by @​justsmth in #​3015
• Update Ubuntu 24:04 image compiler verification by @​skmcgrail in #​3017
• Support WASM/Emscripten by @​justsmth in #​2959
• Generate Rust Bindings by @​justsmth in #​2999

Full Changelog: aws/aws-lc@v1.67.0...v1.68.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.