diff --git a/Frameworks/OpenSSL.xcframework/Info.plist b/Frameworks/OpenSSL.xcframework/Info.plist
index b76ed69d..85e6daa0 100644
--- a/Frameworks/OpenSSL.xcframework/Info.plist
+++ b/Frameworks/OpenSSL.xcframework/Info.plist
@@ -6,23 +6,26 @@
 	<array>
 		<dict>
 			<key>BinaryPath</key>
-			<string>OpenSSL.framework/OpenSSL</string>
+			<string>OpenSSL.framework/Versions/A/OpenSSL</string>
 			<key>LibraryIdentifier</key>
-			<string>xros-arm64</string>
+			<string>ios-arm64_x86_64-maccatalyst</string>
 			<key>LibraryPath</key>
 			<string>OpenSSL.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
+				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
-			<string>xros</string>
+			<string>ios</string>
+			<key>SupportedPlatformVariant</key>
+			<string>maccatalyst</string>
 		</dict>
 		<dict>
 			<key>BinaryPath</key>
-			<string>OpenSSL.framework/Versions/A/OpenSSL</string>
+			<string>OpenSSL.framework/OpenSSL</string>
 			<key>LibraryIdentifier</key>
-			<string>ios-arm64_x86_64-maccatalyst</string>
+			<string>ios-arm64_x86_64-simulator</string>
 			<key>LibraryPath</key>
 			<string>OpenSSL.framework</string>
 			<key>SupportedArchitectures</key>
@@ -33,27 +36,29 @@
 			<key>SupportedPlatform</key>
 			<string>ios</string>
 			<key>SupportedPlatformVariant</key>
-			<string>maccatalyst</string>
+			<string>simulator</string>
 		</dict>
 		<dict>
 			<key>BinaryPath</key>
 			<string>OpenSSL.framework/OpenSSL</string>
 			<key>LibraryIdentifier</key>
-			<string>tvos-arm64</string>
+			<string>watchos-arm64_arm64_32_armv7k</string>
 			<key>LibraryPath</key>
 			<string>OpenSSL.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
+				<string>arm64_32</string>
+				<string>armv7k</string>
 			</array>
 			<key>SupportedPlatform</key>
-			<string>tvos</string>
+			<string>watchos</string>
 		</dict>
 		<dict>
 			<key>BinaryPath</key>
-			<string>OpenSSL.framework/OpenSSL</string>
+			<string>OpenSSL.framework/Versions/A/OpenSSL</string>
 			<key>LibraryIdentifier</key>
-			<string>watchos-arm64_x86_64-simulator</string>
+			<string>macos-arm64_x86_64</string>
 			<key>LibraryPath</key>
 			<string>OpenSSL.framework</string>
 			<key>SupportedArchitectures</key>
@@ -62,94 +67,89 @@
 				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
-			<string>watchos</string>
-			<key>SupportedPlatformVariant</key>
-			<string>simulator</string>
+			<string>macos</string>
 		</dict>
 		<dict>
 			<key>BinaryPath</key>
 			<string>OpenSSL.framework/OpenSSL</string>
 			<key>LibraryIdentifier</key>
-			<string>tvos-arm64_x86_64-simulator</string>
+			<string>tvos-arm64</string>
 			<key>LibraryPath</key>
 			<string>OpenSSL.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
-				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
 			<string>tvos</string>
-			<key>SupportedPlatformVariant</key>
-			<string>simulator</string>
 		</dict>
 		<dict>
 			<key>BinaryPath</key>
 			<string>OpenSSL.framework/OpenSSL</string>
 			<key>LibraryIdentifier</key>
-			<string>xros-arm64_x86_64-simulator</string>
+			<string>xros-arm64</string>
 			<key>LibraryPath</key>
 			<string>OpenSSL.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
-				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
 			<string>xros</string>
-			<key>SupportedPlatformVariant</key>
-			<string>simulator</string>
 		</dict>
 		<dict>
 			<key>BinaryPath</key>
 			<string>OpenSSL.framework/OpenSSL</string>
 			<key>LibraryIdentifier</key>
-			<string>watchos-arm64_arm64_32_armv7k</string>
+			<string>xros-arm64_x86_64-simulator</string>
 			<key>LibraryPath</key>
 			<string>OpenSSL.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
-				<string>arm64_32</string>
-				<string>armv7k</string>
+				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
-			<string>watchos</string>
+			<string>xros</string>
+			<key>SupportedPlatformVariant</key>
+			<string>simulator</string>
 		</dict>
 		<dict>
 			<key>BinaryPath</key>
 			<string>OpenSSL.framework/OpenSSL</string>
 			<key>LibraryIdentifier</key>
-			<string>ios-arm64</string>
+			<string>tvos-arm64_x86_64-simulator</string>
 			<key>LibraryPath</key>
 			<string>OpenSSL.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
+				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
-			<string>ios</string>
+			<string>tvos</string>
+			<key>SupportedPlatformVariant</key>
+			<string>simulator</string>
 		</dict>
 		<dict>
 			<key>BinaryPath</key>
-			<string>OpenSSL.framework/Versions/A/OpenSSL</string>
+			<string>OpenSSL.framework/OpenSSL</string>
 			<key>LibraryIdentifier</key>
-			<string>macos-arm64_x86_64</string>
+			<string>ios-arm64</string>
 			<key>LibraryPath</key>
 			<string>OpenSSL.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
-				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
-			<string>macos</string>
+			<string>ios</string>
 		</dict>
 		<dict>
 			<key>BinaryPath</key>
 			<string>OpenSSL.framework/OpenSSL</string>
 			<key>LibraryIdentifier</key>
-			<string>ios-arm64_x86_64-simulator</string>
+			<string>watchos-arm64_x86_64-simulator</string>
 			<key>LibraryPath</key>
 			<string>OpenSSL.framework</string>
 			<key>SupportedArchitectures</key>
@@ -158,7 +158,7 @@
 				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
-			<string>ios</string>
+			<string>watchos</string>
 			<key>SupportedPlatformVariant</key>
 			<string>simulator</string>
 		</dict>
diff --git a/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeDirectory b/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeDirectory
index 2e223e3b..7ff4380b 100644
Binary files a/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeDirectory and b/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeDirectory differ
diff --git a/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeRequirements-1 b/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeRequirements-1
index 8b80b247..9c9b2984 100644
Binary files a/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeRequirements-1 and b/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeRequirements-1 differ
diff --git a/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeResources
index 468a3ade..01d9ec8e 100644
--- a/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/configuration.h</key>
 		<data>
-		ia9Lq9Ma5Kl0sdwkNFmHsS3OUkU=
+		MFiooVP1OE4028WfQZREAH2Ma64=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Info.plist</key>
 		<data>
-		QrYuUiaf0eAsvjMGE/3sfZCnj4w=
+		0M5H0ChbB+HbzSq0fxnVTEuStwM=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/Modules/module.modulemap</key>
 		<data>
@@ -574,7 +574,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/OpenSSL</key>
 		<data>
-		7JonS9XM9veasPdXQEhq+nihrRY=
+		W7uFmy9Ecf9hCnYNZIV8EryPx9A=
 		</data>
 		<key>ios-arm64/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -582,7 +582,7 @@
 		</data>
 		<key>ios-arm64/OpenSSL.framework/_CodeSignature/CodeResources</key>
 		<data>
-		fC3oucFnqWZPqNAJ10CQhnPJk8Y=
+		8WzMZW73b2KvTo5pjRehz1O5DFY=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/OpenSSL.h</key>
 		<data>
@@ -598,7 +598,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/asn1t.h</key>
 		<data>
@@ -614,7 +614,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/bioerr.h</key>
 		<data>
@@ -654,7 +654,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmp_util.h</key>
 		<data>
@@ -662,7 +662,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cms.h</key>
 		<data>
@@ -682,7 +682,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/conf_api.h</key>
 		<data>
@@ -694,7 +694,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/configuration.h</key>
 		<data>
-		lScZfdfcK3XXRdUgxXzIzzZ9CoM=
+		i+9GbPbFWiftInpFiRJ9aEvJmFk=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/conftypes.h</key>
 		<data>
@@ -706,11 +706,11 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_object.h</key>
 		<data>
@@ -758,7 +758,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/dherr.h</key>
 		<data>
@@ -822,7 +822,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ess.h</key>
 		<data>
@@ -834,7 +834,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/evperr.h</key>
 		<data>
@@ -854,15 +854,15 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/idea.h</key>
 		<data>
@@ -878,7 +878,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/macros.h</key>
 		<data>
@@ -906,7 +906,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/objects.h</key>
 		<data>
@@ -930,7 +930,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ossl_typ.h</key>
 		<data>
@@ -966,7 +966,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/pkcs7err.h</key>
 		<data>
@@ -986,7 +986,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/rand.h</key>
 		<data>
@@ -1030,7 +1030,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sha.h</key>
 		<data>
@@ -1050,7 +1050,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ssl2.h</key>
 		<data>
@@ -1062,11 +1062,11 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/stack.h</key>
 		<data>
@@ -1130,7 +1130,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/x509err.h</key>
 		<data>
@@ -1150,11 +1150,11 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/OpenSSL</key>
 		<data>
-		OtyS1Dz6HLbi3iD9en5zLUCY1Cs=
+		GWxse/66X5T7RNWVAVxlaWkLGgg=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Resources/Info.plist</key>
 		<data>
-		locKjucac2EJ89FRFaQ2fAquWYc=
+		5W0vEiZk7ITLhx3QF5fsQmDSSNc=
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Resources/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -1162,7 +1162,7 @@
 		</data>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources</key>
 		<data>
-		hrSqgBpvYsXxI967h50+QSo7A7w=
+		1AL6uDYUrUO/++r9FvoxPoZNW+c=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/OpenSSL.h</key>
 		<data>
@@ -1178,7 +1178,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1t.h</key>
 		<data>
@@ -1194,7 +1194,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/bioerr.h</key>
 		<data>
@@ -1234,7 +1234,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp_util.h</key>
 		<data>
@@ -1242,7 +1242,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cms.h</key>
 		<data>
@@ -1262,7 +1262,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf_api.h</key>
 		<data>
@@ -1274,7 +1274,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h</key>
 		<data>
-		ia9Lq9Ma5Kl0sdwkNFmHsS3OUkU=
+		MFiooVP1OE4028WfQZREAH2Ma64=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/conftypes.h</key>
 		<data>
@@ -1286,11 +1286,11 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_object.h</key>
 		<data>
@@ -1338,7 +1338,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/dherr.h</key>
 		<data>
@@ -1402,7 +1402,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ess.h</key>
 		<data>
@@ -1414,7 +1414,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/evperr.h</key>
 		<data>
@@ -1434,15 +1434,15 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/idea.h</key>
 		<data>
@@ -1458,7 +1458,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/macros.h</key>
 		<data>
@@ -1486,7 +1486,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/objects.h</key>
 		<data>
@@ -1510,7 +1510,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ossl_typ.h</key>
 		<data>
@@ -1546,7 +1546,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7err.h</key>
 		<data>
@@ -1566,7 +1566,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/rand.h</key>
 		<data>
@@ -1610,7 +1610,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sha.h</key>
 		<data>
@@ -1630,7 +1630,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl2.h</key>
 		<data>
@@ -1642,11 +1642,11 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/stack.h</key>
 		<data>
@@ -1710,7 +1710,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509err.h</key>
 		<data>
@@ -1726,7 +1726,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Info.plist</key>
 		<data>
-		Wx0Sw4H53tuW3NqecVlInMDXno4=
+		1fmnrzc1+fTlJCB5QahopmxgsCE=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Modules/module.modulemap</key>
 		<data>
@@ -1734,7 +1734,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL</key>
 		<data>
-		q9iM5x2mXn+A54mbHgXuLArAnGg=
+		lE9L6ExnwtaLBPEBl/5jFn82m60=
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -1742,7 +1742,7 @@
 		</data>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources</key>
 		<data>
-		eWd3qtmct8/l+Kb1qHnrNDRxnxc=
+		q3znbvhYq+Oe5rcYCZIILqK3p9E=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/OpenSSL.h</key>
 		<data>
@@ -1758,7 +1758,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/asn1t.h</key>
 		<data>
@@ -1774,7 +1774,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/bioerr.h</key>
 		<data>
@@ -1814,7 +1814,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmp_util.h</key>
 		<data>
@@ -1822,7 +1822,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cms.h</key>
 		<data>
@@ -1842,7 +1842,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/conf_api.h</key>
 		<data>
@@ -1854,7 +1854,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/configuration.h</key>
 		<data>
-		lScZfdfcK3XXRdUgxXzIzzZ9CoM=
+		i+9GbPbFWiftInpFiRJ9aEvJmFk=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/conftypes.h</key>
 		<data>
@@ -1866,11 +1866,11 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_object.h</key>
 		<data>
@@ -1918,7 +1918,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/dherr.h</key>
 		<data>
@@ -1982,7 +1982,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ess.h</key>
 		<data>
@@ -1994,7 +1994,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/evperr.h</key>
 		<data>
@@ -2014,15 +2014,15 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/idea.h</key>
 		<data>
@@ -2038,7 +2038,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/macros.h</key>
 		<data>
@@ -2066,7 +2066,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/objects.h</key>
 		<data>
@@ -2090,7 +2090,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ossl_typ.h</key>
 		<data>
@@ -2126,7 +2126,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/pkcs7err.h</key>
 		<data>
@@ -2146,7 +2146,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/rand.h</key>
 		<data>
@@ -2190,7 +2190,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sha.h</key>
 		<data>
@@ -2210,7 +2210,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ssl2.h</key>
 		<data>
@@ -2222,11 +2222,11 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/stack.h</key>
 		<data>
@@ -2290,7 +2290,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/x509err.h</key>
 		<data>
@@ -2310,11 +2310,11 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/OpenSSL</key>
 		<data>
-		PDry7lDe12unud2VEVBYjXHZJ+8=
+		JZty5X1iBChh5AOTz6HXhNCamug=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Resources/Info.plist</key>
 		<data>
-		ygSh/JNcojZ+defoLJ/ubUODJLc=
+		RVfpW11pj5w5M5ZTL/SkqGynaN8=
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Resources/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -2322,7 +2322,7 @@
 		</data>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources</key>
 		<data>
-		z61dC00PwhxwyWfylvAv7YprDZU=
+		q/j3Ta+L3hNfrPNjdz46equS2AI=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/OpenSSL.h</key>
 		<data>
@@ -2338,7 +2338,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/asn1t.h</key>
 		<data>
@@ -2354,7 +2354,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/bioerr.h</key>
 		<data>
@@ -2394,7 +2394,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/cmp_util.h</key>
 		<data>
@@ -2402,7 +2402,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/cms.h</key>
 		<data>
@@ -2422,7 +2422,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/conf_api.h</key>
 		<data>
@@ -2434,7 +2434,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/configuration.h</key>
 		<data>
-		31BE8LwRUj29KzYtu8s7CYNvvoY=
+		uq6EBUgROXJefAoIu8jjfcdUMSg=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/conftypes.h</key>
 		<data>
@@ -2446,11 +2446,11 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/core_object.h</key>
 		<data>
@@ -2498,7 +2498,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/dherr.h</key>
 		<data>
@@ -2562,7 +2562,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/ess.h</key>
 		<data>
@@ -2574,7 +2574,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/evperr.h</key>
 		<data>
@@ -2594,15 +2594,15 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/idea.h</key>
 		<data>
@@ -2618,7 +2618,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/macros.h</key>
 		<data>
@@ -2646,7 +2646,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/objects.h</key>
 		<data>
@@ -2670,7 +2670,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/ossl_typ.h</key>
 		<data>
@@ -2706,7 +2706,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/pkcs7err.h</key>
 		<data>
@@ -2726,7 +2726,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/rand.h</key>
 		<data>
@@ -2770,7 +2770,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/sha.h</key>
 		<data>
@@ -2790,7 +2790,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/ssl2.h</key>
 		<data>
@@ -2802,11 +2802,11 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/stack.h</key>
 		<data>
@@ -2870,7 +2870,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Headers/x509err.h</key>
 		<data>
@@ -2886,7 +2886,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Info.plist</key>
 		<data>
-		+KCnD2Ok5EzpN+IJyljnRpZaVNw=
+		8A79UJgte5+L5td+gODvDoGGl8I=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/Modules/module.modulemap</key>
 		<data>
@@ -2894,7 +2894,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/OpenSSL</key>
 		<data>
-		vafs0Gdc3tkRfJuQ4JjeyCrW/tE=
+		lxGTOwyWFNXZOfzOrtsFfAhLrMY=
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -2902,7 +2902,7 @@
 		</data>
 		<key>tvos-arm64/OpenSSL.framework/_CodeSignature/CodeResources</key>
 		<data>
-		C8CXTyLi7JpI0jtr+EYLYsNzc58=
+		xh8zPeiHSdXJVPf4vV4le6Ve8yA=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/OpenSSL.h</key>
 		<data>
@@ -2918,7 +2918,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1t.h</key>
 		<data>
@@ -2934,7 +2934,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bioerr.h</key>
 		<data>
@@ -2974,7 +2974,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp_util.h</key>
 		<data>
@@ -2982,7 +2982,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cms.h</key>
 		<data>
@@ -3002,7 +3002,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf_api.h</key>
 		<data>
@@ -3014,7 +3014,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h</key>
 		<data>
-		31BE8LwRUj29KzYtu8s7CYNvvoY=
+		uq6EBUgROXJefAoIu8jjfcdUMSg=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conftypes.h</key>
 		<data>
@@ -3026,11 +3026,11 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_object.h</key>
 		<data>
@@ -3078,7 +3078,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dherr.h</key>
 		<data>
@@ -3142,7 +3142,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ess.h</key>
 		<data>
@@ -3154,7 +3154,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evperr.h</key>
 		<data>
@@ -3174,15 +3174,15 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/idea.h</key>
 		<data>
@@ -3198,7 +3198,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/macros.h</key>
 		<data>
@@ -3226,7 +3226,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/objects.h</key>
 		<data>
@@ -3250,7 +3250,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ossl_typ.h</key>
 		<data>
@@ -3286,7 +3286,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7err.h</key>
 		<data>
@@ -3306,7 +3306,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/rand.h</key>
 		<data>
@@ -3350,7 +3350,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sha.h</key>
 		<data>
@@ -3370,7 +3370,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl2.h</key>
 		<data>
@@ -3382,11 +3382,11 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/stack.h</key>
 		<data>
@@ -3450,7 +3450,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509err.h</key>
 		<data>
@@ -3466,7 +3466,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Info.plist</key>
 		<data>
-		gd7rWr8OhyDXUVClEo5R5CxFUjQ=
+		RujmUhI9pGkvC2ffIjcIJJ7xTBA=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Modules/module.modulemap</key>
 		<data>
@@ -3474,7 +3474,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL</key>
 		<data>
-		cVV2aKrAO0bY8Qv7kIfqwOV5+XU=
+		9E++9WNEj+TbE0uJP8nOTAhHl/4=
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -3482,7 +3482,7 @@
 		</data>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources</key>
 		<data>
-		4Zk2Yw2gG2t+9OksayZGVL5EP5I=
+		+Qg7DKkZDQ0KJpBfLiMQwm3/G74=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/OpenSSL.h</key>
 		<data>
@@ -3498,7 +3498,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/asn1t.h</key>
 		<data>
@@ -3514,7 +3514,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/bioerr.h</key>
 		<data>
@@ -3554,7 +3554,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmp_util.h</key>
 		<data>
@@ -3562,7 +3562,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cms.h</key>
 		<data>
@@ -3582,7 +3582,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/conf_api.h</key>
 		<data>
@@ -3594,7 +3594,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/configuration.h</key>
 		<data>
-		mp4WLl5nQWdzgpf97VWrQ5tGnbY=
+		2105ELXL7WvSfSB26S9l/juILmg=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/conftypes.h</key>
 		<data>
@@ -3606,11 +3606,11 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_object.h</key>
 		<data>
@@ -3658,7 +3658,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/dherr.h</key>
 		<data>
@@ -3722,7 +3722,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ess.h</key>
 		<data>
@@ -3734,7 +3734,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/evperr.h</key>
 		<data>
@@ -3754,15 +3754,15 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/idea.h</key>
 		<data>
@@ -3778,7 +3778,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/macros.h</key>
 		<data>
@@ -3806,7 +3806,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/objects.h</key>
 		<data>
@@ -3830,7 +3830,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ossl_typ.h</key>
 		<data>
@@ -3866,7 +3866,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/pkcs7err.h</key>
 		<data>
@@ -3886,7 +3886,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/rand.h</key>
 		<data>
@@ -3930,7 +3930,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sha.h</key>
 		<data>
@@ -3950,7 +3950,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ssl2.h</key>
 		<data>
@@ -3962,11 +3962,11 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/stack.h</key>
 		<data>
@@ -4030,7 +4030,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/x509err.h</key>
 		<data>
@@ -4046,7 +4046,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Info.plist</key>
 		<data>
-		WsRRl8h68x1Yl3IxQopDVCxzZAM=
+		W9oyX9WV39Z79V9nzFllt5GEQzg=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Modules/module.modulemap</key>
 		<data>
@@ -4054,7 +4054,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/OpenSSL</key>
 		<data>
-		Z1/jv/bLilofslm6qhQIfU8x9nc=
+		EKbjqyRkc2QtO5V29uwhZliW1WU=
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -4062,7 +4062,7 @@
 		</data>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/_CodeSignature/CodeResources</key>
 		<data>
-		NW2synqq1hfrFw4e5LrNHAKk7Jk=
+		cudZOh2ccY7ARzXYxyDhwbbos5M=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/OpenSSL.h</key>
 		<data>
@@ -4078,7 +4078,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1t.h</key>
 		<data>
@@ -4094,7 +4094,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bioerr.h</key>
 		<data>
@@ -4134,7 +4134,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp_util.h</key>
 		<data>
@@ -4142,7 +4142,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cms.h</key>
 		<data>
@@ -4162,7 +4162,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf_api.h</key>
 		<data>
@@ -4174,7 +4174,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h</key>
 		<data>
-		mp4WLl5nQWdzgpf97VWrQ5tGnbY=
+		2105ELXL7WvSfSB26S9l/juILmg=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conftypes.h</key>
 		<data>
@@ -4186,11 +4186,11 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_object.h</key>
 		<data>
@@ -4238,7 +4238,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dherr.h</key>
 		<data>
@@ -4302,7 +4302,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ess.h</key>
 		<data>
@@ -4314,7 +4314,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evperr.h</key>
 		<data>
@@ -4334,15 +4334,15 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/idea.h</key>
 		<data>
@@ -4358,7 +4358,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/macros.h</key>
 		<data>
@@ -4386,7 +4386,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/objects.h</key>
 		<data>
@@ -4410,7 +4410,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ossl_typ.h</key>
 		<data>
@@ -4446,7 +4446,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7err.h</key>
 		<data>
@@ -4466,7 +4466,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/rand.h</key>
 		<data>
@@ -4510,7 +4510,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sha.h</key>
 		<data>
@@ -4530,7 +4530,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl2.h</key>
 		<data>
@@ -4542,11 +4542,11 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/stack.h</key>
 		<data>
@@ -4610,7 +4610,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509err.h</key>
 		<data>
@@ -4626,7 +4626,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Info.plist</key>
 		<data>
-		HLzm/NeSNfFVhCsA8UzYIsaUqHM=
+		BaBjJFDy/wmh+4hCtvTo+wR8/t4=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Modules/module.modulemap</key>
 		<data>
@@ -4634,7 +4634,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL</key>
 		<data>
-		Js75VAcaY86wGetSiwdzgCTb+yw=
+		EuZQWGQtthYXV/JHO0hP+RJiv2Y=
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -4642,7 +4642,7 @@
 		</data>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources</key>
 		<data>
-		vjgXs87TkvGD3NE/5/BYke8Cdx0=
+		WxS3IS8S6+BQV+5v3HTac4NcpmY=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/OpenSSL.h</key>
 		<data>
@@ -4658,7 +4658,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/asn1t.h</key>
 		<data>
@@ -4674,7 +4674,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/bioerr.h</key>
 		<data>
@@ -4714,7 +4714,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/cmp_util.h</key>
 		<data>
@@ -4722,7 +4722,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/cms.h</key>
 		<data>
@@ -4742,7 +4742,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/conf_api.h</key>
 		<data>
@@ -4754,7 +4754,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/configuration.h</key>
 		<data>
-		yjr15PIOf/CqzXE+85wawHh2fs8=
+		QHnJsrU4bBKEKavpabchMyFg1qw=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/conftypes.h</key>
 		<data>
@@ -4766,11 +4766,11 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/core_object.h</key>
 		<data>
@@ -4818,7 +4818,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/dherr.h</key>
 		<data>
@@ -4882,7 +4882,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/ess.h</key>
 		<data>
@@ -4894,7 +4894,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/evperr.h</key>
 		<data>
@@ -4914,15 +4914,15 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/idea.h</key>
 		<data>
@@ -4938,7 +4938,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/macros.h</key>
 		<data>
@@ -4966,7 +4966,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/objects.h</key>
 		<data>
@@ -4990,7 +4990,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/ossl_typ.h</key>
 		<data>
@@ -5026,7 +5026,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/pkcs7err.h</key>
 		<data>
@@ -5046,7 +5046,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/rand.h</key>
 		<data>
@@ -5090,7 +5090,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/sha.h</key>
 		<data>
@@ -5110,7 +5110,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/ssl2.h</key>
 		<data>
@@ -5122,11 +5122,11 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/stack.h</key>
 		<data>
@@ -5190,7 +5190,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Headers/x509err.h</key>
 		<data>
@@ -5206,7 +5206,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Info.plist</key>
 		<data>
-		bah+ENbAp1Hpqi3etWGe3quZea0=
+		/XbqrrnFkhc9Trgp5hE4N03KGbI=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/Modules/module.modulemap</key>
 		<data>
@@ -5214,7 +5214,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/OpenSSL</key>
 		<data>
-		uyymGMp16tTb2784jGasLFclgcQ=
+		YWQ0YruvWa8K4Rcwq6glLGSpO7A=
 		</data>
 		<key>xros-arm64/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -5222,7 +5222,7 @@
 		</data>
 		<key>xros-arm64/OpenSSL.framework/_CodeSignature/CodeResources</key>
 		<data>
-		2dBykbxAEg2+Lru1wHo619dMqmw=
+		bNhaIOtpvHof1CDtbQS5c/x6+pY=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/OpenSSL.h</key>
 		<data>
@@ -5238,7 +5238,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1t.h</key>
 		<data>
@@ -5254,7 +5254,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/bioerr.h</key>
 		<data>
@@ -5294,7 +5294,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp_util.h</key>
 		<data>
@@ -5302,7 +5302,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cms.h</key>
 		<data>
@@ -5322,7 +5322,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf_api.h</key>
 		<data>
@@ -5334,7 +5334,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h</key>
 		<data>
-		yjr15PIOf/CqzXE+85wawHh2fs8=
+		QHnJsrU4bBKEKavpabchMyFg1qw=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/conftypes.h</key>
 		<data>
@@ -5346,11 +5346,11 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_object.h</key>
 		<data>
@@ -5398,7 +5398,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/dherr.h</key>
 		<data>
@@ -5462,7 +5462,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ess.h</key>
 		<data>
@@ -5474,7 +5474,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/evperr.h</key>
 		<data>
@@ -5494,15 +5494,15 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/idea.h</key>
 		<data>
@@ -5518,7 +5518,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/macros.h</key>
 		<data>
@@ -5546,7 +5546,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/objects.h</key>
 		<data>
@@ -5570,7 +5570,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ossl_typ.h</key>
 		<data>
@@ -5606,7 +5606,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7err.h</key>
 		<data>
@@ -5626,7 +5626,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/rand.h</key>
 		<data>
@@ -5670,7 +5670,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sha.h</key>
 		<data>
@@ -5690,7 +5690,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl2.h</key>
 		<data>
@@ -5702,11 +5702,11 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/stack.h</key>
 		<data>
@@ -5770,7 +5770,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509err.h</key>
 		<data>
@@ -5786,7 +5786,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Info.plist</key>
 		<data>
-		JNDlylPmM0ICLugnp7oBSPEc+I0=
+		gfVRBzQuHVlKIE3HAhPmhpt8z7g=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Modules/module.modulemap</key>
 		<data>
@@ -5794,7 +5794,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL</key>
 		<data>
-		ZtAv+X5o8mZ9ynkghcyygulEyWI=
+		6a6hSSpSM/Dvyeu5Xnz5ZzTdaqQ=
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -5802,7 +5802,7 @@
 		</data>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources</key>
 		<data>
-		JpugKEilXXUy158vYwyBom/CX8Q=
+		nKQC+b8gu3cOxpe0RscFuCBj5XM=
 		</data>
 	</dict>
 	<key>files2</key>
@@ -5844,11 +5844,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/asn1t.h</key>
@@ -5888,11 +5888,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/bioerr.h</key>
@@ -5998,11 +5998,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/cmp_util.h</key>
@@ -6020,11 +6020,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/cms.h</key>
@@ -6075,11 +6075,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/conf_api.h</key>
@@ -6108,11 +6108,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			ia9Lq9Ma5Kl0sdwkNFmHsS3OUkU=
+			MFiooVP1OE4028WfQZREAH2Ma64=
 			</data>
 			<key>hash2</key>
 			<data>
-			U+oCGPKn5mmjbIJuiM9+qxL6r+Nyru/o9FRYnKGxn88=
+			nYZRBqi1sSU1SGq1+GEl+ZtOkMzUzBwMp4jmSNG+gF4=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/conftypes.h</key>
@@ -6141,22 +6141,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/core_object.h</key>
@@ -6284,11 +6284,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/dherr.h</key>
@@ -6460,11 +6460,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/ess.h</key>
@@ -6493,11 +6493,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/evperr.h</key>
@@ -6548,33 +6548,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/idea.h</key>
@@ -6614,11 +6614,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/macros.h</key>
@@ -6691,11 +6691,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/objects.h</key>
@@ -6757,11 +6757,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/ossl_typ.h</key>
@@ -6856,11 +6856,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/pkcs7err.h</key>
@@ -6911,11 +6911,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/rand.h</key>
@@ -7032,11 +7032,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/sha.h</key>
@@ -7087,11 +7087,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/ssl2.h</key>
@@ -7120,22 +7120,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/stack.h</key>
@@ -7307,11 +7307,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Headers/x509err.h</key>
@@ -7351,11 +7351,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QrYuUiaf0eAsvjMGE/3sfZCnj4w=
+			0M5H0ChbB+HbzSq0fxnVTEuStwM=
 			</data>
 			<key>hash2</key>
 			<data>
-			MRmdqi7o64zQeeEzXyVuVnyppULwR62CENH2DLFXEmY=
+			QzxIXyqtMwsO7lvjvyKXOL3x/giC5cNZIjC+hMfE26c=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/Modules/module.modulemap</key>
@@ -7373,11 +7373,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			7JonS9XM9veasPdXQEhq+nihrRY=
+			W7uFmy9Ecf9hCnYNZIV8EryPx9A=
 			</data>
 			<key>hash2</key>
 			<data>
-			3PitdlxxHUwxthm6dMGWSfJw4RTHnBgjAtwEA5g0vZE=
+			cYGvEOz4x5268V6B71cVQocVZlCJMnR63wouNr8ywpk=
 			</data>
 		</dict>
 		<key>ios-arm64/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
@@ -7395,11 +7395,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			fC3oucFnqWZPqNAJ10CQhnPJk8Y=
+			8WzMZW73b2KvTo5pjRehz1O5DFY=
 			</data>
 			<key>hash2</key>
 			<data>
-			G9NBOFfM2hZurj6x4/NykX33CixPdq1l8RS92Yi7b08=
+			FSI+AVs0AQViZrbo9pG1UjX1hgiO+4jw4A8ItJ47QWQ=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Headers</key>
@@ -7459,11 +7459,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/asn1t.h</key>
@@ -7503,11 +7503,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/bioerr.h</key>
@@ -7613,11 +7613,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmp_util.h</key>
@@ -7635,11 +7635,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cms.h</key>
@@ -7690,11 +7690,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/conf_api.h</key>
@@ -7723,11 +7723,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			lScZfdfcK3XXRdUgxXzIzzZ9CoM=
+			i+9GbPbFWiftInpFiRJ9aEvJmFk=
 			</data>
 			<key>hash2</key>
 			<data>
-			+jfF9b6H8IHvka44tRlIBPNUCGZJHt5pUyvP/gzKB1U=
+			vPsBXnSq792SdhY8trfuMoDoG/ngWckXRzIMy71iz4Q=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/conftypes.h</key>
@@ -7756,22 +7756,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_object.h</key>
@@ -7899,11 +7899,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/dherr.h</key>
@@ -8075,11 +8075,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ess.h</key>
@@ -8108,11 +8108,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/evperr.h</key>
@@ -8163,33 +8163,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/idea.h</key>
@@ -8229,11 +8229,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/macros.h</key>
@@ -8306,11 +8306,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/objects.h</key>
@@ -8372,11 +8372,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ossl_typ.h</key>
@@ -8471,11 +8471,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/pkcs7err.h</key>
@@ -8526,11 +8526,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/rand.h</key>
@@ -8647,11 +8647,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sha.h</key>
@@ -8702,11 +8702,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ssl2.h</key>
@@ -8735,22 +8735,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/stack.h</key>
@@ -8922,11 +8922,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/x509err.h</key>
@@ -8977,22 +8977,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OtyS1Dz6HLbi3iD9en5zLUCY1Cs=
+			GWxse/66X5T7RNWVAVxlaWkLGgg=
 			</data>
 			<key>hash2</key>
 			<data>
-			lItXVa1QYAgaq54rK4J6ZbZRLQdC0/IX2jtL6dsusGU=
+			yyT9Lj8B50GNzJPuwQMWRbc3I4ph7t+fPfb0S+Pfka4=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Resources/Info.plist</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			locKjucac2EJ89FRFaQ2fAquWYc=
+			5W0vEiZk7ITLhx3QF5fsQmDSSNc=
 			</data>
 			<key>hash2</key>
 			<data>
-			ez/Aj0H33BcLqRgrYn5ICQTTXnbR7jOS5WgmhhjSVUg=
+			VcU7auj9ICh7uMZaOAU/f692zrBm9+U0FO4t+jnHU8g=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Resources/PrivacyInfo.xcprivacy</key>
@@ -9010,11 +9010,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			hrSqgBpvYsXxI967h50+QSo7A7w=
+			1AL6uDYUrUO/++r9FvoxPoZNW+c=
 			</data>
 			<key>hash2</key>
 			<data>
-			cceqFNG102ub9xGF1i/D88uhzK5cCb0KfmGSLWrvyPE=
+			3/uNodLBlq8izZTjzswdOoEVGT9f0b/7clJw37I1Qww=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/Current</key>
@@ -9059,11 +9059,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1t.h</key>
@@ -9103,11 +9103,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/bioerr.h</key>
@@ -9213,11 +9213,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp_util.h</key>
@@ -9235,11 +9235,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cms.h</key>
@@ -9290,11 +9290,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf_api.h</key>
@@ -9323,11 +9323,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			ia9Lq9Ma5Kl0sdwkNFmHsS3OUkU=
+			MFiooVP1OE4028WfQZREAH2Ma64=
 			</data>
 			<key>hash2</key>
 			<data>
-			U+oCGPKn5mmjbIJuiM9+qxL6r+Nyru/o9FRYnKGxn88=
+			nYZRBqi1sSU1SGq1+GEl+ZtOkMzUzBwMp4jmSNG+gF4=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/conftypes.h</key>
@@ -9356,22 +9356,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_object.h</key>
@@ -9499,11 +9499,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/dherr.h</key>
@@ -9675,11 +9675,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ess.h</key>
@@ -9708,11 +9708,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/evperr.h</key>
@@ -9763,33 +9763,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/idea.h</key>
@@ -9829,11 +9829,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/macros.h</key>
@@ -9906,11 +9906,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/objects.h</key>
@@ -9972,11 +9972,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ossl_typ.h</key>
@@ -10071,11 +10071,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7err.h</key>
@@ -10126,11 +10126,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/rand.h</key>
@@ -10247,11 +10247,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sha.h</key>
@@ -10302,11 +10302,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl2.h</key>
@@ -10335,22 +10335,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/stack.h</key>
@@ -10522,11 +10522,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509err.h</key>
@@ -10566,11 +10566,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Wx0Sw4H53tuW3NqecVlInMDXno4=
+			1fmnrzc1+fTlJCB5QahopmxgsCE=
 			</data>
 			<key>hash2</key>
 			<data>
-			gMk5rxj8HmTLxEjMno/GnrNq3cDd+KTQMwcjSUWyJpo=
+			7mT/E2SEVXk9Nz1Xg2U3zxgBoN+OyFP6CFfxseYCugA=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/Modules/module.modulemap</key>
@@ -10588,11 +10588,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			q9iM5x2mXn+A54mbHgXuLArAnGg=
+			lE9L6ExnwtaLBPEBl/5jFn82m60=
 			</data>
 			<key>hash2</key>
 			<data>
-			4ihcMeQlnzveT6vlogYf/W+Lg4mayZoXdmtJhCEgYY4=
+			IX2iv7aeMkLiDlnaUlIMSxt5Ep6hHIbN5QOJyU2r8WE=
 			</data>
 		</dict>
 		<key>ios-arm64_x86_64-simulator/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
@@ -10610,11 +10610,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eWd3qtmct8/l+Kb1qHnrNDRxnxc=
+			q3znbvhYq+Oe5rcYCZIILqK3p9E=
 			</data>
 			<key>hash2</key>
 			<data>
-			QSrokYkggRiOg8rQjZv/6wxG3vvYIY6WW8ZTqbgmmiY=
+			p+U0hbg2AMaM9kJvTb3z9QwkYIE6SAyZxRuCddikOM0=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Headers</key>
@@ -10674,11 +10674,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/asn1t.h</key>
@@ -10718,11 +10718,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/bioerr.h</key>
@@ -10828,11 +10828,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmp_util.h</key>
@@ -10850,11 +10850,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cms.h</key>
@@ -10905,11 +10905,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/conf_api.h</key>
@@ -10938,11 +10938,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			lScZfdfcK3XXRdUgxXzIzzZ9CoM=
+			i+9GbPbFWiftInpFiRJ9aEvJmFk=
 			</data>
 			<key>hash2</key>
 			<data>
-			+jfF9b6H8IHvka44tRlIBPNUCGZJHt5pUyvP/gzKB1U=
+			vPsBXnSq792SdhY8trfuMoDoG/ngWckXRzIMy71iz4Q=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/conftypes.h</key>
@@ -10971,22 +10971,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_object.h</key>
@@ -11114,11 +11114,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/dherr.h</key>
@@ -11290,11 +11290,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ess.h</key>
@@ -11323,11 +11323,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/evperr.h</key>
@@ -11378,33 +11378,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/idea.h</key>
@@ -11444,11 +11444,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/macros.h</key>
@@ -11521,11 +11521,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/objects.h</key>
@@ -11587,11 +11587,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ossl_typ.h</key>
@@ -11686,11 +11686,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/pkcs7err.h</key>
@@ -11741,11 +11741,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/rand.h</key>
@@ -11862,11 +11862,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sha.h</key>
@@ -11917,11 +11917,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ssl2.h</key>
@@ -11950,22 +11950,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/stack.h</key>
@@ -12137,11 +12137,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/x509err.h</key>
@@ -12192,22 +12192,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PDry7lDe12unud2VEVBYjXHZJ+8=
+			JZty5X1iBChh5AOTz6HXhNCamug=
 			</data>
 			<key>hash2</key>
 			<data>
-			pP28PwrFoF0Pima2Q0O/l0hEvp2H9Vr2wZQD8Bb3mWQ=
+			Pa0YIwsFiBnYlZDaIURRcs8KHynFQnfN+WZ4Qm5aHyc=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Resources/Info.plist</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			ygSh/JNcojZ+defoLJ/ubUODJLc=
+			RVfpW11pj5w5M5ZTL/SkqGynaN8=
 			</data>
 			<key>hash2</key>
 			<data>
-			X+T9j5rz5orbYzukuy7H2TfiCOx9yj/t2Vxn7bcwYwg=
+			3F/RwVsnL4REPwj/FLKyYJA3570XliTO/lTmKe/HzQM=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/A/Resources/PrivacyInfo.xcprivacy</key>
@@ -12225,11 +12225,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			z61dC00PwhxwyWfylvAv7YprDZU=
+			q/j3Ta+L3hNfrPNjdz46equS2AI=
 			</data>
 			<key>hash2</key>
 			<data>
-			hSzlLV/sxaqYvaLnG/2HjoYMAxe7HfCj8u3Y9BeKgog=
+			QRuA81z8KWhl3e/2bdATfKa8hLsTPUbSpBg19FPAaT4=
 			</data>
 		</dict>
 		<key>macos-arm64_x86_64/OpenSSL.framework/Versions/Current</key>
@@ -12274,11 +12274,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/asn1t.h</key>
@@ -12318,11 +12318,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/bioerr.h</key>
@@ -12428,11 +12428,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/cmp_util.h</key>
@@ -12450,11 +12450,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/cms.h</key>
@@ -12505,11 +12505,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/conf_api.h</key>
@@ -12538,11 +12538,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			31BE8LwRUj29KzYtu8s7CYNvvoY=
+			uq6EBUgROXJefAoIu8jjfcdUMSg=
 			</data>
 			<key>hash2</key>
 			<data>
-			ER9xEddHqSW07OKwxmxDF6wnf3kxWVZk/1pXhWOkMRg=
+			0xjQLhfP7NnFyVR7Zyunl/Vf475YpuuV5M/sNQckdd0=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/conftypes.h</key>
@@ -12571,22 +12571,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/core_object.h</key>
@@ -12714,11 +12714,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/dherr.h</key>
@@ -12890,11 +12890,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/ess.h</key>
@@ -12923,11 +12923,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/evperr.h</key>
@@ -12978,33 +12978,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/idea.h</key>
@@ -13044,11 +13044,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/macros.h</key>
@@ -13121,11 +13121,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/objects.h</key>
@@ -13187,11 +13187,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/ossl_typ.h</key>
@@ -13286,11 +13286,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/pkcs7err.h</key>
@@ -13341,11 +13341,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/rand.h</key>
@@ -13462,11 +13462,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/sha.h</key>
@@ -13517,11 +13517,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/ssl2.h</key>
@@ -13550,22 +13550,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/stack.h</key>
@@ -13737,11 +13737,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Headers/x509err.h</key>
@@ -13781,11 +13781,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+KCnD2Ok5EzpN+IJyljnRpZaVNw=
+			8A79UJgte5+L5td+gODvDoGGl8I=
 			</data>
 			<key>hash2</key>
 			<data>
-			PKHco/SMnSI8FStTmuehhnGEd73EcTltbMQh9JtwNtA=
+			5kkl8NipcC+WRNeWrIM8sjvZMWzLlBhxzOmGNkslGu4=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/Modules/module.modulemap</key>
@@ -13803,11 +13803,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			vafs0Gdc3tkRfJuQ4JjeyCrW/tE=
+			lxGTOwyWFNXZOfzOrtsFfAhLrMY=
 			</data>
 			<key>hash2</key>
 			<data>
-			E2AcRg1hdtS0TZt5VjH2EZpHS4HlodHUkMKTDBLM4tM=
+			t3oCitCxTgUBwU0WsZlXFZ4mt0mYhKzAMk8njBLMJaI=
 			</data>
 		</dict>
 		<key>tvos-arm64/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
@@ -13825,11 +13825,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C8CXTyLi7JpI0jtr+EYLYsNzc58=
+			xh8zPeiHSdXJVPf4vV4le6Ve8yA=
 			</data>
 			<key>hash2</key>
 			<data>
-			kzCgm2WwCoRphy5CwBYhn1OmnnP/ymD7Ff69rjB7qc4=
+			nZnNo6DV4IhmsO/9On4taSIEScGC5P+I10AKc24wvUA=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/OpenSSL.h</key>
@@ -13869,11 +13869,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1t.h</key>
@@ -13913,11 +13913,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bioerr.h</key>
@@ -14023,11 +14023,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp_util.h</key>
@@ -14045,11 +14045,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cms.h</key>
@@ -14100,11 +14100,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf_api.h</key>
@@ -14133,11 +14133,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			31BE8LwRUj29KzYtu8s7CYNvvoY=
+			uq6EBUgROXJefAoIu8jjfcdUMSg=
 			</data>
 			<key>hash2</key>
 			<data>
-			ER9xEddHqSW07OKwxmxDF6wnf3kxWVZk/1pXhWOkMRg=
+			0xjQLhfP7NnFyVR7Zyunl/Vf475YpuuV5M/sNQckdd0=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conftypes.h</key>
@@ -14166,22 +14166,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_object.h</key>
@@ -14309,11 +14309,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dherr.h</key>
@@ -14485,11 +14485,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ess.h</key>
@@ -14518,11 +14518,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evperr.h</key>
@@ -14573,33 +14573,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/idea.h</key>
@@ -14639,11 +14639,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/macros.h</key>
@@ -14716,11 +14716,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/objects.h</key>
@@ -14782,11 +14782,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ossl_typ.h</key>
@@ -14881,11 +14881,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7err.h</key>
@@ -14936,11 +14936,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/rand.h</key>
@@ -15057,11 +15057,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sha.h</key>
@@ -15112,11 +15112,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl2.h</key>
@@ -15145,22 +15145,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/stack.h</key>
@@ -15332,11 +15332,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509err.h</key>
@@ -15376,11 +15376,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			gd7rWr8OhyDXUVClEo5R5CxFUjQ=
+			RujmUhI9pGkvC2ffIjcIJJ7xTBA=
 			</data>
 			<key>hash2</key>
 			<data>
-			cQVcZDXk2qpQ8Dn4tYmsb2pZ+6YIm3rJzD3kzEtrSM4=
+			EHUMPa4I/bL4xygfXy8DkHRRo+rk2AfLppeHxixTY7g=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/Modules/module.modulemap</key>
@@ -15398,11 +15398,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			cVV2aKrAO0bY8Qv7kIfqwOV5+XU=
+			9E++9WNEj+TbE0uJP8nOTAhHl/4=
 			</data>
 			<key>hash2</key>
 			<data>
-			0wmn2cImRPOBRPu/Xcgk5fM5z9fqePzD9fq/NUZe+Ik=
+			MNJvWx73CYVPeFw7S5I9eYCijH2UUnLj0tqgB8j2LSU=
 			</data>
 		</dict>
 		<key>tvos-arm64_x86_64-simulator/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
@@ -15420,11 +15420,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			4Zk2Yw2gG2t+9OksayZGVL5EP5I=
+			+Qg7DKkZDQ0KJpBfLiMQwm3/G74=
 			</data>
 			<key>hash2</key>
 			<data>
-			2BU7EnR/yhQ9R09fuZJPFwWTpK8P2IpY+SWobfEeP3A=
+			o9g024JrwaXBBrFamhb7iknxOpoC6dypqmWL2QmNSD4=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/OpenSSL.h</key>
@@ -15464,11 +15464,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/asn1t.h</key>
@@ -15508,11 +15508,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/bioerr.h</key>
@@ -15618,11 +15618,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmp_util.h</key>
@@ -15640,11 +15640,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cms.h</key>
@@ -15695,11 +15695,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/conf_api.h</key>
@@ -15728,11 +15728,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			mp4WLl5nQWdzgpf97VWrQ5tGnbY=
+			2105ELXL7WvSfSB26S9l/juILmg=
 			</data>
 			<key>hash2</key>
 			<data>
-			IpHQkJF4VaqWvnjuBwDTpgPit005UE7TD1zcMBHXGV0=
+			GzGZPhjWponkERprdtYtXJ3Qe5xq4pjL32P/iKMmkTQ=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/conftypes.h</key>
@@ -15761,22 +15761,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_object.h</key>
@@ -15904,11 +15904,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/dherr.h</key>
@@ -16080,11 +16080,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ess.h</key>
@@ -16113,11 +16113,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/evperr.h</key>
@@ -16168,33 +16168,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/idea.h</key>
@@ -16234,11 +16234,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/macros.h</key>
@@ -16311,11 +16311,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/objects.h</key>
@@ -16377,11 +16377,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ossl_typ.h</key>
@@ -16476,11 +16476,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/pkcs7err.h</key>
@@ -16531,11 +16531,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/rand.h</key>
@@ -16652,11 +16652,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sha.h</key>
@@ -16707,11 +16707,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ssl2.h</key>
@@ -16740,22 +16740,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/stack.h</key>
@@ -16927,11 +16927,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/x509err.h</key>
@@ -16971,11 +16971,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			WsRRl8h68x1Yl3IxQopDVCxzZAM=
+			W9oyX9WV39Z79V9nzFllt5GEQzg=
 			</data>
 			<key>hash2</key>
 			<data>
-			OWMfecToWvQr7yA6X6CUavuRO1mr9ppQAZFfDV6qfZs=
+			7EvEV+0R42VkzTeCq3Ovhj2G++s2Zh6VAK9mcV+NnIo=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Modules/module.modulemap</key>
@@ -16993,11 +16993,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Z1/jv/bLilofslm6qhQIfU8x9nc=
+			EKbjqyRkc2QtO5V29uwhZliW1WU=
 			</data>
 			<key>hash2</key>
 			<data>
-			ZZ0rBr+Iducb/qFkBAYe2FZkrsUoO+rAC/JiHAnmep4=
+			vAYkr/4ds0fdU//OJZlW6fZP8+aNlGikbh3NFDJDutc=
 			</data>
 		</dict>
 		<key>watchos-arm64_arm64_32_armv7k/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
@@ -17015,11 +17015,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			NW2synqq1hfrFw4e5LrNHAKk7Jk=
+			cudZOh2ccY7ARzXYxyDhwbbos5M=
 			</data>
 			<key>hash2</key>
 			<data>
-			1CMyGxIxvZr5pq3DlYlkMgvQAxyzkVxYqE+jFTHgvps=
+			/sWxaYwrL2Ca5VRlhmDanAccIei+b7HaLG4yTheW/rg=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/OpenSSL.h</key>
@@ -17059,11 +17059,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1t.h</key>
@@ -17103,11 +17103,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bioerr.h</key>
@@ -17213,11 +17213,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp_util.h</key>
@@ -17235,11 +17235,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cms.h</key>
@@ -17290,11 +17290,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf_api.h</key>
@@ -17323,11 +17323,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			mp4WLl5nQWdzgpf97VWrQ5tGnbY=
+			2105ELXL7WvSfSB26S9l/juILmg=
 			</data>
 			<key>hash2</key>
 			<data>
-			IpHQkJF4VaqWvnjuBwDTpgPit005UE7TD1zcMBHXGV0=
+			GzGZPhjWponkERprdtYtXJ3Qe5xq4pjL32P/iKMmkTQ=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conftypes.h</key>
@@ -17356,22 +17356,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_object.h</key>
@@ -17499,11 +17499,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dherr.h</key>
@@ -17675,11 +17675,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ess.h</key>
@@ -17708,11 +17708,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evperr.h</key>
@@ -17763,33 +17763,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/idea.h</key>
@@ -17829,11 +17829,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/macros.h</key>
@@ -17906,11 +17906,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/objects.h</key>
@@ -17972,11 +17972,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ossl_typ.h</key>
@@ -18071,11 +18071,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7err.h</key>
@@ -18126,11 +18126,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/rand.h</key>
@@ -18247,11 +18247,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sha.h</key>
@@ -18302,11 +18302,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl2.h</key>
@@ -18335,22 +18335,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/stack.h</key>
@@ -18522,11 +18522,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509err.h</key>
@@ -18566,11 +18566,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			HLzm/NeSNfFVhCsA8UzYIsaUqHM=
+			BaBjJFDy/wmh+4hCtvTo+wR8/t4=
 			</data>
 			<key>hash2</key>
 			<data>
-			zh4IYk9shXSHqrlEkGJ6RGB9JiFll+LfF9qAyfk/k/s=
+			VAk4yNwgEk8qCQYC5q69+dpRK3hg1c8VS8cOTLjA41A=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/Modules/module.modulemap</key>
@@ -18588,11 +18588,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Js75VAcaY86wGetSiwdzgCTb+yw=
+			EuZQWGQtthYXV/JHO0hP+RJiv2Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			huIvx4jEXxlHop2YA8/UEOOfGq1gXG2M1ztxWdd2/3w=
+			rtgqFs3UpT1UNN4OUyE2RMjDWp+zigL28JXI23Fb3wI=
 			</data>
 		</dict>
 		<key>watchos-arm64_x86_64-simulator/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
@@ -18610,11 +18610,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			vjgXs87TkvGD3NE/5/BYke8Cdx0=
+			WxS3IS8S6+BQV+5v3HTac4NcpmY=
 			</data>
 			<key>hash2</key>
 			<data>
-			nv2c79u5D0TwtZ/Wg4PcI/tiAGcNvAkJeUjA5DP79Cc=
+			Ktu5dZwbQ8EK5Xn65r3lIf+coB5JND8iNj+8hxSTDCk=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/OpenSSL.h</key>
@@ -18654,11 +18654,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/asn1t.h</key>
@@ -18698,11 +18698,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/bioerr.h</key>
@@ -18808,11 +18808,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/cmp_util.h</key>
@@ -18830,11 +18830,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/cms.h</key>
@@ -18885,11 +18885,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/conf_api.h</key>
@@ -18918,11 +18918,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			yjr15PIOf/CqzXE+85wawHh2fs8=
+			QHnJsrU4bBKEKavpabchMyFg1qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			kQ0lT9tiBDKsIi568LOmHyQmGYb3fv0zm5pkr4ipmEQ=
+			/1F1LK3Okl498njz5uYoJsQbFIfRsnc9SBHVh4neOaA=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/conftypes.h</key>
@@ -18951,22 +18951,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/core_object.h</key>
@@ -19094,11 +19094,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/dherr.h</key>
@@ -19270,11 +19270,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/ess.h</key>
@@ -19303,11 +19303,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/evperr.h</key>
@@ -19358,33 +19358,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/idea.h</key>
@@ -19424,11 +19424,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/macros.h</key>
@@ -19501,11 +19501,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/objects.h</key>
@@ -19567,11 +19567,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/ossl_typ.h</key>
@@ -19666,11 +19666,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/pkcs7err.h</key>
@@ -19721,11 +19721,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/rand.h</key>
@@ -19842,11 +19842,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/sha.h</key>
@@ -19897,11 +19897,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/ssl2.h</key>
@@ -19930,22 +19930,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/stack.h</key>
@@ -20117,11 +20117,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Headers/x509err.h</key>
@@ -20161,11 +20161,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			bah+ENbAp1Hpqi3etWGe3quZea0=
+			/XbqrrnFkhc9Trgp5hE4N03KGbI=
 			</data>
 			<key>hash2</key>
 			<data>
-			ZXUi3a0lzOUncL/oI+shKT2KEc+Gr3druuSfR0JnbRw=
+			2UWNXlJxEzewX312gFgELLAo6aQOKB//SCwht0Mtz8w=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/Modules/module.modulemap</key>
@@ -20183,11 +20183,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			uyymGMp16tTb2784jGasLFclgcQ=
+			YWQ0YruvWa8K4Rcwq6glLGSpO7A=
 			</data>
 			<key>hash2</key>
 			<data>
-			bokENjBojCMlbMZXAgmF5BEimBA2LsS3vMXx52at0jI=
+			yRL8pC/P8XJyevAaNac9dfyl6Abq58DwC3V4ypOwg9U=
 			</data>
 		</dict>
 		<key>xros-arm64/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
@@ -20205,11 +20205,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			2dBykbxAEg2+Lru1wHo619dMqmw=
+			bNhaIOtpvHof1CDtbQS5c/x6+pY=
 			</data>
 			<key>hash2</key>
 			<data>
-			lM7Zw2CaeyAdtrN/AWmcOtID8Ye6FnuU4JsNar+0b5A=
+			9HdAyerMOqf5uT/mSFQdE9tIhFTC3ZzaQQ7+OEK8l9g=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/OpenSSL.h</key>
@@ -20249,11 +20249,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1t.h</key>
@@ -20293,11 +20293,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/bioerr.h</key>
@@ -20403,11 +20403,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp_util.h</key>
@@ -20425,11 +20425,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cms.h</key>
@@ -20480,11 +20480,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf_api.h</key>
@@ -20513,11 +20513,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			yjr15PIOf/CqzXE+85wawHh2fs8=
+			QHnJsrU4bBKEKavpabchMyFg1qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			kQ0lT9tiBDKsIi568LOmHyQmGYb3fv0zm5pkr4ipmEQ=
+			/1F1LK3Okl498njz5uYoJsQbFIfRsnc9SBHVh4neOaA=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/conftypes.h</key>
@@ -20546,22 +20546,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_object.h</key>
@@ -20689,11 +20689,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/dherr.h</key>
@@ -20865,11 +20865,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ess.h</key>
@@ -20898,11 +20898,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/evperr.h</key>
@@ -20953,33 +20953,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/idea.h</key>
@@ -21019,11 +21019,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/macros.h</key>
@@ -21096,11 +21096,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/objects.h</key>
@@ -21162,11 +21162,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ossl_typ.h</key>
@@ -21261,11 +21261,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7err.h</key>
@@ -21316,11 +21316,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/rand.h</key>
@@ -21437,11 +21437,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sha.h</key>
@@ -21492,11 +21492,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl2.h</key>
@@ -21525,22 +21525,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/stack.h</key>
@@ -21712,11 +21712,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509err.h</key>
@@ -21756,11 +21756,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JNDlylPmM0ICLugnp7oBSPEc+I0=
+			gfVRBzQuHVlKIE3HAhPmhpt8z7g=
 			</data>
 			<key>hash2</key>
 			<data>
-			iJ5cRP6sq2jWWgRB4Ua97PvGaBV4YH7Wm9E8Ntrjm5g=
+			SFtw65E7kgmkfOGYZwQIeAwhTON/rZHp4tEp1vfEkm0=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/Modules/module.modulemap</key>
@@ -21778,11 +21778,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			ZtAv+X5o8mZ9ynkghcyygulEyWI=
+			6a6hSSpSM/Dvyeu5Xnz5ZzTdaqQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			wq8oj2/EEFEfZ4IvPqY1cUClhL9bKlgp1nk6PyGoawA=
+			zuA7EktTBrTlWyUCeHNqvuaUQN5OT0HIlgHxDeeBbeY=
 			</data>
 		</dict>
 		<key>xros-arm64_x86_64-simulator/OpenSSL.framework/PrivacyInfo.xcprivacy</key>
@@ -21800,11 +21800,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JpugKEilXXUy158vYwyBom/CX8Q=
+			nKQC+b8gu3cOxpe0RscFuCBj5XM=
 			</data>
 			<key>hash2</key>
 			<data>
-			nowMDL2ghnQFo1ZQJfDnEUAKPibgq9EKrm9fmpW1Ork=
+			p6qkOXKCwPNcyMRA+9Dw6YiHocmhGxvg651iCug+sD4=
 			</data>
 		</dict>
 	</dict>
diff --git a/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeSignature b/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeSignature
index 8e73d125..f63cd661 100644
Binary files a/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeSignature and b/Frameworks/OpenSSL.xcframework/_CodeSignature/CodeSignature differ
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/asn1err.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/bio.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/cmp.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/cmperr.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/conf.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/configuration.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/configuration.h
index 09071376..1dacd74f 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_iOS
 #  define OPENSSL_SYS_iOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/core_names.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/dh.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/err.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/evp.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/hpke.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/http.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/httperr.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/lhash.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/opensslv.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/quic.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/self_test.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/ssl.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/sslerr.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Info.plist b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Info.plist
index df714eec..7fdcc31f 100644
Binary files a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Info.plist and b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/OpenSSL b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/OpenSSL
index 1ead36f9..feddcc8e 100755
Binary files a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/OpenSSL and b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/_CodeSignature/CodeResources
index 79e5f552..e70e8a48 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		ia9Lq9Ma5Kl0sdwkNFmHsS3OUkU=
+		MFiooVP1OE4028WfQZREAH2Ma64=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		QrYuUiaf0eAsvjMGE/3sfZCnj4w=
+		0M5H0ChbB+HbzSq0fxnVTEuStwM=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			U+oCGPKn5mmjbIJuiM9+qxL6r+Nyru/o9FRYnKGxn88=
+			nYZRBqi1sSU1SGq1+GEl+ZtOkMzUzBwMp4jmSNG+gF4=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/asn1err.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/asn1err.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/bio.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/bio.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmp.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmp.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmperr.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmperr.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/conf.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/conf.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/configuration.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/configuration.h
index 9eac98ec..775e0c38 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/configuration.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_MacOSX
 #  define OPENSSL_SYS_MacOSX 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_dispatch.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_names.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_names.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/dh.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/dh.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/err.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/err.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/evp.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/evp.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/hpke.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/hpke.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/http.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/http.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/httperr.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/httperr.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/lhash.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/lhash.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/obj_mac.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/obj_mac.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/opensslv.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/opensslv.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/pkcs7.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/pkcs7.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/quic.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/quic.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/self_test.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/self_test.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ssl.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ssl.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/x509_vfy.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/OpenSSL b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/OpenSSL
index 1065a5b9..fefea833 100755
Binary files a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/OpenSSL and b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/OpenSSL differ
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Resources/Info.plist b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Resources/Info.plist
index 2a79dc8f..941acfe9 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Resources/Info.plist
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/Resources/Info.plist
@@ -17,7 +17,7 @@
 	<key>CFBundlePackageType</key>
 	<string>FMWK</string>
 	<key>CFBundleShortVersionString</key>
-	<string>3.2.2000</string>
+	<string>3.3.1000</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
index 1e983872..4a7383d7 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-maccatalyst/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
@@ -6,7 +6,7 @@
 	<dict>
 		<key>Resources/Info.plist</key>
 		<data>
-		locKjucac2EJ89FRFaQ2fAquWYc=
+		5W0vEiZk7ITLhx3QF5fsQmDSSNc=
 		</data>
 		<key>Resources/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -40,7 +40,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -68,7 +68,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -138,7 +138,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -152,7 +152,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -187,7 +187,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -208,7 +208,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+jfF9b6H8IHvka44tRlIBPNUCGZJHt5pUyvP/gzKB1U=
+			vPsBXnSq792SdhY8trfuMoDoG/ngWckXRzIMy71iz4Q=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -229,14 +229,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -320,7 +320,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -432,7 +432,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -453,7 +453,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -488,21 +488,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -530,7 +530,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -579,7 +579,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -621,7 +621,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -684,7 +684,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -719,7 +719,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -796,7 +796,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -831,7 +831,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -852,14 +852,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -971,7 +971,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
@@ -1006,7 +1006,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			ez/Aj0H33BcLqRgrYn5ICQTTXnbR7jOS5WgmhhjSVUg=
+			VcU7auj9ICh7uMZaOAU/f692zrBm9+U0FO4t+jnHU8g=
 			</data>
 		</dict>
 		<key>Resources/PrivacyInfo.xcprivacy</key>
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
index 09071376..1dacd74f 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_iOS
 #  define OPENSSL_SYS_iOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Info.plist b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Info.plist
index a536f4bb..555a1a47 100644
Binary files a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Info.plist and b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL
index d5d69022..5a86e511 100755
Binary files a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL and b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
index b5ffae67..14664b9d 100644
--- a/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/ios-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		ia9Lq9Ma5Kl0sdwkNFmHsS3OUkU=
+		MFiooVP1OE4028WfQZREAH2Ma64=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		Wx0Sw4H53tuW3NqecVlInMDXno4=
+		1fmnrzc1+fTlJCB5QahopmxgsCE=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			U+oCGPKn5mmjbIJuiM9+qxL6r+Nyru/o9FRYnKGxn88=
+			nYZRBqi1sSU1SGq1+GEl+ZtOkMzUzBwMp4jmSNG+gF4=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/asn1err.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/asn1err.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/bio.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/bio.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmp.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmp.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmperr.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmperr.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/conf.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/conf.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/configuration.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/configuration.h
index 9eac98ec..775e0c38 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/configuration.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_MacOSX
 #  define OPENSSL_SYS_MacOSX 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_dispatch.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_names.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_names.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/dh.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/dh.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/err.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/err.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/evp.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/evp.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/hpke.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/hpke.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/http.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/http.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/httperr.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/httperr.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/lhash.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/lhash.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/obj_mac.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/obj_mac.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/opensslv.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/opensslv.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/pkcs7.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/pkcs7.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/quic.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/quic.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/self_test.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/self_test.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ssl.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ssl.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/x509_vfy.h b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/OpenSSL b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/OpenSSL
index 4bb27c47..302ed2da 100755
Binary files a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/OpenSSL and b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/OpenSSL differ
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Resources/Info.plist b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Resources/Info.plist
index 5c5ffe87..75d14e2c 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Resources/Info.plist
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/Resources/Info.plist
@@ -17,7 +17,7 @@
 	<key>CFBundlePackageType</key>
 	<string>FMWK</string>
 	<key>CFBundleShortVersionString</key>
-	<string>3.2.2000</string>
+	<string>3.3.1000</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
diff --git a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
index 649dc7a4..7b8df78e 100644
--- a/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/macos-arm64_x86_64/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
@@ -6,7 +6,7 @@
 	<dict>
 		<key>Resources/Info.plist</key>
 		<data>
-		ygSh/JNcojZ+defoLJ/ubUODJLc=
+		RVfpW11pj5w5M5ZTL/SkqGynaN8=
 		</data>
 		<key>Resources/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -40,7 +40,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -68,7 +68,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -138,7 +138,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -152,7 +152,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -187,7 +187,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -208,7 +208,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+jfF9b6H8IHvka44tRlIBPNUCGZJHt5pUyvP/gzKB1U=
+			vPsBXnSq792SdhY8trfuMoDoG/ngWckXRzIMy71iz4Q=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -229,14 +229,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -320,7 +320,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -432,7 +432,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -453,7 +453,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -488,21 +488,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -530,7 +530,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -579,7 +579,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -621,7 +621,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -684,7 +684,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -719,7 +719,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -796,7 +796,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -831,7 +831,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -852,14 +852,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -971,7 +971,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
@@ -1006,7 +1006,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			X+T9j5rz5orbYzukuy7H2TfiCOx9yj/t2Vxn7bcwYwg=
+			3F/RwVsnL4REPwj/FLKyYJA3570XliTO/lTmKe/HzQM=
 			</data>
 		</dict>
 		<key>Resources/PrivacyInfo.xcprivacy</key>
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/asn1err.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/bio.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/cmp.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/cmperr.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/conf.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/configuration.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/configuration.h
index e53c0dac..ec23fdc0 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_tvOS
 #  define OPENSSL_SYS_tvOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/core_names.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/dh.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/err.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/evp.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/hpke.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/http.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/httperr.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/lhash.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/opensslv.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/quic.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/self_test.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/ssl.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/sslerr.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Info.plist b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Info.plist
index 47917f5a..55b2b421 100644
Binary files a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Info.plist and b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/OpenSSL b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/OpenSSL
index a192b9b4..131af151 100755
Binary files a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/OpenSSL and b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/_CodeSignature/CodeResources
index 11bdded8..f1860b37 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		31BE8LwRUj29KzYtu8s7CYNvvoY=
+		uq6EBUgROXJefAoIu8jjfcdUMSg=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		+KCnD2Ok5EzpN+IJyljnRpZaVNw=
+		8A79UJgte5+L5td+gODvDoGGl8I=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			ER9xEddHqSW07OKwxmxDF6wnf3kxWVZk/1pXhWOkMRg=
+			0xjQLhfP7NnFyVR7Zyunl/Vf475YpuuV5M/sNQckdd0=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
index e53c0dac..ec23fdc0 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_tvOS
 #  define OPENSSL_SYS_tvOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Info.plist b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Info.plist
index dbbb02ac..0612ec33 100644
Binary files a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Info.plist and b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL
index c271073a..d6eeed56 100755
Binary files a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL and b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
index aea24d78..170e3e44 100644
--- a/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/tvos-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		31BE8LwRUj29KzYtu8s7CYNvvoY=
+		uq6EBUgROXJefAoIu8jjfcdUMSg=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		gd7rWr8OhyDXUVClEo5R5CxFUjQ=
+		RujmUhI9pGkvC2ffIjcIJJ7xTBA=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			ER9xEddHqSW07OKwxmxDF6wnf3kxWVZk/1pXhWOkMRg=
+			0xjQLhfP7NnFyVR7Zyunl/Vf475YpuuV5M/sNQckdd0=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/asn1err.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/bio.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmp.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmperr.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/conf.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/configuration.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/configuration.h
index 2e2e7246..ccd77db9 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_watchOS
 #  define OPENSSL_SYS_watchOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_names.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/dh.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/err.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/evp.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/hpke.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/http.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/httperr.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/lhash.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/opensslv.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/quic.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/self_test.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ssl.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Info.plist b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Info.plist
index 7ae8585c..3bebab2c 100644
Binary files a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Info.plist and b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/OpenSSL b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/OpenSSL
index 3aed3e4e..0e33f245 100755
Binary files a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/OpenSSL and b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/_CodeSignature/CodeResources
index cd1e626c..a07e2e72 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_arm64_32_armv7k/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		mp4WLl5nQWdzgpf97VWrQ5tGnbY=
+		2105ELXL7WvSfSB26S9l/juILmg=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		WsRRl8h68x1Yl3IxQopDVCxzZAM=
+		W9oyX9WV39Z79V9nzFllt5GEQzg=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -616,11 +616,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -660,11 +660,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -770,11 +770,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -792,11 +792,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -847,11 +847,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -880,11 +880,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			mp4WLl5nQWdzgpf97VWrQ5tGnbY=
+			2105ELXL7WvSfSB26S9l/juILmg=
 			</data>
 			<key>hash2</key>
 			<data>
-			IpHQkJF4VaqWvnjuBwDTpgPit005UE7TD1zcMBHXGV0=
+			GzGZPhjWponkERprdtYtXJ3Qe5xq4pjL32P/iKMmkTQ=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -913,22 +913,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -1056,11 +1056,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -1232,11 +1232,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1265,11 +1265,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1320,33 +1320,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1386,11 +1386,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1463,11 +1463,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1529,11 +1529,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1628,11 +1628,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1683,11 +1683,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1804,11 +1804,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1859,11 +1859,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1892,22 +1892,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -2079,11 +2079,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
index 2e2e7246..ccd77db9 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_watchOS
 #  define OPENSSL_SYS_watchOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Info.plist b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Info.plist
index d200789f..d930707e 100644
Binary files a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Info.plist and b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL
index 60376eab..617b4438 100755
Binary files a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL and b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
index 4459eb91..a994d895 100644
--- a/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/watchos-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		mp4WLl5nQWdzgpf97VWrQ5tGnbY=
+		2105ELXL7WvSfSB26S9l/juILmg=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		HLzm/NeSNfFVhCsA8UzYIsaUqHM=
+		BaBjJFDy/wmh+4hCtvTo+wR8/t4=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			IpHQkJF4VaqWvnjuBwDTpgPit005UE7TD1zcMBHXGV0=
+			GzGZPhjWponkERprdtYtXJ3Qe5xq4pjL32P/iKMmkTQ=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/asn1err.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/bio.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/cmp.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/cmperr.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/conf.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/configuration.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/configuration.h
index c29c8891..cc8c2a01 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_XROS
 #  define OPENSSL_SYS_XROS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/core_names.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/dh.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/err.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/evp.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/hpke.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/http.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/httperr.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/lhash.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/opensslv.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/quic.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/self_test.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/ssl.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/sslerr.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Info.plist b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Info.plist
index 1c80f059..0595eb5b 100644
Binary files a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Info.plist and b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/OpenSSL b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/OpenSSL
index dd26080e..e43afabb 100755
Binary files a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/OpenSSL and b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/_CodeSignature/CodeResources
index eaf262c0..aac8ba1e 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		yjr15PIOf/CqzXE+85wawHh2fs8=
+		QHnJsrU4bBKEKavpabchMyFg1qw=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		bah+ENbAp1Hpqi3etWGe3quZea0=
+		/XbqrrnFkhc9Trgp5hE4N03KGbI=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			kQ0lT9tiBDKsIi568LOmHyQmGYb3fv0zm5pkr4ipmEQ=
+			/1F1LK3Okl498njz5uYoJsQbFIfRsnc9SBHVh4neOaA=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
index c29c8891..cc8c2a01 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_XROS
 #  define OPENSSL_SYS_XROS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Info.plist b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Info.plist
index b29902ed..26937db5 100644
Binary files a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Info.plist and b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL
index a2d260b4..59e580f0 100755
Binary files a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL and b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
index 7caea289..1ffd77d3 100644
--- a/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/OpenSSL.xcframework/xros-arm64_x86_64-simulator/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		yjr15PIOf/CqzXE+85wawHh2fs8=
+		QHnJsrU4bBKEKavpabchMyFg1qw=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		JNDlylPmM0ICLugnp7oBSPEc+I0=
+		gfVRBzQuHVlKIE3HAhPmhpt8z7g=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			kQ0lT9tiBDKsIi568LOmHyQmGYb3fv0zm5pkr4ipmEQ=
+			/1F1LK3Okl498njz5uYoJsQbFIfRsnc9SBHVh4neOaA=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/asn1err.h b/Frameworks/appletvos/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/bio.h b/Frameworks/appletvos/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/cmp.h b/Frameworks/appletvos/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/cmperr.h b/Frameworks/appletvos/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/conf.h b/Frameworks/appletvos/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/configuration.h b/Frameworks/appletvos/OpenSSL.framework/Headers/configuration.h
index e53c0dac..ec23fdc0 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_tvOS
 #  define OPENSSL_SYS_tvOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/appletvos/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/core_names.h b/Frameworks/appletvos/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/dh.h b/Frameworks/appletvos/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/err.h b/Frameworks/appletvos/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/evp.h b/Frameworks/appletvos/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/hpke.h b/Frameworks/appletvos/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/http.h b/Frameworks/appletvos/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/httperr.h b/Frameworks/appletvos/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/lhash.h b/Frameworks/appletvos/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/appletvos/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/opensslv.h b/Frameworks/appletvos/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/appletvos/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/quic.h b/Frameworks/appletvos/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/self_test.h b/Frameworks/appletvos/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/ssl.h b/Frameworks/appletvos/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/sslerr.h b/Frameworks/appletvos/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/appletvos/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/appletvos/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/appletvos/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/appletvos/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/appletvos/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/appletvos/OpenSSL.framework/Info.plist b/Frameworks/appletvos/OpenSSL.framework/Info.plist
index 47917f5a..55b2b421 100644
Binary files a/Frameworks/appletvos/OpenSSL.framework/Info.plist and b/Frameworks/appletvos/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/appletvos/OpenSSL.framework/OpenSSL b/Frameworks/appletvos/OpenSSL.framework/OpenSSL
index a192b9b4..131af151 100755
Binary files a/Frameworks/appletvos/OpenSSL.framework/OpenSSL and b/Frameworks/appletvos/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/appletvos/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/appletvos/OpenSSL.framework/_CodeSignature/CodeResources
index 11bdded8..f1860b37 100644
--- a/Frameworks/appletvos/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/appletvos/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		31BE8LwRUj29KzYtu8s7CYNvvoY=
+		uq6EBUgROXJefAoIu8jjfcdUMSg=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		+KCnD2Ok5EzpN+IJyljnRpZaVNw=
+		8A79UJgte5+L5td+gODvDoGGl8I=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			ER9xEddHqSW07OKwxmxDF6wnf3kxWVZk/1pXhWOkMRg=
+			0xjQLhfP7NnFyVR7Zyunl/Vf475YpuuV5M/sNQckdd0=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/asn1err.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/bio.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/cmp.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/cmperr.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/conf.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/configuration.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/configuration.h
index e53c0dac..ec23fdc0 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_tvOS
 #  define OPENSSL_SYS_tvOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/core_names.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/dh.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/err.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/evp.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/hpke.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/http.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/httperr.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/lhash.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/opensslv.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/quic.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/self_test.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/ssl.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/sslerr.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/Info.plist b/Frameworks/appletvsimulator/OpenSSL.framework/Info.plist
index dbbb02ac..0612ec33 100644
Binary files a/Frameworks/appletvsimulator/OpenSSL.framework/Info.plist and b/Frameworks/appletvsimulator/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/OpenSSL b/Frameworks/appletvsimulator/OpenSSL.framework/OpenSSL
index c271073a..d6eeed56 100755
Binary files a/Frameworks/appletvsimulator/OpenSSL.framework/OpenSSL and b/Frameworks/appletvsimulator/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/appletvsimulator/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/appletvsimulator/OpenSSL.framework/_CodeSignature/CodeResources
index aea24d78..170e3e44 100644
--- a/Frameworks/appletvsimulator/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/appletvsimulator/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		31BE8LwRUj29KzYtu8s7CYNvvoY=
+		uq6EBUgROXJefAoIu8jjfcdUMSg=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		gd7rWr8OhyDXUVClEo5R5CxFUjQ=
+		RujmUhI9pGkvC2ffIjcIJJ7xTBA=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			ER9xEddHqSW07OKwxmxDF6wnf3kxWVZk/1pXhWOkMRg=
+			0xjQLhfP7NnFyVR7Zyunl/Vf475YpuuV5M/sNQckdd0=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/asn1err.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/bio.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/cmp.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/cmperr.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/conf.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/configuration.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/configuration.h
index 09071376..1dacd74f 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_iOS
 #  define OPENSSL_SYS_iOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/core_names.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/dh.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/err.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/evp.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/hpke.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/http.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/httperr.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/lhash.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/opensslv.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/quic.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/self_test.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/ssl.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/sslerr.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/iphoneos/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/iphoneos/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/iphoneos/OpenSSL.framework/Info.plist b/Frameworks/iphoneos/OpenSSL.framework/Info.plist
index df714eec..7fdcc31f 100644
Binary files a/Frameworks/iphoneos/OpenSSL.framework/Info.plist and b/Frameworks/iphoneos/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/iphoneos/OpenSSL.framework/OpenSSL b/Frameworks/iphoneos/OpenSSL.framework/OpenSSL
index 1ead36f9..feddcc8e 100755
Binary files a/Frameworks/iphoneos/OpenSSL.framework/OpenSSL and b/Frameworks/iphoneos/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/iphoneos/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/iphoneos/OpenSSL.framework/_CodeSignature/CodeResources
index 79e5f552..e70e8a48 100644
--- a/Frameworks/iphoneos/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/iphoneos/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		ia9Lq9Ma5Kl0sdwkNFmHsS3OUkU=
+		MFiooVP1OE4028WfQZREAH2Ma64=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		QrYuUiaf0eAsvjMGE/3sfZCnj4w=
+		0M5H0ChbB+HbzSq0fxnVTEuStwM=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			U+oCGPKn5mmjbIJuiM9+qxL6r+Nyru/o9FRYnKGxn88=
+			nYZRBqi1sSU1SGq1+GEl+ZtOkMzUzBwMp4jmSNG+gF4=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/asn1err.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/bio.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/cmp.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/cmperr.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/conf.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/configuration.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/configuration.h
index 09071376..1dacd74f 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_iOS
 #  define OPENSSL_SYS_iOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/core_names.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/dh.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/err.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/evp.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/hpke.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/http.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/httperr.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/lhash.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/opensslv.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/quic.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/self_test.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/ssl.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/sslerr.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/Info.plist b/Frameworks/iphonesimulator/OpenSSL.framework/Info.plist
index a536f4bb..555a1a47 100644
Binary files a/Frameworks/iphonesimulator/OpenSSL.framework/Info.plist and b/Frameworks/iphonesimulator/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/OpenSSL b/Frameworks/iphonesimulator/OpenSSL.framework/OpenSSL
index d5d69022..5a86e511 100755
Binary files a/Frameworks/iphonesimulator/OpenSSL.framework/OpenSSL and b/Frameworks/iphonesimulator/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/iphonesimulator/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/iphonesimulator/OpenSSL.framework/_CodeSignature/CodeResources
index b5ffae67..14664b9d 100644
--- a/Frameworks/iphonesimulator/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/iphonesimulator/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		ia9Lq9Ma5Kl0sdwkNFmHsS3OUkU=
+		MFiooVP1OE4028WfQZREAH2Ma64=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		Wx0Sw4H53tuW3NqecVlInMDXno4=
+		1fmnrzc1+fTlJCB5QahopmxgsCE=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			U+oCGPKn5mmjbIJuiM9+qxL6r+Nyru/o9FRYnKGxn88=
+			nYZRBqi1sSU1SGq1+GEl+ZtOkMzUzBwMp4jmSNG+gF4=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/asn1err.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/asn1err.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/bio.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/bio.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/cmp.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/cmp.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/cmperr.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/cmperr.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/conf.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/conf.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/configuration.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/configuration.h
index 9eac98ec..775e0c38 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/configuration.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_MacOSX
 #  define OPENSSL_SYS_MacOSX 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/core_dispatch.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/core_names.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/core_names.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/dh.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/dh.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/err.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/err.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/evp.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/evp.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/hpke.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/hpke.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/http.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/http.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/httperr.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/httperr.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/lhash.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/lhash.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/obj_mac.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/obj_mac.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/opensslv.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/opensslv.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/pkcs7.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/pkcs7.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/quic.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/quic.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/self_test.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/self_test.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/ssl.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/ssl.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/sslerr.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/sslerr.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/x509_vfy.h b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/OpenSSL b/Frameworks/macosx/OpenSSL.framework/Versions/A/OpenSSL
index 4bb27c47..302ed2da 100755
Binary files a/Frameworks/macosx/OpenSSL.framework/Versions/A/OpenSSL and b/Frameworks/macosx/OpenSSL.framework/Versions/A/OpenSSL differ
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/Resources/Info.plist b/Frameworks/macosx/OpenSSL.framework/Versions/A/Resources/Info.plist
index 5c5ffe87..75d14e2c 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/Resources/Info.plist
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/Resources/Info.plist
@@ -17,7 +17,7 @@
 	<key>CFBundlePackageType</key>
 	<string>FMWK</string>
 	<key>CFBundleShortVersionString</key>
-	<string>3.2.2000</string>
+	<string>3.3.1000</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
diff --git a/Frameworks/macosx/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources b/Frameworks/macosx/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
index 649dc7a4..7b8df78e 100644
--- a/Frameworks/macosx/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
+++ b/Frameworks/macosx/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
@@ -6,7 +6,7 @@
 	<dict>
 		<key>Resources/Info.plist</key>
 		<data>
-		ygSh/JNcojZ+defoLJ/ubUODJLc=
+		RVfpW11pj5w5M5ZTL/SkqGynaN8=
 		</data>
 		<key>Resources/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -40,7 +40,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -68,7 +68,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -138,7 +138,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -152,7 +152,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -187,7 +187,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -208,7 +208,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+jfF9b6H8IHvka44tRlIBPNUCGZJHt5pUyvP/gzKB1U=
+			vPsBXnSq792SdhY8trfuMoDoG/ngWckXRzIMy71iz4Q=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -229,14 +229,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -320,7 +320,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -432,7 +432,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -453,7 +453,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -488,21 +488,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -530,7 +530,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -579,7 +579,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -621,7 +621,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -684,7 +684,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -719,7 +719,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -796,7 +796,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -831,7 +831,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -852,14 +852,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -971,7 +971,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
@@ -1006,7 +1006,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			X+T9j5rz5orbYzukuy7H2TfiCOx9yj/t2Vxn7bcwYwg=
+			3F/RwVsnL4REPwj/FLKyYJA3570XliTO/lTmKe/HzQM=
 			</data>
 		</dict>
 		<key>Resources/PrivacyInfo.xcprivacy</key>
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/asn1err.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/asn1err.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/bio.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/bio.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/cmp.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/cmp.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/cmperr.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/cmperr.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/conf.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/conf.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/configuration.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/configuration.h
index 9eac98ec..775e0c38 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/configuration.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_MacOSX
 #  define OPENSSL_SYS_MacOSX 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/core_dispatch.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/core_names.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/core_names.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/dh.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/dh.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/err.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/err.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/evp.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/evp.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/hpke.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/hpke.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/http.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/http.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/httperr.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/httperr.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/lhash.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/lhash.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/obj_mac.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/obj_mac.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/opensslv.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/opensslv.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/pkcs7.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/pkcs7.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/quic.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/quic.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/self_test.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/self_test.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/ssl.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/ssl.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/sslerr.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/sslerr.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/x509_vfy.h b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/OpenSSL b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/OpenSSL
index 1065a5b9..fefea833 100755
Binary files a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/OpenSSL and b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/OpenSSL differ
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Resources/Info.plist b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Resources/Info.plist
index 2a79dc8f..941acfe9 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Resources/Info.plist
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/Resources/Info.plist
@@ -17,7 +17,7 @@
 	<key>CFBundlePackageType</key>
 	<string>FMWK</string>
 	<key>CFBundleShortVersionString</key>
-	<string>3.2.2000</string>
+	<string>3.3.1000</string>
 	<key>CFBundleSupportedPlatforms</key>
 	<array>
 		<string>MacOSX</string>
diff --git a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
index 1e983872..4a7383d7 100644
--- a/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
+++ b/Frameworks/macosx_catalyst/OpenSSL.framework/Versions/A/_CodeSignature/CodeResources
@@ -6,7 +6,7 @@
 	<dict>
 		<key>Resources/Info.plist</key>
 		<data>
-		locKjucac2EJ89FRFaQ2fAquWYc=
+		5W0vEiZk7ITLhx3QF5fsQmDSSNc=
 		</data>
 		<key>Resources/PrivacyInfo.xcprivacy</key>
 		<data>
@@ -40,7 +40,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -68,7 +68,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -138,7 +138,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -152,7 +152,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -187,7 +187,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -208,7 +208,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+jfF9b6H8IHvka44tRlIBPNUCGZJHt5pUyvP/gzKB1U=
+			vPsBXnSq792SdhY8trfuMoDoG/ngWckXRzIMy71iz4Q=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -229,14 +229,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -320,7 +320,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -432,7 +432,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -453,7 +453,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -488,21 +488,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -530,7 +530,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -579,7 +579,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -621,7 +621,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -684,7 +684,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -719,7 +719,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -796,7 +796,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -831,7 +831,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -852,14 +852,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -971,7 +971,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
@@ -1006,7 +1006,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			ez/Aj0H33BcLqRgrYn5ICQTTXnbR7jOS5WgmhhjSVUg=
+			VcU7auj9ICh7uMZaOAU/f692zrBm9+U0FO4t+jnHU8g=
 			</data>
 		</dict>
 		<key>Resources/PrivacyInfo.xcprivacy</key>
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/asn1err.h b/Frameworks/visionos/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/bio.h b/Frameworks/visionos/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/cmp.h b/Frameworks/visionos/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/cmperr.h b/Frameworks/visionos/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/conf.h b/Frameworks/visionos/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/configuration.h b/Frameworks/visionos/OpenSSL.framework/Headers/configuration.h
index c29c8891..cc8c2a01 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_XROS
 #  define OPENSSL_SYS_XROS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/visionos/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/core_names.h b/Frameworks/visionos/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/dh.h b/Frameworks/visionos/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/err.h b/Frameworks/visionos/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/evp.h b/Frameworks/visionos/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/hpke.h b/Frameworks/visionos/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/http.h b/Frameworks/visionos/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/httperr.h b/Frameworks/visionos/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/lhash.h b/Frameworks/visionos/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/visionos/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/opensslv.h b/Frameworks/visionos/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/visionos/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/quic.h b/Frameworks/visionos/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/self_test.h b/Frameworks/visionos/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/ssl.h b/Frameworks/visionos/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/sslerr.h b/Frameworks/visionos/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/visionos/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/visionos/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/visionos/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/visionos/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/visionos/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/visionos/OpenSSL.framework/Info.plist b/Frameworks/visionos/OpenSSL.framework/Info.plist
index 1c80f059..0595eb5b 100644
Binary files a/Frameworks/visionos/OpenSSL.framework/Info.plist and b/Frameworks/visionos/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/visionos/OpenSSL.framework/OpenSSL b/Frameworks/visionos/OpenSSL.framework/OpenSSL
index dd26080e..e43afabb 100755
Binary files a/Frameworks/visionos/OpenSSL.framework/OpenSSL and b/Frameworks/visionos/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/visionos/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/visionos/OpenSSL.framework/_CodeSignature/CodeResources
index eaf262c0..aac8ba1e 100644
--- a/Frameworks/visionos/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/visionos/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		yjr15PIOf/CqzXE+85wawHh2fs8=
+		QHnJsrU4bBKEKavpabchMyFg1qw=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		bah+ENbAp1Hpqi3etWGe3quZea0=
+		/XbqrrnFkhc9Trgp5hE4N03KGbI=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			kQ0lT9tiBDKsIi568LOmHyQmGYb3fv0zm5pkr4ipmEQ=
+			/1F1LK3Okl498njz5uYoJsQbFIfRsnc9SBHVh4neOaA=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/asn1err.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/bio.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/cmp.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/cmperr.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/conf.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/configuration.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/configuration.h
index c29c8891..cc8c2a01 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_XROS
 #  define OPENSSL_SYS_XROS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/core_names.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/dh.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/err.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/evp.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/hpke.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/http.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/httperr.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/lhash.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/opensslv.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/quic.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/self_test.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/ssl.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/sslerr.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/visionsimulator/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/visionsimulator/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/Info.plist b/Frameworks/visionsimulator/OpenSSL.framework/Info.plist
index b29902ed..26937db5 100644
Binary files a/Frameworks/visionsimulator/OpenSSL.framework/Info.plist and b/Frameworks/visionsimulator/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/OpenSSL b/Frameworks/visionsimulator/OpenSSL.framework/OpenSSL
index a2d260b4..59e580f0 100755
Binary files a/Frameworks/visionsimulator/OpenSSL.framework/OpenSSL and b/Frameworks/visionsimulator/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/visionsimulator/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/visionsimulator/OpenSSL.framework/_CodeSignature/CodeResources
index 7caea289..1ffd77d3 100644
--- a/Frameworks/visionsimulator/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/visionsimulator/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		yjr15PIOf/CqzXE+85wawHh2fs8=
+		QHnJsrU4bBKEKavpabchMyFg1qw=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		JNDlylPmM0ICLugnp7oBSPEc+I0=
+		gfVRBzQuHVlKIE3HAhPmhpt8z7g=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			kQ0lT9tiBDKsIi568LOmHyQmGYb3fv0zm5pkr4ipmEQ=
+			/1F1LK3Okl498njz5uYoJsQbFIfRsnc9SBHVh4neOaA=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/asn1err.h b/Frameworks/watchos/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/bio.h b/Frameworks/watchos/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/cmp.h b/Frameworks/watchos/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/cmperr.h b/Frameworks/watchos/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/conf.h b/Frameworks/watchos/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/configuration.h b/Frameworks/watchos/OpenSSL.framework/Headers/configuration.h
index 2e2e7246..ccd77db9 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_watchOS
 #  define OPENSSL_SYS_watchOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/watchos/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/core_names.h b/Frameworks/watchos/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/dh.h b/Frameworks/watchos/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/err.h b/Frameworks/watchos/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/evp.h b/Frameworks/watchos/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/hpke.h b/Frameworks/watchos/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/http.h b/Frameworks/watchos/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/httperr.h b/Frameworks/watchos/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/lhash.h b/Frameworks/watchos/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/watchos/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/opensslv.h b/Frameworks/watchos/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/watchos/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/quic.h b/Frameworks/watchos/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/self_test.h b/Frameworks/watchos/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/ssl.h b/Frameworks/watchos/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/sslerr.h b/Frameworks/watchos/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/watchos/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/watchos/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/watchos/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/watchos/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/watchos/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/watchos/OpenSSL.framework/Info.plist b/Frameworks/watchos/OpenSSL.framework/Info.plist
index 7ae8585c..3bebab2c 100644
Binary files a/Frameworks/watchos/OpenSSL.framework/Info.plist and b/Frameworks/watchos/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/watchos/OpenSSL.framework/OpenSSL b/Frameworks/watchos/OpenSSL.framework/OpenSSL
index 3aed3e4e..0e33f245 100755
Binary files a/Frameworks/watchos/OpenSSL.framework/OpenSSL and b/Frameworks/watchos/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/watchos/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/watchos/OpenSSL.framework/_CodeSignature/CodeResources
index cd1e626c..a07e2e72 100644
--- a/Frameworks/watchos/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/watchos/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		mp4WLl5nQWdzgpf97VWrQ5tGnbY=
+		2105ELXL7WvSfSB26S9l/juILmg=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		WsRRl8h68x1Yl3IxQopDVCxzZAM=
+		W9oyX9WV39Z79V9nzFllt5GEQzg=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -616,11 +616,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+			tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 			</data>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -660,11 +660,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			jf7KjxIHyE1IXp6H14cZiso92NU=
+			YlOVaYcoCYGmOsI0cFQExE8zTHo=
 			</data>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -770,11 +770,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+			xCuyoR5pMRqZp1xeLqqSUKSumks=
 			</data>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -792,11 +792,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+			/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 			</data>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -847,11 +847,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eoMetSrNK1X+ip6Nv4MhDZFxESE=
+			uKHi3TarJFMYjjWf1z8JGfIa4JM=
 			</data>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -880,11 +880,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			mp4WLl5nQWdzgpf97VWrQ5tGnbY=
+			2105ELXL7WvSfSB26S9l/juILmg=
 			</data>
 			<key>hash2</key>
 			<data>
-			IpHQkJF4VaqWvnjuBwDTpgPit005UE7TD1zcMBHXGV0=
+			GzGZPhjWponkERprdtYtXJ3Qe5xq4pjL32P/iKMmkTQ=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -913,22 +913,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			OEt2/D0GlXTJj92u50WOnLzBcZw=
+			3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 			</data>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			14HBtWbGIKudKLLGnsLvx1qFFAw=
+			muDhvMAIq9syv9DDpI2Eln4p9/k=
 			</data>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -1056,11 +1056,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+			mlFON7uQ3znc8S1dGK7jI//oOHw=
 			</data>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -1232,11 +1232,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PtVZORM3ByW96U6jpN72xVA5Dlo=
+			lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 			</data>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1265,11 +1265,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			u8HQdWo73ke46uV//yNBE9jiFec=
+			vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 			</data>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1320,33 +1320,33 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			C4ovQTTt0OhXALzYIGunYN0Watg=
+			1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 			</data>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			iqn5HuY54xYRncFTjLQB6CcMbpY=
+			Ktagv9lGeWgtG9Tge8QQL6NMspc=
 			</data>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			AolyWtHI8Y0NmY8diKYtvWjct+U=
+			DXmVVJPwJRGSEZdwocYaihUkcMM=
 			</data>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1386,11 +1386,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+			aPN5seCrsrEnqx9e/7lMAnYJ7js=
 			</data>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1463,11 +1463,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			eTx8IurZN7tVu4hYlw/OjmcTMU4=
+			+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 			</data>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1529,11 +1529,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+			jGa77uZfMsb0DqLSVwBPQ0KDWac=
 			</data>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1628,11 +1628,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			klUHME98kAar+DN4RqP/9F2nqgA=
+			Chwdc/SINGThYh+on+ga5mSkmls=
 			</data>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1683,11 +1683,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			FT7e2yALtA5OrfVSMXVnHbyvNT0=
+			9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 			</data>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1804,11 +1804,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+			trEZmScMCm1QUXB647KLRL7eKpM=
 			</data>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1859,11 +1859,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+			XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 			</data>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1892,22 +1892,22 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			/eBMsgFyNFsW6ny0bkuBwgLrV74=
+			UeaJVIPl4vB912T3mUSgbH8zocs=
 			</data>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash</key>
 			<data>
-			6gpgGTeSU+IJ6H2NFelNPevTivw=
+			z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 			</data>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -2079,11 +2079,11 @@
 		<dict>
 			<key>hash</key>
 			<data>
-			8na6aklL2A7onuXeMTRthbXhwOk=
+			TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 			</data>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/asn1err.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/asn1err.h
index 4e6d052f..23dab986 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/asn1err.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/bio.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/bio.h
index 377fd310..eb91d61c 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/bio.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/cmp.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/cmp.h
index 342adaef..829d334d 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/cmp.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/cmperr.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/cmperr.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/conf.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/conf.h
index 581f435d..d99085b6 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/conf.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/configuration.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/configuration.h
index 2e2e7246..ccd77db9 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/configuration.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_watchOS
 #  define OPENSSL_SYS_watchOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/core_dispatch.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/core_dispatch.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/core_names.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/core_names.h
index ffffe90f..a6158056 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/core_names.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/dh.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/dh.h
index 50617e9e..c20ecb75 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/dh.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/err.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/err.h
index 42124abc..6b4f4165 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/err.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/evp.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/evp.h
index c8290eba..1716f700 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/evp.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/hpke.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/hpke.h
index e7155e4a..adefc552 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/hpke.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/http.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/http.h
index d33cc797..d3d786f0 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/http.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/httperr.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/httperr.h
index 70719671..d0aa82fb 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/httperr.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/lhash.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/lhash.h
index ea77b654..612121fd 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/lhash.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/obj_mac.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/obj_mac.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/opensslv.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/opensslv.h
index b3e2dc41..236448d7 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/opensslv.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/pkcs7.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/pkcs7.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/quic.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/quic.h
index 10aa86fc..79200a8c 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/quic.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/self_test.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/self_test.h
index 11ef0da3..46a024d9 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/self_test.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/ssl.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/ssl.h
index 0dbadf2f..006d063e 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/ssl.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/sslerr.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/sslerr.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/sslerr_legacy.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/sslerr_legacy.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Headers/x509_vfy.h b/Frameworks/watchsimulator/OpenSSL.framework/Headers/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/Headers/x509_vfy.h
+++ b/Frameworks/watchsimulator/OpenSSL.framework/Headers/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/Info.plist b/Frameworks/watchsimulator/OpenSSL.framework/Info.plist
index d200789f..d930707e 100644
Binary files a/Frameworks/watchsimulator/OpenSSL.framework/Info.plist and b/Frameworks/watchsimulator/OpenSSL.framework/Info.plist differ
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/OpenSSL b/Frameworks/watchsimulator/OpenSSL.framework/OpenSSL
index 60376eab..617b4438 100755
Binary files a/Frameworks/watchsimulator/OpenSSL.framework/OpenSSL and b/Frameworks/watchsimulator/OpenSSL.framework/OpenSSL differ
diff --git a/Frameworks/watchsimulator/OpenSSL.framework/_CodeSignature/CodeResources b/Frameworks/watchsimulator/OpenSSL.framework/_CodeSignature/CodeResources
index 4459eb91..a994d895 100644
--- a/Frameworks/watchsimulator/OpenSSL.framework/_CodeSignature/CodeResources
+++ b/Frameworks/watchsimulator/OpenSSL.framework/_CodeSignature/CodeResources
@@ -18,7 +18,7 @@
 		</data>
 		<key>Headers/asn1err.h</key>
 		<data>
-		JeA7I0xLe/TI7dJ40YvWZMzHzVA=
+		tS86Gqt0DEMXPaN6ssAVmjdGv8Y=
 		</data>
 		<key>Headers/asn1t.h</key>
 		<data>
@@ -34,7 +34,7 @@
 		</data>
 		<key>Headers/bio.h</key>
 		<data>
-		jf7KjxIHyE1IXp6H14cZiso92NU=
+		YlOVaYcoCYGmOsI0cFQExE8zTHo=
 		</data>
 		<key>Headers/bioerr.h</key>
 		<data>
@@ -74,7 +74,7 @@
 		</data>
 		<key>Headers/cmp.h</key>
 		<data>
-		3hQM8K1+mPoI1sq9JNa1vJ3t5OE=
+		xCuyoR5pMRqZp1xeLqqSUKSumks=
 		</data>
 		<key>Headers/cmp_util.h</key>
 		<data>
@@ -82,7 +82,7 @@
 		</data>
 		<key>Headers/cmperr.h</key>
 		<data>
-		+4BIw5MfBnznjtxha/Zr/iM7Ipc=
+		/wkFxOZ/b0IRxIbdxsMbr0v5Ic0=
 		</data>
 		<key>Headers/cms.h</key>
 		<data>
@@ -102,7 +102,7 @@
 		</data>
 		<key>Headers/conf.h</key>
 		<data>
-		eoMetSrNK1X+ip6Nv4MhDZFxESE=
+		uKHi3TarJFMYjjWf1z8JGfIa4JM=
 		</data>
 		<key>Headers/conf_api.h</key>
 		<data>
@@ -114,7 +114,7 @@
 		</data>
 		<key>Headers/configuration.h</key>
 		<data>
-		mp4WLl5nQWdzgpf97VWrQ5tGnbY=
+		2105ELXL7WvSfSB26S9l/juILmg=
 		</data>
 		<key>Headers/conftypes.h</key>
 		<data>
@@ -126,11 +126,11 @@
 		</data>
 		<key>Headers/core_dispatch.h</key>
 		<data>
-		OEt2/D0GlXTJj92u50WOnLzBcZw=
+		3ccgfSJ0j2WdwGzbs6pMPcW/6Fo=
 		</data>
 		<key>Headers/core_names.h</key>
 		<data>
-		14HBtWbGIKudKLLGnsLvx1qFFAw=
+		muDhvMAIq9syv9DDpI2Eln4p9/k=
 		</data>
 		<key>Headers/core_object.h</key>
 		<data>
@@ -178,7 +178,7 @@
 		</data>
 		<key>Headers/dh.h</key>
 		<data>
-		Hl6RySa2mJJRLspuJ3oCUWG+ZI4=
+		mlFON7uQ3znc8S1dGK7jI//oOHw=
 		</data>
 		<key>Headers/dherr.h</key>
 		<data>
@@ -242,7 +242,7 @@
 		</data>
 		<key>Headers/err.h</key>
 		<data>
-		PtVZORM3ByW96U6jpN72xVA5Dlo=
+		lbEJ8cCy0vzRzoJi7jH0EoL5sWA=
 		</data>
 		<key>Headers/ess.h</key>
 		<data>
@@ -254,7 +254,7 @@
 		</data>
 		<key>Headers/evp.h</key>
 		<data>
-		u8HQdWo73ke46uV//yNBE9jiFec=
+		vTXPZ9hwPkvT3kFXA1KTnmcy79I=
 		</data>
 		<key>Headers/evperr.h</key>
 		<data>
@@ -274,15 +274,15 @@
 		</data>
 		<key>Headers/hpke.h</key>
 		<data>
-		C4ovQTTt0OhXALzYIGunYN0Watg=
+		1uOnt9nZxAFqpiIsUaa5pVeGFWo=
 		</data>
 		<key>Headers/http.h</key>
 		<data>
-		iqn5HuY54xYRncFTjLQB6CcMbpY=
+		Ktagv9lGeWgtG9Tge8QQL6NMspc=
 		</data>
 		<key>Headers/httperr.h</key>
 		<data>
-		AolyWtHI8Y0NmY8diKYtvWjct+U=
+		DXmVVJPwJRGSEZdwocYaihUkcMM=
 		</data>
 		<key>Headers/idea.h</key>
 		<data>
@@ -298,7 +298,7 @@
 		</data>
 		<key>Headers/lhash.h</key>
 		<data>
-		PgUeXT+TG+vS7+7Zg5kwdmtHF7M=
+		aPN5seCrsrEnqx9e/7lMAnYJ7js=
 		</data>
 		<key>Headers/macros.h</key>
 		<data>
@@ -326,7 +326,7 @@
 		</data>
 		<key>Headers/obj_mac.h</key>
 		<data>
-		eTx8IurZN7tVu4hYlw/OjmcTMU4=
+		+Fe0JwOUvmyd4z0xGEpkegHCn2A=
 		</data>
 		<key>Headers/objects.h</key>
 		<data>
@@ -350,7 +350,7 @@
 		</data>
 		<key>Headers/opensslv.h</key>
 		<data>
-		8DC2PPQEp9NfoIYkZVAYlMKlmU4=
+		jGa77uZfMsb0DqLSVwBPQ0KDWac=
 		</data>
 		<key>Headers/ossl_typ.h</key>
 		<data>
@@ -386,7 +386,7 @@
 		</data>
 		<key>Headers/pkcs7.h</key>
 		<data>
-		klUHME98kAar+DN4RqP/9F2nqgA=
+		Chwdc/SINGThYh+on+ga5mSkmls=
 		</data>
 		<key>Headers/pkcs7err.h</key>
 		<data>
@@ -406,7 +406,7 @@
 		</data>
 		<key>Headers/quic.h</key>
 		<data>
-		FT7e2yALtA5OrfVSMXVnHbyvNT0=
+		9ocgTUMEYSxcQ5RvfdtIR/E9I3Q=
 		</data>
 		<key>Headers/rand.h</key>
 		<data>
@@ -450,7 +450,7 @@
 		</data>
 		<key>Headers/self_test.h</key>
 		<data>
-		QPR0wJcMnlUQg9wuqG/0SaOxdaI=
+		trEZmScMCm1QUXB647KLRL7eKpM=
 		</data>
 		<key>Headers/sha.h</key>
 		<data>
@@ -470,7 +470,7 @@
 		</data>
 		<key>Headers/ssl.h</key>
 		<data>
-		oyeWTq8IGSgBXlBoTSd/wpy5Og4=
+		XCC2K4VnOSwM6zhcxcVPhTa1+qw=
 		</data>
 		<key>Headers/ssl2.h</key>
 		<data>
@@ -482,11 +482,11 @@
 		</data>
 		<key>Headers/sslerr.h</key>
 		<data>
-		/eBMsgFyNFsW6ny0bkuBwgLrV74=
+		UeaJVIPl4vB912T3mUSgbH8zocs=
 		</data>
 		<key>Headers/sslerr_legacy.h</key>
 		<data>
-		6gpgGTeSU+IJ6H2NFelNPevTivw=
+		z3f5UfOZy1Pr5VQlQIeIN6u+nTQ=
 		</data>
 		<key>Headers/stack.h</key>
 		<data>
@@ -550,7 +550,7 @@
 		</data>
 		<key>Headers/x509_vfy.h</key>
 		<data>
-		8na6aklL2A7onuXeMTRthbXhwOk=
+		TGiLnQ1ntrkRA4Vyv8sD8akW1bM=
 		</data>
 		<key>Headers/x509err.h</key>
 		<data>
@@ -566,7 +566,7 @@
 		</data>
 		<key>Info.plist</key>
 		<data>
-		HLzm/NeSNfFVhCsA8UzYIsaUqHM=
+		BaBjJFDy/wmh+4hCtvTo+wR8/t4=
 		</data>
 		<key>Modules/module.modulemap</key>
 		<data>
@@ -604,7 +604,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			+/yNFfu/wp6fLt3mgcfkvmaDd+r5boSy4XF+MjICuSY=
+			VWNHVmMz+VR8twI6kxgnpqYi4b2+xUT85PgqwPx7nxA=
 			</data>
 		</dict>
 		<key>Headers/asn1t.h</key>
@@ -632,7 +632,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			UghErHYW+0e26vpZ8A6M15d+wM1L6vitWGaO52tS3LU=
+			aNmhfUY1kzX6kUao1ZbmKUzq+Lvf7OBJr3YX2fRmrc8=
 			</data>
 		</dict>
 		<key>Headers/bioerr.h</key>
@@ -702,7 +702,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			2CJ2luMqLO3PwnQg6ZGa66TuLoxHb/ItalzbI+m200o=
+			wNcNCnyFLkHvpYuvSkTazYfRYe7AfbZIgIMRKj9GQvg=
 			</data>
 		</dict>
 		<key>Headers/cmp_util.h</key>
@@ -716,7 +716,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			y0wIldwrV+MikpCTtCzbxTxw8qt+0NKfZiZTlKTQZmw=
+			p1TUonUahk3y3YQ7PVAefhGAukbsPwA2n+rf8L9Wrtw=
 			</data>
 		</dict>
 		<key>Headers/cms.h</key>
@@ -751,7 +751,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			qSBdcYYyXPkWJHt2hAkBtdCI6WF3w6b3pK5Lnhy4qJA=
+			AAfy70I9dbT6gzoNCcii/GRRH2wo+H7E9v7pxXI65u8=
 			</data>
 		</dict>
 		<key>Headers/conf_api.h</key>
@@ -772,7 +772,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			IpHQkJF4VaqWvnjuBwDTpgPit005UE7TD1zcMBHXGV0=
+			GzGZPhjWponkERprdtYtXJ3Qe5xq4pjL32P/iKMmkTQ=
 			</data>
 		</dict>
 		<key>Headers/conftypes.h</key>
@@ -793,14 +793,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			bqxsbb8kIjJRLTSEiReczoXgM8AmmZhmuh5EYdSyG8E=
+			Sp5odARjo/XNrHMX/yASTR4ZruivYJAt1JHUuJerUdk=
 			</data>
 		</dict>
 		<key>Headers/core_names.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			HELvq06+G42d2nagLGBmpn2olPiLOFv5imU6+kbDotY=
+			20NML2u3NTGQtl+VRW6+HQoZN+AWOOskAEL5sUIq87o=
 			</data>
 		</dict>
 		<key>Headers/core_object.h</key>
@@ -884,7 +884,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			DYD5Oy3aWijGe/9exmBzUQjsRviV+WOwk+W6d3+ymbg=
+			2u3uwLnAXMXU9SJsWZ8Nsx1a5AGj6xsvjMTEP6IM5rU=
 			</data>
 		</dict>
 		<key>Headers/dherr.h</key>
@@ -996,7 +996,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			OtC2kONUwoUIukUDUzK/VgXWtzJA6mtPYYrXe6Jgmkw=
+			HGTyfGzzLPsIKcaG2FNmiRO4uFhTGlAsrT6eom9Ume4=
 			</data>
 		</dict>
 		<key>Headers/ess.h</key>
@@ -1017,7 +1017,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			pcZ7SZve6yJx+g54liiQLaNZWKc9OaGjam7DBVALzTo=
+			bBP/yyeKJulnw80h8EQiAvri81GImsfHAo6VyiNHBG0=
 			</data>
 		</dict>
 		<key>Headers/evperr.h</key>
@@ -1052,21 +1052,21 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			1AuWJMq0cOr2d8CoejccY6gWVJ8jcdPhfVrGQ639yCk=
+			RNEFfAUEGkrdluJQcEqXg73fqD3+FuSLvdwFOUwMhEg=
 			</data>
 		</dict>
 		<key>Headers/http.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			6gY6xX3VRsijDfDPVaXWpkMuYE5/FDGmx8RMlWoVyrA=
+			6QawN2mWrMaCA0j49FXrX5fS7HqmHpPzHRDRF0fGSas=
 			</data>
 		</dict>
 		<key>Headers/httperr.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			I1NXAExcjuFb6kAWvWdGvRbAeDHMjdzRAuV0tztU8mw=
+			ixjSEzRC1FDdkK34N/zAJ/XZOCDxLBYj49XKpYU8QnU=
 			</data>
 		</dict>
 		<key>Headers/idea.h</key>
@@ -1094,7 +1094,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			F2f4RxI9RmbLe5nXWa0/5D4erEFG7nEjltJJrRYgyjo=
+			Jl5M1iNpQEqCt/a334+5FPd6GNzDHqPKIswNxpYj+Z0=
 			</data>
 		</dict>
 		<key>Headers/macros.h</key>
@@ -1143,7 +1143,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			waWImVMklfmf08QW1xgZF5Zjpm++Jy9ku5CrBX+g5VA=
+			32OpijQKu7446TvK4KPUCCGXw59Is8+AvFM7dE1vUhU=
 			</data>
 		</dict>
 		<key>Headers/objects.h</key>
@@ -1185,7 +1185,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			Qq2srRiduNulAmYB7zq68KxM32jsk2pG5P+nKjK2OzA=
+			p6LhV60TVRXwvH9R1DQe0IpqY6Q2BRQRv7LUsRX6pR0=
 			</data>
 		</dict>
 		<key>Headers/ossl_typ.h</key>
@@ -1248,7 +1248,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			CarN2EEspNpsc09r+tlmsQJxBfrw30RRvfID5lp66l4=
+			zCkInveoZF+oA9Ecw8R0zToureuVvTv0CCi7Y0YIIag=
 			</data>
 		</dict>
 		<key>Headers/pkcs7err.h</key>
@@ -1283,7 +1283,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			H1ZKGkL90zXDNitZ4DTwoubpZx7Bcnw9Zm/FuND0f8k=
+			SPkcihq/KH6nlnvGCQHHulj0PnU5yzsNIZF5VomaUCA=
 			</data>
 		</dict>
 		<key>Headers/rand.h</key>
@@ -1360,7 +1360,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			7AcNZC/dRld/Vqa7OQqbCZw48yS6sbbKWiH+ZzgW80I=
+			aulEBHsw394UeVzbz8W8Rg9C+u2+HXqFA/iucCZzEfk=
 			</data>
 		</dict>
 		<key>Headers/sha.h</key>
@@ -1395,7 +1395,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			WXSPtaTG3LWWKmUossQktztKYatlNzLIXsQHMX5UyAI=
+			6fI3N7bm56Upx28YxoU60PY63Ya+7Sr0IW9DaKoT2QI=
 			</data>
 		</dict>
 		<key>Headers/ssl2.h</key>
@@ -1416,14 +1416,14 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			5N6b5J1x19nRahdCyVy23rl9iDkTxUg2n7yY/u6Atz0=
+			Y9HnuHhWu2gJyronyfx+RvbErDLNYfqG2Mt0P+E8d10=
 			</data>
 		</dict>
 		<key>Headers/sslerr_legacy.h</key>
 		<dict>
 			<key>hash2</key>
 			<data>
-			tffJJERmZ986wfYNiRq5flAolrhG3Lk5spcb9GTx/pE=
+			6EGptM0651unRpZEtW7yVfaElRYn+qtFVdKUbAFNaiw=
 			</data>
 		</dict>
 		<key>Headers/stack.h</key>
@@ -1535,7 +1535,7 @@
 		<dict>
 			<key>hash2</key>
 			<data>
-			TDUYtTBN2AsRGiamZQ7R/kcg8jZe/p+yiUC37ePuH+c=
+			D3unJ/MBRVbQMy7KA6zzZ7LwZT99yhIEnFVQbKgQthg=
 			</data>
 		</dict>
 		<key>Headers/x509err.h</key>
diff --git a/Makefile b/Makefile
index de747d36..bea1dbbf 100644
--- a/Makefile
+++ b/Makefile
@@ -4,7 +4,7 @@
 
 .EXPORT_ALL_VARIABLES:
 
-OPENSSL_VERSION=3.2.2
+OPENSSL_VERSION=3.3.1
 IPHONEOS_DEPLOYMENT_VERSION=12.0
 MACOSX_DEPLOYMENT_TARGET=10.15
 XROS_DEPLOYMENT_VERSION=1.0
diff --git a/OpenSSL-Universal.podspec b/OpenSSL-Universal.podspec
index eb00c43a..d9202cb2 100644
--- a/OpenSSL-Universal.podspec
+++ b/OpenSSL-Universal.podspec
@@ -1,6 +1,6 @@
 Pod::Spec.new do |s|
   s.name         = "OpenSSL-Universal"
-  s.version      = "3.2.2000" # 3.2.2
+  s.version      = "3.3.1000" # 3.3.1
   s.summary      = "OpenSSL for iOS, macOS, tvOS, visionOS, watchOS"
   s.description  = "OpenSSL is an SSL/TLS and Crypto toolkit. Deprecated in macOS and gone in iOS, this spec gives your project non-deprecated OpenSSL support. Supports macOS, iOS, tvOS, visionOS, watchOS including Simulator (armv7s, arm64, x86_64)."
   s.homepage     = "https://github.com/krzyzanowskim/OpenSSL"
diff --git a/OpenSSL.json b/OpenSSL.json
index f3644986..82e49211 100644
--- a/OpenSSL.json
+++ b/OpenSSL.json
@@ -1,4 +1,5 @@
 {
+  "3.3.1000": "https://github.com/krzyzanowskim/OpenSSL/releases/download/3.3.1000/OpenSSL.xcframework.zip",
   "3.2.2000": "https://github.com/krzyzanowskim/OpenSSL/releases/download/3.2.2000/OpenSSL.xcframework.zip",
   "3.1.6000": "https://github.com/krzyzanowskim/OpenSSL/releases/download/3.1.6000/OpenSSL.xcframework.zip",
   "3.1.5007": "https://github.com/krzyzanowskim/OpenSSL/releases/download/3.1.5007/OpenSSL.xcframework.zip",
diff --git a/OpenSSL.xcodeproj/project.pbxproj b/OpenSSL.xcodeproj/project.pbxproj
index f156ee50..6abb7002 100644
--- a/OpenSSL.xcodeproj/project.pbxproj
+++ b/OpenSSL.xcodeproj/project.pbxproj
@@ -6827,7 +6827,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/watchos/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -6882,7 +6882,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/watchsimulator/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -6932,7 +6932,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/visionsimulator/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -6983,7 +6983,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/appletvsimulator/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7034,7 +7034,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/watchos/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7086,7 +7086,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/iphoneos/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7139,7 +7139,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/appletvsimulator/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7197,7 +7197,7 @@
 					"$(SRCROOT)/macosx/lib",
 				);
 				MACOSX_DEPLOYMENT_TARGET = 10.15;
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7303,7 +7303,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/visionos/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7402,7 +7402,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/visionsimulator/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7459,7 +7459,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/macosx_catalyst/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7517,7 +7517,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/macosx_catalyst/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7570,7 +7570,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/iphonesimulator/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7618,7 +7618,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/visionos/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7673,7 +7673,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/appletvos/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7728,7 +7728,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/watchsimulator/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7782,7 +7782,7 @@
 					"$(SRCROOT)/macosx/lib",
 				);
 				MACOSX_DEPLOYMENT_TARGET = 10.15;
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7831,7 +7831,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/iphoneos/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7889,7 +7889,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/iphonesimulator/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
@@ -7946,7 +7946,7 @@
 					"$(inherited)",
 					"$(SRCROOT)/appletvos/lib",
 				);
-				MARKETING_VERSION = 3.2.2000;
+				MARKETING_VERSION = 3.3.1000;
 				OTHER_LDFLAGS = "-Xlinker -all_load";
 				PRODUCT_BUNDLE_IDENTIFIER = com.github.krzyzanowskim.OpenSSL;
 				PRODUCT_NAME = OpenSSL;
diff --git a/Project.swift b/Project.swift
index 2699c692..bac3220c 100644
--- a/Project.swift
+++ b/Project.swift
@@ -1,7 +1,7 @@
 import ProjectDescription
 
 private let developmentTeam: SettingValue = "67RAULRX93"
-private let marketingVersion: String = "3.2.2000"
+private let marketingVersion: String = "3.3.1000"
 
 let project = Project(
     name: "OpenSSL",
diff --git a/README.md b/README.md
index 74384528..0d2a4600 100644
--- a/README.md
+++ b/README.md
@@ -51,7 +51,7 @@ I advised you to use [OpenSSL-Package](https://github.com/krzyzanowskim/OpenSSL-
 
 ```swift
 dependencies: [
-    .package(url: "https://github.com/krzyzanowskim/OpenSSL-Package.git", from: "3.2.2000")
+    .package(url: "https://github.com/krzyzanowskim/OpenSSL-Package.git", from: "3.3.1000")
 ]
 ```
 
diff --git a/appletvos/include/OpenSSL/asn1err.h b/appletvos/include/OpenSSL/asn1err.h
index 4e6d052f..23dab986 100644
--- a/appletvos/include/OpenSSL/asn1err.h
+++ b/appletvos/include/OpenSSL/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/appletvos/include/OpenSSL/bio.h b/appletvos/include/OpenSSL/bio.h
index 377fd310..eb91d61c 100644
--- a/appletvos/include/OpenSSL/bio.h
+++ b/appletvos/include/OpenSSL/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/appletvos/include/OpenSSL/cmp.h b/appletvos/include/OpenSSL/cmp.h
index 342adaef..829d334d 100644
--- a/appletvos/include/OpenSSL/cmp.h
+++ b/appletvos/include/OpenSSL/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/appletvos/include/OpenSSL/cmperr.h b/appletvos/include/OpenSSL/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/appletvos/include/OpenSSL/cmperr.h
+++ b/appletvos/include/OpenSSL/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/appletvos/include/OpenSSL/conf.h b/appletvos/include/OpenSSL/conf.h
index 581f435d..d99085b6 100644
--- a/appletvos/include/OpenSSL/conf.h
+++ b/appletvos/include/OpenSSL/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/appletvos/include/OpenSSL/configuration.h b/appletvos/include/OpenSSL/configuration.h
index e53c0dac..ec23fdc0 100644
--- a/appletvos/include/OpenSSL/configuration.h
+++ b/appletvos/include/OpenSSL/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_tvOS
 #  define OPENSSL_SYS_tvOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/appletvos/include/OpenSSL/core_dispatch.h b/appletvos/include/OpenSSL/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/appletvos/include/OpenSSL/core_dispatch.h
+++ b/appletvos/include/OpenSSL/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/appletvos/include/OpenSSL/core_names.h b/appletvos/include/OpenSSL/core_names.h
index ffffe90f..a6158056 100644
--- a/appletvos/include/OpenSSL/core_names.h
+++ b/appletvos/include/OpenSSL/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/appletvos/include/OpenSSL/dh.h b/appletvos/include/OpenSSL/dh.h
index 50617e9e..c20ecb75 100644
--- a/appletvos/include/OpenSSL/dh.h
+++ b/appletvos/include/OpenSSL/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/appletvos/include/OpenSSL/err.h b/appletvos/include/OpenSSL/err.h
index 42124abc..6b4f4165 100644
--- a/appletvos/include/OpenSSL/err.h
+++ b/appletvos/include/OpenSSL/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/appletvos/include/OpenSSL/evp.h b/appletvos/include/OpenSSL/evp.h
index c8290eba..1716f700 100644
--- a/appletvos/include/OpenSSL/evp.h
+++ b/appletvos/include/OpenSSL/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/appletvos/include/OpenSSL/hpke.h b/appletvos/include/OpenSSL/hpke.h
index e7155e4a..adefc552 100644
--- a/appletvos/include/OpenSSL/hpke.h
+++ b/appletvos/include/OpenSSL/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/appletvos/include/OpenSSL/http.h b/appletvos/include/OpenSSL/http.h
index d33cc797..d3d786f0 100644
--- a/appletvos/include/OpenSSL/http.h
+++ b/appletvos/include/OpenSSL/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/appletvos/include/OpenSSL/httperr.h b/appletvos/include/OpenSSL/httperr.h
index 70719671..d0aa82fb 100644
--- a/appletvos/include/OpenSSL/httperr.h
+++ b/appletvos/include/OpenSSL/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/appletvos/include/OpenSSL/lhash.h b/appletvos/include/OpenSSL/lhash.h
index ea77b654..612121fd 100644
--- a/appletvos/include/OpenSSL/lhash.h
+++ b/appletvos/include/OpenSSL/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/appletvos/include/OpenSSL/obj_mac.h b/appletvos/include/OpenSSL/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/appletvos/include/OpenSSL/obj_mac.h
+++ b/appletvos/include/OpenSSL/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/appletvos/include/OpenSSL/opensslv.h b/appletvos/include/OpenSSL/opensslv.h
index b3e2dc41..236448d7 100644
--- a/appletvos/include/OpenSSL/opensslv.h
+++ b/appletvos/include/OpenSSL/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/appletvos/include/OpenSSL/pkcs7.h b/appletvos/include/OpenSSL/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/appletvos/include/OpenSSL/pkcs7.h
+++ b/appletvos/include/OpenSSL/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/appletvos/include/OpenSSL/quic.h b/appletvos/include/OpenSSL/quic.h
index 10aa86fc..79200a8c 100644
--- a/appletvos/include/OpenSSL/quic.h
+++ b/appletvos/include/OpenSSL/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/appletvos/include/OpenSSL/self_test.h b/appletvos/include/OpenSSL/self_test.h
index 11ef0da3..46a024d9 100644
--- a/appletvos/include/OpenSSL/self_test.h
+++ b/appletvos/include/OpenSSL/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/appletvos/include/OpenSSL/ssl.h b/appletvos/include/OpenSSL/ssl.h
index 0dbadf2f..006d063e 100644
--- a/appletvos/include/OpenSSL/ssl.h
+++ b/appletvos/include/OpenSSL/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/appletvos/include/OpenSSL/sslerr.h b/appletvos/include/OpenSSL/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/appletvos/include/OpenSSL/sslerr.h
+++ b/appletvos/include/OpenSSL/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/appletvos/include/OpenSSL/sslerr_legacy.h b/appletvos/include/OpenSSL/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/appletvos/include/OpenSSL/sslerr_legacy.h
+++ b/appletvos/include/OpenSSL/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/appletvos/include/OpenSSL/x509_vfy.h b/appletvos/include/OpenSSL/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/appletvos/include/OpenSSL/x509_vfy.h
+++ b/appletvos/include/OpenSSL/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/appletvos/lib/libcrypto.a b/appletvos/lib/libcrypto.a
index 7036453f..b83825e7 100644
Binary files a/appletvos/lib/libcrypto.a and b/appletvos/lib/libcrypto.a differ
diff --git a/appletvos/lib/libssl.a b/appletvos/lib/libssl.a
index 41575820..b5fac483 100644
Binary files a/appletvos/lib/libssl.a and b/appletvos/lib/libssl.a differ
diff --git a/appletvsimulator/include/OpenSSL/asn1err.h b/appletvsimulator/include/OpenSSL/asn1err.h
index 4e6d052f..23dab986 100644
--- a/appletvsimulator/include/OpenSSL/asn1err.h
+++ b/appletvsimulator/include/OpenSSL/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/appletvsimulator/include/OpenSSL/bio.h b/appletvsimulator/include/OpenSSL/bio.h
index 377fd310..eb91d61c 100644
--- a/appletvsimulator/include/OpenSSL/bio.h
+++ b/appletvsimulator/include/OpenSSL/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/appletvsimulator/include/OpenSSL/cmp.h b/appletvsimulator/include/OpenSSL/cmp.h
index 342adaef..829d334d 100644
--- a/appletvsimulator/include/OpenSSL/cmp.h
+++ b/appletvsimulator/include/OpenSSL/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/appletvsimulator/include/OpenSSL/cmperr.h b/appletvsimulator/include/OpenSSL/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/appletvsimulator/include/OpenSSL/cmperr.h
+++ b/appletvsimulator/include/OpenSSL/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/appletvsimulator/include/OpenSSL/conf.h b/appletvsimulator/include/OpenSSL/conf.h
index 581f435d..d99085b6 100644
--- a/appletvsimulator/include/OpenSSL/conf.h
+++ b/appletvsimulator/include/OpenSSL/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/appletvsimulator/include/OpenSSL/configuration.h b/appletvsimulator/include/OpenSSL/configuration.h
index e53c0dac..ec23fdc0 100644
--- a/appletvsimulator/include/OpenSSL/configuration.h
+++ b/appletvsimulator/include/OpenSSL/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_tvOS
 #  define OPENSSL_SYS_tvOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/appletvsimulator/include/OpenSSL/core_dispatch.h b/appletvsimulator/include/OpenSSL/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/appletvsimulator/include/OpenSSL/core_dispatch.h
+++ b/appletvsimulator/include/OpenSSL/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/appletvsimulator/include/OpenSSL/core_names.h b/appletvsimulator/include/OpenSSL/core_names.h
index ffffe90f..a6158056 100644
--- a/appletvsimulator/include/OpenSSL/core_names.h
+++ b/appletvsimulator/include/OpenSSL/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/appletvsimulator/include/OpenSSL/dh.h b/appletvsimulator/include/OpenSSL/dh.h
index 50617e9e..c20ecb75 100644
--- a/appletvsimulator/include/OpenSSL/dh.h
+++ b/appletvsimulator/include/OpenSSL/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/appletvsimulator/include/OpenSSL/err.h b/appletvsimulator/include/OpenSSL/err.h
index 42124abc..6b4f4165 100644
--- a/appletvsimulator/include/OpenSSL/err.h
+++ b/appletvsimulator/include/OpenSSL/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/appletvsimulator/include/OpenSSL/evp.h b/appletvsimulator/include/OpenSSL/evp.h
index c8290eba..1716f700 100644
--- a/appletvsimulator/include/OpenSSL/evp.h
+++ b/appletvsimulator/include/OpenSSL/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/appletvsimulator/include/OpenSSL/hpke.h b/appletvsimulator/include/OpenSSL/hpke.h
index e7155e4a..adefc552 100644
--- a/appletvsimulator/include/OpenSSL/hpke.h
+++ b/appletvsimulator/include/OpenSSL/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/appletvsimulator/include/OpenSSL/http.h b/appletvsimulator/include/OpenSSL/http.h
index d33cc797..d3d786f0 100644
--- a/appletvsimulator/include/OpenSSL/http.h
+++ b/appletvsimulator/include/OpenSSL/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/appletvsimulator/include/OpenSSL/httperr.h b/appletvsimulator/include/OpenSSL/httperr.h
index 70719671..d0aa82fb 100644
--- a/appletvsimulator/include/OpenSSL/httperr.h
+++ b/appletvsimulator/include/OpenSSL/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/appletvsimulator/include/OpenSSL/lhash.h b/appletvsimulator/include/OpenSSL/lhash.h
index ea77b654..612121fd 100644
--- a/appletvsimulator/include/OpenSSL/lhash.h
+++ b/appletvsimulator/include/OpenSSL/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/appletvsimulator/include/OpenSSL/obj_mac.h b/appletvsimulator/include/OpenSSL/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/appletvsimulator/include/OpenSSL/obj_mac.h
+++ b/appletvsimulator/include/OpenSSL/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/appletvsimulator/include/OpenSSL/opensslv.h b/appletvsimulator/include/OpenSSL/opensslv.h
index b3e2dc41..236448d7 100644
--- a/appletvsimulator/include/OpenSSL/opensslv.h
+++ b/appletvsimulator/include/OpenSSL/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/appletvsimulator/include/OpenSSL/pkcs7.h b/appletvsimulator/include/OpenSSL/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/appletvsimulator/include/OpenSSL/pkcs7.h
+++ b/appletvsimulator/include/OpenSSL/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/appletvsimulator/include/OpenSSL/quic.h b/appletvsimulator/include/OpenSSL/quic.h
index 10aa86fc..79200a8c 100644
--- a/appletvsimulator/include/OpenSSL/quic.h
+++ b/appletvsimulator/include/OpenSSL/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/appletvsimulator/include/OpenSSL/self_test.h b/appletvsimulator/include/OpenSSL/self_test.h
index 11ef0da3..46a024d9 100644
--- a/appletvsimulator/include/OpenSSL/self_test.h
+++ b/appletvsimulator/include/OpenSSL/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/appletvsimulator/include/OpenSSL/ssl.h b/appletvsimulator/include/OpenSSL/ssl.h
index 0dbadf2f..006d063e 100644
--- a/appletvsimulator/include/OpenSSL/ssl.h
+++ b/appletvsimulator/include/OpenSSL/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/appletvsimulator/include/OpenSSL/sslerr.h b/appletvsimulator/include/OpenSSL/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/appletvsimulator/include/OpenSSL/sslerr.h
+++ b/appletvsimulator/include/OpenSSL/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/appletvsimulator/include/OpenSSL/sslerr_legacy.h b/appletvsimulator/include/OpenSSL/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/appletvsimulator/include/OpenSSL/sslerr_legacy.h
+++ b/appletvsimulator/include/OpenSSL/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/appletvsimulator/include/OpenSSL/x509_vfy.h b/appletvsimulator/include/OpenSSL/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/appletvsimulator/include/OpenSSL/x509_vfy.h
+++ b/appletvsimulator/include/OpenSSL/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/appletvsimulator/lib/libcrypto.a b/appletvsimulator/lib/libcrypto.a
index f761c125..2989587e 100644
Binary files a/appletvsimulator/lib/libcrypto.a and b/appletvsimulator/lib/libcrypto.a differ
diff --git a/appletvsimulator/lib/libssl.a b/appletvsimulator/lib/libssl.a
index d185656a..943592a9 100644
Binary files a/appletvsimulator/lib/libssl.a and b/appletvsimulator/lib/libssl.a differ
diff --git a/iphoneos/include/OpenSSL/asn1err.h b/iphoneos/include/OpenSSL/asn1err.h
index 4e6d052f..23dab986 100644
--- a/iphoneos/include/OpenSSL/asn1err.h
+++ b/iphoneos/include/OpenSSL/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/iphoneos/include/OpenSSL/bio.h b/iphoneos/include/OpenSSL/bio.h
index 377fd310..eb91d61c 100644
--- a/iphoneos/include/OpenSSL/bio.h
+++ b/iphoneos/include/OpenSSL/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/iphoneos/include/OpenSSL/cmp.h b/iphoneos/include/OpenSSL/cmp.h
index 342adaef..829d334d 100644
--- a/iphoneos/include/OpenSSL/cmp.h
+++ b/iphoneos/include/OpenSSL/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/iphoneos/include/OpenSSL/cmperr.h b/iphoneos/include/OpenSSL/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/iphoneos/include/OpenSSL/cmperr.h
+++ b/iphoneos/include/OpenSSL/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/iphoneos/include/OpenSSL/conf.h b/iphoneos/include/OpenSSL/conf.h
index 581f435d..d99085b6 100644
--- a/iphoneos/include/OpenSSL/conf.h
+++ b/iphoneos/include/OpenSSL/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/iphoneos/include/OpenSSL/configuration.h b/iphoneos/include/OpenSSL/configuration.h
index 09071376..1dacd74f 100644
--- a/iphoneos/include/OpenSSL/configuration.h
+++ b/iphoneos/include/OpenSSL/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_iOS
 #  define OPENSSL_SYS_iOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/iphoneos/include/OpenSSL/core_dispatch.h b/iphoneos/include/OpenSSL/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/iphoneos/include/OpenSSL/core_dispatch.h
+++ b/iphoneos/include/OpenSSL/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/iphoneos/include/OpenSSL/core_names.h b/iphoneos/include/OpenSSL/core_names.h
index ffffe90f..a6158056 100644
--- a/iphoneos/include/OpenSSL/core_names.h
+++ b/iphoneos/include/OpenSSL/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/iphoneos/include/OpenSSL/dh.h b/iphoneos/include/OpenSSL/dh.h
index 50617e9e..c20ecb75 100644
--- a/iphoneos/include/OpenSSL/dh.h
+++ b/iphoneos/include/OpenSSL/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/iphoneos/include/OpenSSL/err.h b/iphoneos/include/OpenSSL/err.h
index 42124abc..6b4f4165 100644
--- a/iphoneos/include/OpenSSL/err.h
+++ b/iphoneos/include/OpenSSL/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/iphoneos/include/OpenSSL/evp.h b/iphoneos/include/OpenSSL/evp.h
index c8290eba..1716f700 100644
--- a/iphoneos/include/OpenSSL/evp.h
+++ b/iphoneos/include/OpenSSL/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/iphoneos/include/OpenSSL/hpke.h b/iphoneos/include/OpenSSL/hpke.h
index e7155e4a..adefc552 100644
--- a/iphoneos/include/OpenSSL/hpke.h
+++ b/iphoneos/include/OpenSSL/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/iphoneos/include/OpenSSL/http.h b/iphoneos/include/OpenSSL/http.h
index d33cc797..d3d786f0 100644
--- a/iphoneos/include/OpenSSL/http.h
+++ b/iphoneos/include/OpenSSL/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/iphoneos/include/OpenSSL/httperr.h b/iphoneos/include/OpenSSL/httperr.h
index 70719671..d0aa82fb 100644
--- a/iphoneos/include/OpenSSL/httperr.h
+++ b/iphoneos/include/OpenSSL/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/iphoneos/include/OpenSSL/lhash.h b/iphoneos/include/OpenSSL/lhash.h
index ea77b654..612121fd 100644
--- a/iphoneos/include/OpenSSL/lhash.h
+++ b/iphoneos/include/OpenSSL/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/iphoneos/include/OpenSSL/obj_mac.h b/iphoneos/include/OpenSSL/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/iphoneos/include/OpenSSL/obj_mac.h
+++ b/iphoneos/include/OpenSSL/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/iphoneos/include/OpenSSL/opensslv.h b/iphoneos/include/OpenSSL/opensslv.h
index b3e2dc41..236448d7 100644
--- a/iphoneos/include/OpenSSL/opensslv.h
+++ b/iphoneos/include/OpenSSL/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/iphoneos/include/OpenSSL/pkcs7.h b/iphoneos/include/OpenSSL/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/iphoneos/include/OpenSSL/pkcs7.h
+++ b/iphoneos/include/OpenSSL/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/iphoneos/include/OpenSSL/quic.h b/iphoneos/include/OpenSSL/quic.h
index 10aa86fc..79200a8c 100644
--- a/iphoneos/include/OpenSSL/quic.h
+++ b/iphoneos/include/OpenSSL/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/iphoneos/include/OpenSSL/self_test.h b/iphoneos/include/OpenSSL/self_test.h
index 11ef0da3..46a024d9 100644
--- a/iphoneos/include/OpenSSL/self_test.h
+++ b/iphoneos/include/OpenSSL/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/iphoneos/include/OpenSSL/ssl.h b/iphoneos/include/OpenSSL/ssl.h
index 0dbadf2f..006d063e 100644
--- a/iphoneos/include/OpenSSL/ssl.h
+++ b/iphoneos/include/OpenSSL/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/iphoneos/include/OpenSSL/sslerr.h b/iphoneos/include/OpenSSL/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/iphoneos/include/OpenSSL/sslerr.h
+++ b/iphoneos/include/OpenSSL/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/iphoneos/include/OpenSSL/sslerr_legacy.h b/iphoneos/include/OpenSSL/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/iphoneos/include/OpenSSL/sslerr_legacy.h
+++ b/iphoneos/include/OpenSSL/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/iphoneos/include/OpenSSL/x509_vfy.h b/iphoneos/include/OpenSSL/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/iphoneos/include/OpenSSL/x509_vfy.h
+++ b/iphoneos/include/OpenSSL/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/iphoneos/lib/libcrypto.a b/iphoneos/lib/libcrypto.a
index 047111a8..52820094 100644
Binary files a/iphoneos/lib/libcrypto.a and b/iphoneos/lib/libcrypto.a differ
diff --git a/iphoneos/lib/libssl.a b/iphoneos/lib/libssl.a
index 8a253441..765ba4cc 100644
Binary files a/iphoneos/lib/libssl.a and b/iphoneos/lib/libssl.a differ
diff --git a/iphonesimulator/include/OpenSSL/asn1err.h b/iphonesimulator/include/OpenSSL/asn1err.h
index 4e6d052f..23dab986 100644
--- a/iphonesimulator/include/OpenSSL/asn1err.h
+++ b/iphonesimulator/include/OpenSSL/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/iphonesimulator/include/OpenSSL/bio.h b/iphonesimulator/include/OpenSSL/bio.h
index 377fd310..eb91d61c 100644
--- a/iphonesimulator/include/OpenSSL/bio.h
+++ b/iphonesimulator/include/OpenSSL/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/iphonesimulator/include/OpenSSL/cmp.h b/iphonesimulator/include/OpenSSL/cmp.h
index 342adaef..829d334d 100644
--- a/iphonesimulator/include/OpenSSL/cmp.h
+++ b/iphonesimulator/include/OpenSSL/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/iphonesimulator/include/OpenSSL/cmperr.h b/iphonesimulator/include/OpenSSL/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/iphonesimulator/include/OpenSSL/cmperr.h
+++ b/iphonesimulator/include/OpenSSL/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/iphonesimulator/include/OpenSSL/conf.h b/iphonesimulator/include/OpenSSL/conf.h
index 581f435d..d99085b6 100644
--- a/iphonesimulator/include/OpenSSL/conf.h
+++ b/iphonesimulator/include/OpenSSL/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/iphonesimulator/include/OpenSSL/configuration.h b/iphonesimulator/include/OpenSSL/configuration.h
index 09071376..1dacd74f 100644
--- a/iphonesimulator/include/OpenSSL/configuration.h
+++ b/iphonesimulator/include/OpenSSL/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_iOS
 #  define OPENSSL_SYS_iOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/iphonesimulator/include/OpenSSL/core_dispatch.h b/iphonesimulator/include/OpenSSL/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/iphonesimulator/include/OpenSSL/core_dispatch.h
+++ b/iphonesimulator/include/OpenSSL/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/iphonesimulator/include/OpenSSL/core_names.h b/iphonesimulator/include/OpenSSL/core_names.h
index ffffe90f..a6158056 100644
--- a/iphonesimulator/include/OpenSSL/core_names.h
+++ b/iphonesimulator/include/OpenSSL/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/iphonesimulator/include/OpenSSL/dh.h b/iphonesimulator/include/OpenSSL/dh.h
index 50617e9e..c20ecb75 100644
--- a/iphonesimulator/include/OpenSSL/dh.h
+++ b/iphonesimulator/include/OpenSSL/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/iphonesimulator/include/OpenSSL/err.h b/iphonesimulator/include/OpenSSL/err.h
index 42124abc..6b4f4165 100644
--- a/iphonesimulator/include/OpenSSL/err.h
+++ b/iphonesimulator/include/OpenSSL/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/iphonesimulator/include/OpenSSL/evp.h b/iphonesimulator/include/OpenSSL/evp.h
index c8290eba..1716f700 100644
--- a/iphonesimulator/include/OpenSSL/evp.h
+++ b/iphonesimulator/include/OpenSSL/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/iphonesimulator/include/OpenSSL/hpke.h b/iphonesimulator/include/OpenSSL/hpke.h
index e7155e4a..adefc552 100644
--- a/iphonesimulator/include/OpenSSL/hpke.h
+++ b/iphonesimulator/include/OpenSSL/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/iphonesimulator/include/OpenSSL/http.h b/iphonesimulator/include/OpenSSL/http.h
index d33cc797..d3d786f0 100644
--- a/iphonesimulator/include/OpenSSL/http.h
+++ b/iphonesimulator/include/OpenSSL/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/iphonesimulator/include/OpenSSL/httperr.h b/iphonesimulator/include/OpenSSL/httperr.h
index 70719671..d0aa82fb 100644
--- a/iphonesimulator/include/OpenSSL/httperr.h
+++ b/iphonesimulator/include/OpenSSL/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/iphonesimulator/include/OpenSSL/lhash.h b/iphonesimulator/include/OpenSSL/lhash.h
index ea77b654..612121fd 100644
--- a/iphonesimulator/include/OpenSSL/lhash.h
+++ b/iphonesimulator/include/OpenSSL/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/iphonesimulator/include/OpenSSL/obj_mac.h b/iphonesimulator/include/OpenSSL/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/iphonesimulator/include/OpenSSL/obj_mac.h
+++ b/iphonesimulator/include/OpenSSL/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/iphonesimulator/include/OpenSSL/opensslv.h b/iphonesimulator/include/OpenSSL/opensslv.h
index b3e2dc41..236448d7 100644
--- a/iphonesimulator/include/OpenSSL/opensslv.h
+++ b/iphonesimulator/include/OpenSSL/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/iphonesimulator/include/OpenSSL/pkcs7.h b/iphonesimulator/include/OpenSSL/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/iphonesimulator/include/OpenSSL/pkcs7.h
+++ b/iphonesimulator/include/OpenSSL/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/iphonesimulator/include/OpenSSL/quic.h b/iphonesimulator/include/OpenSSL/quic.h
index 10aa86fc..79200a8c 100644
--- a/iphonesimulator/include/OpenSSL/quic.h
+++ b/iphonesimulator/include/OpenSSL/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/iphonesimulator/include/OpenSSL/self_test.h b/iphonesimulator/include/OpenSSL/self_test.h
index 11ef0da3..46a024d9 100644
--- a/iphonesimulator/include/OpenSSL/self_test.h
+++ b/iphonesimulator/include/OpenSSL/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/iphonesimulator/include/OpenSSL/ssl.h b/iphonesimulator/include/OpenSSL/ssl.h
index 0dbadf2f..006d063e 100644
--- a/iphonesimulator/include/OpenSSL/ssl.h
+++ b/iphonesimulator/include/OpenSSL/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/iphonesimulator/include/OpenSSL/sslerr.h b/iphonesimulator/include/OpenSSL/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/iphonesimulator/include/OpenSSL/sslerr.h
+++ b/iphonesimulator/include/OpenSSL/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/iphonesimulator/include/OpenSSL/sslerr_legacy.h b/iphonesimulator/include/OpenSSL/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/iphonesimulator/include/OpenSSL/sslerr_legacy.h
+++ b/iphonesimulator/include/OpenSSL/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/iphonesimulator/include/OpenSSL/x509_vfy.h b/iphonesimulator/include/OpenSSL/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/iphonesimulator/include/OpenSSL/x509_vfy.h
+++ b/iphonesimulator/include/OpenSSL/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/iphonesimulator/lib/libcrypto.a b/iphonesimulator/lib/libcrypto.a
index c8edecde..054e1fd5 100644
Binary files a/iphonesimulator/lib/libcrypto.a and b/iphonesimulator/lib/libcrypto.a differ
diff --git a/iphonesimulator/lib/libssl.a b/iphonesimulator/lib/libssl.a
index 3d6e6cb5..0209bfd1 100644
Binary files a/iphonesimulator/lib/libssl.a and b/iphonesimulator/lib/libssl.a differ
diff --git a/macosx/include/OpenSSL/asn1err.h b/macosx/include/OpenSSL/asn1err.h
index 4e6d052f..23dab986 100644
--- a/macosx/include/OpenSSL/asn1err.h
+++ b/macosx/include/OpenSSL/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/macosx/include/OpenSSL/bio.h b/macosx/include/OpenSSL/bio.h
index 377fd310..eb91d61c 100644
--- a/macosx/include/OpenSSL/bio.h
+++ b/macosx/include/OpenSSL/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/macosx/include/OpenSSL/cmp.h b/macosx/include/OpenSSL/cmp.h
index 342adaef..829d334d 100644
--- a/macosx/include/OpenSSL/cmp.h
+++ b/macosx/include/OpenSSL/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/macosx/include/OpenSSL/cmperr.h b/macosx/include/OpenSSL/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/macosx/include/OpenSSL/cmperr.h
+++ b/macosx/include/OpenSSL/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/macosx/include/OpenSSL/conf.h b/macosx/include/OpenSSL/conf.h
index 581f435d..d99085b6 100644
--- a/macosx/include/OpenSSL/conf.h
+++ b/macosx/include/OpenSSL/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/macosx/include/OpenSSL/configuration.h b/macosx/include/OpenSSL/configuration.h
index 9eac98ec..775e0c38 100644
--- a/macosx/include/OpenSSL/configuration.h
+++ b/macosx/include/OpenSSL/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_MacOSX
 #  define OPENSSL_SYS_MacOSX 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/macosx/include/OpenSSL/core_dispatch.h b/macosx/include/OpenSSL/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/macosx/include/OpenSSL/core_dispatch.h
+++ b/macosx/include/OpenSSL/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/macosx/include/OpenSSL/core_names.h b/macosx/include/OpenSSL/core_names.h
index ffffe90f..a6158056 100644
--- a/macosx/include/OpenSSL/core_names.h
+++ b/macosx/include/OpenSSL/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/macosx/include/OpenSSL/dh.h b/macosx/include/OpenSSL/dh.h
index 50617e9e..c20ecb75 100644
--- a/macosx/include/OpenSSL/dh.h
+++ b/macosx/include/OpenSSL/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/macosx/include/OpenSSL/err.h b/macosx/include/OpenSSL/err.h
index 42124abc..6b4f4165 100644
--- a/macosx/include/OpenSSL/err.h
+++ b/macosx/include/OpenSSL/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/macosx/include/OpenSSL/evp.h b/macosx/include/OpenSSL/evp.h
index c8290eba..1716f700 100644
--- a/macosx/include/OpenSSL/evp.h
+++ b/macosx/include/OpenSSL/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/macosx/include/OpenSSL/hpke.h b/macosx/include/OpenSSL/hpke.h
index e7155e4a..adefc552 100644
--- a/macosx/include/OpenSSL/hpke.h
+++ b/macosx/include/OpenSSL/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/macosx/include/OpenSSL/http.h b/macosx/include/OpenSSL/http.h
index d33cc797..d3d786f0 100644
--- a/macosx/include/OpenSSL/http.h
+++ b/macosx/include/OpenSSL/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/macosx/include/OpenSSL/httperr.h b/macosx/include/OpenSSL/httperr.h
index 70719671..d0aa82fb 100644
--- a/macosx/include/OpenSSL/httperr.h
+++ b/macosx/include/OpenSSL/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/macosx/include/OpenSSL/lhash.h b/macosx/include/OpenSSL/lhash.h
index ea77b654..612121fd 100644
--- a/macosx/include/OpenSSL/lhash.h
+++ b/macosx/include/OpenSSL/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/macosx/include/OpenSSL/obj_mac.h b/macosx/include/OpenSSL/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/macosx/include/OpenSSL/obj_mac.h
+++ b/macosx/include/OpenSSL/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/macosx/include/OpenSSL/opensslv.h b/macosx/include/OpenSSL/opensslv.h
index b3e2dc41..236448d7 100644
--- a/macosx/include/OpenSSL/opensslv.h
+++ b/macosx/include/OpenSSL/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/macosx/include/OpenSSL/pkcs7.h b/macosx/include/OpenSSL/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/macosx/include/OpenSSL/pkcs7.h
+++ b/macosx/include/OpenSSL/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/macosx/include/OpenSSL/quic.h b/macosx/include/OpenSSL/quic.h
index 10aa86fc..79200a8c 100644
--- a/macosx/include/OpenSSL/quic.h
+++ b/macosx/include/OpenSSL/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/macosx/include/OpenSSL/self_test.h b/macosx/include/OpenSSL/self_test.h
index 11ef0da3..46a024d9 100644
--- a/macosx/include/OpenSSL/self_test.h
+++ b/macosx/include/OpenSSL/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/macosx/include/OpenSSL/ssl.h b/macosx/include/OpenSSL/ssl.h
index 0dbadf2f..006d063e 100644
--- a/macosx/include/OpenSSL/ssl.h
+++ b/macosx/include/OpenSSL/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/macosx/include/OpenSSL/sslerr.h b/macosx/include/OpenSSL/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/macosx/include/OpenSSL/sslerr.h
+++ b/macosx/include/OpenSSL/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/macosx/include/OpenSSL/sslerr_legacy.h b/macosx/include/OpenSSL/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/macosx/include/OpenSSL/sslerr_legacy.h
+++ b/macosx/include/OpenSSL/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/macosx/include/OpenSSL/x509_vfy.h b/macosx/include/OpenSSL/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/macosx/include/OpenSSL/x509_vfy.h
+++ b/macosx/include/OpenSSL/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/macosx/lib/libcrypto.a b/macosx/lib/libcrypto.a
index 12ca8f9d..a9943b72 100644
Binary files a/macosx/lib/libcrypto.a and b/macosx/lib/libcrypto.a differ
diff --git a/macosx/lib/libssl.a b/macosx/lib/libssl.a
index 87da22aa..0b4da505 100644
Binary files a/macosx/lib/libssl.a and b/macosx/lib/libssl.a differ
diff --git a/macosx_catalyst/include/OpenSSL/asn1err.h b/macosx_catalyst/include/OpenSSL/asn1err.h
index 4e6d052f..23dab986 100644
--- a/macosx_catalyst/include/OpenSSL/asn1err.h
+++ b/macosx_catalyst/include/OpenSSL/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/macosx_catalyst/include/OpenSSL/bio.h b/macosx_catalyst/include/OpenSSL/bio.h
index 377fd310..eb91d61c 100644
--- a/macosx_catalyst/include/OpenSSL/bio.h
+++ b/macosx_catalyst/include/OpenSSL/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/macosx_catalyst/include/OpenSSL/cmp.h b/macosx_catalyst/include/OpenSSL/cmp.h
index 342adaef..829d334d 100644
--- a/macosx_catalyst/include/OpenSSL/cmp.h
+++ b/macosx_catalyst/include/OpenSSL/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/macosx_catalyst/include/OpenSSL/cmperr.h b/macosx_catalyst/include/OpenSSL/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/macosx_catalyst/include/OpenSSL/cmperr.h
+++ b/macosx_catalyst/include/OpenSSL/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/macosx_catalyst/include/OpenSSL/conf.h b/macosx_catalyst/include/OpenSSL/conf.h
index 581f435d..d99085b6 100644
--- a/macosx_catalyst/include/OpenSSL/conf.h
+++ b/macosx_catalyst/include/OpenSSL/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/macosx_catalyst/include/OpenSSL/configuration.h b/macosx_catalyst/include/OpenSSL/configuration.h
index 9eac98ec..775e0c38 100644
--- a/macosx_catalyst/include/OpenSSL/configuration.h
+++ b/macosx_catalyst/include/OpenSSL/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_MacOSX
 #  define OPENSSL_SYS_MacOSX 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/macosx_catalyst/include/OpenSSL/core_dispatch.h b/macosx_catalyst/include/OpenSSL/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/macosx_catalyst/include/OpenSSL/core_dispatch.h
+++ b/macosx_catalyst/include/OpenSSL/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/macosx_catalyst/include/OpenSSL/core_names.h b/macosx_catalyst/include/OpenSSL/core_names.h
index ffffe90f..a6158056 100644
--- a/macosx_catalyst/include/OpenSSL/core_names.h
+++ b/macosx_catalyst/include/OpenSSL/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/macosx_catalyst/include/OpenSSL/dh.h b/macosx_catalyst/include/OpenSSL/dh.h
index 50617e9e..c20ecb75 100644
--- a/macosx_catalyst/include/OpenSSL/dh.h
+++ b/macosx_catalyst/include/OpenSSL/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/macosx_catalyst/include/OpenSSL/err.h b/macosx_catalyst/include/OpenSSL/err.h
index 42124abc..6b4f4165 100644
--- a/macosx_catalyst/include/OpenSSL/err.h
+++ b/macosx_catalyst/include/OpenSSL/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/macosx_catalyst/include/OpenSSL/evp.h b/macosx_catalyst/include/OpenSSL/evp.h
index c8290eba..1716f700 100644
--- a/macosx_catalyst/include/OpenSSL/evp.h
+++ b/macosx_catalyst/include/OpenSSL/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/macosx_catalyst/include/OpenSSL/hpke.h b/macosx_catalyst/include/OpenSSL/hpke.h
index e7155e4a..adefc552 100644
--- a/macosx_catalyst/include/OpenSSL/hpke.h
+++ b/macosx_catalyst/include/OpenSSL/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/macosx_catalyst/include/OpenSSL/http.h b/macosx_catalyst/include/OpenSSL/http.h
index d33cc797..d3d786f0 100644
--- a/macosx_catalyst/include/OpenSSL/http.h
+++ b/macosx_catalyst/include/OpenSSL/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/macosx_catalyst/include/OpenSSL/httperr.h b/macosx_catalyst/include/OpenSSL/httperr.h
index 70719671..d0aa82fb 100644
--- a/macosx_catalyst/include/OpenSSL/httperr.h
+++ b/macosx_catalyst/include/OpenSSL/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/macosx_catalyst/include/OpenSSL/lhash.h b/macosx_catalyst/include/OpenSSL/lhash.h
index ea77b654..612121fd 100644
--- a/macosx_catalyst/include/OpenSSL/lhash.h
+++ b/macosx_catalyst/include/OpenSSL/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/macosx_catalyst/include/OpenSSL/obj_mac.h b/macosx_catalyst/include/OpenSSL/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/macosx_catalyst/include/OpenSSL/obj_mac.h
+++ b/macosx_catalyst/include/OpenSSL/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/macosx_catalyst/include/OpenSSL/opensslv.h b/macosx_catalyst/include/OpenSSL/opensslv.h
index b3e2dc41..236448d7 100644
--- a/macosx_catalyst/include/OpenSSL/opensslv.h
+++ b/macosx_catalyst/include/OpenSSL/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/macosx_catalyst/include/OpenSSL/pkcs7.h b/macosx_catalyst/include/OpenSSL/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/macosx_catalyst/include/OpenSSL/pkcs7.h
+++ b/macosx_catalyst/include/OpenSSL/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/macosx_catalyst/include/OpenSSL/quic.h b/macosx_catalyst/include/OpenSSL/quic.h
index 10aa86fc..79200a8c 100644
--- a/macosx_catalyst/include/OpenSSL/quic.h
+++ b/macosx_catalyst/include/OpenSSL/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/macosx_catalyst/include/OpenSSL/self_test.h b/macosx_catalyst/include/OpenSSL/self_test.h
index 11ef0da3..46a024d9 100644
--- a/macosx_catalyst/include/OpenSSL/self_test.h
+++ b/macosx_catalyst/include/OpenSSL/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/macosx_catalyst/include/OpenSSL/ssl.h b/macosx_catalyst/include/OpenSSL/ssl.h
index 0dbadf2f..006d063e 100644
--- a/macosx_catalyst/include/OpenSSL/ssl.h
+++ b/macosx_catalyst/include/OpenSSL/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/macosx_catalyst/include/OpenSSL/sslerr.h b/macosx_catalyst/include/OpenSSL/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/macosx_catalyst/include/OpenSSL/sslerr.h
+++ b/macosx_catalyst/include/OpenSSL/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/macosx_catalyst/include/OpenSSL/sslerr_legacy.h b/macosx_catalyst/include/OpenSSL/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/macosx_catalyst/include/OpenSSL/sslerr_legacy.h
+++ b/macosx_catalyst/include/OpenSSL/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/macosx_catalyst/include/OpenSSL/x509_vfy.h b/macosx_catalyst/include/OpenSSL/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/macosx_catalyst/include/OpenSSL/x509_vfy.h
+++ b/macosx_catalyst/include/OpenSSL/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/macosx_catalyst/lib/libcrypto.a b/macosx_catalyst/lib/libcrypto.a
index 0c418a5b..7cbadebe 100644
Binary files a/macosx_catalyst/lib/libcrypto.a and b/macosx_catalyst/lib/libcrypto.a differ
diff --git a/macosx_catalyst/lib/libssl.a b/macosx_catalyst/lib/libssl.a
index be0e6fac..42ac884d 100644
Binary files a/macosx_catalyst/lib/libssl.a and b/macosx_catalyst/lib/libssl.a differ
diff --git a/visionos/include/OpenSSL/asn1err.h b/visionos/include/OpenSSL/asn1err.h
index 4e6d052f..23dab986 100644
--- a/visionos/include/OpenSSL/asn1err.h
+++ b/visionos/include/OpenSSL/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/visionos/include/OpenSSL/bio.h b/visionos/include/OpenSSL/bio.h
index 377fd310..eb91d61c 100644
--- a/visionos/include/OpenSSL/bio.h
+++ b/visionos/include/OpenSSL/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/visionos/include/OpenSSL/cmp.h b/visionos/include/OpenSSL/cmp.h
index 342adaef..829d334d 100644
--- a/visionos/include/OpenSSL/cmp.h
+++ b/visionos/include/OpenSSL/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/visionos/include/OpenSSL/cmperr.h b/visionos/include/OpenSSL/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/visionos/include/OpenSSL/cmperr.h
+++ b/visionos/include/OpenSSL/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/visionos/include/OpenSSL/conf.h b/visionos/include/OpenSSL/conf.h
index 581f435d..d99085b6 100644
--- a/visionos/include/OpenSSL/conf.h
+++ b/visionos/include/OpenSSL/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/visionos/include/OpenSSL/configuration.h b/visionos/include/OpenSSL/configuration.h
index c29c8891..cc8c2a01 100644
--- a/visionos/include/OpenSSL/configuration.h
+++ b/visionos/include/OpenSSL/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_XROS
 #  define OPENSSL_SYS_XROS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/visionos/include/OpenSSL/core_dispatch.h b/visionos/include/OpenSSL/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/visionos/include/OpenSSL/core_dispatch.h
+++ b/visionos/include/OpenSSL/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/visionos/include/OpenSSL/core_names.h b/visionos/include/OpenSSL/core_names.h
index ffffe90f..a6158056 100644
--- a/visionos/include/OpenSSL/core_names.h
+++ b/visionos/include/OpenSSL/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/visionos/include/OpenSSL/dh.h b/visionos/include/OpenSSL/dh.h
index 50617e9e..c20ecb75 100644
--- a/visionos/include/OpenSSL/dh.h
+++ b/visionos/include/OpenSSL/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/visionos/include/OpenSSL/err.h b/visionos/include/OpenSSL/err.h
index 42124abc..6b4f4165 100644
--- a/visionos/include/OpenSSL/err.h
+++ b/visionos/include/OpenSSL/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/visionos/include/OpenSSL/evp.h b/visionos/include/OpenSSL/evp.h
index c8290eba..1716f700 100644
--- a/visionos/include/OpenSSL/evp.h
+++ b/visionos/include/OpenSSL/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/visionos/include/OpenSSL/hpke.h b/visionos/include/OpenSSL/hpke.h
index e7155e4a..adefc552 100644
--- a/visionos/include/OpenSSL/hpke.h
+++ b/visionos/include/OpenSSL/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/visionos/include/OpenSSL/http.h b/visionos/include/OpenSSL/http.h
index d33cc797..d3d786f0 100644
--- a/visionos/include/OpenSSL/http.h
+++ b/visionos/include/OpenSSL/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/visionos/include/OpenSSL/httperr.h b/visionos/include/OpenSSL/httperr.h
index 70719671..d0aa82fb 100644
--- a/visionos/include/OpenSSL/httperr.h
+++ b/visionos/include/OpenSSL/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/visionos/include/OpenSSL/lhash.h b/visionos/include/OpenSSL/lhash.h
index ea77b654..612121fd 100644
--- a/visionos/include/OpenSSL/lhash.h
+++ b/visionos/include/OpenSSL/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/visionos/include/OpenSSL/obj_mac.h b/visionos/include/OpenSSL/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/visionos/include/OpenSSL/obj_mac.h
+++ b/visionos/include/OpenSSL/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/visionos/include/OpenSSL/opensslv.h b/visionos/include/OpenSSL/opensslv.h
index b3e2dc41..236448d7 100644
--- a/visionos/include/OpenSSL/opensslv.h
+++ b/visionos/include/OpenSSL/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/visionos/include/OpenSSL/pkcs7.h b/visionos/include/OpenSSL/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/visionos/include/OpenSSL/pkcs7.h
+++ b/visionos/include/OpenSSL/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/visionos/include/OpenSSL/quic.h b/visionos/include/OpenSSL/quic.h
index 10aa86fc..79200a8c 100644
--- a/visionos/include/OpenSSL/quic.h
+++ b/visionos/include/OpenSSL/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/visionos/include/OpenSSL/self_test.h b/visionos/include/OpenSSL/self_test.h
index 11ef0da3..46a024d9 100644
--- a/visionos/include/OpenSSL/self_test.h
+++ b/visionos/include/OpenSSL/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/visionos/include/OpenSSL/ssl.h b/visionos/include/OpenSSL/ssl.h
index 0dbadf2f..006d063e 100644
--- a/visionos/include/OpenSSL/ssl.h
+++ b/visionos/include/OpenSSL/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/visionos/include/OpenSSL/sslerr.h b/visionos/include/OpenSSL/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/visionos/include/OpenSSL/sslerr.h
+++ b/visionos/include/OpenSSL/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/visionos/include/OpenSSL/sslerr_legacy.h b/visionos/include/OpenSSL/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/visionos/include/OpenSSL/sslerr_legacy.h
+++ b/visionos/include/OpenSSL/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/visionos/include/OpenSSL/x509_vfy.h b/visionos/include/OpenSSL/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/visionos/include/OpenSSL/x509_vfy.h
+++ b/visionos/include/OpenSSL/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/visionos/lib/libcrypto.a b/visionos/lib/libcrypto.a
index 3079aee1..b19b8787 100644
Binary files a/visionos/lib/libcrypto.a and b/visionos/lib/libcrypto.a differ
diff --git a/visionos/lib/libssl.a b/visionos/lib/libssl.a
index 4287d754..4ba7fc16 100644
Binary files a/visionos/lib/libssl.a and b/visionos/lib/libssl.a differ
diff --git a/visionsimulator/include/OpenSSL/asn1err.h b/visionsimulator/include/OpenSSL/asn1err.h
index 4e6d052f..23dab986 100644
--- a/visionsimulator/include/OpenSSL/asn1err.h
+++ b/visionsimulator/include/OpenSSL/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/visionsimulator/include/OpenSSL/bio.h b/visionsimulator/include/OpenSSL/bio.h
index 377fd310..eb91d61c 100644
--- a/visionsimulator/include/OpenSSL/bio.h
+++ b/visionsimulator/include/OpenSSL/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/visionsimulator/include/OpenSSL/cmp.h b/visionsimulator/include/OpenSSL/cmp.h
index 342adaef..829d334d 100644
--- a/visionsimulator/include/OpenSSL/cmp.h
+++ b/visionsimulator/include/OpenSSL/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/visionsimulator/include/OpenSSL/cmperr.h b/visionsimulator/include/OpenSSL/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/visionsimulator/include/OpenSSL/cmperr.h
+++ b/visionsimulator/include/OpenSSL/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/visionsimulator/include/OpenSSL/conf.h b/visionsimulator/include/OpenSSL/conf.h
index 581f435d..d99085b6 100644
--- a/visionsimulator/include/OpenSSL/conf.h
+++ b/visionsimulator/include/OpenSSL/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/visionsimulator/include/OpenSSL/configuration.h b/visionsimulator/include/OpenSSL/configuration.h
index c29c8891..cc8c2a01 100644
--- a/visionsimulator/include/OpenSSL/configuration.h
+++ b/visionsimulator/include/OpenSSL/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_XROS
 #  define OPENSSL_SYS_XROS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/visionsimulator/include/OpenSSL/core_dispatch.h b/visionsimulator/include/OpenSSL/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/visionsimulator/include/OpenSSL/core_dispatch.h
+++ b/visionsimulator/include/OpenSSL/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/visionsimulator/include/OpenSSL/core_names.h b/visionsimulator/include/OpenSSL/core_names.h
index ffffe90f..a6158056 100644
--- a/visionsimulator/include/OpenSSL/core_names.h
+++ b/visionsimulator/include/OpenSSL/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/visionsimulator/include/OpenSSL/dh.h b/visionsimulator/include/OpenSSL/dh.h
index 50617e9e..c20ecb75 100644
--- a/visionsimulator/include/OpenSSL/dh.h
+++ b/visionsimulator/include/OpenSSL/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/visionsimulator/include/OpenSSL/err.h b/visionsimulator/include/OpenSSL/err.h
index 42124abc..6b4f4165 100644
--- a/visionsimulator/include/OpenSSL/err.h
+++ b/visionsimulator/include/OpenSSL/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/visionsimulator/include/OpenSSL/evp.h b/visionsimulator/include/OpenSSL/evp.h
index c8290eba..1716f700 100644
--- a/visionsimulator/include/OpenSSL/evp.h
+++ b/visionsimulator/include/OpenSSL/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/visionsimulator/include/OpenSSL/hpke.h b/visionsimulator/include/OpenSSL/hpke.h
index e7155e4a..adefc552 100644
--- a/visionsimulator/include/OpenSSL/hpke.h
+++ b/visionsimulator/include/OpenSSL/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/visionsimulator/include/OpenSSL/http.h b/visionsimulator/include/OpenSSL/http.h
index d33cc797..d3d786f0 100644
--- a/visionsimulator/include/OpenSSL/http.h
+++ b/visionsimulator/include/OpenSSL/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/visionsimulator/include/OpenSSL/httperr.h b/visionsimulator/include/OpenSSL/httperr.h
index 70719671..d0aa82fb 100644
--- a/visionsimulator/include/OpenSSL/httperr.h
+++ b/visionsimulator/include/OpenSSL/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/visionsimulator/include/OpenSSL/lhash.h b/visionsimulator/include/OpenSSL/lhash.h
index ea77b654..612121fd 100644
--- a/visionsimulator/include/OpenSSL/lhash.h
+++ b/visionsimulator/include/OpenSSL/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/visionsimulator/include/OpenSSL/obj_mac.h b/visionsimulator/include/OpenSSL/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/visionsimulator/include/OpenSSL/obj_mac.h
+++ b/visionsimulator/include/OpenSSL/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/visionsimulator/include/OpenSSL/opensslv.h b/visionsimulator/include/OpenSSL/opensslv.h
index b3e2dc41..236448d7 100644
--- a/visionsimulator/include/OpenSSL/opensslv.h
+++ b/visionsimulator/include/OpenSSL/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/visionsimulator/include/OpenSSL/pkcs7.h b/visionsimulator/include/OpenSSL/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/visionsimulator/include/OpenSSL/pkcs7.h
+++ b/visionsimulator/include/OpenSSL/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/visionsimulator/include/OpenSSL/quic.h b/visionsimulator/include/OpenSSL/quic.h
index 10aa86fc..79200a8c 100644
--- a/visionsimulator/include/OpenSSL/quic.h
+++ b/visionsimulator/include/OpenSSL/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/visionsimulator/include/OpenSSL/self_test.h b/visionsimulator/include/OpenSSL/self_test.h
index 11ef0da3..46a024d9 100644
--- a/visionsimulator/include/OpenSSL/self_test.h
+++ b/visionsimulator/include/OpenSSL/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/visionsimulator/include/OpenSSL/ssl.h b/visionsimulator/include/OpenSSL/ssl.h
index 0dbadf2f..006d063e 100644
--- a/visionsimulator/include/OpenSSL/ssl.h
+++ b/visionsimulator/include/OpenSSL/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/visionsimulator/include/OpenSSL/sslerr.h b/visionsimulator/include/OpenSSL/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/visionsimulator/include/OpenSSL/sslerr.h
+++ b/visionsimulator/include/OpenSSL/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/visionsimulator/include/OpenSSL/sslerr_legacy.h b/visionsimulator/include/OpenSSL/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/visionsimulator/include/OpenSSL/sslerr_legacy.h
+++ b/visionsimulator/include/OpenSSL/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/visionsimulator/include/OpenSSL/x509_vfy.h b/visionsimulator/include/OpenSSL/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/visionsimulator/include/OpenSSL/x509_vfy.h
+++ b/visionsimulator/include/OpenSSL/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/visionsimulator/lib/libcrypto.a b/visionsimulator/lib/libcrypto.a
index 9763b6e0..9f19b7ab 100644
Binary files a/visionsimulator/lib/libcrypto.a and b/visionsimulator/lib/libcrypto.a differ
diff --git a/visionsimulator/lib/libssl.a b/visionsimulator/lib/libssl.a
index 98882f2e..3eb79a0a 100644
Binary files a/visionsimulator/lib/libssl.a and b/visionsimulator/lib/libssl.a differ
diff --git a/watchos/include/OpenSSL/asn1err.h b/watchos/include/OpenSSL/asn1err.h
index 4e6d052f..23dab986 100644
--- a/watchos/include/OpenSSL/asn1err.h
+++ b/watchos/include/OpenSSL/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/watchos/include/OpenSSL/bio.h b/watchos/include/OpenSSL/bio.h
index 377fd310..eb91d61c 100644
--- a/watchos/include/OpenSSL/bio.h
+++ b/watchos/include/OpenSSL/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/watchos/include/OpenSSL/cmp.h b/watchos/include/OpenSSL/cmp.h
index 342adaef..829d334d 100644
--- a/watchos/include/OpenSSL/cmp.h
+++ b/watchos/include/OpenSSL/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/watchos/include/OpenSSL/cmperr.h b/watchos/include/OpenSSL/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/watchos/include/OpenSSL/cmperr.h
+++ b/watchos/include/OpenSSL/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/watchos/include/OpenSSL/conf.h b/watchos/include/OpenSSL/conf.h
index 581f435d..d99085b6 100644
--- a/watchos/include/OpenSSL/conf.h
+++ b/watchos/include/OpenSSL/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/watchos/include/OpenSSL/configuration.h b/watchos/include/OpenSSL/configuration.h
index 2e2e7246..ccd77db9 100644
--- a/watchos/include/OpenSSL/configuration.h
+++ b/watchos/include/OpenSSL/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_watchOS
 #  define OPENSSL_SYS_watchOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/watchos/include/OpenSSL/core_dispatch.h b/watchos/include/OpenSSL/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/watchos/include/OpenSSL/core_dispatch.h
+++ b/watchos/include/OpenSSL/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/watchos/include/OpenSSL/core_names.h b/watchos/include/OpenSSL/core_names.h
index ffffe90f..a6158056 100644
--- a/watchos/include/OpenSSL/core_names.h
+++ b/watchos/include/OpenSSL/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/watchos/include/OpenSSL/dh.h b/watchos/include/OpenSSL/dh.h
index 50617e9e..c20ecb75 100644
--- a/watchos/include/OpenSSL/dh.h
+++ b/watchos/include/OpenSSL/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/watchos/include/OpenSSL/err.h b/watchos/include/OpenSSL/err.h
index 42124abc..6b4f4165 100644
--- a/watchos/include/OpenSSL/err.h
+++ b/watchos/include/OpenSSL/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/watchos/include/OpenSSL/evp.h b/watchos/include/OpenSSL/evp.h
index c8290eba..1716f700 100644
--- a/watchos/include/OpenSSL/evp.h
+++ b/watchos/include/OpenSSL/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/watchos/include/OpenSSL/hpke.h b/watchos/include/OpenSSL/hpke.h
index e7155e4a..adefc552 100644
--- a/watchos/include/OpenSSL/hpke.h
+++ b/watchos/include/OpenSSL/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/watchos/include/OpenSSL/http.h b/watchos/include/OpenSSL/http.h
index d33cc797..d3d786f0 100644
--- a/watchos/include/OpenSSL/http.h
+++ b/watchos/include/OpenSSL/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/watchos/include/OpenSSL/httperr.h b/watchos/include/OpenSSL/httperr.h
index 70719671..d0aa82fb 100644
--- a/watchos/include/OpenSSL/httperr.h
+++ b/watchos/include/OpenSSL/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/watchos/include/OpenSSL/lhash.h b/watchos/include/OpenSSL/lhash.h
index ea77b654..612121fd 100644
--- a/watchos/include/OpenSSL/lhash.h
+++ b/watchos/include/OpenSSL/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/watchos/include/OpenSSL/obj_mac.h b/watchos/include/OpenSSL/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/watchos/include/OpenSSL/obj_mac.h
+++ b/watchos/include/OpenSSL/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/watchos/include/OpenSSL/opensslv.h b/watchos/include/OpenSSL/opensslv.h
index b3e2dc41..236448d7 100644
--- a/watchos/include/OpenSSL/opensslv.h
+++ b/watchos/include/OpenSSL/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/watchos/include/OpenSSL/pkcs7.h b/watchos/include/OpenSSL/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/watchos/include/OpenSSL/pkcs7.h
+++ b/watchos/include/OpenSSL/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/watchos/include/OpenSSL/quic.h b/watchos/include/OpenSSL/quic.h
index 10aa86fc..79200a8c 100644
--- a/watchos/include/OpenSSL/quic.h
+++ b/watchos/include/OpenSSL/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/watchos/include/OpenSSL/self_test.h b/watchos/include/OpenSSL/self_test.h
index 11ef0da3..46a024d9 100644
--- a/watchos/include/OpenSSL/self_test.h
+++ b/watchos/include/OpenSSL/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/watchos/include/OpenSSL/ssl.h b/watchos/include/OpenSSL/ssl.h
index 0dbadf2f..006d063e 100644
--- a/watchos/include/OpenSSL/ssl.h
+++ b/watchos/include/OpenSSL/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/watchos/include/OpenSSL/sslerr.h b/watchos/include/OpenSSL/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/watchos/include/OpenSSL/sslerr.h
+++ b/watchos/include/OpenSSL/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/watchos/include/OpenSSL/sslerr_legacy.h b/watchos/include/OpenSSL/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/watchos/include/OpenSSL/sslerr_legacy.h
+++ b/watchos/include/OpenSSL/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/watchos/include/OpenSSL/x509_vfy.h b/watchos/include/OpenSSL/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/watchos/include/OpenSSL/x509_vfy.h
+++ b/watchos/include/OpenSSL/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/watchos/lib/libcrypto.a b/watchos/lib/libcrypto.a
index a6313840..2271cfa5 100644
Binary files a/watchos/lib/libcrypto.a and b/watchos/lib/libcrypto.a differ
diff --git a/watchos/lib/libssl.a b/watchos/lib/libssl.a
index f176a47f..fa69a2ff 100644
Binary files a/watchos/lib/libssl.a and b/watchos/lib/libssl.a differ
diff --git a/watchsimulator/include/OpenSSL/asn1err.h b/watchsimulator/include/OpenSSL/asn1err.h
index 4e6d052f..23dab986 100644
--- a/watchsimulator/include/OpenSSL/asn1err.h
+++ b/watchsimulator/include/OpenSSL/asn1err.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -47,6 +47,7 @@
 # define ASN1_R_EXPLICIT_TAG_NOT_CONSTRUCTED              120
 # define ASN1_R_FIELD_MISSING                             121
 # define ASN1_R_FIRST_NUM_TOO_LARGE                       122
+# define ASN1_R_GENERALIZEDTIME_IS_TOO_SHORT              232
 # define ASN1_R_HEADER_TOO_LONG                           123
 # define ASN1_R_ILLEGAL_BITSTRING_FORMAT                  175
 # define ASN1_R_ILLEGAL_BOOLEAN                           176
@@ -133,6 +134,7 @@
 # define ASN1_R_UNSUPPORTED_CIPHER                        228
 # define ASN1_R_UNSUPPORTED_PUBLIC_KEY_TYPE               167
 # define ASN1_R_UNSUPPORTED_TYPE                          196
+# define ASN1_R_UTCTIME_IS_TOO_SHORT                      233
 # define ASN1_R_WRONG_INTEGER_TYPE                        225
 # define ASN1_R_WRONG_PUBLIC_KEY_TYPE                     200
 # define ASN1_R_WRONG_TAG                                 168
diff --git a/watchsimulator/include/OpenSSL/bio.h b/watchsimulator/include/OpenSSL/bio.h
index 377fd310..eb91d61c 100644
--- a/watchsimulator/include/OpenSSL/bio.h
+++ b/watchsimulator/include/OpenSSL/bio.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/bio.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -70,7 +70,10 @@ extern "C" {
 # define BIO_TYPE_DGRAM_PAIR     (26|BIO_TYPE_SOURCE_SINK)
 # define BIO_TYPE_DGRAM_MEM      (27|BIO_TYPE_SOURCE_SINK)
 
+/* Custom type starting index returned by BIO_get_new_index() */
 #define BIO_TYPE_START           128
+/* Custom type maximum index that can be returned by BIO_get_new_index() */
+#define BIO_TYPE_MASK            0xFF
 
 /*
  * BIO_FILENAME_READ|BIO_CLOSE to open or close on free.
@@ -407,6 +410,7 @@ typedef struct bio_mmsg_cb_args_st {
 
 #define BIO_POLL_DESCRIPTOR_TYPE_NONE       0
 #define BIO_POLL_DESCRIPTOR_TYPE_SOCK_FD    1
+#define BIO_POLL_DESCRIPTOR_TYPE_SSL        2
 #define BIO_POLL_DESCRIPTOR_CUSTOM_START    8192
 
 typedef struct bio_poll_descriptor_st {
@@ -415,6 +419,7 @@ typedef struct bio_poll_descriptor_st {
         int         fd;
         void        *custom;
         uintptr_t   custom_ui;
+        SSL         *ssl;
     } value;
 } BIO_POLL_DESCRIPTOR;
 
diff --git a/watchsimulator/include/OpenSSL/cmp.h b/watchsimulator/include/OpenSSL/cmp.h
index 342adaef..829d334d 100644
--- a/watchsimulator/include/OpenSSL/cmp.h
+++ b/watchsimulator/include/OpenSSL/cmp.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/cmp.h.in
  *
- * Copyright 2007-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2007-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Nokia 2007-2019
  * Copyright Siemens AG 2015-2019
  *
@@ -380,6 +380,10 @@ int OSSL_CMP_ITAV_push0_stack_item(STACK_OF(OSSL_CMP_ITAV) **itav_sk_p,
                                    OSSL_CMP_ITAV *itav);
 void OSSL_CMP_ITAV_free(OSSL_CMP_ITAV *itav);
 
+OSSL_CMP_ITAV *OSSL_CMP_ITAV_new0_certProfile(STACK_OF(ASN1_UTF8STRING)
+                                              *certProfile);
+int OSSL_CMP_ITAV_get0_certProfile(const OSSL_CMP_ITAV *itav,
+                                   STACK_OF(ASN1_UTF8STRING) **out);
 OSSL_CMP_ITAV *OSSL_CMP_ITAV_new_caCerts(const STACK_OF(X509) *caCerts);
 int OSSL_CMP_ITAV_get0_caCerts(const OSSL_CMP_ITAV *itav, STACK_OF(X509) **out);
 
@@ -425,6 +429,7 @@ const char *OSSL_CMP_CTX_get0_propq(const OSSL_CMP_CTX *ctx);
 #  define OSSL_CMP_OPT_DIGEST_ALGNID 34
 #  define OSSL_CMP_OPT_IGNORE_KEYUSAGE 35
 #  define OSSL_CMP_OPT_PERMIT_TA_IN_EXTRACERTS_FOR_IR 36
+#  define OSSL_CMP_OPT_NO_CACHE_EXTRACERTS 37
 int OSSL_CMP_CTX_set_option(OSSL_CMP_CTX *ctx, int opt, int val);
 int OSSL_CMP_CTX_get_option(const OSSL_CMP_CTX *ctx, int opt);
 /* CMP-specific callback for logging and outputting the error queue: */
@@ -470,6 +475,8 @@ int OSSL_CMP_CTX_set1_secretValue(OSSL_CMP_CTX *ctx,
 int OSSL_CMP_CTX_set1_recipient(OSSL_CMP_CTX *ctx, const X509_NAME *name);
 int OSSL_CMP_CTX_push0_geninfo_ITAV(OSSL_CMP_CTX *ctx, OSSL_CMP_ITAV *itav);
 int OSSL_CMP_CTX_reset_geninfo_ITAVs(OSSL_CMP_CTX *ctx);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_CTX_get0_geninfo_ITAVs(const OSSL_CMP_CTX *ctx);
 int OSSL_CMP_CTX_set1_extraCertsOut(OSSL_CMP_CTX *ctx,
                                     STACK_OF(X509) *extraCertsOut);
 /* certificate template: */
@@ -522,10 +529,13 @@ OSSL_CMP_STATUSINFO_new(int status, int fail_info, const char *text);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_transactionID(const
                                                    OSSL_CMP_PKIHEADER *hdr);
 ASN1_OCTET_STRING *OSSL_CMP_HDR_get0_recipNonce(const OSSL_CMP_PKIHEADER *hdr);
+STACK_OF(OSSL_CMP_ITAV)
+    *OSSL_CMP_HDR_get0_geninfo_ITAVs(const OSSL_CMP_PKIHEADER *hdr);
 
 /* from cmp_msg.c */
 OSSL_CMP_PKIHEADER *OSSL_CMP_MSG_get0_header(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_get_bodytype(const OSSL_CMP_MSG *msg);
+X509_PUBKEY *OSSL_CMP_MSG_get0_certreq_publickey(const OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_transactionID(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 int OSSL_CMP_MSG_update_recipNonce(OSSL_CMP_CTX *ctx, OSSL_CMP_MSG *msg);
 OSSL_CRMF_MSG *OSSL_CMP_CTX_setup_CRM(OSSL_CMP_CTX *ctx, int for_KUR, int rid);
@@ -587,6 +597,13 @@ int OSSL_CMP_SRV_CTX_init(OSSL_CMP_SRV_CTX *srv_ctx, void *custom_ctx,
                           OSSL_CMP_SRV_error_cb_t process_error,
                           OSSL_CMP_SRV_certConf_cb_t process_certConf,
                           OSSL_CMP_SRV_pollReq_cb_t process_pollReq);
+typedef int (*OSSL_CMP_SRV_delayed_delivery_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                  const OSSL_CMP_MSG *req);
+typedef int (*OSSL_CMP_SRV_clean_transaction_cb_t)(OSSL_CMP_SRV_CTX *srv_ctx,
+                                                   const ASN1_OCTET_STRING *id);
+int OSSL_CMP_SRV_CTX_init_trans(OSSL_CMP_SRV_CTX *srv_ctx,
+                                OSSL_CMP_SRV_delayed_delivery_cb_t delay,
+                                OSSL_CMP_SRV_clean_transaction_cb_t clean);
 OSSL_CMP_CTX *OSSL_CMP_SRV_CTX_get0_cmp_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 void *OSSL_CMP_SRV_CTX_get0_custom_ctx(const OSSL_CMP_SRV_CTX *srv_ctx);
 int OSSL_CMP_SRV_CTX_set_send_unprotected_errors(OSSL_CMP_SRV_CTX *srv_ctx,
@@ -603,6 +620,8 @@ X509 *OSSL_CMP_exec_certreq(OSSL_CMP_CTX *ctx, int req_type,
 #  define OSSL_CMP_CR    2
 #  define OSSL_CMP_P10CR 4
 #  define OSSL_CMP_KUR   7
+#  define OSSL_CMP_GENM  21
+#  define OSSL_CMP_ERROR 23
 #  define OSSL_CMP_exec_IR_ses(ctx) \
     OSSL_CMP_exec_certreq(ctx, OSSL_CMP_IR, NULL)
 #  define OSSL_CMP_exec_CR_ses(ctx) \
diff --git a/watchsimulator/include/OpenSSL/cmperr.h b/watchsimulator/include/OpenSSL/cmperr.h
index 71fd6353..4ba527d2 100644
--- a/watchsimulator/include/OpenSSL/cmperr.h
+++ b/watchsimulator/include/OpenSSL/cmperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -55,6 +55,7 @@
 #  define CMP_R_ERROR_UNEXPECTED_CERTCONF                  160
 #  define CMP_R_ERROR_VALIDATING_PROTECTION                140
 #  define CMP_R_ERROR_VALIDATING_SIGNATURE                 171
+#  define CMP_R_EXPECTED_POLLREQ                           104
 #  define CMP_R_FAILED_BUILDING_OWN_CHAIN                  164
 #  define CMP_R_FAILED_EXTRACTING_PUBKEY                   141
 #  define CMP_R_FAILURE_OBTAINING_RANDOM                   110
@@ -98,14 +99,18 @@
 #  define CMP_R_TRANSACTIONID_UNMATCHED                    152
 #  define CMP_R_TRANSFER_ERROR                             159
 #  define CMP_R_UNCLEAN_CTX                                191
+#  define CMP_R_UNEXPECTED_CERTPROFILE                     196
 #  define CMP_R_UNEXPECTED_PKIBODY                         133
 #  define CMP_R_UNEXPECTED_PKISTATUS                       185
+#  define CMP_R_UNEXPECTED_POLLREQ                         105
 #  define CMP_R_UNEXPECTED_PVNO                            153
+#  define CMP_R_UNEXPECTED_SENDER                          106
 #  define CMP_R_UNKNOWN_ALGORITHM_ID                       134
 #  define CMP_R_UNKNOWN_CERT_TYPE                          135
 #  define CMP_R_UNKNOWN_PKISTATUS                          186
 #  define CMP_R_UNSUPPORTED_ALGORITHM                      136
 #  define CMP_R_UNSUPPORTED_KEY_TYPE                       137
+#  define CMP_R_UNSUPPORTED_PKIBODY                        101
 #  define CMP_R_UNSUPPORTED_PROTECTION_ALG_DHBASEDMAC      154
 #  define CMP_R_VALUE_TOO_LARGE                            175
 #  define CMP_R_VALUE_TOO_SMALL                            177
diff --git a/watchsimulator/include/OpenSSL/conf.h b/watchsimulator/include/OpenSSL/conf.h
index 581f435d..d99085b6 100644
--- a/watchsimulator/include/OpenSSL/conf.h
+++ b/watchsimulator/include/OpenSSL/conf.h
@@ -68,7 +68,7 @@ SKM_DEFINE_STACK_OF_INTERNAL(CONF_VALUE, CONF_VALUE, CONF_VALUE)
 #define sk_CONF_VALUE_deep_copy(sk, copyfunc, freefunc) ((STACK_OF(CONF_VALUE) *)OPENSSL_sk_deep_copy(ossl_check_const_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_copyfunc_type(copyfunc), ossl_check_CONF_VALUE_freefunc_type(freefunc)))
 #define sk_CONF_VALUE_set_cmp_func(sk, cmp) ((sk_CONF_VALUE_compfunc)OPENSSL_sk_set_cmp_func(ossl_check_CONF_VALUE_sk_type(sk), ossl_check_CONF_VALUE_compfunc_type(cmp)))
 DEFINE_LHASH_OF_INTERNAL(CONF_VALUE);
-#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)))
+#define lh_CONF_VALUE_new(hfn, cmp) ((LHASH_OF(CONF_VALUE) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_CONF_VALUE_lh_hashfunc_type(hfn), ossl_check_CONF_VALUE_lh_compfunc_type(cmp)), lh_CONF_VALUE_hash_thunk, lh_CONF_VALUE_comp_thunk, lh_CONF_VALUE_doall_thunk, lh_CONF_VALUE_doall_arg_thunk))
 #define lh_CONF_VALUE_free(lh) OPENSSL_LH_free(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_flush(lh) OPENSSL_LH_flush(ossl_check_CONF_VALUE_lh_type(lh))
 #define lh_CONF_VALUE_insert(lh, ptr) ((CONF_VALUE *)OPENSSL_LH_insert(ossl_check_CONF_VALUE_lh_type(lh), ossl_check_CONF_VALUE_lh_plain_type(ptr)))
diff --git a/watchsimulator/include/OpenSSL/configuration.h b/watchsimulator/include/OpenSSL/configuration.h
index 2e2e7246..ccd77db9 100644
--- a/watchsimulator/include/OpenSSL/configuration.h
+++ b/watchsimulator/include/OpenSSL/configuration.h
@@ -30,7 +30,7 @@ extern "C" {
 # ifndef OPENSSL_SYS_watchOS
 #  define OPENSSL_SYS_watchOS 1
 # endif
-# define OPENSSL_CONFIGURED_API 30200
+# define OPENSSL_CONFIGURED_API 30300
 # ifndef OPENSSL_RAND_SEED_OS
 #  define OPENSSL_RAND_SEED_OS
 # endif
diff --git a/watchsimulator/include/OpenSSL/core_dispatch.h b/watchsimulator/include/OpenSSL/core_dispatch.h
index b146f1f1..274a7fcb 100644
--- a/watchsimulator/include/OpenSSL/core_dispatch.h
+++ b/watchsimulator/include/OpenSSL/core_dispatch.h
@@ -300,6 +300,7 @@ OSSL_CORE_MAKE_FUNC(int, provider_self_test, (void *provctx))
 # define OSSL_FUNC_DIGEST_GETTABLE_PARAMS           11
 # define OSSL_FUNC_DIGEST_SETTABLE_CTX_PARAMS       12
 # define OSSL_FUNC_DIGEST_GETTABLE_CTX_PARAMS       13
+# define OSSL_FUNC_DIGEST_SQUEEZE                   14
 
 OSSL_CORE_MAKE_FUNC(void *, digest_newctx, (void *provctx))
 OSSL_CORE_MAKE_FUNC(int, digest_init, (void *dctx, const OSSL_PARAM params[]))
@@ -308,6 +309,9 @@ OSSL_CORE_MAKE_FUNC(int, digest_update,
 OSSL_CORE_MAKE_FUNC(int, digest_final,
                     (void *dctx,
                      unsigned char *out, size_t *outl, size_t outsz))
+OSSL_CORE_MAKE_FUNC(int, digest_squeeze,
+                    (void *dctx,
+                     unsigned char *out, size_t *outl, size_t outsz))
 OSSL_CORE_MAKE_FUNC(int, digest_digest,
                     (void *provctx, const unsigned char *in, size_t inl,
                      unsigned char *out, size_t *outl, size_t outsz))
diff --git a/watchsimulator/include/OpenSSL/core_names.h b/watchsimulator/include/OpenSSL/core_names.h
index ffffe90f..a6158056 100644
--- a/watchsimulator/include/OpenSSL/core_names.h
+++ b/watchsimulator/include/OpenSSL/core_names.h
@@ -384,6 +384,7 @@ extern "C" {
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT8 "rsa-coefficient8"
 # define OSSL_PKEY_PARAM_RSA_COEFFICIENT9 "rsa-coefficient9"
 # define OSSL_PKEY_PARAM_RSA_D "d"
+# define OSSL_PKEY_PARAM_RSA_DERIVE_FROM_PQ "rsa-derive-from-pq"
 # define OSSL_PKEY_PARAM_RSA_DIGEST OSSL_PKEY_PARAM_DIGEST
 # define OSSL_PKEY_PARAM_RSA_DIGEST_PROPS OSSL_PKEY_PARAM_PROPERTIES
 # define OSSL_PKEY_PARAM_RSA_E "e"
diff --git a/watchsimulator/include/OpenSSL/dh.h b/watchsimulator/include/OpenSSL/dh.h
index 50617e9e..c20ecb75 100644
--- a/watchsimulator/include/OpenSSL/dh.h
+++ b/watchsimulator/include/OpenSSL/dh.h
@@ -25,7 +25,11 @@ extern "C" {
 
 #include <stdlib.h>
 
-/* DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type() */
+/*
+ * DH parameter generation types used by EVP_PKEY_CTX_set_dh_paramgen_type()
+ * Note that additions/changes to this set of values requires corresponding
+ * adjustments to range checks in dh_gen()
+ */
 # define DH_PARAMGEN_TYPE_GENERATOR     0   /* Use a safe prime generator */
 # define DH_PARAMGEN_TYPE_FIPS_186_2    1   /* Use FIPS186-2 standard */
 # define DH_PARAMGEN_TYPE_FIPS_186_4    2   /* Use FIPS186-4 standard */
diff --git a/watchsimulator/include/OpenSSL/err.h b/watchsimulator/include/OpenSSL/err.h
index 42124abc..6b4f4165 100644
--- a/watchsimulator/include/OpenSSL/err.h
+++ b/watchsimulator/include/OpenSSL/err.h
@@ -372,7 +372,7 @@ typedef struct ERR_string_data_st {
 } ERR_STRING_DATA;
 
 DEFINE_LHASH_OF_INTERNAL(ERR_STRING_DATA);
-#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)))
+#define lh_ERR_STRING_DATA_new(hfn, cmp) ((LHASH_OF(ERR_STRING_DATA) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_ERR_STRING_DATA_lh_hashfunc_type(hfn), ossl_check_ERR_STRING_DATA_lh_compfunc_type(cmp)), lh_ERR_STRING_DATA_hash_thunk, lh_ERR_STRING_DATA_comp_thunk, lh_ERR_STRING_DATA_doall_thunk, lh_ERR_STRING_DATA_doall_arg_thunk))
 #define lh_ERR_STRING_DATA_free(lh) OPENSSL_LH_free(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_flush(lh) OPENSSL_LH_flush(ossl_check_ERR_STRING_DATA_lh_type(lh))
 #define lh_ERR_STRING_DATA_insert(lh, ptr) ((ERR_STRING_DATA *)OPENSSL_LH_insert(ossl_check_ERR_STRING_DATA_lh_type(lh), ossl_check_ERR_STRING_DATA_lh_plain_type(ptr)))
@@ -497,6 +497,7 @@ int ERR_set_mark(void);
 int ERR_pop_to_mark(void);
 int ERR_clear_last_mark(void);
 int ERR_count_to_mark(void);
+int ERR_pop(void);
 
 ERR_STATE *OSSL_ERR_STATE_new(void);
 void OSSL_ERR_STATE_save(ERR_STATE *es);
diff --git a/watchsimulator/include/OpenSSL/evp.h b/watchsimulator/include/OpenSSL/evp.h
index c8290eba..1716f700 100644
--- a/watchsimulator/include/OpenSSL/evp.h
+++ b/watchsimulator/include/OpenSSL/evp.h
@@ -729,8 +729,10 @@ __owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
 __owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
 __owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
                            unsigned int *s);
-__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *md,
-                              size_t len);
+__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
+                              size_t outlen);
+__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
+                             size_t outlen);
 
 __owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
                             const char *properties);
diff --git a/watchsimulator/include/OpenSSL/hpke.h b/watchsimulator/include/OpenSSL/hpke.h
index e7155e4a..adefc552 100644
--- a/watchsimulator/include/OpenSSL/hpke.h
+++ b/watchsimulator/include/OpenSSL/hpke.h
@@ -68,7 +68,7 @@
 
 /*
  * Roles for use in creating an OSSL_HPKE_CTX, most
- * important use of this is to control nonce re-use.
+ * important use of this is to control nonce reuse.
  */
 # define OSSL_HPKE_ROLE_SENDER 0
 # define OSSL_HPKE_ROLE_RECEIVER 1
diff --git a/watchsimulator/include/OpenSSL/http.h b/watchsimulator/include/OpenSSL/http.h
index d33cc797..d3d786f0 100644
--- a/watchsimulator/include/OpenSSL/http.h
+++ b/watchsimulator/include/OpenSSL/http.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright Siemens AG 2018-2020
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
@@ -37,6 +37,8 @@ extern "C" {
 
 #define OSSL_HTTP_DEFAULT_MAX_LINE_LEN (4 * 1024)
 #define OSSL_HTTP_DEFAULT_MAX_RESP_LEN (100 * 1024)
+#define OSSL_HTTP_DEFAULT_MAX_RESP_HDR_LINES 256
+
 
 /* Low-level HTTP API */
 OSSL_HTTP_REQ_CTX *OSSL_HTTP_REQ_CTX_new(BIO *wbio, BIO *rbio, int buf_size);
@@ -105,6 +107,8 @@ int OSSL_HTTP_parse_url(const char *url, int *pssl, char **puser, char **phost,
 const char *OSSL_HTTP_adapt_proxy(const char *proxy, const char *no_proxy,
                                   const char *server, int use_ssl);
 
+void OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines(OSSL_HTTP_REQ_CTX *rctx,
+                                                  size_t count);
 
 # endif /* !defined(OPENSSL_NO_HTTP) */
 # ifdef  __cplusplus
diff --git a/watchsimulator/include/OpenSSL/httperr.h b/watchsimulator/include/OpenSSL/httperr.h
index 70719671..d0aa82fb 100644
--- a/watchsimulator/include/OpenSSL/httperr.h
+++ b/watchsimulator/include/OpenSSL/httperr.h
@@ -1,6 +1,6 @@
 /*
  * Generated by util/mkerr.pl DO NOT EDIT
- * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -44,6 +44,7 @@
 # define HTTP_R_REDIRECTION_NOT_ENABLED                   116
 # define HTTP_R_RESPONSE_LINE_TOO_LONG                    113
 # define HTTP_R_RESPONSE_PARSE_ERROR                      104
+# define HTTP_R_RESPONSE_TOO_MANY_HDRLINES                130
 # define HTTP_R_RETRY_TIMEOUT                             129
 # define HTTP_R_SERVER_CANCELED_CONNECTION                127
 # define HTTP_R_SOCK_NOT_SUPPORTED                        122
diff --git a/watchsimulator/include/OpenSSL/lhash.h b/watchsimulator/include/OpenSSL/lhash.h
index ea77b654..612121fd 100644
--- a/watchsimulator/include/OpenSSL/lhash.h
+++ b/watchsimulator/include/OpenSSL/lhash.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -34,9 +34,13 @@ extern "C" {
 
 typedef struct lhash_node_st OPENSSL_LH_NODE;
 typedef int (*OPENSSL_LH_COMPFUNC) (const void *, const void *);
+typedef int (*OPENSSL_LH_COMPFUNCTHUNK) (const void *, const void *, OPENSSL_LH_COMPFUNC cfn);
 typedef unsigned long (*OPENSSL_LH_HASHFUNC) (const void *);
+typedef unsigned long (*OPENSSL_LH_HASHFUNCTHUNK) (const void *, OPENSSL_LH_HASHFUNC hfn);
 typedef void (*OPENSSL_LH_DOALL_FUNC) (void *);
+typedef void (*OPENSSL_LH_DOALL_FUNC_THUNK) (void *, OPENSSL_LH_DOALL_FUNC doall);
 typedef void (*OPENSSL_LH_DOALL_FUNCARG) (void *, void *);
+typedef void (*OPENSSL_LH_DOALL_FUNCARG_THUNK) (void *, void *, OPENSSL_LH_DOALL_FUNCARG doall);
 typedef struct lhash_st OPENSSL_LHASH;
 
 /*
@@ -82,13 +86,23 @@ typedef struct lhash_st OPENSSL_LHASH;
 
 int OPENSSL_LH_error(OPENSSL_LHASH *lh);
 OPENSSL_LHASH *OPENSSL_LH_new(OPENSSL_LH_HASHFUNC h, OPENSSL_LH_COMPFUNC c);
+OPENSSL_LHASH *OPENSSL_LH_set_thunks(OPENSSL_LHASH *lh,
+                                     OPENSSL_LH_HASHFUNCTHUNK hw,
+                                     OPENSSL_LH_COMPFUNCTHUNK cw,
+                                     OPENSSL_LH_DOALL_FUNC_THUNK daw,
+                                     OPENSSL_LH_DOALL_FUNCARG_THUNK daaw);
 void OPENSSL_LH_free(OPENSSL_LHASH *lh);
 void OPENSSL_LH_flush(OPENSSL_LHASH *lh);
 void *OPENSSL_LH_insert(OPENSSL_LHASH *lh, void *data);
 void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data);
 void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data);
 void OPENSSL_LH_doall(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNC func);
-void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG func, void *arg);
+void OPENSSL_LH_doall_arg_thunk(OPENSSL_LHASH *lh,
+                          OPENSSL_LH_DOALL_FUNCARG_THUNK daaw,
+                          OPENSSL_LH_DOALL_FUNCARG fn, void *arg);
+
 unsigned long OPENSSL_LH_strhash(const char *c);
 unsigned long OPENSSL_LH_num_items(const OPENSSL_LHASH *lh);
 unsigned long OPENSSL_LH_get_down_load(const OPENSSL_LHASH *lh);
@@ -142,6 +156,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     typedef int (*lh_##type##_compfunc)(const type *a, const type *b); \
     typedef unsigned long (*lh_##type##_hashfunc)(const type *a); \
     typedef void (*lh_##type##_doallfunc)(type *a); \
+    static ossl_inline unsigned long lh_##type##_hash_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
+    { \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static ossl_inline int lh_##type##_comp_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
+    } \
+    static ossl_inline void lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_inline void lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
     static ossl_unused ossl_inline type *\
     ossl_check_##type##_lh_plain_type(type *ptr) \
     { \
@@ -204,12 +238,16 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     LHASH_OF(type) { \
         union lh_##type##_dummy { void* d1; unsigned long d2; int d3; } dummy; \
     }; \
-    static ossl_unused ossl_inline LHASH_OF(type) * \
-    lh_##type##_new(unsigned long (*hfn)(const type *), \
-                    int (*cfn)(const type *, const type *)) \
+    static unsigned long \
+    lh_##type##_hfn_thunk(const void *data, OPENSSL_LH_HASHFUNC hfn) \
     { \
-        return (LHASH_OF(type) *) \
-            OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn); \
+        unsigned long (*hfn_conv)(const type *) = (unsigned long (*)(const type *))hfn; \
+        return hfn_conv((const type *)data); \
+    } \
+    static int lh_##type##_cfn_thunk(const void *da, const void *db, OPENSSL_LH_COMPFUNC cfn) \
+    { \
+        int (*cfn_conv)(const type *, const type *) = (int (*)(const type *, const type *))cfn; \
+        return cfn_conv((const type *)da, (const type *)db); \
     } \
     static ossl_unused ossl_inline void \
     lh_##type##_free(LHASH_OF(type) *lh) \
@@ -257,10 +295,31 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
         OPENSSL_LH_set_down_load((OPENSSL_LHASH *)lh, dl); \
     } \
     static ossl_unused ossl_inline void \
+    lh_##type##_doall_thunk(void *node, OPENSSL_LH_DOALL_FUNC doall) \
+    { \
+        void (*doall_conv)(type *) = (void (*)(type *))doall; \
+        doall_conv((type *)node); \
+    } \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_arg_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG doall) \
+    { \
+        void (*doall_conv)(type *, void *) = (void (*)(type *, void *))doall; \
+        doall_conv((type *)node, arg); \
+    } \
+    static ossl_unused ossl_inline void \
     lh_##type##_doall(LHASH_OF(type) *lh, void (*doall)(type *)) \
     { \
         OPENSSL_LH_doall((OPENSSL_LHASH *)lh, (OPENSSL_LH_DOALL_FUNC)doall); \
     } \
+    static ossl_unused ossl_inline LHASH_OF(type) * \
+    lh_##type##_new(unsigned long (*hfn)(const type *), \
+                    int (*cfn)(const type *, const type *)) \
+    { \
+        return (LHASH_OF(type) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new((OPENSSL_LH_HASHFUNC)hfn, (OPENSSL_LH_COMPFUNC)cfn), \
+                                lh_##type##_hfn_thunk, lh_##type##_cfn_thunk, \
+                                lh_##type##_doall_thunk, \
+                                lh_##type##_doall_arg_thunk); \
+    } \
     static ossl_unused ossl_inline void \
     lh_##type##_doall_arg(LHASH_OF(type) *lh, \
                           void (*doallarg)(type *, void *), void *arg) \
@@ -282,18 +341,26 @@ OSSL_DEPRECATEDIN_3_1 void OPENSSL_LH_node_usage_stats_bio(const OPENSSL_LHASH *
     int_implement_lhash_doall(type, argtype, type)
 
 #define int_implement_lhash_doall(type, argtype, cbargtype) \
+    static ossl_unused ossl_inline void \
+    lh_##type##_doall_##argtype##_thunk(void *node, void *arg, OPENSSL_LH_DOALL_FUNCARG fn) \
+    { \
+        void (*fn_conv)(cbargtype *, argtype *) = (void (*)(cbargtype *, argtype *))fn; \
+        fn_conv((cbargtype *)node, (argtype *)arg); \
+    } \
     static ossl_unused ossl_inline void \
         lh_##type##_doall_##argtype(LHASH_OF(type) *lh, \
                                    void (*fn)(cbargtype *, argtype *), \
                                    argtype *arg) \
     { \
-        OPENSSL_LH_doall_arg((OPENSSL_LHASH *)lh, \
-                             (OPENSSL_LH_DOALL_FUNCARG)fn, (void *)arg); \
+        OPENSSL_LH_doall_arg_thunk((OPENSSL_LHASH *)lh, \
+                             lh_##type##_doall_##argtype##_thunk, \
+                             (OPENSSL_LH_DOALL_FUNCARG)fn, \
+                             (void *)arg); \
     } \
     LHASH_OF(type)
 
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
-#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_STRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_STRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_STRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_STRING_lh_compfunc_type(cmp)), lh_OPENSSL_STRING_hash_thunk, lh_OPENSSL_STRING_comp_thunk, lh_OPENSSL_STRING_doall_thunk, lh_OPENSSL_STRING_doall_arg_thunk))
 #define lh_OPENSSL_STRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_STRING_lh_type(lh))
 #define lh_OPENSSL_STRING_insert(lh, ptr) ((OPENSSL_STRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_plain_type(ptr)))
@@ -308,7 +375,7 @@ DEFINE_LHASH_OF_INTERNAL(OPENSSL_STRING);
 #define lh_OPENSSL_STRING_set_down_load(lh, dl) OPENSSL_LH_set_down_load(ossl_check_OPENSSL_STRING_lh_type(lh), dl)
 #define lh_OPENSSL_STRING_doall(lh, dfn) OPENSSL_LH_doall(ossl_check_OPENSSL_STRING_lh_type(lh), ossl_check_OPENSSL_STRING_lh_doallfunc_type(dfn))
 DEFINE_LHASH_OF_INTERNAL(OPENSSL_CSTRING);
-#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)))
+#define lh_OPENSSL_CSTRING_new(hfn, cmp) ((LHASH_OF(OPENSSL_CSTRING) *)OPENSSL_LH_set_thunks(OPENSSL_LH_new(ossl_check_OPENSSL_CSTRING_lh_hashfunc_type(hfn), ossl_check_OPENSSL_CSTRING_lh_compfunc_type(cmp)), lh_OPENSSL_CSTRING_hash_thunk, lh_OPENSSL_CSTRING_comp_thunk, lh_OPENSSL_CSTRING_doall_thunk, lh_OPENSSL_CSTRING_doall_arg_thunk))
 #define lh_OPENSSL_CSTRING_free(lh) OPENSSL_LH_free(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_flush(lh) OPENSSL_LH_flush(ossl_check_OPENSSL_CSTRING_lh_type(lh))
 #define lh_OPENSSL_CSTRING_insert(lh, ptr) ((OPENSSL_CSTRING *)OPENSSL_LH_insert(ossl_check_OPENSSL_CSTRING_lh_type(lh), ossl_check_OPENSSL_CSTRING_lh_plain_type(ptr)))
diff --git a/watchsimulator/include/OpenSSL/obj_mac.h b/watchsimulator/include/OpenSSL/obj_mac.h
index e1b441b3..1b7d9240 100644
--- a/watchsimulator/include/OpenSSL/obj_mac.h
+++ b/watchsimulator/include/OpenSSL/obj_mac.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by crypto/objects/objects.pl
  *
- * Copyright 2000-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2000-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
  * in the file LICENSE in the source distribution or at
@@ -894,6 +894,10 @@
 #define NID_id_ct_signedTAL             1284
 #define OBJ_id_ct_signedTAL             OBJ_id_smime_ct,50L
 
+#define SN_id_ct_rpkiSignedPrefixList           "id-ct-rpkiSignedPrefixList"
+#define NID_id_ct_rpkiSignedPrefixList          1320
+#define OBJ_id_ct_rpkiSignedPrefixList          OBJ_id_smime_ct,51L
+
 #define SN_id_smime_aa_receiptRequest           "id-smime-aa-receiptRequest"
 #define NID_id_smime_aa_receiptRequest          212
 #define OBJ_id_smime_aa_receiptRequest          OBJ_id_smime_aa,1L
diff --git a/watchsimulator/include/OpenSSL/opensslv.h b/watchsimulator/include/OpenSSL/opensslv.h
index b3e2dc41..236448d7 100644
--- a/watchsimulator/include/OpenSSL/opensslv.h
+++ b/watchsimulator/include/OpenSSL/opensslv.h
@@ -28,8 +28,8 @@ extern "C" {
  * These macros express version number MAJOR.MINOR.PATCH exactly
  */
 # define OPENSSL_VERSION_MAJOR  3
-# define OPENSSL_VERSION_MINOR  2
-# define OPENSSL_VERSION_PATCH  2
+# define OPENSSL_VERSION_MINOR  3
+# define OPENSSL_VERSION_PATCH  1
 
 /*
  * Additional version information
@@ -74,8 +74,8 @@ extern "C" {
  * longer variant with OPENSSL_VERSION_PRE_RELEASE_STR and
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
-# define OPENSSL_VERSION_STR "3.2.2"
-# define OPENSSL_FULL_VERSION_STR "3.2.2"
+# define OPENSSL_VERSION_STR "3.3.1"
+# define OPENSSL_FULL_VERSION_STR "3.3.1"
 
 /*
  * SECTION 3: ADDITIONAL METADATA
@@ -88,7 +88,7 @@ extern "C" {
  * SECTION 4: BACKWARD COMPATIBILITY
  */
 
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.2.2 4 Jun 2024"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.3.1 4 Jun 2024"
 
 /* Synthesize OPENSSL_VERSION_NUMBER with the layout 0xMNN00PPSL */
 # ifdef OPENSSL_VERSION_PRE_RELEASE
diff --git a/watchsimulator/include/OpenSSL/pkcs7.h b/watchsimulator/include/OpenSSL/pkcs7.h
index 86d7d66a..f75bddbe 100644
--- a/watchsimulator/include/OpenSSL/pkcs7.h
+++ b/watchsimulator/include/OpenSSL/pkcs7.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/pkcs7.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
diff --git a/watchsimulator/include/OpenSSL/quic.h b/watchsimulator/include/OpenSSL/quic.h
index 10aa86fc..79200a8c 100644
--- a/watchsimulator/include/OpenSSL/quic.h
+++ b/watchsimulator/include/OpenSSL/quic.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2022-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2022-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -24,11 +24,44 @@ extern "C" {
  * Method used for non-thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_method(void);
+
 /*
  * Method used for thread-assisted QUIC client operation.
  */
 __owur const SSL_METHOD *OSSL_QUIC_client_thread_method(void);
 
+/*
+ * QUIC transport error codes (RFC 9000 s. 20.1)
+ */
+#  define OSSL_QUIC_ERR_NO_ERROR                  0x00
+#  define OSSL_QUIC_ERR_INTERNAL_ERROR            0x01
+#  define OSSL_QUIC_ERR_CONNECTION_REFUSED        0x02
+#  define OSSL_QUIC_ERR_FLOW_CONTROL_ERROR        0x03
+#  define OSSL_QUIC_ERR_STREAM_LIMIT_ERROR        0x04
+#  define OSSL_QUIC_ERR_STREAM_STATE_ERROR        0x05
+#  define OSSL_QUIC_ERR_FINAL_SIZE_ERROR          0x06
+#  define OSSL_QUIC_ERR_FRAME_ENCODING_ERROR      0x07
+#  define OSSL_QUIC_ERR_TRANSPORT_PARAMETER_ERROR 0x08
+#  define OSSL_QUIC_ERR_CONNECTION_ID_LIMIT_ERROR 0x09
+#  define OSSL_QUIC_ERR_PROTOCOL_VIOLATION        0x0A
+#  define OSSL_QUIC_ERR_INVALID_TOKEN             0x0B
+#  define OSSL_QUIC_ERR_APPLICATION_ERROR         0x0C
+#  define OSSL_QUIC_ERR_CRYPTO_BUFFER_EXCEEDED    0x0D
+#  define OSSL_QUIC_ERR_KEY_UPDATE_ERROR          0x0E
+#  define OSSL_QUIC_ERR_AEAD_LIMIT_REACHED        0x0F
+#  define OSSL_QUIC_ERR_NO_VIABLE_PATH            0x10
+
+/* Inclusive range for handshake-specific errors. */
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN          0x0100
+#  define OSSL_QUIC_ERR_CRYPTO_ERR_END            0x01FF
+
+#  define OSSL_QUIC_ERR_CRYPTO_ERR(X) \
+    (OSSL_QUIC_ERR_CRYPTO_ERR_BEGIN + (X))
+
+/* Local errors. */
+#  define OSSL_QUIC_LOCAL_ERR_IDLE_TIMEOUT        \
+    ((uint64_t)0xFFFFFFFFFFFFFFFFULL)
+
 #  ifdef __cplusplus
 }
 #  endif
diff --git a/watchsimulator/include/OpenSSL/self_test.h b/watchsimulator/include/OpenSSL/self_test.h
index 11ef0da3..46a024d9 100644
--- a/watchsimulator/include/OpenSSL/self_test.h
+++ b/watchsimulator/include/OpenSSL/self_test.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2019-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -46,6 +46,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_INTEGRITY_HMAC "HMAC"
 # define OSSL_SELF_TEST_DESC_PCT_RSA_PKCS1  "RSA"
 # define OSSL_SELF_TEST_DESC_PCT_ECDSA      "ECDSA"
+# define OSSL_SELF_TEST_DESC_PCT_EDDSA      "EDDSA"
 # define OSSL_SELF_TEST_DESC_PCT_DSA        "DSA"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_GCM "AES_GCM"
 # define OSSL_SELF_TEST_DESC_CIPHER_AES_ECB "AES_ECB_Decrypt"
@@ -71,6 +72,7 @@ extern "C" {
 # define OSSL_SELF_TEST_DESC_KDF_SSHKDF     "SSHKDF"
 # define OSSL_SELF_TEST_DESC_KDF_TLS12_PRF  "TLS12_PRF"
 # define OSSL_SELF_TEST_DESC_KDF_KBKDF      "KBKDF"
+# define OSSL_SELF_TEST_DESC_KDF_KBKDF_KMAC "KBKDF_KMAC"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXTRACT  "TLS13_KDF_EXTRACT"
 # define OSSL_SELF_TEST_DESC_KDF_TLS13_EXPAND   "TLS13_KDF_EXPAND"
 # define OSSL_SELF_TEST_DESC_RNG            "RNG"
diff --git a/watchsimulator/include/OpenSSL/ssl.h b/watchsimulator/include/OpenSSL/ssl.h
index 0dbadf2f..006d063e 100644
--- a/watchsimulator/include/OpenSSL/ssl.h
+++ b/watchsimulator/include/OpenSSL/ssl.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/ssl.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  * Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
  * Copyright 2005 Nokia. All rights reserved.
  *
@@ -449,6 +449,8 @@ typedef int (*SSL_async_callback_fn)(SSL *s, void *arg);
     /* Enable KTLS TX zerocopy on Linux */
 # define SSL_OP_ENABLE_KTLS_TX_ZEROCOPY_SENDFILE         SSL_OP_BIT(34)
 
+#define SSL_OP_PREFER_NO_DHE_KEX                         SSL_OP_BIT(35)
+
 /*
  * Option "collections."
  */
@@ -1761,6 +1763,9 @@ __owur long SSL_SESSION_set_timeout(SSL_SESSION *s, long t);
 __owur int SSL_SESSION_get_protocol_version(const SSL_SESSION *s);
 __owur int SSL_SESSION_set_protocol_version(SSL_SESSION *s, int version);
 
+__owur time_t SSL_SESSION_get_time_ex(const SSL_SESSION *s);
+__owur time_t SSL_SESSION_set_time_ex(SSL_SESSION *s, time_t t);
+
 __owur const char *SSL_SESSION_get0_hostname(const SSL_SESSION *s);
 __owur int SSL_SESSION_set1_hostname(SSL_SESSION *s, const char *hostname);
 void SSL_SESSION_get0_alpn_selected(const SSL_SESSION *s,
@@ -2014,6 +2019,12 @@ long SSL_callback_ctrl(SSL *, int, void (*)(void));
 long SSL_CTX_ctrl(SSL_CTX *ctx, int cmd, long larg, void *parg);
 long SSL_CTX_callback_ctrl(SSL_CTX *, int, void (*)(void));
 
+# define SSL_WRITE_FLAG_CONCLUDE    (1U << 0)
+
+__owur int SSL_write_ex2(SSL *s, const void *buf, size_t num,
+                         uint64_t flags,
+                         size_t *written);
+
 # define SSL_EARLY_DATA_NOT_SENT    0
 # define SSL_EARLY_DATA_REJECTED    1
 # define SSL_EARLY_DATA_ACCEPTED    2
@@ -2430,6 +2441,124 @@ __owur int SSL_get_conn_close_info(SSL *ssl,
                                    SSL_CONN_CLOSE_INFO *info,
                                    size_t info_len);
 
+# define SSL_VALUE_CLASS_GENERIC                0
+# define SSL_VALUE_CLASS_FEATURE_REQUEST        1
+# define SSL_VALUE_CLASS_FEATURE_PEER_REQUEST   2
+# define SSL_VALUE_CLASS_FEATURE_NEGOTIATED     3
+
+# define SSL_VALUE_NONE                             0
+# define SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL     1
+# define SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL    2
+# define SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL      3
+# define SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL     4
+# define SSL_VALUE_QUIC_IDLE_TIMEOUT                5
+# define SSL_VALUE_EVENT_HANDLING_MODE              6
+# define SSL_VALUE_STREAM_WRITE_BUF_SIZE            7
+# define SSL_VALUE_STREAM_WRITE_BUF_USED            8
+# define SSL_VALUE_STREAM_WRITE_BUF_AVAIL           9
+
+# define SSL_VALUE_EVENT_HANDLING_MODE_INHERIT      0
+# define SSL_VALUE_EVENT_HANDLING_MODE_IMPLICIT     1
+# define SSL_VALUE_EVENT_HANDLING_MODE_EXPLICIT     2
+
+int SSL_get_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t *v);
+int SSL_set_value_uint(SSL *s, uint32_t class_, uint32_t id, uint64_t v);
+
+# define SSL_get_generic_value_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_set_generic_value_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_GENERIC, (id), (v))
+# define SSL_get_feature_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_set_feature_request_uint(ssl, id, v) \
+    SSL_set_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_REQUEST, (id), (v))
+# define SSL_get_feature_peer_request_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_PEER_REQUEST, (id), (v))
+# define SSL_get_feature_negotiated_uint(ssl, id, v) \
+    SSL_get_value_uint((ssl), SSL_VALUE_CLASS_FEATURE_NEGOTIATED, (id), (v))
+
+# define SSL_get_quic_stream_bidi_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_bidi_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_BIDI_REMOTE_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_local_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_LOCAL_AVAIL, \
+                               (value))
+# define SSL_get_quic_stream_uni_remote_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_QUIC_STREAM_UNI_REMOTE_AVAIL, \
+                               (value))
+
+# define SSL_get_event_handling_mode(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+# define SSL_set_event_handling_mode(ssl, value) \
+    SSL_set_generic_value_uint((ssl), SSL_VALUE_EVENT_HANDLING_MODE, \
+                               (value))
+
+# define SSL_get_stream_write_buf_size(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_SIZE, \
+                               (value))
+# define SSL_get_stream_write_buf_used(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_USED, \
+                               (value))
+# define SSL_get_stream_write_buf_avail(ssl, value) \
+    SSL_get_generic_value_uint((ssl), SSL_VALUE_STREAM_WRITE_BUF_AVAIL, \
+                               (value))
+
+# define SSL_POLL_EVENT_NONE        0
+
+# define SSL_POLL_EVENT_F           (1U <<  0) /* F   (Failure) */
+# define SSL_POLL_EVENT_EL          (1U <<  1) /* EL  (Exception on Listener) */
+# define SSL_POLL_EVENT_EC          (1U <<  2) /* EC  (Exception on Conn) */
+# define SSL_POLL_EVENT_ECD         (1U <<  3) /* ECD (Exception on Conn Drained) */
+# define SSL_POLL_EVENT_ER          (1U <<  4) /* ER  (Exception on Read) */
+# define SSL_POLL_EVENT_EW          (1U <<  5) /* EW  (Exception on Write) */
+# define SSL_POLL_EVENT_R           (1U <<  6) /* R   (Readable) */
+# define SSL_POLL_EVENT_W           (1U <<  7) /* W   (Writable) */
+# define SSL_POLL_EVENT_IC          (1U <<  8) /* IC  (Incoming Connection) */
+# define SSL_POLL_EVENT_ISB         (1U <<  9) /* ISB (Incoming Stream: Bidi) */
+# define SSL_POLL_EVENT_ISU         (1U << 10) /* ISU (Incoming Stream: Uni) */
+# define SSL_POLL_EVENT_OSB         (1U << 11) /* OSB (Outgoing Stream: Bidi) */
+# define SSL_POLL_EVENT_OSU         (1U << 12) /* OSU (Outgoing Stream: Uni) */
+
+# define SSL_POLL_EVENT_RW          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_W)
+# define SSL_POLL_EVENT_RE          (SSL_POLL_EVENT_R | SSL_POLL_EVENT_ER)
+# define SSL_POLL_EVENT_WE          (SSL_POLL_EVENT_W | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_RWE         (SSL_POLL_EVENT_RE | SSL_POLL_EVENT_WE)
+# define SSL_POLL_EVENT_E           (SSL_POLL_EVENT_EL | SSL_POLL_EVENT_EC \
+                                     | SSL_POLL_EVENT_ER | SSL_POLL_EVENT_EW)
+# define SSL_POLL_EVENT_IS          (SSL_POLL_EVENT_ISB | SSL_POLL_EVENT_ISU)
+# define SSL_POLL_EVENT_ISE         (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_EC)
+# define SSL_POLL_EVENT_I           (SSL_POLL_EVENT_IS | SSL_POLL_EVENT_IC)
+# define SSL_POLL_EVENT_OS          (SSL_POLL_EVENT_OSB | SSL_POLL_EVENT_OSU)
+# define SSL_POLL_EVENT_OSE         (SSL_POLL_EVENT_OS | SSL_POLL_EVENT_EC)
+
+typedef struct ssl_poll_item_st {
+    BIO_POLL_DESCRIPTOR desc;
+    uint64_t            events, revents;
+} SSL_POLL_ITEM;
+
+# define SSL_POLL_FLAG_NO_HANDLE_EVENTS  (1U << 0)
+
+__owur int SSL_poll(SSL_POLL_ITEM *items,
+                    size_t num_items,
+                    size_t stride,
+                    const struct timeval *timeout,
+                    uint64_t flags,
+                    size_t *result_count);
+
+static ossl_inline ossl_unused BIO_POLL_DESCRIPTOR
+SSL_as_poll_descriptor(SSL *s)
+{
+    BIO_POLL_DESCRIPTOR d;
+
+    d.type      = BIO_POLL_DESCRIPTOR_TYPE_SSL;
+    d.value.ssl = s;
+    return d;
+}
+
 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
 #  define SSL_cache_hit(s) SSL_session_reused(s)
 # endif
diff --git a/watchsimulator/include/OpenSSL/sslerr.h b/watchsimulator/include/OpenSSL/sslerr.h
index 87413d95..5b3a4da5 100644
--- a/watchsimulator/include/OpenSSL/sslerr.h
+++ b/watchsimulator/include/OpenSSL/sslerr.h
@@ -125,6 +125,8 @@
 # define SSL_R_EXT_LENGTH_MISMATCH                        163
 # define SSL_R_FAILED_TO_GET_PARAMETER                    316
 # define SSL_R_FAILED_TO_INIT_ASYNC                       405
+# define SSL_R_FEATURE_NEGOTIATION_NOT_COMPLETE           417
+# define SSL_R_FEATURE_NOT_RENEGOTIABLE                   413
 # define SSL_R_FRAGMENTED_CLIENT_HELLO                    401
 # define SSL_R_GOT_A_FIN_BEFORE_A_CCS                     154
 # define SSL_R_HTTPS_PROXY_REQUEST                        155
@@ -225,6 +227,7 @@
 # define SSL_R_PEM_NAME_BAD_PREFIX                        391
 # define SSL_R_PEM_NAME_TOO_SHORT                         392
 # define SSL_R_PIPELINE_FAILURE                           406
+# define SSL_R_POLL_REQUEST_NOT_SUPPORTED                 418
 # define SSL_R_POST_HANDSHAKE_AUTH_ENCODING_ERR           278
 # define SSL_R_PRIVATE_KEY_MISMATCH                       288
 # define SSL_R_PROTOCOL_IS_SHUTDOWN                       207
@@ -348,10 +351,14 @@
 # define SSL_R_UNSAFE_LEGACY_RENEGOTIATION_DISABLED       338
 # define SSL_R_UNSOLICITED_EXTENSION                      217
 # define SSL_R_UNSUPPORTED_COMPRESSION_ALGORITHM          257
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE                   414
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_CLASS             415
+# define SSL_R_UNSUPPORTED_CONFIG_VALUE_OP                416
 # define SSL_R_UNSUPPORTED_ELLIPTIC_CURVE                 315
 # define SSL_R_UNSUPPORTED_PROTOCOL                       258
 # define SSL_R_UNSUPPORTED_SSL_VERSION                    259
 # define SSL_R_UNSUPPORTED_STATUS_TYPE                    329
+# define SSL_R_UNSUPPORTED_WRITE_FLAG                     412
 # define SSL_R_USE_SRTP_NOT_NEGOTIATED                    369
 # define SSL_R_VERSION_TOO_HIGH                           166
 # define SSL_R_VERSION_TOO_LOW                            396
diff --git a/watchsimulator/include/OpenSSL/sslerr_legacy.h b/watchsimulator/include/OpenSSL/sslerr_legacy.h
index bde52784..096d318f 100644
--- a/watchsimulator/include/OpenSSL/sslerr_legacy.h
+++ b/watchsimulator/include/OpenSSL/sslerr_legacy.h
@@ -1,5 +1,5 @@
 /*
- * Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 2020-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -143,7 +143,6 @@ OSSL_DEPRECATEDIN_3_0 int ERR_load_SSL_strings(void);
 #  define SSL_F_SSL_ADD_SERVERHELLO_RENEGOTIATE_EXT        0
 #  define SSL_F_SSL_ADD_SERVERHELLO_TLSEXT                 0
 #  define SSL_F_SSL_ADD_SERVERHELLO_USE_SRTP_EXT           0
-#  define SSL_F_SSL_BAD_METHOD                             0
 #  define SSL_F_SSL_BUILD_CERT_CHAIN                       0
 #  define SSL_F_SSL_BYTES_TO_CIPHER_LIST                   0
 #  define SSL_F_SSL_CACHE_CIPHERLIST                       0
diff --git a/watchsimulator/include/OpenSSL/x509_vfy.h b/watchsimulator/include/OpenSSL/x509_vfy.h
index 8cf06024..776920e2 100644
--- a/watchsimulator/include/OpenSSL/x509_vfy.h
+++ b/watchsimulator/include/OpenSSL/x509_vfy.h
@@ -2,7 +2,7 @@
  * WARNING: do not edit!
  * Generated by Makefile from include/openssl/x509_vfy.h.in
  *
- * Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
+ * Copyright 1995-2024 The OpenSSL Project Authors. All Rights Reserved.
  *
  * Licensed under the Apache License 2.0 (the "License").  You may not use
  * this file except in compliance with the License.  You can obtain a copy
@@ -497,6 +497,7 @@ int X509_STORE_lock(X509_STORE *xs);
 int X509_STORE_unlock(X509_STORE *xs);
 int X509_STORE_up_ref(X509_STORE *xs);
 STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
+STACK_OF(X509_OBJECT) *X509_STORE_get1_objects(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_get1_all_certs(X509_STORE *xs);
 STACK_OF(X509) *X509_STORE_CTX_get1_certs(X509_STORE_CTX *xs,
                                           const X509_NAME *nm);
diff --git a/watchsimulator/lib/libcrypto.a b/watchsimulator/lib/libcrypto.a
index f47208f4..5dbdcbcf 100644
Binary files a/watchsimulator/lib/libcrypto.a and b/watchsimulator/lib/libcrypto.a differ
diff --git a/watchsimulator/lib/libssl.a b/watchsimulator/lib/libssl.a
index 88816df9..e9a017e0 100644
Binary files a/watchsimulator/lib/libssl.a and b/watchsimulator/lib/libssl.a differ