|
1d27b22e
|
2015-06-05T03:45:45
|
|
set stdin/out/err to binary mode on Windows
|
|
|
769d58e4
|
2015-05-02T01:40:33
|
|
further refactoring, working libtls-standalone
|
|
|
bc70c1c2
|
2015-05-23T19:23:55
|
|
patch in std headers and C++ support for tls.h
|
|
|
1a369f0f
|
2015-05-03T22:25:22
|
|
ship manpages with libtls-standalone
|
|
|
28353c1d
|
2015-04-30T04:44:35
|
|
stub in initial libtls standalone tree
|
|
b0565945
|
2015-04-26T23:01:26
|
|
use soft links for related man pages.
This matches the behavior of OpenSSL's installer and prevents
hitting the max hard link limit on some file systems.
|
|
|
273bd7bd
|
2015-03-27T06:42:45
|
|
Use mandoc database to get man links.
Previously, we semi-manually grabbed the MLINKS from the libressl
Makefiles. The better way is to extract this information from the mandoc
link database files directly, allowing for MLINKS to eventually go away
upstream.
|
|
|
cc3bdea4
|
2015-03-22T08:03:02
|
|
copy remaining test harness dependencies
|
|
|
a34d319f
|
2015-03-22T07:53:18
|
|
copy memmem.c on update
|
|
|
989bc3e3
|
2015-03-22T05:49:58
|
|
the BIO_sock_init() patch is upstream.
|
|
|
dcf31221
|
2015-03-21T19:08:04
|
|
Merge native cygwin support
|
|
|
45065de1
|
2015-03-21T19:04:54
|
|
rework tests Makefile.am
There are so many test exceptions that need handling that it is easier
to simply edit it directly rather than doing autogeneration anymore.
This also puts biotest and pidwraptest behind a new --enable-extratests
option, so they are easy to run but are not enabled by default.
|
|
|
dd646a33
|
2015-03-18T19:12:42
|
|
enable libtls by default
The API/ABI for the LibreSSL 2.1.x series is now fixed, so we can safely
enable libtls it by default. This is useful for new OpenNTPD and
OpenSMTPD releases as well.
ok deraadt@ beck@ sthen@
|
|
|
f5389343
|
2015-03-09T07:11:28
|
|
use correct patch level
|
|
|
f7e4e4a2
|
2015-03-08T18:27:07
|
|
initialize winsock earlier in openssl(1)
This allows commands like ocsp to work properly since we no longer
initialize Winsock as a side-effect of doing a BIO_gethostbyname.
|
|
e38dc152
|
2015-03-04T11:55:50
|
|
Allow to disable tests easily
- Introduce the tests_disabled array, add biotest, explicit_bzero and
pidwraptest.
- Add preceeding comment to explain why every test is skipped
- Rearrange loops generating Makefile.am dependencies to look for tests
in tests_disabled first and skip them.
Signed-off-by: Corinna Vinschen <github@cygwin.de>
|
|
|
ad7ac48d
|
2015-02-14T20:03:39
|
|
add strsep fallback for libtls
|
|
|
2286578f
|
2015-02-14T18:15:15
|
|
update for new manpage conversions, add links
|
|
|
687a5083
|
2015-02-10T11:10:04
|
|
rc5 is removed
|
|
|
c386ab21
|
2015-02-06T20:41:07
|
|
disable biotest
|
|
|
be5d0cca
|
2015-02-06T20:17:31
|
|
update with latest, add more tests
this adds the new bytestring apis and new regression tests
|
|
|
04158cd4
|
2014-12-21T23:14:02
|
|
do not mark GNU_STACK WX in ELFs generated from assembly
When generating ELF objects from assembly, gcc and clang mark the
GNU_STACK program headers as RWX by default. This is a security issue,
so we make sure it is marked only RW.
This modifies Anthony G. Basile's original patch for Linux to set
.note.GNU-stack whenever the assembler supports it. It is surprising
that any modern toolchain would enable an executable stack without an
explicit request. The number of programs that need an executable stack
is surely much smaller than the number of programs that include assembly.
|
|
|
a29b174e
|
2014-12-14T16:42:38
|
|
bump version
append portable version number to the version string
|
|
|
6f6ca9dc
|
2014-12-07T18:33:22
|
|
use the new $MV macro to generate assembly files
Avoid spurious rebuilds running update.sh by generating a temp file and
comparing the result to the existing one.
|
|
afcd515b
|
2014-12-08T02:13:34
|
|
update.sh: remove linked manpages on uninstall
Add additional code to remove linked manpages on uninstall. Since we do
linking manually, automake will not remove them for us.
Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
|
|
|
9d70cdc6
|
2014-12-08T02:08:18
|
|
update.sh: add MV-like function preserving file timestamps
Add a do_mv()/$MV wrappers to be called instead of just mv. This
function will preserve the target file if it does not differ from the
source file. This helps to remove unnecessary compilator calls after
calling update.sh w/o source changes.
Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
|
|
|
5390bbea
|
2014-12-08T02:07:21
|
|
update.sh: call $CP instead of cp to ease rebuilds
In several additional places call $CP instead of just cp to ease and
speed up rebuilds after update.sh execution.
Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
|
|
|
7842cda3
|
2014-12-08T02:10:41
|
|
update.sh: include gost test suite
Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
|
|
|
03cd45e2
|
2014-12-06T18:43:58
|
|
Enable optimized crypto operations for x86_64
This adds initial support for assembly crypto acceleration on x86_64 for
ELF (Linux, *BSD, Solaris) and Mach-O (OS-X) systems.
The build method is a little different than OpenSSL and OpenBSD. All
the .s files are generated ahead of time when the tarball is generated,
so there are no complicated makefile rules at configure/build time. This
also means the builds are faster and perl is not required on the build
system.
Thanks to Wouter Clarie for providing the initial cleanup and patch
that this is based on.
|
|
|
976f64d9
|
2014-12-06T18:59:25
|
|
read all library versions directly from files
This makes building and testing easier because the library Makefile.am
files are use directly rather than as templates. Thanks to Wouter Clarie
for the idea.
|
|
|
14f4175b
|
2014-12-06T17:39:07
|
|
split long manpage makefile lines.
|
|
|
29804a73
|
2014-12-06T17:11:59
|
|
simplify packaging for libcrypto.
Remove a lot of complex shell code. Upstream churn has slowed down, so
it is now easier to maintain this directly as automake files. This is
also needed to start integrating CPU-specific acceleration support.
Since we are deriving the copy list from the Makefile.am files, we can
now get rid of copy_src/copy_crypto.
|
|
|
d643bcf4
|
2014-12-06T17:47:30
|
|
simplify packaging for libssl.
Follow libtls and derive the file list from the Makefile.am
template itself.
|
|
|
13035fa6
|
2014-12-06T11:20:56
|
|
simplify building the apps Makefile
Remove extra machinery in favor of a plain-old Makefile.am.
Tighten up what files are copied on build, package a simple openssl.cnf.
|
|
|
33ff088a
|
2014-12-06T10:21:23
|
|
simplify packaging for libtls.
Derive the file list from the Makefile.am template itself (DRY), ensure
manpage is packaged with the final tarball.
|
|
|
b3270494
|
2014-12-04T22:37:22
|
|
add support for building libtls
Use './configure --enable-libtls' to build the library and install the
associated manpages. Note that the API and ABI of this library may
change still, though feedback is welcome.
ok deraadt@ jsing@ tedu@
|
|
|
a19dd0e6
|
2014-12-03T22:58:24
|
|
better cleanup biotest.c
|
|
|
1bbde19a
|
2014-11-20T00:24:20
|
|
add minimal poll(2) implementation for Windows
This provides sufficient functionality to run openssl(1) from a Windows
console. This is based on the original select-based version from from
songdongsheng@live.cn. Changes:
* use nfds_t directly for iterating the fds.
* add WSAGetLastError -> errno mappings
* handle POLLHUP and the OOB data cases for revents
* handle sparse arrays of fds correctly
* KNF style updates
* teach poll how to handle file handles as well as sockets
This handles the socket/non-socket issue by alternating a loop between
WaitForMultipleObjects for non-sockets and and select for sockets. One
would think this would be terrible for performance, but as of this
writing, poll consumes about 6% of the time doing a bulk transfer
between a Linux box and 'openssl.exe s_server'.
I tried to implement this all in terms of WaitForMultipleObjects with a
select 'poll' at the end to get extra specific socket status. However,
the cost of setting up an event handle for each socket, setting the
WSAEventSelect attributes, and cleaning them up reliably was pretty
high. Since the event handle associated with a socket is also global,
creating a new one cancels the previous one or can be disabled
externally.
In addition, the 'FD_WRITE' status of a socket event handle does not
behave in an expected fashion, being triggered by an edge on a write
event rather than being level triggered.
Another fun horror story is how stdin in windows might be a console, it
might be a pipe, it might be something else. If these all worked in the
same way, it would be great. But, since a console-stdin can also signal
on a mouse or window event, it means we can easily get stuck in a
blocking read (you can't make stdin non-blocking) if the non-character
events are not filtered out. So, poll does that too.
See here for various additional horror stories:
http://www.postgresql.org/message-id/4351.1336927207@sss.pgh.pa.us
|
|
|
96bf8be0
|
2014-11-20T08:46:02
|
|
update and mask unit tests when running on win32
Update pq_test to ignore changes in whitespace.
Update for new testssl params, specify absolute paths to test binaries.
Fork-based tests do not make sense on Windows.
Disable building biotest, since it is too specific to OpenBSD's behavior
to be useful on other platforms.
|
|
|
58fcd3c3
|
2014-11-20T00:26:55
|
|
Add conditional compilation for windows and posix functions.
This adds a Windows-specific versions of several symbols from libcrypto
and openssl(1).
|
|
|
2103690c
|
2014-11-19T22:02:17
|
|
improve readability of generated Makefile.am files
|
|
|
29f8d827
|
2014-11-18T08:02:32
|
|
Enable GOST in libcrypto and libssl, contributed by Dmitry Eremin-Solenikov
Ensure the public camellia.h header is installed along with gost.h
|
|
|
f223e6f1
|
2014-11-17T17:48:46
|
|
Add the Cammelia cipher to libcrypto.
from miod@:
There used to be a strong reluctance to provide this cipher in LibreSSL in the
past, because the licence terms under which Cammelia was released by NTT were
free-but-not-in-the-corners, by restricting the right to modify the source
code, as well retaining the right to enforce their patents against anyone
in the future.
However, as stated in http://www.ntt.co.jp/news/news06e/0604/060413a.html ,
NTT changed its mind and made this code truly free. We only wish there had
been more visibility of this, for we could have had enabled Cammelia
earlier (-:
Licence change noticed by deraadt@. General agreement from the usual LibreSSL
suspects.
Crank libcrypto.so minor version due to the added symbols.
|
|
|
a4cc9539
|
2014-10-29T15:44:36
|
|
Improve and simplify function and header detection logic.
Simplify autoconf checks by using AC_CHECK_FUNCS/HEADERS.
Clarify some ambiguous dependencies around strnlen/strndup.
Unconditionally enable pidwraptest for all arc4random implementations.
Remove HAVE_VASPRINTF conditional, since asprintf requires vasprintf.
ok @doug
|
|
|
72c1e56b
|
2014-10-29T15:46:20
|
|
enable -lcrypto -lssl with all test programs directly.
This removes the need to specify each one individually.
ok doug@
|
|
|
ccaf9cdd
|
2014-10-26T09:23:03
|
|
remove duplicate (and overlapping) .1 manpages
openssl.1 contains all of the information from the other application
manpages, and is the only one packaged in OpenBSD. So, remove the other
obsolete .1 manpages (and avoid overlapping system pages like passwd.1)
|
|
|
54259e50
|
2014-10-22T12:37:06
|
|
include a proper check for memmem when configuring unit tests
This allows the proper compatibility header definition to be exposed.
|
|
|
24082531
|
2014-10-14T22:25:16
|
|
add extended ChangeLog file
help people more easily find the code and changes
|
|
|
0534fffe
|
2014-10-13T06:12:07
|
|
update to new converted SSL manpages
|
|
|
3f944e83
|
2014-08-27T21:46:43
|
|
update for upstream move of the openssl app
|
|
|
46b6df7c
|
2014-08-12T06:20:58
|
|
remove configure.am.tpl, pull in VERSION directly
from wouter@
|
|
|
d6a485d1
|
2014-08-08T07:31:28
|
|
rebase on pull when updating the openbsd branch
this avoids inadvertent local merges
|
|
|
c95574be
|
2014-07-31T18:18:45
|
|
tie master libressl branch to openbsd master
Added OPENBSD_BRANCH to set what branch update.sh should checkout.
|
|
|
cd168d51
|
2014-07-28T07:50:48
|
|
split big line
|
|
|
0a74a4d4
|
2014-07-27T06:11:56
|
|
add strndup/strnlen compat functions from OpenBSD
|
|
|
ea6e7116
|
2014-07-21T18:57:06
|
|
build openbsd memmem implementation for explicit_bzero test
memmem is not always available, and not all memmem's work the same way
ok beck@ guenther@
|
|
|
451dbd96
|
2014-07-21T18:56:24
|
|
compute absolute paths to source
removes relative path hackery
ok beck@ guenther@
|
|
|
33bc05ca
|
2014-07-21T18:30:31
|
|
better handle disabled tests and exclude files
ok beck@ guenther@
|
|
|
4335a49f
|
2014-07-21T05:40:28
|
|
use correct link order for app and tests
ok beck@ guenther@
|
|
|
8a44ab84
|
2014-07-21T04:21:59
|
|
preserve timestamps on copy from upstream checkout
this saves time on rebuilds when testing tarballs
ok beck@ guenther@
|
|
|
9c2c499b
|
2014-07-20T13:40:14
|
|
Use correct static link order for unit tests.
thanks to Jonas 'Sortie' Termansen
ok beck@
|
|
|
1b1bce16
|
2014-07-17T23:58:46
|
|
update to newly-refactored arc4random compatibility shims
the thread-private bits can move next
ok beck@
|
|
|
477f1f01
|
2014-07-15T16:43:00
|
|
added fork_rand test to check for PID wraparound
ok beck@
|
|
|
7f2fab20
|
2014-07-15T14:49:34
|
|
enable the asn1 test
|
|
bbd51d0e
|
2014-07-14T16:09:18
|
|
give section 1 man pages a .1 suffix instead of .3
ok beck@
|
|
e0386dd2
|
2014-07-13T03:02:25
|
|
rc4_util.c went away
ok bcook@
|
|
|
596ef458
|
2014-07-12T03:36:32
|
|
source library version from a common place, speed man builds
grab library version from VERSION file
build manpages only on changes
ok beck@
|
|
|
65944782
|
2014-07-12T03:34:08
|
|
add platform libraries to libcompat's LIBADD list
ok beck@
|
|
|
77b34fe0
|
2014-07-11T10:08:57
|
|
Ignore .1 man pages, and fix update to include new opensslfeatures.h
ok bcook@
|
|
|
09fdc9c0
|
2014-07-11T10:51:28
|
|
source the proper man links file
otherwise, this picks up 'links' in the path
|
|
6d6c94a2
|
2014-07-11T04:43:20
|
|
Actually get man pages.
|
|
|
ab3d9838
|
2014-07-11T04:14:48
|
|
wording changes and initial stab at crypto man pages.
still need to get man links working and ssl and apps
man pages added.
|
|
|
8b125f31
|
2014-07-11T04:47:03
|
|
build strtonum directly into apps/openssl
it is not needed as a library export
ok beck@
|
|
|
e1e636db
|
2014-07-11T03:55:48
|
|
prefer symlinks rather than hardlinks for manpages
ok beck@
|
|
|
d698dcfa
|
2014-07-11T01:26:35
|
|
update manpage links list
|
|
|
bc2d1a32
|
2014-07-11T00:51:33
|
|
fixes for manpage linker
|
|
|
5acefa2f
|
2014-07-11T00:15:13
|
|
add manpages and links
|
|
|
faaf265e
|
2014-07-10T19:41:42
|
|
build fixes and simplifications
switch from submodules to plain-old-clones
remove broken biotest for now
ok beck@
|
|
b3543f9c
|
2014-07-10T08:05:45
|
|
add LIBRESSL_GIT environment variable
Allows for eventual public github default, which can be easily
overridden by developers.
|
|
985fdadd
|
2014-07-10T07:36:19
|
|
update script to work rebased on cvs.openbsd.org
ok bcook@
|
|
|
e9eff501
|
2014-07-10T06:07:09
|
|
initial top-level import
|