|
c194be10
|
2015-07-02T17:49:51
|
|
release note update for 2.2.1
|
|
|
8c6ed379
|
2015-07-02T17:49:03
|
|
add compatible version of arpa/nameser.h for Windows
|
|
|
54545427
|
2015-06-29T22:51:40
|
|
add check for inet_pton, nudge minimum win32 compat to 0x0501
|
|
|
8414df69
|
2015-07-01T03:19:21
|
|
added 2.2.1 changes
|
|
|
45a7a439
|
2015-06-29T22:51:19
|
|
ignore more imported test files
|
|
|
b7f699ab
|
2015-06-29T22:49:37
|
|
add cipher_list test
|
|
|
89880c2e
|
2015-06-23T06:39:28
|
|
link build status
|
|
|
d83bdd41
|
2015-06-23T06:38:00
|
|
include build status link
|
|
|
b9f1b83a
|
2015-06-20T10:40:04
|
|
update for mdc2 removal
|
|
|
b67c9460
|
2015-06-19T02:09:27
|
|
remove unneeded local tls.h patch
|
|
|
97644539
|
2015-06-14T06:06:39
|
|
package README.md
|
|
7dcb0216
|
2015-06-13T23:11:08
|
|
Rename to README.md and add markdown
Since it's now a foreign project in automake, we can use github markdown
in the README.
|
|
|
407c7cd1
|
2015-06-13T22:31:26
|
|
set 'foreign' flag in automake
Avoid warnings about following GNU standards, since this is not a GNU
project. Thanks to Doug Hogan for pointing this out.
|
|
|
b091d236
|
2015-06-13T22:26:58
|
|
fix libtool 2.4.2 stack-protector flag handling
Teach libtool 2.4.2 how to pass -fstack-protector* to the linker so
libssp is properly linked in on some toolchains. See upstream patch:
https://github.com/instantinfrastructure/poky-daisy/blob/master/meta/recipes-devtools/libtool/libtool/respect-fstack-protector.patch
Thanks to kinichiro inoguchi
|
|
|
bc7b9347
|
2015-06-13T21:43:55
|
|
add a missing header and fix typo in windows posix layer
|
|
|
06d034ce
|
2015-06-12T22:01:04
|
|
bump version
|
|
|
351b5161
|
2015-06-11T09:02:54
|
|
add security update notes
|
|
|
04a8eca5
|
2015-06-11T08:47:12
|
|
always check if ssp needs to be linked
|
|
|
cf0bcbd5
|
2015-06-11T06:25:41
|
|
add OS-specific build notes
|
|
|
aed0eee7
|
2015-06-05T22:35:29
|
|
add libtls-standalone COPYING file
|
|
|
88acad37
|
2015-06-05T22:16:02
|
|
return 1 on failure
|
|
|
df703ada
|
2015-06-05T05:56:18
|
|
update changelog
|
|
a2247277
|
2015-06-05T05:36:59
|
|
update readme with supported OSes
|
|
|
b4a6a615
|
2015-06-05T04:31:56
|
|
refactor win32 shims into posix_win.c
this also adds a rename shim that allows overwrites
|
|
|
1d27b22e
|
2015-06-05T03:45:45
|
|
set stdin/out/err to binary mode on Windows
|
|
|
b239fc25
|
2015-06-05T03:31:28
|
|
all file IO should be binary, auto-append the flag
|
|
|
8eec2f48
|
2015-06-05T02:31:22
|
|
use correct binary on native windows builds
|
|
|
d5a09e19
|
2015-05-25T22:59:14
|
|
update man links
|
|
|
edfc5690
|
2015-05-02T11:13:41
|
|
fix definition of DISABLE_AS_EXECUTABLE_STACK
|
|
|
d2faf2ed
|
2015-05-02T09:06:55
|
|
set the shared library version number
|
|
|
189cdf71
|
2015-05-02T08:34:39
|
|
revert changes to libtls-standalone Makefile.am that ended up in tls
|
|
|
8dedbb4b
|
2015-05-02T01:58:21
|
|
add Makefile.am.arc4random
|
|
|
769d58e4
|
2015-05-02T01:40:33
|
|
further refactoring, working libtls-standalone
|
|
|
d3771a41
|
2015-05-01T07:18:12
|
|
refactor configure into separate m4 macros
this allows for some reusability with libtls
|
|
|
bc70c1c2
|
2015-05-23T19:23:55
|
|
patch in std headers and C++ support for tls.h
|
|
|
901ea927
|
2015-05-23T19:23:35
|
|
flesh out libtls test program a bit, move to tests
|
|
|
1a369f0f
|
2015-05-03T22:25:22
|
|
ship manpages with libtls-standalone
|
|
|
28353c1d
|
2015-04-30T04:44:35
|
|
stub in initial libtls standalone tree
|
|
7de7605b
|
2015-05-14T15:32:27
|
|
adding support for bitrig
|
|
|
134f3239
|
2015-05-07T07:56:19
|
|
add branch coverage, skip coverage check of tests themselves
|
|
|
abd0688b
|
2015-05-06T22:53:28
|
|
distcheck fixes
|
|
|
51bfd492
|
2015-05-06T22:37:41
|
|
add app tests from regress/usr.bin/openssl
These are added directly rather than imported by update.sh since they
require local modifications and its not worth breaking everyone's git
forks yet to import them through cvs2git.
|
|
|
91f01629
|
2015-04-27T08:25:54
|
|
use the same gcc test for AIX as HP-UX
|
|
97c910ec
|
2015-04-27T21:20:20
|
|
modify for HP-UX build, choose correct CFLAGS for gcc.
|
|
|
b0565945
|
2015-04-26T23:01:26
|
|
use soft links for related man pages.
This matches the behavior of OpenSSL's installer and prevents
hitting the max hard link limit on some file systems.
|
|
|
7dbc4ed3
|
2015-04-19T15:14:52
|
|
remove unneeded check for sys/sysctl.h
|
|
|
dcb97d12
|
2015-04-19T14:55:25
|
|
use alternate cflags on AIX and HP-UX vendor compilers
|
|
|
2753f5ca
|
2015-04-14T22:12:52
|
|
Revert configure-time checks for -Wall/-std=gnu99
There is a problem with these on some compilers, revert while a solution
is found.
|
|
|
5cf05de1
|
2015-04-14T08:43:52
|
|
make compiler checks for -Wall and -std=gnu99
Yes, there are compilers that do not understand or need these.
|
|
|
3096ab0e
|
2015-04-14T07:55:23
|
|
remove issetuigid wrappers, now that all getenv calls are gone.
From deraadt@ upstream:
Remove all getenv() calls, especially those wrapped by issetugid().
getenv()'s wrapped by issetugid() are safe, but issetugid() is ...
difficult to impliment on many operating systems. By accident, a grand
experiment was run over the last year, where issetugid() returned 1 (the
safe value) on a few operating systems. Noone noticed & complained that
certain environment variables were not working.......
|
|
|
fe3f7fc6
|
2015-02-10T23:49:31
|
|
Add experimental AIX support.
This includes a WIP failsafe issetugid for now, while research continues
on the proper way to do this in a race-free fashion in AIX.
|
|
|
20101fd6
|
2015-03-31T08:36:21
|
|
avoid install failures on case-insensitive file systems
|
|
|
273bd7bd
|
2015-03-27T06:42:45
|
|
Use mandoc database to get man links.
Previously, we semi-manually grabbed the MLINKS from the libressl
Makefiles. The better way is to extract this information from the mandoc
link database files directly, allowing for MLINKS to eventually go away
upstream.
|
|
|
34bf96ce
|
2015-03-22T08:14:27
|
|
move define to CPPFLAGS
|
|
|
569177ea
|
2015-03-22T08:11:53
|
|
Merged support for using _OPENBSD_SOURCE on NetBSD 8.x
|
|
|
cc3bdea4
|
2015-03-22T08:03:02
|
|
copy remaining test harness dependencies
|
|
|
a34d319f
|
2015-03-22T07:53:18
|
|
copy memmem.c on update
|
|
|
ad2a38ab
|
2015-03-22T06:18:18
|
|
rework CFLAGS/CPPFLAGS settings during configuration
Move define adjustments to CPPFLAGS.
Adjust user CFLAGS directly, do not override during configuration.
USER_CFLAGS is not necessary to build libcompat_noopt correctly.
|
|
|
809fcf4e
|
2015-03-22T06:05:49
|
|
move clang flags adjustment next to the check, fix typo
|
|
|
4106a08d
|
2015-03-22T06:03:43
|
|
check for build tools earlier in configuration
|
|
|
989bc3e3
|
2015-03-22T05:49:58
|
|
the BIO_sock_init() patch is upstream.
|
|
|
dcf31221
|
2015-03-21T19:08:04
|
|
Merge native cygwin support
|
|
|
45065de1
|
2015-03-21T19:04:54
|
|
rework tests Makefile.am
There are so many test exceptions that need handling that it is easier
to simply edit it directly rather than doing autogeneration anymore.
This also puts biotest and pidwraptest behind a new --enable-extratests
option, so they are easy to run but are not enabled by default.
|
|
|
4d122c0b
|
2015-03-19T10:28:54
|
|
set version to 2.2.0 on master
|
|
|
df0c0cd1
|
2015-03-19T00:50:36
|
|
update changelog for 2.1.6
|
|
|
dd646a33
|
2015-03-18T19:12:42
|
|
enable libtls by default
The API/ABI for the LibreSSL 2.1.x series is now fixed, so we can safely
enable libtls it by default. This is useful for new OpenNTPD and
OpenSMTPD releases as well.
ok deraadt@ beck@ sthen@
|
|
|
1d62b3be
|
2015-03-09T07:22:18
|
|
expand on changelog
|
|
|
f5389343
|
2015-03-09T07:11:28
|
|
use correct patch level
|
|
|
14c53cd0
|
2015-03-08T22:34:48
|
|
clarify 2.1.5 release note
Specify that we are rejecting server ephemeral DH keys < 1024 bits.
|
|
|
ab0dea23
|
2015-03-08T18:38:34
|
|
update changelog for 2.1.5
|
|
|
8dbe1d62
|
2015-03-08T18:33:09
|
|
bump version to 2.1.5
|
|
|
73329d43
|
2015-03-08T19:56:03
|
|
update __STRICT_ALIGNMENT check
|
|
|
f7e4e4a2
|
2015-03-08T18:27:07
|
|
initialize winsock earlier in openssl(1)
This allows commands like ocsp to work properly since we no longer
initialize Winsock as a side-effect of doing a BIO_gethostbyname.
|
|
|
031f0aaa
|
2015-03-07T12:04:29
|
|
specify -static-libgcc for mingw builds
Avoid external external dependencies on 32-bit windows builds.
|
|
|
148aebdb
|
2015-03-08T16:39:48
|
|
fix hangs reading stdin on Windows
|
|
bbf021e1
|
2015-03-08T01:35:20
|
|
Reuse _OPENBSD_SOURCE namespace on NetBSD (>=8.x)
|
|
|
213eb946
|
2015-03-07T12:02:57
|
|
avoid doubling user-specified cflags
|
|
e38dc152
|
2015-03-04T11:55:50
|
|
Allow to disable tests easily
- Introduce the tests_disabled array, add biotest, explicit_bzero and
pidwraptest.
- Add preceeding comment to explain why every test is skipped
- Rearrange loops generating Makefile.am dependencies to look for tests
in tests_disabled first and skip them.
Signed-off-by: Corinna Vinschen <github@cygwin.de>
|
|
|
9cad5993
|
2015-03-03T18:39:31
|
|
Drop test for adding -lssp again, not required with latest libtool
Signed-off-by: Corinna Vinschen <github@cygwin.de>
|
|
|
98902539
|
2015-03-03T16:37:23
|
|
Add preliminary Cygwin support
Signed-off-by: Corinna Vinschen <github@cygwin.de>
|
|
|
d193b171
|
2015-03-02T23:17:48
|
|
Add '-windows' to windows binary archive.
|
|
|
79492b46
|
2015-03-02T23:14:35
|
|
add windows README, package README files with distribution
|
|
|
e0855bdb
|
2015-03-02T21:12:47
|
|
point out where to report bugs, update links.
|
|
|
3b3a290b
|
2015-03-02T20:47:26
|
|
update changelog with security updates
|
|
|
3cb34ee9
|
2015-03-01T17:37:12
|
|
add a simple code coverage generation script
The lcov tools (http://ltp.sourceforge.net/coverage/lcov.php) are
required to generate reports.
Original idea from this PR, thanks to Jim Barlow for doing the initial
integration work.
https://github.com/libressl-portable/portable/pull/58
|
|
|
701aa50e
|
2015-03-01T17:16:00
|
|
ignore temp windows library build files
|
|
|
933820a0
|
2015-03-01T16:30:23
|
|
separate the BSWAP check from the action
checks need to be unconditional with autoconf
|
|
|
8695b506
|
2015-03-01T15:57:21
|
|
check if the BSWAP assembly for ARM works before building
|
|
|
557df7ee
|
2015-03-01T05:34:43
|
|
refine building windows binaries, enable shared
|
|
|
f94d3d67
|
2015-02-24T19:42:26
|
|
update windows binary build script
This puts the 32 and 64-bit binaries in the same zip file, adds debug
files that are compatible with Visual Studio/windbg, and updates for the
new configure options.
|
|
|
ab0d3e54
|
2015-02-24T19:39:16
|
|
add windows-specific hardening options
This enables DEP and ALSR capabilities. Stack protection is enabled
optionally, there are some extra linking steps required that make it
difficult to enable by default.
|
|
|
347c03d3
|
2015-02-23T09:48:04
|
|
remove openat requirement for building certhash
|
|
|
9da890ff
|
2015-02-23T09:18:47
|
|
update libtls mlinks
|
|
|
f54d0d4f
|
2015-02-23T09:25:06
|
|
remove unneeded continuation characters in ssl/crypto mlinks list
|
|
|
2c5ac47d
|
2015-02-22T18:06:46
|
|
Update initial changelog for 2.1.4
|
|
|
329df39a
|
2015-02-19T23:05:51
|
|
enable Windows NX / ALSR / stack protector
I will update my toolchain and try --high-entropy-va and
stack-protector-strong later. We will probably need to ship libssp-0.dll
as well. Thanks to jsg for hints.
|
|
|
7ba78489
|
2015-02-19T21:23:31
|
|
add script for building windows binary distribution packages
|
|
|
49d80f0e
|
2015-02-19T21:16:55
|
|
add missing line continuation
|
|
|
a859b93f
|
2015-02-16T22:22:29
|
|
disable system issetugid on OS X since it is not fork-safe
Noticed while testing similar code for AIX.
ok beck@
|
|
|
adc416e9
|
2015-02-16T22:19:01
|
|
remove getuid/getgid fallbacks from hp-ux issetugid emulation
Fail closed if we cannot obtain the process flags. Noticed while looking
at a similar function for AIX.
|