factotum/libressl-portable
1
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1,341 Commits 4 Branches 0 Tags
Commit Graph

1341 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Brent Cook
db8b30ae51 Land #611, remove libtls-standalone 2020-10-06 19:41:18 -05:00
Brent Cook
b9918fc1ec Land #610, Statically link libcrypto/ssl into libtls 2020-10-06 19:40:29 -05:00
OptoCloud
59b6d1da6c Fix typo :) 2020-10-06 01:20:25 +02:00
Theo Buehler
0ef7d54fbc SSL_set1_host() is now documented. 2020-10-05 17:08:47 +02:00
Theo Buehler
7608ded020 SSL_set1_host() is not yet exposed. 2020-10-05 17:06:19 +02:00
kinichiro
5562731e8e Update ChangeLog 2020-10-05 21:53:04 +09:00
Theo Buehler
e7f9e298c6 Remove points that made it into 3.2.1 2020-10-04 18:43:35 +02:00
kinichiro
1f6d419783 Update ChangeLog 2020-10-05 01:15:25 +09:00
kinichiro
5a29b0472d Link crypto and ssl object files directly instead of static library 
- Output object files list variable for libcrypto and libssl to .mk file.
- Include object files list variable .mk from tls/Makefile
- Link .lo files directly instead of static library for libtls.
 2020-10-04 03:50:18 -05:00
Brent Cook
fe42a8011b Configure libtls and nc(1) to statically link to libcrypto/ssl 
An issue that Reyk Floeter noted while building a Debian package for
LibreSSL is that installing libtls along with OpenSSL causes linker
issues since it will often pick up the wrong libcrypto/libssl. This
change makes libtls statically link the object files it needs rather
than relying on the shared libraries, effectively making libtls
self-contained and able to be packaged independently.

This should make it possible for other projects that also use libtls to
be able to package support without requiring the target OS to ship
libcrypto / libssl from LibreSSL.

678278df55
 2020-10-04 03:50:18 -05:00
Theo Buehler
2dc9f8e373 Initial cut of the 3.2.2 ChangeLog 2020-10-03 13:15:06 +02:00
Joel Sing
17c8816401 Make pthread_mutex static initialisation work on Windows. 
This takes the dynamic initialisation code added to CRYPTO_lock() in e5081719
and applies it to the Window's pthread_mutex implementation. This allows for
PTHREAD_MUTEX_INITIALIZER to be used on Windows.

bcook has agreed to place this code in the public domain (as per the rest of
the code in pthread.h).
 2020-09-20 02:09:35 +10:00
kinichiro
5bedaf9226 Update .gitignore 2020-09-15 21:42:58 +09:00
kinichiro
1c0b5f0734 Add regress x509_info.c 2020-09-15 21:38:05 +09:00
kinichiro
6969cf036e Fix regress build 2020-09-15 20:55:40 +09:00
kinichiro
ee4eb0027c Add x509_verify.c x509_verify.h 2020-09-14 20:36:30 +09:00
kinichiro
0e52cefc5c Add regress x509attribute.c 2020-09-14 19:55:45 +09:00
kinichiro
1ba03da236 Add x509_issuer_cache.c x509_issuer_cache.h 2020-09-13 21:56:34 +09:00
kinichiro
461ec45335 Add queue.h tree.h _null.h 
Import queue.h tree.h _null.h header files from OpenBSD upstream
since x509_issuer_cache.c requires them.
 2020-09-13 21:56:34 +09:00
kinichiro
65b01cff7a Add PTHREAD_MUTEX_INITIALIZER 2020-09-13 21:56:34 +09:00
kinichiro
4f01b43cfe Add regress constraints.c 2020-09-13 21:36:38 +09:00
kinichiro
6410eee15a Add x509_constraints.c x509_internal.h 2020-09-13 19:55:43 +09:00
Brent Cook
693d4575e2 Land #604, Get __STRICT_ALIGNMENT from machine/endian.h 2020-09-12 16:48:46 -05:00
Brent Cook
a2ea649536 rediff patches 2020-09-04 04:12:49 -05:00
kinichiro
1841e199ac Add ssl/tls12_record_layer.c 2020-09-02 20:53:44 +09:00
Brent Cook
8910e9d5ca update man links 2020-08-24 13:06:36 -05:00
Joel Sing
7118349db9 Tweak change log entries. 2020-08-24 03:26:52 +10:00
Brent Cook
2c49c28d47 need ax_check_compile_flag too for older autotools 2020-08-22 18:42:26 -05:00
Brent Cook
56202472bf Add a compile-time check for FORTIFY_SOURCE support 
This is broken on some platforms, so pull in the conditional macro from
the latest version of autoconf-archive to test for working support.
 2020-08-22 18:42:26 -05:00
kinichiro
d9b4363a5f Update ChangeLog 2020-08-22 11:32:02 +09:00
Theo Buehler
c5fc3a6735 3.2.1 ChangeLog 2020-08-21 21:11:20 +02:00
Theo Buehler
2be32881b6 3.1.4 ChangeLog 
(cherry picked from commit c2d9cb4d7ad2900ebe874e980c9fa828f2ddf39a)
 2020-08-21 21:04:36 +02:00
Brent Cook
9c348f5ffc 3.1.3 Changelog 
(cherry picked from commit f371858839fff62571a6344a8b659f12fee25163)
 2020-08-21 21:02:39 +02:00
Brent Cook
85eea94598 disable some additional libtls-standalone bits 2020-08-20 10:19:23 -05:00
Brent Cook
24a3218467 remove libtls-standalone, it's unmaintained 
libtls-standalone was originally intended to make something that could
link to any other OpenSSL fork or OpenSSL itself, but I don't think
there's anyone who is terribly interested in that after all, so let's
clean this up. #610 may be the better solution anyway.
 2020-08-20 09:53:08 -05:00
Christopher Simons
8a4ac6a828 README.md: fix typo: know to work -> known to work 2020-07-25 18:07:09 -04:00
Brent Cook
22c6680f2b Land #606, remove cmc_lcl.h from CMake build 2020-07-22 09:39:20 -05:00
Brent Cook
706a21658c Land #605, Update testssl.bat 2020-07-22 09:39:01 -05:00
kinichiro
8238636e22 Remove cms_lcl.h from crypto/CMakeLists.txt 2020-07-22 22:50:40 +09:00
kinichiro
77b8a47393 Force TLSv1.2 when testing SSLv3/TLSv1.2 cipher suites. (upstream r1.15) 2020-07-22 22:22:14 +09:00
kinichiro
ea0dd3c107 Test TLSv1.3 ciphersuites (upstream r1.14) 2020-07-22 22:22:06 +09:00
kinichiro
7bf5edc4f2 Add architecture define for s390/s390x and remove redundant sparc check 2020-07-22 21:32:34 +09:00
kinichiro
7423582705 Get __STRICT_ALIGNMENT from machine/endian.h 2020-07-21 22:13:39 +09:00
kinichiro
b2311ac5d9 Keep test log as artifact 2020-07-07 22:49:58 +09:00
kinichiro
615c380811 Fix ssltest to run on appveyor 2020-07-07 22:45:48 +09:00
Brent Cook
fa26b5359b update tlsexttest patch 2020-07-06 03:48:44 -05:00
kinichiro
f9e7ce5ed2 Test both SSLv3 and TLSv1.2, select cipher suite that the protocol can handle 
Follow upstream r1.12 and r1.13
- Test both SSLv3 and TLSv1.2 cipher suites with TLS.
- Handle the fact that TLSv1.3 cipher suites are now being included in the
  output from `openssl ciphers`
 2020-07-05 13:30:54 +09:00
Brent Cook
fd208a5493 add possibility to override upstream opensslv.h with a local version 2020-06-15 21:22:18 -05:00
kinichiro
61a1f6a57b Move crypto/x509v3/ files to crypto/x509/ 2020-06-10 20:50:04 +09:00
Bob Beck
902e57b57d Start 3.2.1 ChangeLog 2020-06-05 19:44:13 -06:00