Brent Cook
fe42a8011b
Configure libtls and nc(1) to statically link to libcrypto/ssl
...
An issue that Reyk Floeter noted while building a Debian package for
LibreSSL is that installing libtls along with OpenSSL causes linker
issues since it will often pick up the wrong libcrypto/libssl. This
change makes libtls statically link the object files it needs rather
than relying on the shared libraries, effectively making libtls
self-contained and able to be packaged independently.
This should make it possible for other projects that also use libtls to
be able to package support without requiring the target OS to ship
libcrypto / libssl from LibreSSL.
678278df55
2020-10-04 03:50:18 -05:00
Joel Sing
17c8816401
Make pthread_mutex static initialisation work on Windows.
...
This takes the dynamic initialisation code added to CRYPTO_lock() in e5081719
and applies it to the Window's pthread_mutex implementation. This allows for
PTHREAD_MUTEX_INITIALIZER to be used on Windows.
bcook has agreed to place this code in the public domain (as per the rest of
the code in pthread.h).
2020-09-20 02:09:35 +10:00
kinichiro
5bedaf9226
Update .gitignore
2020-09-15 21:42:58 +09:00
kinichiro
1c0b5f0734
Add regress x509_info.c
2020-09-15 21:38:05 +09:00
kinichiro
6969cf036e
Fix regress build
2020-09-15 20:55:40 +09:00
kinichiro
ee4eb0027c
Add x509_verify.c x509_verify.h
2020-09-14 20:36:30 +09:00
kinichiro
0e52cefc5c
Add regress x509attribute.c
2020-09-14 19:55:45 +09:00
kinichiro
1ba03da236
Add x509_issuer_cache.c x509_issuer_cache.h
2020-09-13 21:56:34 +09:00
kinichiro
461ec45335
Add queue.h tree.h _null.h
...
Import queue.h tree.h _null.h header files from OpenBSD upstream
since x509_issuer_cache.c requires them.
2020-09-13 21:56:34 +09:00
kinichiro
65b01cff7a
Add PTHREAD_MUTEX_INITIALIZER
2020-09-13 21:56:34 +09:00
kinichiro
4f01b43cfe
Add regress constraints.c
2020-09-13 21:36:38 +09:00
kinichiro
6410eee15a
Add x509_constraints.c x509_internal.h
2020-09-13 19:55:43 +09:00
Brent Cook
693d4575e2
Land #604 , Get __STRICT_ALIGNMENT from machine/endian.h
2020-09-12 16:48:46 -05:00
Brent Cook
a2ea649536
rediff patches
2020-09-04 04:12:49 -05:00
kinichiro
1841e199ac
Add ssl/tls12_record_layer.c
2020-09-02 20:53:44 +09:00
Brent Cook
8910e9d5ca
update man links
2020-08-24 13:06:36 -05:00
Joel Sing
7118349db9
Tweak change log entries.
2020-08-24 03:26:52 +10:00
Brent Cook
2c49c28d47
need ax_check_compile_flag too for older autotools
2020-08-22 18:42:26 -05:00
Brent Cook
56202472bf
Add a compile-time check for FORTIFY_SOURCE support
...
This is broken on some platforms, so pull in the conditional macro from
the latest version of autoconf-archive to test for working support.
2020-08-22 18:42:26 -05:00
kinichiro
d9b4363a5f
Update ChangeLog
2020-08-22 11:32:02 +09:00
Theo Buehler
c5fc3a6735
3.2.1 ChangeLog
2020-08-21 21:11:20 +02:00
Theo Buehler
2be32881b6
3.1.4 ChangeLog
...
(cherry picked from commit c2d9cb4d7ad2900ebe874e980c9fa828f2ddf39a)
2020-08-21 21:04:36 +02:00
Brent Cook
9c348f5ffc
3.1.3 Changelog
...
(cherry picked from commit f371858839fff62571a6344a8b659f12fee25163)
2020-08-21 21:02:39 +02:00
Christopher Simons
8a4ac6a828
README.md: fix typo: know to work -> known to work
2020-07-25 18:07:09 -04:00
Brent Cook
22c6680f2b
Land #606 , remove cmc_lcl.h from CMake build
2020-07-22 09:39:20 -05:00
Brent Cook
706a21658c
Land #605 , Update testssl.bat
2020-07-22 09:39:01 -05:00
kinichiro
8238636e22
Remove cms_lcl.h from crypto/CMakeLists.txt
2020-07-22 22:50:40 +09:00
kinichiro
77b8a47393
Force TLSv1.2 when testing SSLv3/TLSv1.2 cipher suites. (upstream r1.15)
2020-07-22 22:22:14 +09:00
kinichiro
ea0dd3c107
Test TLSv1.3 ciphersuites (upstream r1.14)
2020-07-22 22:22:06 +09:00
kinichiro
7bf5edc4f2
Add architecture define for s390/s390x and remove redundant sparc check
2020-07-22 21:32:34 +09:00
kinichiro
7423582705
Get __STRICT_ALIGNMENT from machine/endian.h
2020-07-21 22:13:39 +09:00
kinichiro
b2311ac5d9
Keep test log as artifact
2020-07-07 22:49:58 +09:00
kinichiro
615c380811
Fix ssltest to run on appveyor
2020-07-07 22:45:48 +09:00
Brent Cook
fa26b5359b
update tlsexttest patch
2020-07-06 03:48:44 -05:00
kinichiro
f9e7ce5ed2
Test both SSLv3 and TLSv1.2, select cipher suite that the protocol can handle
...
Follow upstream r1.12 and r1.13
- Test both SSLv3 and TLSv1.2 cipher suites with TLS.
- Handle the fact that TLSv1.3 cipher suites are now being included in the
output from `openssl ciphers`
2020-07-05 13:30:54 +09:00
Brent Cook
fd208a5493
add possibility to override upstream opensslv.h with a local version
2020-06-15 21:22:18 -05:00
kinichiro
61a1f6a57b
Move crypto/x509v3/ files to crypto/x509/
2020-06-10 20:50:04 +09:00
Bob Beck
902e57b57d
Start 3.2.1 ChangeLog
2020-06-05 19:44:13 -06:00
Joel Sing
44a6a2397f
Add non-expired certificates fix to ChangeLog.
2020-06-01 03:26:00 +10:00
Theo Buehler
932343fb2c
one tweak inversed the meaning. fix that
2020-05-31 18:42:38 +02:00
Joel Sing
2f8aa339c5
ChangeLog tweaks.
2020-06-01 02:33:36 +10:00
Bob Beck
ba5ae4fd83
change 'the s_client' to 'openssl(1) s_client'
2020-05-30 08:40:49 -06:00
kinichiro
654e938e11
Update ChangeLog
2020-05-30 23:15:58 +09:00
Theo Buehler
8b0ba4244e
whitespace, typos and a repeated entry
2020-05-29 05:59:10 +02:00
Bob Beck
fcd9da32e8
bag of changelog for 3.2.0
2020-05-28 19:50:17 -06:00
Theo Buehler
60ce6e59bb
Initial bits for the 3.2.0 ChangeLog
2020-05-28 08:03:51 +02:00
Brent Cook
7f3391fedf
add new manpages
2020-05-25 22:52:30 -05:00
Samuel Marks
12a400c90d
[CMakeLists.txt] Move project
below cmake_minimum_required
; fix indentation in its if
/else
block; [tap-driver.sh] Copyright line update (was automatic with ./autogen.sh
)
2020-05-23 17:16:04 +10:00
Theo Buehler
c4ec6b241b
OpenBSD 6.7 errata 004, May 22, 2020
2020-05-20 14:04:36 +02:00
kinichiro
e8033def44
Build regress servertest only if non BUILD_SHARED_LIBS with cmake
2020-05-19 01:23:57 +09:00