1129 Commits

Author SHA1 Message Date
Brent Cook
fe42a8011b Configure libtls and nc(1) to statically link to libcrypto/ssl
An issue that Reyk Floeter noted while building a Debian package for
LibreSSL is that installing libtls along with OpenSSL causes linker
issues since it will often pick up the wrong libcrypto/libssl. This
change makes libtls statically link the object files it needs rather
than relying on the shared libraries, effectively making libtls
self-contained and able to be packaged independently.

This should make it possible for other projects that also use libtls to
be able to package support without requiring the target OS to ship
libcrypto / libssl from LibreSSL.

678278df55
2020-10-04 03:50:18 -05:00
Joel Sing
17c8816401 Make pthread_mutex static initialisation work on Windows.
This takes the dynamic initialisation code added to CRYPTO_lock() in e5081719
and applies it to the Window's pthread_mutex implementation. This allows for
PTHREAD_MUTEX_INITIALIZER to be used on Windows.

bcook has agreed to place this code in the public domain (as per the rest of
the code in pthread.h).
2020-09-20 02:09:35 +10:00
kinichiro
5bedaf9226 Update .gitignore 2020-09-15 21:42:58 +09:00
kinichiro
1c0b5f0734 Add regress x509_info.c 2020-09-15 21:38:05 +09:00
kinichiro
6969cf036e Fix regress build 2020-09-15 20:55:40 +09:00
kinichiro
ee4eb0027c Add x509_verify.c x509_verify.h 2020-09-14 20:36:30 +09:00
kinichiro
0e52cefc5c Add regress x509attribute.c 2020-09-14 19:55:45 +09:00
kinichiro
1ba03da236 Add x509_issuer_cache.c x509_issuer_cache.h 2020-09-13 21:56:34 +09:00
kinichiro
461ec45335 Add queue.h tree.h _null.h
Import queue.h tree.h _null.h header files from OpenBSD upstream
since x509_issuer_cache.c requires them.
2020-09-13 21:56:34 +09:00
kinichiro
65b01cff7a Add PTHREAD_MUTEX_INITIALIZER 2020-09-13 21:56:34 +09:00
kinichiro
4f01b43cfe Add regress constraints.c 2020-09-13 21:36:38 +09:00
kinichiro
6410eee15a Add x509_constraints.c x509_internal.h 2020-09-13 19:55:43 +09:00
Brent Cook
693d4575e2 Land #604, Get __STRICT_ALIGNMENT from machine/endian.h 2020-09-12 16:48:46 -05:00
Brent Cook
a2ea649536 rediff patches 2020-09-04 04:12:49 -05:00
kinichiro
1841e199ac Add ssl/tls12_record_layer.c 2020-09-02 20:53:44 +09:00
Brent Cook
8910e9d5ca update man links 2020-08-24 13:06:36 -05:00
Joel Sing
7118349db9 Tweak change log entries. 2020-08-24 03:26:52 +10:00
Brent Cook
2c49c28d47 need ax_check_compile_flag too for older autotools 2020-08-22 18:42:26 -05:00
Brent Cook
56202472bf Add a compile-time check for FORTIFY_SOURCE support
This is broken on some platforms, so pull in the conditional macro from
the latest version of autoconf-archive to test for working support.
2020-08-22 18:42:26 -05:00
kinichiro
d9b4363a5f Update ChangeLog 2020-08-22 11:32:02 +09:00
Theo Buehler
c5fc3a6735 3.2.1 ChangeLog 2020-08-21 21:11:20 +02:00
Theo Buehler
2be32881b6 3.1.4 ChangeLog
(cherry picked from commit c2d9cb4d7ad2900ebe874e980c9fa828f2ddf39a)
2020-08-21 21:04:36 +02:00
Brent Cook
9c348f5ffc 3.1.3 Changelog
(cherry picked from commit f371858839fff62571a6344a8b659f12fee25163)
2020-08-21 21:02:39 +02:00
Christopher Simons
8a4ac6a828 README.md: fix typo: know to work -> known to work 2020-07-25 18:07:09 -04:00
Brent Cook
22c6680f2b Land #606, remove cmc_lcl.h from CMake build 2020-07-22 09:39:20 -05:00
Brent Cook
706a21658c Land #605, Update testssl.bat 2020-07-22 09:39:01 -05:00
kinichiro
8238636e22 Remove cms_lcl.h from crypto/CMakeLists.txt 2020-07-22 22:50:40 +09:00
kinichiro
77b8a47393 Force TLSv1.2 when testing SSLv3/TLSv1.2 cipher suites. (upstream r1.15) 2020-07-22 22:22:14 +09:00
kinichiro
ea0dd3c107 Test TLSv1.3 ciphersuites (upstream r1.14) 2020-07-22 22:22:06 +09:00
kinichiro
7bf5edc4f2 Add architecture define for s390/s390x and remove redundant sparc check 2020-07-22 21:32:34 +09:00
kinichiro
7423582705 Get __STRICT_ALIGNMENT from machine/endian.h 2020-07-21 22:13:39 +09:00
kinichiro
b2311ac5d9 Keep test log as artifact 2020-07-07 22:49:58 +09:00
kinichiro
615c380811 Fix ssltest to run on appveyor 2020-07-07 22:45:48 +09:00
Brent Cook
fa26b5359b update tlsexttest patch 2020-07-06 03:48:44 -05:00
kinichiro
f9e7ce5ed2 Test both SSLv3 and TLSv1.2, select cipher suite that the protocol can handle
Follow upstream r1.12 and r1.13
- Test both SSLv3 and TLSv1.2 cipher suites with TLS.
- Handle the fact that TLSv1.3 cipher suites are now being included in the
  output from `openssl ciphers`
2020-07-05 13:30:54 +09:00
Brent Cook
fd208a5493 add possibility to override upstream opensslv.h with a local version 2020-06-15 21:22:18 -05:00
kinichiro
61a1f6a57b Move crypto/x509v3/ files to crypto/x509/ 2020-06-10 20:50:04 +09:00
Bob Beck
902e57b57d Start 3.2.1 ChangeLog 2020-06-05 19:44:13 -06:00
Joel Sing
44a6a2397f Add non-expired certificates fix to ChangeLog. 2020-06-01 03:26:00 +10:00
Theo Buehler
932343fb2c one tweak inversed the meaning. fix that 2020-05-31 18:42:38 +02:00
Joel Sing
2f8aa339c5 ChangeLog tweaks. 2020-06-01 02:33:36 +10:00
Bob Beck
ba5ae4fd83 change 'the s_client' to 'openssl(1) s_client' 2020-05-30 08:40:49 -06:00
kinichiro
654e938e11 Update ChangeLog 2020-05-30 23:15:58 +09:00
Theo Buehler
8b0ba4244e whitespace, typos and a repeated entry 2020-05-29 05:59:10 +02:00
Bob Beck
fcd9da32e8 bag of changelog for 3.2.0 2020-05-28 19:50:17 -06:00
Theo Buehler
60ce6e59bb Initial bits for the 3.2.0 ChangeLog 2020-05-28 08:03:51 +02:00
Brent Cook
7f3391fedf add new manpages 2020-05-25 22:52:30 -05:00
Samuel Marks
12a400c90d
[CMakeLists.txt] Move project below cmake_minimum_required; fix indentation in its if/else block; [tap-driver.sh] Copyright line update (was automatic with ./autogen.sh) 2020-05-23 17:16:04 +10:00
Theo Buehler
c4ec6b241b OpenBSD 6.7 errata 004, May 22, 2020 2020-05-20 14:04:36 +02:00
kinichiro
e8033def44 Build regress servertest only if non BUILD_SHARED_LIBS with cmake 2020-05-19 01:23:57 +09:00