openbsd/src/lib/libssl/Makefile, branch OPENBSD_6_4 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_4 2018-03-17T16:20:01+00:00 Bring in compatibility for OpenSSL 1.1 style init functions. 2018-03-17T16:20:01+00:00 beck 2018-03-17T16:20:01+00:00 urn:sha1:035770aca4c8c1f0d36f1b8da62c9e1fb9a4f09b This adds OPENSSL_init_crypto and OPENSSL_init_ssl, as well thread safety modifications for the existing LibreSSL init functions. The initialization routines are called automatically by the normal entry points into the library, as in newer OpenSSL ok jsing@, nits by tb@ and deraadt@ Switch to -Werror with clang for libressl. 2017-08-13T19:42:33+00:00 doug 2017-08-13T19:42:33+00:00 urn:sha1:e0d9b6877814aabc7aa1b8a33ad302bf782d8ce3 Discussed with beck@ and jsing@ ok beck@ Rewrite the TLS Renegotiation Indication extension handling using CBB/CBS 2017-07-24T17:10:31+00:00 jsing 2017-07-24T17:10:31+00:00 urn:sha1:0698e049c8b5abfa4b777c0c20e976bfd5620394 and the new extension framework. Feedback from doug@ ok inoguchi@ Start rewriting TLS extension handling. 2017-07-16T18:14:37+00:00 jsing 2017-07-16T18:14:37+00:00 urn:sha1:fa511676090b93b4c2d1583237db80dcb4be1a0c Introduce a TLS extension handling framework that has per-extension type functions to determine if an extension is needed, to build the extension data and parse the extension data. This is somewhat analogous to BoringSSL, however these build and parse functions are intentionally symetrical. The framework is hooked into the existing TLS handling code in such a way that we can gradual convert the extension handling code. Convert the TLS Server Name Indication extension to the new framework, while rewriting it to use CBB/CBS and be more strict in the process. Discussed with beck@ ok inoguchi@ Only enable -Werror on libcrypto/libssl/libtls if we are building with 2017-04-30T04:44:58+00:00 jsing 2017-04-30T04:44:58+00:00 urn:sha1:d6384322b936d181e80c1948d8ee20a647f0408e gcc4. This should avoid failed builds while transitioning compilers. While here also make the CFLAGS blocks consistent across makefiles. Discussed with deraadt@, ok beck@ Revert previous - we still want to do this, but I forgot about the installer 2017-04-29T22:31:42+00:00 beck 2017-04-29T22:31:42+00:00 urn:sha1:61198dce4d3f6c83534a2d04eb35e4228fa933df and want to avoid the wrath of theo when he arrives home in a couple of hours :) We now require you to have a working libpthread 2017-04-29T22:22:24+00:00 beck 2017-04-29T22:22:24+00:00 urn:sha1:d3a2ee4f706f181bef995fb0a446b0b92c03a2ac Provide a rolling handshake hash that commences as soon as the cipher 2017-03-05T14:39:53+00:00 jsing 2017-03-05T14:39:53+00:00 urn:sha1:f57470f507d826e79950193b93592e734e79b608 suite has been selected, and convert the final finish MAC to use this handshake hash. This is a first step towards cleaning up the current handshake buffer/digest code. ok beck@ inoguchi@ Merge the single two line function from ssl_err2.c into ssl_err.c. 2017-01-26T09:16:01+00:00 jsing 2017-01-26T09:16:01+00:00 urn:sha1:b7978753e566fd60946300b252a9d9d89559733e ok beck@ Move relatively new version range code from ssl_lib.c into a separate 2017-01-26T06:01:44+00:00 jsing 2017-01-26T06:01:44+00:00 urn:sha1:1cc79b15c0e05858d638931ff222a6c8592f3103 ssl_versions.c file. ok beck@