openbsd/src/lib/libssl/Makefile, branch libressl-v2.9.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.9.0 2018-11-09T00:34:55+00:00 Reimplement the sigalgs processing code into a new implementation 2018-11-09T00:34:55+00:00 beck 2018-11-09T00:34:55+00:00 urn:sha1:0b1a5b561cf9b369459d5cc3b2cdb15e8ded9a74 that will be usable with TLS 1.3 with less eye bleed. ok jsing@ tb@ First skeleton of the TLS 1.3 state machine. Based on RFC 8446 and 2018-11-08T23:54:59+00:00 tb 2018-11-08T23:54:59+00:00 urn:sha1:ffe8e82eef74387bb8e12edf02bad07f43f8797e inspired by s2n's state machine. Lots of help and input from jsing. ok beck, jsing Add initial TLS 1.3 key schedule support with basic regress tests 2018-11-07T19:43:12+00:00 beck 2018-11-07T19:43:12+00:00 urn:sha1:225cffb5dfc81ab7d9943801bd3eb4495d985dd2 ok jsing@ tb@ Consolidate all of the SSL method structs/functions into a single file. 2018-11-05T05:45:15+00:00 jsing 2018-11-05T05:45:15+00:00 urn:sha1:fb9f160cf8d816f5dd783bf8cad3828d2aa35dbe Discussed with tb@ Bring in compatibility for OpenSSL 1.1 style init functions. 2018-03-17T16:20:01+00:00 beck 2018-03-17T16:20:01+00:00 urn:sha1:035770aca4c8c1f0d36f1b8da62c9e1fb9a4f09b This adds OPENSSL_init_crypto and OPENSSL_init_ssl, as well thread safety modifications for the existing LibreSSL init functions. The initialization routines are called automatically by the normal entry points into the library, as in newer OpenSSL ok jsing@, nits by tb@ and deraadt@ Switch to -Werror with clang for libressl. 2017-08-13T19:42:33+00:00 doug 2017-08-13T19:42:33+00:00 urn:sha1:e0d9b6877814aabc7aa1b8a33ad302bf782d8ce3 Discussed with beck@ and jsing@ ok beck@ Rewrite the TLS Renegotiation Indication extension handling using CBB/CBS 2017-07-24T17:10:31+00:00 jsing 2017-07-24T17:10:31+00:00 urn:sha1:0698e049c8b5abfa4b777c0c20e976bfd5620394 and the new extension framework. Feedback from doug@ ok inoguchi@ Start rewriting TLS extension handling. 2017-07-16T18:14:37+00:00 jsing 2017-07-16T18:14:37+00:00 urn:sha1:fa511676090b93b4c2d1583237db80dcb4be1a0c Introduce a TLS extension handling framework that has per-extension type functions to determine if an extension is needed, to build the extension data and parse the extension data. This is somewhat analogous to BoringSSL, however these build and parse functions are intentionally symetrical. The framework is hooked into the existing TLS handling code in such a way that we can gradual convert the extension handling code. Convert the TLS Server Name Indication extension to the new framework, while rewriting it to use CBB/CBS and be more strict in the process. Discussed with beck@ ok inoguchi@ Only enable -Werror on libcrypto/libssl/libtls if we are building with 2017-04-30T04:44:58+00:00 jsing 2017-04-30T04:44:58+00:00 urn:sha1:d6384322b936d181e80c1948d8ee20a647f0408e gcc4. This should avoid failed builds while transitioning compilers. While here also make the CFLAGS blocks consistent across makefiles. Discussed with deraadt@, ok beck@ Revert previous - we still want to do this, but I forgot about the installer 2017-04-29T22:31:42+00:00 beck 2017-04-29T22:31:42+00:00 urn:sha1:61198dce4d3f6c83534a2d04eb35e4228fa933df and want to avoid the wrath of theo when he arrives home in a couple of hours :)