openbsd/src/lib/libtls/Makefile, branch OPENBSD_7_3_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_3_BASE 2022-01-25T21:51:24+00:00 Introduce a signer interface intented to make TLS privsep simpler 2022-01-25T21:51:24+00:00 eric 2022-01-25T21:51:24+00:00 urn:sha1:bff2f4430c3c0f9cc4584883118372ffbdcbd1e6 to implement. Add a tls_config_set_sign_cb() function that allows to register a callback for the signing operation on a tls_config. When used, the context installs fake pivate keys internally, and the callback receives the hash of the public key. Add a tls_signer_*() set of functions to manage tls_signer objects. A tls_signer is an opaque structure on which keys are added. It is used to compute signatures with private keys identified by their associated public key hash. Discussed with and ok jsing@ tb@ The check_includes step is incorrect dependency management model for 2020-06-09T16:53:53+00:00 deraadt 2020-06-09T16:53:53+00:00 urn:sha1:baa0c5c5165ab0d82f8bf0f78e00dcc807069782 how our tree gets built. If this was done in all the libraries (imagine sys/dev), it would disrupt the development process hugely. So it should not be done here either. use 'make includes' by hand instead. Correct includes check for libtls. 2020-01-22T08:00:46+00:00 jsing 2020-01-22T08:00:46+00:00 urn:sha1:74cf6ef99ae1fdc5f2d5f730e46af31094ce2a87 Add checks to ensure that lib{crypto,ssl,tls} public headers have actually 2020-01-22T07:58:28+00:00 jsing 2020-01-22T07:58:28+00:00 urn:sha1:dc84fb2cb29e63e7e897d76ae53fe48add525348 been installed prior to building. Requested by and ok tb@ Split keypair handling out into its own file - it had already appeared 2018-02-08T05:56:49+00:00 jsing 2018-02-08T05:56:49+00:00 urn:sha1:8a01a8361d1add29153f53a3721130f62d3d4389 in multiple locations. ok beck@ Switch to -Werror with clang for libressl. 2017-08-13T19:42:33+00:00 doug 2017-08-13T19:42:33+00:00 urn:sha1:e0d9b6877814aabc7aa1b8a33ad302bf782d8ce3 Discussed with beck@ and jsing@ ok beck@ Only enable -Werror on libcrypto/libssl/libtls if we are building with 2017-04-30T04:44:58+00:00 jsing 2017-04-30T04:44:58+00:00 urn:sha1:d6384322b936d181e80c1948d8ee20a647f0408e gcc4. This should avoid failed builds while transitioning compilers. While here also make the CFLAGS blocks consistent across makefiles. Discussed with deraadt@, ok beck@ split the tls_init(3) that had grown fat to allow healthy future growth; 2017-01-25T23:53:18+00:00 schwarze 2017-01-25T23:53:18+00:00 urn:sha1:d66bfa15e92b2523fa18aec340ecb1cf3eb361ec suggested by jsing@; "i would just chuck it in" jmc@ Remove generated Symbols.map on make clean. 2016-11-05T08:12:22+00:00 jsing 2016-11-05T08:12:22+00:00 urn:sha1:d7ebaf662cafc80f2c3d2cd7faa4bcd171fe1376 ok guenther@ Build with WARNINGS=Yes. 2016-11-04T19:01:54+00:00 jsing 2016-11-04T19:01:54+00:00 urn:sha1:7f1509dbefe4aab606521c4c775e23dac119590a