openbsd/src/usr.bin/openssl/Makefile, branch master A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=master 2024-07-08T05:59:10+00:00 Remove spkac subcommand 2024-07-08T05:59:10+00:00 tb 2024-07-08T05:59:10+00:00 urn:sha1:ac5d44090fb8f3b2c8ebd600d3bdeeb4e242b66c Google killed efforts to have SPKAC in html5 by zapping it from chrome a decade ago. This effort doesn't look like it's going anywhere: https://datatracker.ietf.org/doc/draft-leggett-spkac/ Unfortunately, PHP and Ruby still support NETSCAPE_SPKI, so we can't kill that code, but I see no real reason we need to support this in our openssl command. If the need should arise we can write a somewhat less poor version of this. ok jsing openssl: enable -Wshadow for clang 2024-05-27T16:11:43+00:00 tb 2024-05-27T16:11:43+00:00 urn:sha1:1acff7ab3438535bece3085e645315ea65cdb3a5 ok job jsing Remove the nseq command 2023-04-25T16:11:02+00:00 tb 2023-04-25T16:11:02+00:00 urn:sha1:55f6443ac0e7f1a6cb59fa4319d9b78857735d56 Hook openssl(1) cms back up. 2019-11-04T15:25:54+00:00 jsing 2019-11-04T15:25:54+00:00 urn:sha1:1ea1d12cfd2179ae88362d407feabf674f27b5ad Switch to -Werror with clang for libressl. 2017-08-13T19:42:33+00:00 doug 2017-08-13T19:42:33+00:00 urn:sha1:e0d9b6877814aabc7aa1b8a33ad302bf782d8ce3 Discussed with beck@ and jsing@ ok beck@ remove redundant variable declarations in Makefiles, since those are 2017-07-09T21:23:19+00:00 espie 2017-07-09T21:23:19+00:00 urn:sha1:27d391d0739fdb4118361859203a6f74012cd5bf the default. okay millert@ Limit -Werror to gcc4 as was done in libcrypto/libssl/libtls to avoid 2017-05-07T04:18:47+00:00 jsg 2017-05-07T04:18:47+00:00 urn:sha1:9706d48a7c3efe16618188b2cb81126a13667693 failed builds with different compilers. ok jsing@ bye bye cms. send it to the attic 2016-09-04T18:05:34+00:00 beck 2016-09-04T18:05:34+00:00 urn:sha1:275d3e33eaaeab612c8b59055d39c43b49bcfcbf ok jsing@ Remove engine command and parameters from openssl(1). 2015-09-11T14:30:23+00:00 bcook 2015-09-11T14:30:23+00:00 urn:sha1:e8587be16102f0811af023382ffaeb2002feec78 We do not have any builtin or dynamic engines, meaning openssl(1) has no way to use the engine command or parameters at all. ok jsing@ Introduce an openssl(1) certhash command. 2015-02-10T15:29:34+00:00 jsing 2015-02-10T15:29:34+00:00 urn:sha1:b2c538142cfc76f91bea09b3f7c963c7a5265659 This is effectively a reimplementation of the functionality provided by the previously removed c_rehash Perl script. The c_rehash script had a number of known issues, including the fact that it needs to run openssl(1) multiple times and that it starts by removing all symlinks before putting them back, creating atomicity issues/race conditions, even when nothing has changed. certhash is self-contained and is intended to be stable - no changes should be made unless something has actually changed. This means it can be run regularly in a production environment without causing certificate lookup failures. Further testing and improvements will happen in tree. Discussed with tedu@