A mirror of https://github.com/libressl/portable.git https://git.lua4.win/portable/atom?h=OPENBSD_5_9 2017-01-07T13:21:47+00:00 2017-01-07T13:21:47+00:00 Simone Basso bassosimone@gmail.com 2016-12-10T19:58:04+00:00 urn:sha1:730f199c9c461fe2c94318138e6d316ee59f5a9f Without this, we actually fail to build a library that includes the bultin getentropy when compiling for 10.11 on 10.12. 2017-01-07T13:21:07+00:00 Simone Basso bassosimone@gmail.com 2016-12-09T12:21:37+00:00 urn:sha1:c4ee1a6fca8ce7c46e90fe8dcf856131e03bcb0b - according to man.openbsd.org getentropy() is in unistd.h - according to macOS sierra's man it's in sys/random.h - since sys/random.h is does not exist for iOS and for linux, do not attempt to include it, rather redeclare the prototype - make sure that `./configure`: - uses getentropy() on macOS sierra - does not use getentropy() if compiling for 10.11 - does not use getentropy() if compiling for ios armv7 2017-01-07T13:21:07+00:00 Simone Basso bassosimone@gmail.com 2016-12-09T11:39:37+00:00 urn:sha1:bd53433877bd2f81362c92c6fead4c374794cceb This diff changes the logic by which configure detects getentropy() to ensure that we don't use the system wide getentropy - with macOS sierra if the deployment target is lower than sierra as found by tor developers here https://gitweb.torproject.org/tor.git/commit/?id=https://gitweb.torproject.org/tor.git/commit/?id=16fcbd21c963a9a65bf55024680c8323c8b7175d - with iOS unconditionally because an app linking libressl compiled with system wide getentropy has been rejected by the App store as I have documented here https://github.com/measurement-kit/measurement-kit/pull/994 I think something similar could also affect clock_gettime judging from tor's patch, but this diff for now doesn't address that. I do not have macOS < sierra, so I could only verify that configure was not picking up system wide getentropy by compiling libressl using export CFLAGS="-mmacosx-version-min=10.11" As regards iOS, removing the check for getentropy and recompiling (thus using libressl builtin getentropy()) was enough to have another iteration of the app accepted. Otherwise testing should be possible with: export LDFLAGS=-arch armv7 -miphoneos-version-min=7.1 -isysroot `xcrun --show-sdk-path --sdk iphoneos` export CPPFLAGS=-arch armv7 -isysroot `xcrun --show-sdk-path --sdk iphoneos` export CFLAGS=-arch armv7 -miphoneos-version-min=7.1 -isysroot `xcrun --show-sdk-path --sdk iphoneos` Related ticket: https://github.com/libressl-portable/portable/issues/230 2017-01-07T13:21:07+00:00 jacob berkman jberkman@weebly.com 2016-08-09T22:04:45+00:00 urn:sha1:7442568456f59de7c6449eb0489d75f4d5cb27a4 2016-07-19T10:46:16+00:00 celan69 christian@kuehnke.de 2016-07-19T10:11:28+00:00 urn:sha1:94532f961964ccc422ab6a17a383176bf00ea911 Solaris 11 recently introduced a builtin arc4random in libc which fails the tests in "make check". Found USE_BUILTIN_ARC4RANDOM, but could not get it to work. Apparently, there is a typo in the configure logic rendering USE_BUILTIN_ARC4RANDOM ineffective. 2016-05-03T03:12:53+00:00 Brent Cook bcook@openbsd.org 2016-04-24T08:29:14+00:00 urn:sha1:534ee348a9558917aacdaac901e7c630b61595a8 2016-02-15T19:39:06+00:00 Brent Cook bcook@openbsd.org 2016-02-15T19:39:06+00:00 urn:sha1:d4d040c171512881b845b2b663ee9ca081e6a5b6 2016-01-04T03:24:05+00:00 Brent Cook bcook@openbsd.org 2016-01-04T02:47:20+00:00 urn:sha1:35e669fd1a0fb3f8af5e127c7d62d4c2a0ae3503 NetBSD 7 improves arc4random(3) over earlier versions by adding fork detection, stronger assertions on seed failure. 2016-01-04T03:20:03+00:00 Brent Cook bcook@openbsd.org 2016-01-04T01:08:20+00:00 urn:sha1:d0009039dec393dfa65dfebb2e5f41288ac185cc 2015-12-28T04:12:35+00:00 Brent Cook bcook@openbsd.org 2015-12-28T04:12:35+00:00 urn:sha1:53cd105d6eb60347c7356563ff1d341ebabf78f0 typo spotted by Jonas 'Sortie' Termansen