A mirror of https://github.com/libressl/portable.git https://git.lua4.win/portable/atom?h=v2.4.5 2017-01-07T13:19:48+00:00 2017-01-07T13:19:48+00:00 Simone Basso bassosimone@gmail.com 2016-12-10T19:58:04+00:00 urn:sha1:4ce7dae59e2cd6d4d3fb05d2a1dcb54a42c76da4 Without this, we actually fail to build a library that includes the bultin getentropy when compiling for 10.11 on 10.12. 2017-01-07T13:19:02+00:00 Simone Basso bassosimone@gmail.com 2016-12-09T12:21:37+00:00 urn:sha1:39666aaa78601313adb9ed514e36d10dc8526cbc - according to man.openbsd.org getentropy() is in unistd.h - according to macOS sierra's man it's in sys/random.h - since sys/random.h is does not exist for iOS and for linux, do not attempt to include it, rather redeclare the prototype - make sure that `./configure`: - uses getentropy() on macOS sierra - does not use getentropy() if compiling for 10.11 - does not use getentropy() if compiling for ios armv7 2017-01-07T13:19:02+00:00 Simone Basso bassosimone@gmail.com 2016-12-09T11:39:37+00:00 urn:sha1:7cd2b0e2e1ba0b52880bbe41d80f1f4c69533134 This diff changes the logic by which configure detects getentropy() to ensure that we don't use the system wide getentropy - with macOS sierra if the deployment target is lower than sierra as found by tor developers here https://gitweb.torproject.org/tor.git/commit/?id=https://gitweb.torproject.org/tor.git/commit/?id=16fcbd21c963a9a65bf55024680c8323c8b7175d - with iOS unconditionally because an app linking libressl compiled with system wide getentropy has been rejected by the App store as I have documented here https://github.com/measurement-kit/measurement-kit/pull/994 I think something similar could also affect clock_gettime judging from tor's patch, but this diff for now doesn't address that. I do not have macOS < sierra, so I could only verify that configure was not picking up system wide getentropy by compiling libressl using export CFLAGS="-mmacosx-version-min=10.11" As regards iOS, removing the check for getentropy and recompiling (thus using libressl builtin getentropy()) was enough to have another iteration of the app accepted. Otherwise testing should be possible with: export LDFLAGS=-arch armv7 -miphoneos-version-min=7.1 -isysroot `xcrun --show-sdk-path --sdk iphoneos` export CPPFLAGS=-arch armv7 -isysroot `xcrun --show-sdk-path --sdk iphoneos` export CFLAGS=-arch armv7 -miphoneos-version-min=7.1 -isysroot `xcrun --show-sdk-path --sdk iphoneos` Related ticket: https://github.com/libressl-portable/portable/issues/230 2017-01-07T13:19:02+00:00 jacob berkman jberkman@weebly.com 2016-08-09T22:04:45+00:00 urn:sha1:e013f9143d9baeb6d5df42bc54e1fb704f3d2521 2016-07-19T10:11:28+00:00 celan69 christian@kuehnke.de 2016-07-19T10:11:28+00:00 urn:sha1:1b10e48a1f0f6a4b51d0e9e1a6cd6820d3475fd5 Solaris 11 recently introduced a builtin arc4random in libc which fails the tests in "make check". Found USE_BUILTIN_ARC4RANDOM, but could not get it to work. Apparently, there is a typo in the configure logic rendering USE_BUILTIN_ARC4RANDOM ineffective. 2016-04-24T08:29:14+00:00 Brent Cook bcook@openbsd.org 2016-04-24T08:29:14+00:00 urn:sha1:466e389d3f52c9e75cf4849669bca16e512ee110 2016-02-15T19:39:06+00:00 Brent Cook bcook@openbsd.org 2016-02-15T19:39:06+00:00 urn:sha1:d4d040c171512881b845b2b663ee9ca081e6a5b6 2016-01-04T03:24:05+00:00 Brent Cook bcook@openbsd.org 2016-01-04T02:47:20+00:00 urn:sha1:35e669fd1a0fb3f8af5e127c7d62d4c2a0ae3503 NetBSD 7 improves arc4random(3) over earlier versions by adding fork detection, stronger assertions on seed failure. 2016-01-04T03:20:03+00:00 Brent Cook bcook@openbsd.org 2016-01-04T01:08:20+00:00 urn:sha1:d0009039dec393dfa65dfebb2e5f41288ac185cc 2015-12-28T04:12:35+00:00 Brent Cook bcook@openbsd.org 2015-12-28T04:12:35+00:00 urn:sha1:53cd105d6eb60347c7356563ff1d341ebabf78f0 typo spotted by Jonas 'Sortie' Termansen