7 files changed, 57 insertions, 93 deletions

diff --git a/patches/aeadtest.c.patch b/patches/aeadtest.c.patch
index ce62107..a7b3fca 100644
--- a/patches/aeadtest.c.patch
+++ b/patches/aeadtest.c.patch
@@ -1,9 +1,9 @@
---- tests/aeadtest.c.orig       2016-10-18 17:03:33.845870889 +0900
-+++ tests/aeadtest.c    2016-10-18 17:11:19.880841283 +0900
-@@ -75,6 +75,12 @@
- 
+--- tests/aeadtest.c.orig       2018-07-24 21:59:17.000000000 -0500
++++ tests/aeadtest.c    2018-11-07 18:44:43.000000000 -0600
+@@ -76,6 +76,12 @@
+
  #define BUF_MAX 1024
- 
+
 +#ifdef _MSC_VER
 +#ifdef IN
 +#undef IN
diff --git a/patches/bio.h.patch b/patches/bio.h.patch
index 7212b54..e726e20 100644
--- a/patches/bio.h.patch
+++ b/patches/bio.h.patch
@@ -1,12 +1,12 @@
---- include/openssl/bio.h.orig  Mon Oct  3 06:09:28 2016
-+++ include/openssl/bio.h       Sun Nov  6 04:24:57 2016
-@@ -678,8 +678,24 @@
+--- include/openssl/bio.h.orig  2018-07-24 21:59:17.000000000 -0500
++++ include/openssl/bio.h       2018-11-07 18:44:43.000000000 -0600
+@@ -713,6 +713,22 @@
 
  /*long BIO_ghbn_ctrl(int cmd,int iarg,char *parg);*/
 
 +#ifdef __MINGW_PRINTF_FORMAT
- int
- BIO_printf(BIO *bio, const char *format, ...)
++int
++BIO_printf(BIO *bio, const char *format, ...)
 +       __attribute__((__format__(__MINGW_PRINTF_FORMAT, 2, 3), __nonnull__(2)));
 +int
 +BIO_vprintf(BIO *bio, const char *format, va_list args)
@@ -20,12 +20,10 @@
 +       __attribute__((__deprecated__, __format__(__MINGW_PRINTF_FORMAT, 3, 0),
 +           __nonnull__(3)));
 +#else
-+int
-+BIO_printf(BIO *bio, const char *format, ...)
-        __attribute__((__format__(__printf__, 2, 3), __nonnull__(2)));
  int
- BIO_vprintf(BIO *bio, const char *format, va_list args)
-@@ -692,6 +708,8 @@
+ BIO_printf(BIO *bio, const char *format, ...)
+        __attribute__((__format__(__printf__, 2, 3), __nonnull__(2)));
+@@ -727,6 +743,8 @@
  BIO_vsnprintf(char *buf, size_t n, const char *format, va_list args)
         __attribute__((__deprecated__, __format__(__printf__, 3, 0),
             __nonnull__(3)));
diff --git a/patches/http.c.patch b/patches/http.c.patch
deleted file mode 100644
index 0e620cf..0000000
--- a/patches/http.c.patch
+++ /dev/null
@@ -1,12 +0,0 @@
---- apps/ocspcheck/http.c.orig  Sun Jun  4 00:45:29 2017
-+++ apps/ocspcheck/http.c       Sun Jun  4 00:45:57 2017
-@@ -35,7 +35,9 @@
- #include "http.h"
- #include <tls.h>
- 
-+#ifndef DEFAULT_CA_FILE
- #define DEFAULT_CA_FILE "/etc/ssl/cert.pem"
-+#endif
- 
- /*
-  * A buffer for transferring HTTP/S data.
diff --git a/patches/netcat.c.patch b/patches/netcat.c.patch
index 35f88db..07205ec 100644
--- a/patches/netcat.c.patch
+++ b/patches/netcat.c.patch
@@ -1,16 +1,6 @@
---- apps/nc/netcat.c.orig       Mon Jul 17 06:06:51 2017
-+++ apps/nc/netcat.c    Mon Jul 17 06:11:24 2017
-@@ -66,7 +66,9 @@
- #define POLL_NETIN     2
- #define POLL_STDOUT    3
- #define BUFSIZE                16384
-+#ifndef DEFAULT_CA_FILE
- #define DEFAULT_CA_FILE        "/etc/ssl/cert.pem"
-+#endif
- 
- #define TLS_ALL        (1 << 1)
- #define TLS_NOVERIFY   (1 << 2)
-@@ -95,9 +97,13 @@
+--- apps/nc/netcat.c.orig       2018-11-07 17:01:38.000000000 -0600
++++ apps/nc/netcat.c    2018-11-07 17:37:57.000000000 -0600
+@@ -92,9 +92,13 @@
  int    Dflag;                                  /* sodebug */
  int    Iflag;                                  /* TCP receive buffer size */
  int    Oflag;                                  /* TCP send buffer size */
@@ -21,10 +11,10 @@
 +#ifdef SO_RTABLE
  int    rtableid = -1;
 +#endif
- 
+
  int    usetls;                                 /* use TLS */
  char    *Cflag;                                        /* Public cert file */
-@@ -266,12 +272,14 @@
+@@ -266,12 +270,14 @@
                 case 'u':
                         uflag = 1;
                         break;
@@ -39,7 +29,7 @@
                 case 'v':
                         vflag = 1;
                         break;
-@@ -318,9 +326,11 @@
+@@ -318,9 +324,11 @@
                 case 'o':
                         oflag = optarg;
                         break;
@@ -51,19 +41,19 @@
                 case 'T':
                         errstr = NULL;
                         errno = 0;
-@@ -344,9 +354,11 @@
+@@ -344,9 +352,11 @@
         argc -= optind;
         argv += optind;
- 
+
 +#ifdef SO_RTABLE
         if (rtableid >= 0)
                 if (setrtable(rtableid) == -1)
                         err(1, "setrtable");
 +#endif
- 
-        if (family == AF_UNIX) {
-                if (pledge("stdio rpath wpath cpath tmppath unix", NULL) == -1)
-@@ -892,7 +904,10 @@
+
+        /* Cruft to make sure options are clean, and used properly. */
+        if (argv[0] && !argv[1] && family == AF_UNIX) {
+@@ -909,7 +919,10 @@
  remote_connect(const char *host, const char *port, struct addrinfo hints)
  {
         struct addrinfo *res, *res0;
@@ -72,13 +62,13 @@
 +#ifdef SO_BINDANY
 +       int on = 1;
 +#endif
- 
+
         if ((error = getaddrinfo(host, port, &hints, &res0)))
                 errx(1, "getaddrinfo for host \"%s\" port %s: %s", host,
-@@ -907,8 +922,10 @@
+@@ -924,8 +937,10 @@
                 if (sflag || pflag) {
                         struct addrinfo ahints, *ares;
- 
+
 +#ifdef SO_BINDANY
                         /* try SO_BINDANY, but don't insist */
                         setsockopt(s, SOL_SOCKET, SO_BINDANY, &on, sizeof(on));
@@ -86,8 +76,8 @@
                         memset(&ahints, 0, sizeof(struct addrinfo));
                         ahints.ai_family = res->ai_family;
                         ahints.ai_socktype = uflag ? SOCK_DGRAM : SOCK_STREAM;
-@@ -979,7 +996,10 @@
- local_listen(char *host, char *port, struct addrinfo hints)
+@@ -996,7 +1011,10 @@
+ local_listen(const char *host, const char *port, struct addrinfo hints)
  {
         struct addrinfo *res, *res0;
 -       int s = -1, ret, x = 1, save_errno;
@@ -96,24 +86,24 @@
 +       int ret, x = 1;
 +#endif
         int error;
- 
+
         /* Allow nodename to be null. */
-@@ -1000,9 +1020,11 @@
+@@ -1017,9 +1035,11 @@
                     res->ai_protocol)) < 0)
                         continue;
- 
+
 +#ifdef SO_REUSEPORT
                 ret = setsockopt(s, SOL_SOCKET, SO_REUSEPORT, &x, sizeof(x));
                 if (ret == -1)
                         err(1, NULL);
 +#endif
- 
+
                 set_common_sockopts(s, res->ai_family);
- 
-@@ -1458,11 +1480,13 @@
+
+@@ -1475,11 +1495,13 @@
  {
         int x = 1;
- 
+
 +#ifdef TCP_MD5SIG
         if (Sflag) {
                 if (setsockopt(s, IPPROTO_TCP, TCP_MD5SIG,
@@ -124,10 +114,10 @@
         if (Dflag) {
                 if (setsockopt(s, SOL_SOCKET, SO_DEBUG,
                         &x, sizeof(x)) == -1)
-@@ -1473,9 +1497,16 @@
+@@ -1490,9 +1512,16 @@
                     IP_TOS, &Tflag, sizeof(Tflag)) == -1)
                         err(1, "set IP ToS");
- 
+
 +#ifdef IPV6_TCLASS
                 else if (af == AF_INET6 && setsockopt(s, IPPROTO_IPV6,
                     IPV6_TCLASS, &Tflag, sizeof(Tflag)) == -1)
@@ -141,16 +131,16 @@
         }
         if (Iflag) {
                 if (setsockopt(s, SOL_SOCKET, SO_RCVBUF,
-@@ -1499,13 +1530,17 @@
+@@ -1516,13 +1545,17 @@
         }
- 
+
         if (minttl != -1) {
 +#ifdef IP_MINTTL
                 if (af == AF_INET && setsockopt(s, IPPROTO_IP,
                     IP_MINTTL, &minttl, sizeof(minttl)))
                         err(1, "set IP min TTL");
 +#endif
- 
+
 -               else if (af == AF_INET6 && setsockopt(s, IPPROTO_IPV6,
 +#ifdef IPV6_MINHOPCOUNT
 +               if (af == AF_INET6 && setsockopt(s, IPPROTO_IPV6,
@@ -159,8 +149,8 @@
 +#endif
         }
  }
- 
-@@ -1714,14 +1749,22 @@
+
+@@ -1748,14 +1781,22 @@
         \t-P proxyuser\tUsername for proxy authentication\n\
         \t-p port\t     Specify local port for remote connects\n\
         \t-R CAfile     CA bundle\n\
diff --git a/patches/ocsp_test.c.patch b/patches/ocsp_test.c.patch
index aa427db..39f1326 100644
--- a/patches/ocsp_test.c.patch
+++ b/patches/ocsp_test.c.patch
@@ -1,9 +1,9 @@
---- tests/ocsp_test.c.orig      2016-10-18 18:12:39.854607509 +0900
-+++ tests/ocsp_test.c   2016-10-18 18:14:29.261600559 +0900
-@@ -16,6 +16,11 @@
+--- tests/ocsp_test.c.orig      2018-07-24 21:59:17.000000000 -0500
++++ tests/ocsp_test.c   2018-11-07 18:44:43.000000000 -0600
+@@ -35,6 +35,11 @@
         hints.ai_family = AF_INET;
         hints.ai_socktype = SOCK_STREAM;
- 
+
 +#ifdef _MSC_VER
 +       if (BIO_sock_init() != 1)
 +               exit(-1);
diff --git a/patches/tls_internal.h.patch b/patches/tls_internal.h.patch
deleted file mode 100644
index e82bf96..0000000
--- a/patches/tls_internal.h.patch
+++ /dev/null
@@ -1,12 +0,0 @@
---- tls/tls_internal.h.orig     Sun Jul  9 06:16:17 2017
-+++ tls/tls_internal.h  Mon Jul 17 06:10:01 2017
-@@ -26,7 +26,9 @@
- 
- __BEGIN_HIDDEN_DECLS
- 
-+#ifndef _PATH_SSL_CA_FILE
- #define _PATH_SSL_CA_FILE "/etc/ssl/cert.pem"
-+#endif
- 
- #define TLS_CIPHERS_DEFAULT    "TLSv1.2+AEAD+ECDHE:TLSv1.2+AEAD+DHE"
- #define TLS_CIPHERS_COMPAT     "HIGH:!aNULL"
diff --git a/patches/tlsexttest.c.patch b/patches/tlsexttest.c.patch
index 981fc95..cdec053 100644
--- a/patches/tlsexttest.c.patch
+++ b/patches/tlsexttest.c.patch
@@ -1,6 +1,6 @@
---- tests/tlsexttest.c.orig     2017-12-30 20:03:09.279079726 +0900
-+++ tests/tlsexttest.c  2017-12-30 20:07:21.849939140 +0900
-@@ -1676,7 +1676,9 @@ static unsigned char tlsext_sni_clienthe
+--- tests/tlsexttest.c.orig     Wed Nov  7 20:01:26 2018
++++ tests/tlsexttest.c  Wed Nov  7 20:01:35 2018
+@@ -1676,7 +1676,9 @@
  };
  
  static unsigned char tlsext_sni_serverhello[] = {
@@ -10,7 +10,7 @@
  
  static int
  test_tlsext_sni_clienthello(void)
-@@ -1839,9 +1841,9 @@ test_tlsext_sni_serverhello(void)
+@@ -1839,9 +1841,9 @@
         if (!CBB_finish(&cbb, &data, &dlen))
                 errx(1, "failed to finish CBB");
  
@@ -22,7 +22,7 @@
                 goto err;
         }
  
-@@ -1850,14 +1852,14 @@ test_tlsext_sni_serverhello(void)
+@@ -1850,14 +1852,14 @@
                 fprintf(stderr, "received:\n");
                 hexdump(data, dlen);
                 fprintf(stderr, "test data:\n");
@@ -39,7 +39,7 @@
         if (!tlsext_sni_serverhello_parse(ssl, &cbs, &alert)) {
                 FAIL("failed to parse serverhello SNI\n");
                 goto err;
-@@ -2741,7 +2743,10 @@ unsigned char tlsext_clienthello_default
+@@ -2741,7 +2743,10 @@
         0x03, 0x01, 0x03, 0x03, 0x02, 0x01, 0x02, 0x03,
  };
  
@@ -51,7 +51,7 @@
  
  static int
  test_tlsext_clienthello_build(void)
-@@ -2806,18 +2811,18 @@ test_tlsext_clienthello_build(void)
+@@ -2806,18 +2811,18 @@
         if (!CBB_finish(&cbb, &data, &dlen))
                 errx(1, "failed to finish CBB");
  
@@ -74,7 +74,7 @@
                 goto err;
         }
  
-@@ -2832,7 +2837,10 @@ test_tlsext_clienthello_build(void)
+@@ -2832,7 +2837,10 @@
         return (failure);
  }
  
@@ -86,7 +86,7 @@
  
  unsigned char tlsext_serverhello_enabled[] = {
         0x00, 0x13, 0xff, 0x01, 0x00, 0x01, 0x00, 0x00,
-@@ -2872,18 +2880,18 @@ test_tlsext_serverhello_build(void)
+@@ -2872,18 +2880,18 @@
         if (!CBB_finish(&cbb, &data, &dlen))
                 errx(1, "failed to finish CBB");