aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* update Changelogv2.3.10OPENBSD_5_9Brent Cook2017-01-091-0/+13
|
* Sync getentropy() checks with use-builtin-arc4random checksSimone Basso2017-01-072-30/+48
| | | | | Without this, we actually fail to build a library that includes the bultin getentropy when compiling for 10.11 on 10.12.
* m4/check-libc.m4: improve getentropy checkSimone Basso2017-01-071-17/+23
| | | | | | | | | | | | | | | | | - according to man.openbsd.org getentropy() is in unistd.h - according to macOS sierra's man it's in sys/random.h - since sys/random.h is does not exist for iOS and for linux, do not attempt to include it, rather redeclare the prototype - make sure that `./configure`: - uses getentropy() on macOS sierra - does not use getentropy() if compiling for 10.11 - does not use getentropy() if compiling for ios armv7
* configure: fix getentropy() for sierra and iosSimone Basso2017-01-071-1/+55
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This diff changes the logic by which configure detects getentropy() to ensure that we don't use the system wide getentropy - with macOS sierra if the deployment target is lower than sierra as found by tor developers here https://gitweb.torproject.org/tor.git/commit/?id=https://gitweb.torproject.org/tor.git/commit/?id=16fcbd21c963a9a65bf55024680c8323c8b7175d - with iOS unconditionally because an app linking libressl compiled with system wide getentropy has been rejected by the App store as I have documented here https://github.com/measurement-kit/measurement-kit/pull/994 I think something similar could also affect clock_gettime judging from tor's patch, but this diff for now doesn't address that. I do not have macOS < sierra, so I could only verify that configure was not picking up system wide getentropy by compiling libressl using export CFLAGS="-mmacosx-version-min=10.11" As regards iOS, removing the check for getentropy and recompiling (thus using libressl builtin getentropy()) was enough to have another iteration of the app accepted. Otherwise testing should be possible with: export LDFLAGS=-arch armv7 -miphoneos-version-min=7.1 -isysroot `xcrun --show-sdk-path --sdk iphoneos` export CPPFLAGS=-arch armv7 -isysroot `xcrun --show-sdk-path --sdk iphoneos` export CFLAGS=-arch armv7 -miphoneos-version-min=7.1 -isysroot `xcrun --show-sdk-path --sdk iphoneos` Related ticket: https://github.com/libressl-portable/portable/issues/230
* Disable netcat if arpa/telnet.h is not available (iOS)jacob berkman2017-01-071-0/+2
|
* update changelog for 2.3.9v2.3.9Brent Cook2016-11-061-0/+5
|
* update changelog for 2.3.8v2.3.8Brent Cook2016-09-231-0/+9
|
* update for 2.3.7v2.3.7Brent Cook2016-07-311-0/+11
|
* set link library dependencies with MSVC, fixes #221Brent Cook2016-07-313-0/+9
|
* properly enable strnlen checks for MSVCBrent Cook2016-07-311-1/+1
|
* avoid BSWAP assembly for ARM <= v6Brent Cook2016-07-191-0/+21
|
* format 64-bit int portably (windows wants %l64d)Brent Cook2016-07-191-0/+19
|
* Fix typo in USE_BUILTIN_ARC4RANDOM checkcelan692016-07-191-1/+1
| | | Solaris 11 recently introduced a builtin arc4random in libc which fails the tests in "make check". Found USE_BUILTIN_ARC4RANDOM, but could not get it to work. Apparently, there is a typo in the configure logic rendering USE_BUILTIN_ARC4RANDOM ineffective.
* bump changelog to sync tags with openbsd sourcev2.3.6Brent Cook2016-06-071-5/+5
|
* update changelogBrent Cook2016-06-061-0/+9
|
* Update changelogv2.3.5Brent Cook2016-05-301-0/+4
|
* pushed encode.c change upstreamv2.3.4Brent Cook2016-05-031-11/+0
|
* prefer limits.h over sys/limits.hBrent Cook2016-05-031-0/+11
|
* update changelogBrent Cook2016-05-021-0/+7
|
* add constant_time_locl.hBrent Cook2016-05-021-0/+2
|
* check linker flags before checking for functionsBrent Cook2016-05-021-2/+4
|
* fix ld warning "attempted multiple inclusion of file" on Solariskinichiro2016-05-025-10/+12
| | | | - To avoid ld warning on Solaris, use abs_top_builddir in Makefile.am
* update changelogv2.3.3Brent Cook2016-03-211-7/+4
|
* updated changelogBrent Cook2016-03-211-0/+18
|
* set windows binary OPENSSLDIR to something plausibleBrent Cook2016-03-211-1/+1
|
* modify include/compat/netinet/ip.hkinichiro2016-03-131-0/+4
| | | | - add including <netinet/in_systm.h> for n_long on HP-UX
* connect to the OPENBSD_5_9 branchBrent Cook2016-03-121-1/+1
|
* fix check for strlcatBrent Cook2016-03-121-1/+1
| | | | fixes #175
* add install_sw alias for latest nginxBrent Cook2016-03-121-0/+3
| | | | fixes #174
* update man linksBrent Cook2016-02-291-108/+24
|
* add things to minimize diffs with OpenNTPD-portableBrent Cook2016-02-152-19/+17
|
* updated changelogv2.3.2Brent Cook2016-01-271-2/+13
|
* add solaris include for getentropy(2)Brent Cook2016-01-181-0/+7
|
* package pidwraptest.sh scriptBrent Cook2016-01-031-1/+1
|
* whitelist NetBSD 7.0 native arc4random(3) implementation.Brent Cook2016-01-032-3/+17
| | | | | NetBSD 7 improves arc4random(3) over earlier versions by adding fork detection, stronger assertions on seed failure.
* enable nc on AIXBrent Cook2016-01-031-0/+1
|
* replace err.h macros with inline functionsBrent Cook2016-01-031-8/+54
| | | | Passing NULL for the format is just easier with a function.
* prefer gnu patch on AIXBrent Cook2016-01-031-1/+6
|
* include strings.h in string.h on AIX as wellBrent Cook2016-01-032-4/+6
|
* -path isn't really needed for perms fixup, and not supported everywhereBrent Cook2016-01-031-1/+1
|
* rebase netcat patchBrent Cook2015-12-281-13/+13
|
* add upstream config.guess/config.subBrent Cook2015-12-273-0/+3264
| | | | | This adds refreshed OS and CPU detection. https://www.gnu.org/software/gettext/manual/html_node/config_002eguess.html
* update check for b64_ntopBrent Cook2015-12-271-1/+1
| | | | typo spotted by Jonas 'Sortie' Termansen
* note the removed Verisign certificateBrent Cook2015-12-151-0/+4
|
* update added certsBrent Cook2015-12-141-1/+2
|
* Revert back to GetStdHandle, since it works fine with pipes.Brent Cook2015-12-111-6/+6
| | | | | Also include the formerly-missing NULL check, since this can fail in two ways.
* include stdint.h uint*_tBrent Cook2015-12-111-0/+1
|
* Replace STDIN_FILENO with _filenoAnthony Novatsis2015-12-111-3/+3
| | | | | Replace STDIN_FILENO with _fileno as STDIN_FILENO results in compile errors with Visual Studio 2015 (using CMake).
* installing nc(1) should imply building, even if not whitelistedBrent Cook2015-12-072-5/+5
|
* allow optionally installing nc(1) with '--enable-nc'Brent Cook2015-12-072-0/+8
|