aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * do not double-link libcryptoBrent Cook2014-12-272-2/+0
| | | | | | | | libssl already has LIBFLAGS for libcrypto, so adding -lcrypto is superfluous.
| * enable __STRICT_ALIGNMENT on sparcBrent Cook2014-12-271-0/+6
| |
| * do not mark GNU_STACK WX in ELFs generated from assemblyBrent Cook2014-12-222-1/+22
| | | | | | | | | | | | | | | | | | | | | | | | When generating ELF objects from assembly, gcc and clang mark the GNU_STACK program headers as RWX by default. This is a security issue, so we make sure it is marked only RW. This modifies Anthony G. Basile's original patch for Linux to set .note.GNU-stack whenever the assembler supports it. It is surprising that any modern toolchain would enable an executable stack without an explicit request. The number of programs that need an executable stack is surely much smaller than the number of programs that include assembly.
* | configure.ac: use executable hardening where availableJim Barlow2014-12-231-0/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Where available, enable stack smashing protection, fortify source, no-strict-overflow, and read only relocations. Many Linux distributions automatically enable most of these options. They are no brainers. The difference introduced here is in asking for a few more aggressive options. An option to disable the more aggressive options is provided (--disable-hardening). When set, configure will fall back to the default CFLAGS on the system - in many cases that will still be hardened. There is no point in going further than that. Options enabled are: -fstack-protector-strong is a relatively new GCC-4.9 feature that is supposed to give a better balance between performance and protection. -all is considered too aggressive, but was used in Chromium and other security critical systems until -strong became available. Follow their lead and use -strong when possible. clang 6.0 supports -all but not -strong. _FORTIFY_SOURCE replaces certain unsafe C str* and mem* functions with more robust equivalents when the compiler can determine the length of the buffers involved. -fno-strict-overflow instructs GCC to not make optimizations based on the assumption that signed arithmetic will wrap around on overflow (e.g. (short)0x7FFF + 1 == 0). This prevents the optimizer from doing some unexpected things. Further improvements should trap signed overflows and reduce the use of signed to refer to naturally unsigned quantities. I did not set -fPIE (position independent executables). The critical function of Open/LibreSSL is as a library, not an executable. Tested on Ubuntu Linux 14.04.1 LTS, OS X 10.10.1 with "make check". The code added to m4/ is GPLv3 but con Signed-off-by: Jim Barlow <jim@purplerock.ca>
* | configure.ac: use executable hardening where availableJim Barlow2014-12-233-0/+209
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Where available, enable stack smashing protection, fortify source, no-strict-overflow, and read only relocations. Many Linux distributions automatically enable most of these options. They are no brainers. The difference introduced here is in asking for a few more aggressive options. An option to disable the more aggressive options is provided (--disable-hardening). When set, configure will fall back to the default CFLAGS on the system - in many cases that will still be hardened. There is no point in going further than that. Options enabled are: -fstack-protector-strong is a relatively new GCC-4.9 feature that is supposed to give a better balance between performance and protection. -all is considered too aggressive, but was used in Chromium and other security critical systems until -strong became available. Follow their lead and use -strong when possible. clang 6.0 supports -all but not -strong. _FORTIFY_SOURCE replaces certain unsafe C str* and mem* functions with more robust equivalents when the compiler can determine the length of the buffers involved. -fno-strict-overflow instructs GCC to not make optimizations based on the assumption that signed arithmetic will wrap around on overflow (e.g. (short)0x7FFF + 1 == 0). This prevents the optimizer from doing some unexpected things. Further improvements should trap signed overflows and reduce the use of signed to refer to naturally unsigned quantities. I did not set -fPIE (position independent executables). The critical function of Open/LibreSSL is as a library, not an executable. Tested on Ubuntu Linux 14.04.1 LTS, OS X 10.10.1 with "make check". Signed-off-by: Jim Barlow <jim@purplerock.ca>
* | configure.ac: Modify clang check to save result to a variableJim Barlow2014-12-231-10/+14
|/ | | | | ...and leave a note that -Qunused-arguments is being applied to CFLAGS not LDFLAGS, probably in error.
* Add wrapper file "config" to distribution.Technion2014-12-151-1/+1
|
* enable OS X and Linux CI buildsBrent Cook2014-12-141-0/+3
|
* add Travis CI configurationBrent Cook2014-12-141-0/+5
|
* add all LIBADD dependencies for tlsBrent Cook2014-12-141-1/+1
| | | | | The libtool transitive dependency magic does not seem to work for cross-compilation, so explicitly specify them here.
* bump versionBrent Cook2014-12-142-2/+6
| | | | append portable version number to the version string
* allow Windows DLLs to be builtBrent Cook2014-12-144-4/+4
| | | | based on a patch from Jan Engelhardt
* add LIBADD library dependencies to libssl/libtlsBrent Cook2014-12-142-0/+2
| | | | From Jan Engelhardt
* Use the individual library versions in LibreSSL pc filesBrent Cook2014-12-143-3/+3
| | | | | | | | | | | | | | | | | Previously, they were all using the portable package version, rather than the individual library versions. openssl(1)'s pc file represents the LibreSSL-portable release however. $ pkg-config --modversion libtls 1:0:0 $ pkg-config --modversion openssl 2.1.2 $ pkg-config --modversion libssl 30:0:0 $ pkg-config --modversion libcrypto 30:3:0 ok beck@ deraadt@
* don't hardcode a fixed # of jobs for makev2.1.2Brent Cook2014-12-081-1/+1
|
* update libtls URLBrent Cook2014-12-081-1/+1
| | | | thanks to gschutijser from github for pointing it out
* update and rework changelog for readabilityBrent Cook2014-12-071-10/+30
|
* use the new $MV macro to generate assembly filesBrent Cook2014-12-071-19/+27
| | | | | Avoid spurious rebuilds running update.sh by generating a temp file and comparing the result to the existing one.
* use 'make distcheck' for the release build scriptBrent Cook2014-12-071-1/+1
|
* tests/Makefile.am.tpl: remove generated files on distcleanDmitry Eremin-Solenikov2014-12-071-0/+1
| | | | | | Add pidwraptest.txt to DISTCLEANFILES to let it be removed on distclean. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* update.sh: remove linked manpages on uninstallDmitry Eremin-Solenikov2014-12-071-0/+12
| | | | | | | Add additional code to remove linked manpages on uninstall. Since we do linking manually, automake will not remove them for us. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* update.sh: add MV-like function preserving file timestampsDmitry Eremin-Solenikov2014-12-071-2/+11
| | | | | | | | | Add a do_mv()/$MV wrappers to be called instead of just mv. This function will preserve the target file if it does not differ from the source file. This helps to remove unnecessary compilator calls after calling update.sh w/o source changes. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* update.sh: call $CP instead of cp to ease rebuildsDmitry Eremin-Solenikov2014-12-071-5/+5
| | | | | | | In several additional places call $CP instead of just cp to ease and speed up rebuilds after update.sh execution. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* Update .gitignoreDmitry Eremin-Solenikov2014-12-071-0/+2
| | | | | | Add gost test suite and camellia cipher dir to .gitignore. Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* update.sh: include gost test suiteDmitry Eremin-Solenikov2014-12-071-1/+2
| | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>
* disable inline assembly on Windows for nowBrent Cook2014-12-071-0/+4
| | | | There are issues building with inline assembly on Windows 64-bit.
* Enable optimized crypto operations for x86_64Brent Cook2014-12-076-25/+168
| | | | | | | | | | | | | | This adds initial support for assembly crypto acceleration on x86_64 for ELF (Linux, *BSD, Solaris) and Mach-O (OS-X) systems. The build method is a little different than OpenSSL and OpenBSD. All the .s files are generated ahead of time when the tarball is generated, so there are no complicated makefile rules at configure/build time. This also means the builds are faster and perl is not required on the build system. Thanks to Wouter Clarie for providing the initial cleanup and patch that this is based on.
* sync man links from upstreamBrent Cook2014-12-071-4/+0
| | | | I really need write something to automate this.
* read all library versions directly from filesBrent Cook2014-12-066-10/+18
| | | | | | This makes building and testing easier because the library Makefile.am files are use directly rather than as templates. Thanks to Wouter Clarie for the idea.
* split long manpage makefile lines.Brent Cook2014-12-061-2/+4
|
* simplify packaging for libcrypto.Brent Cook2014-12-062-245/+731
| | | | | | | | | Remove a lot of complex shell code. Upstream churn has slowed down, so it is now easier to maintain this directly as automake files. This is also needed to start integrating CPU-specific acceleration support. Since we are deriving the copy list from the Makefile.am files, we can now get rid of copy_src/copy_crypto.
* remove obsolete defineBrent Cook2014-12-061-1/+0
|
* simplify packaging for libssl.Brent Cook2014-12-062-46/+74
| | | | | Follow libtls and derive the file list from the Makefile.am template itself.
* simplify building the apps MakefileBrent Cook2014-12-065-58/+97
| | | | | Remove extra machinery in favor of a plain-old Makefile.am. Tighten up what files are copied on build, package a simple openssl.cnf.
* simplify packaging for libtls.Brent Cook2014-12-063-16/+12
| | | | | Derive the file list from the Makefile.am template itself (DRY), ensure manpage is packaged with the final tarball.
* update changelog for libtlsBrent Cook2014-12-061-0/+3
|
* add support for building libtlsBrent Cook2014-12-069-12/+118
| | | | | | | | Use './configure --enable-libtls' to build the library and install the associated manpages. Note that the API and ABI of this library may change still, though feedback is welcome. ok deraadt@ jsing@ tedu@
* update changelog for 2.1.2Brent Cook2014-12-031-0/+12
|
* better cleanup biotest.cBrent Cook2014-12-031-6/+1
|
* monkey patch more POSIX-like behavior out of winsock 2Brent Cook2014-12-033-8/+176
| | | | | | | | | | | | | | | | | | | | | | Windows sockets functions look on the outside like they behave similarly to POSIX functions, but there are many subtle and glaring differences, including errors reported via WSAGetLastError, read, write, and close do not work on sockets, setsockopt takes a (char *) rather than (void *), etc. This header implements wrappers that coerce more POSIX-like behavior from these functions, making portable code easier to develop. BENEFITS: One does not necessarily need to sprinkle #ifdefs around code to handle the Windows and non-Windows behavior when porting code. CAVEATS: There may be performance implications with the 'mother-may-I' approach to determining if a descriptor is a socket or a file. The errno mappings are not 100% what one might expect compared to POSIX since there were not always good 1:1 equivalents from the WSA errors.
* add minimal winsock->BSD networking header shimsBrent Cook2014-12-0320-2/+205
| | | | also add license header to existing shims
* add minimal poll(2) implementation for WindowsBrent Cook2014-12-035-2/+398
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This provides sufficient functionality to run openssl(1) from a Windows console. This is based on the original select-based version from from songdongsheng@live.cn. Changes: * use nfds_t directly for iterating the fds. * add WSAGetLastError -> errno mappings * handle POLLHUP and the OOB data cases for revents * handle sparse arrays of fds correctly * KNF style updates * teach poll how to handle file handles as well as sockets This handles the socket/non-socket issue by alternating a loop between WaitForMultipleObjects for non-sockets and and select for sockets. One would think this would be terrible for performance, but as of this writing, poll consumes about 6% of the time doing a bulk transfer between a Linux box and 'openssl.exe s_server'. I tried to implement this all in terms of WaitForMultipleObjects with a select 'poll' at the end to get extra specific socket status. However, the cost of setting up an event handle for each socket, setting the WSAEventSelect attributes, and cleaning them up reliably was pretty high. Since the event handle associated with a socket is also global, creating a new one cancels the previous one or can be disabled externally. In addition, the 'FD_WRITE' status of a socket event handle does not behave in an expected fashion, being triggered by an edge on a write event rather than being level triggered. Another fun horror story is how stdin in windows might be a console, it might be a pipe, it might be something else. If these all worked in the same way, it would be great. But, since a console-stdin can also signal on a mouse or window event, it means we can easily get stuck in a blocking read (you can't make stdin non-blocking) if the non-character events are not filtered out. So, poll does that too. See here for various additional horror stories: http://www.postgresql.org/message-id/4351.1336927207@sss.pgh.pa.us
* update and mask unit tests when running on win32Brent Cook2014-12-035-11/+57
| | | | | | | | Update pq_test to ignore changes in whitespace. Update for new testssl params, specify absolute paths to test binaries. Fork-based tests do not make sense on Windows. Disable building biotest, since it is too specific to OpenBSD's behavior to be useful on other platforms.
* Add conditional compilation for windows and posix functions.Brent Cook2014-12-034-7/+492
| | | | | This adds a Windows-specific versions of several symbols from libcrypto and openssl(1).
* Update win32 build definesBrent Cook2014-12-031-1/+2
|
* don't ignore a non-existent fileBrent Cook2014-12-031-1/+0
|
* improve readability of generated Makefile.am filesBrent Cook2014-11-235-4/+10
|
* ignore gost and camellia dirsBrent Cook2014-11-181-0/+2
|
* Enable GOST in libcrypto and libssl, contributed by Dmitry Eremin-SolenikovBrent Cook2014-11-181-3/+10
| | | | Ensure the public camellia.h header is installed along with gost.h
* Use _WIN32 instead of __WIN32.宋冬生2014-11-182-2/+2
| | | | ok bcook@
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-16 09:57:37 +0000