aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* allow releases to be retriggered on failurev4.3.2Brent Cook2026-05-251-0/+1
| | | | This just gives us a manual rerun option.
* update changelogBrent Cook2026-05-241-0/+1
|
* Do not override user CFLAGS/LDFLAGS in hardening flag detectionKenjiro Nakayama2026-05-242-2/+3
| | | | | | | | | | | | | | | | `CHECK_CFLAG` / `CHECK_LDFLAG` overwrote `CFLAGS`/`LDFLAGS` with only the flag under test, so feature detection ran with a different target than the real build. For example `CFLAGS=-march=i586 ./configure` accepted `-fcf-protection=full` (detected under the toolchain's i686 default) but then failed to compile because GCC 15 rejects `-fcf-protection` on i586. Prepend `$USER_CFLAGS` / `$USER_LDFLAGS` (saved before `AC_PROG_CC`) to the detection command so the probe matches the real build. Fixes #1268
* Land #1280 - fix executable stack on linuxTheo Buehler2026-05-121-0/+95
|\
| * Avoid executable stack on linux in the 4.3 branchTheo Buehler2026-05-121-0/+95
|/ | | | Fixes #1278
* ChangeLog: tense/minor tweaksTheo Buehler2026-05-091-5/+5
|
* Tweak ChangeLogTheo Buehler2026-05-091-4/+4
|
* Add some portable changesTheo Buehler2026-05-091-0/+13
|
* create branch for 4.3.xBrent Cook2026-04-232-3/+3
|
* ci: update vmactions/solaris-vm action to v1.3.3renovate[bot]2026-04-231-1/+1
|
* ci: update vmactions/freebsd-vm action to v1.4.5renovate[bot]2026-04-231-2/+2
|
* ci: update mymindstorm/setup-emsdk action to v16renovate[bot]2026-04-231-2/+2
|
* ci: update msys2/setup-msys2 action to v2.31.0renovate[bot]2026-04-233-3/+3
|
* ci: update actions/upload-artifact action to v7renovate[bot]2026-04-232-2/+2
|
* ci: update github/codeql-action action to v4.35.2renovate[bot]2026-04-231-1/+1
|
* ci: update actions/checkout action to v6.0.2renovate[bot]2026-04-2312-16/+16
|
* Allow building on AIXTheo Buehler2026-04-192-0/+87
| | | | | From @AIIleG in #1116 Fixes #1116
* update for releasev4.3.1Brent Cook2026-04-181-1/+8
|
* Land #1251: Add missing <limits.h> to tls_keypair.cBrent Cook2026-04-181-0/+11
|\
| * Add missing <limits.h> to tls_keypair.cTheo Buehler2026-04-191-0/+11
| | | | | | | | Fixes #1249 #1250
* | LibreSSL 3.4.1Brent Cook2026-04-181-0/+18
|/
* ChangeLog: add SAN dNSName fixv4.3.0Theo Buehler2026-04-161-0/+3
|
* Update ChangeLogTheo Buehler2026-04-161-0/+3
|
* Land #1247 - add renovate-bot-configTheo Buehler2026-04-131-0/+32
|\
| * ci: add renovate-bot configJoshua Sing2026-04-131-0/+32
| |
* | Land #1246 - improve CI-fuzz workflowTheo Buehler2026-04-131-23/+36
|\ \
| * | ci: improve cifuzz workflowJoshua Sing2026-04-131-23/+36
| |/
* | minor ChangeLog tweaksTheo Buehler2026-04-121-3/+3
| |
* | ChangeLog through Apr 7Theo Buehler2026-04-121-3/+53
|/
* Land #1243 - fix SIGALRM on WindowsTheo Buehler2026-04-121-6/+8
|\
| * speed: fix SIGALRM handler not registered on WindowsKenjiro Nakayama2026-04-121-6/+8
|/
* Update ChangeLogTheo Buehler2026-04-071-0/+6
|
* ssl_packet.c is no moreTheo Buehler2026-04-042-2/+0
|
* Add crypto_assembly.hTheo Buehler2026-03-291-0/+1
|
* ChangeLog through Dec 31Theo Buehler2026-03-291-2/+30
|
* Land #1242 - update speed patch for ML-KEMTheo Buehler2026-03-181-15/+15
|\
| * Update patches/speed.c.patchKenjiro Nakayama2026-03-191-15/+15
| |
* | remove ecdsa_local.hTheo Buehler2026-03-181-1/+0
| |
* | regen patchesTheo Buehler2026-03-132-13/+13
| |
* | Land #1240 - preserve -1 return from open()Theo Buehler2026-03-081-0/+3
|\ \ | |/ |/|
| * Verify -1 instead of negative valueKenjiro Nakayama2026-03-081-1/+1
| |
| * Avoid integer overflow in posix_open on WindowsKenjiro Nakayama2026-03-081-0/+3
|/ | | | | | | | If open() fails, return the error value immediately. Adding the high bit to -1 results in a large positive integer, which causes callers like tls_config_load_file() to bypass their error checks. Fix https://github.com/libressl/portable/issues/1239
* Land #1237 - CI on macos-26Theo Buehler2026-03-041-1/+1
|\
| * ci: run tests on macos-26Joshua Sing2026-03-011-1/+1
| |
* | Land #1236 - fix cms.h on WindowsTheo Buehler2026-03-041-0/+16
|\ \
| * | Add definition of ssize_t to cms.h for WindowsKenjiro Nakayama2026-02-201-0/+16
| |/ | | | | | | | | | | | | | | MSVC does not define ssize_t. Hence, this patch adds a typedef for compatibility when LIBRESSL_INTERNAL is not defined. Fix https://github.com/libressl/portable/issues/1232
* | Land #1235 - fix remote branch fetchingTheo Buehler2026-03-041-2/+2
|\ \ | |/ |/|
| * Fix remote branch fetching and revision lookup in update.shKenjiro Nakayama2026-02-201-2/+2
|/ | | | | | | | | | | | | | | | | | This patch changes to: - add `--no-single-branch` to git clone to ensure all remote branches are tracked, allowing the script to switch between OpenBSD versions. - use origin/ prefix for $openbsd_branch to fix revision lookup At initial setup, the branch only exists as a "remote-tracking" reference. Since a local branch hasn't been created yet, git cannot find it by name alone. Adding the origin/ prefix explicitly tells git to look into the remote data we just fetched. This ensures the script can correctly identify the commit hash based on the release timestamp even on a fresh shallow clone. Fix https://github.com/libressl/portable/issues/1233
* Land #1231 - re-enable asm on Windows/aarch64 (reverts #1211)Theo Buehler2026-02-081-3/+0
|\
| * Revert "cmake: disable ARM64 ASM on Windows"Theo Buehler2026-02-081-3/+0
|/ | | | | | | Undoes the merge of #1211, which is no longer needed as @vszakats confirmed by testing in the curl CI. This reverts commit fad962e027842e224d32b31533a61f65cbc13727.