Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Reuse _OPENBSD_SOURCE namespace on NetBSD (>=8.x) | Kamil Rytarowski | 2015-03-08 | 1 | -0/+1 |
| | |||||
* | Add '-windows' to windows binary archive.v2.1.4 | Brent Cook | 2015-03-02 | 1 | -1/+1 |
| | |||||
* | add windows README, package README files with distribution | Brent Cook | 2015-03-02 | 2 | -1/+41 |
| | |||||
* | point out where to report bugs, update links. | Brent Cook | 2015-03-02 | 2 | -3/+7 |
| | |||||
* | update changelog with security updates | Brent Cook | 2015-03-02 | 1 | -7/+33 |
| | |||||
* | add a simple code coverage generation script | Brent Cook | 2015-03-01 | 1 | -0/+37 |
| | | | | | | | | | | The lcov tools (http://ltp.sourceforge.net/coverage/lcov.php) are required to generate reports. Original idea from this PR, thanks to Jim Barlow for doing the initial integration work. https://github.com/libressl-portable/portable/pull/58 | ||||
* | ignore temp windows library build files | Brent Cook | 2015-03-01 | 1 | -0/+1 |
| | |||||
* | separate the BSWAP check from the action | Brent Cook | 2015-03-01 | 1 | -14/+17 |
| | | | | checks need to be unconditional with autoconf | ||||
* | check if the BSWAP assembly for ARM works before building | Brent Cook | 2015-03-01 | 1 | -0/+8 |
| | |||||
* | refine building windows binaries, enable shared | Brent Cook | 2015-03-01 | 1 | -15/+17 |
| | |||||
* | update windows binary build script | Brent Cook | 2015-02-24 | 1 | -47/+45 |
| | | | | | | This puts the 32 and 64-bit binaries in the same zip file, adds debug files that are compatible with Visual Studio/windbg, and updates for the new configure options. | ||||
* | add windows-specific hardening options | Brent Cook | 2015-02-24 | 1 | -8/+23 |
| | | | | | | This enables DEP and ALSR capabilities. Stack protection is enabled optionally, there are some extra linking steps required that make it difficult to enable by default. | ||||
* | remove openat requirement for building certhash | Brent Cook | 2015-02-23 | 1 | -2/+2 |
| | |||||
* | update libtls mlinks | Brent Cook | 2015-02-23 | 1 | -2/+9 |
| | |||||
* | remove unneeded continuation characters in ssl/crypto mlinks list | Brent Cook | 2015-02-23 | 1 | -1008/+1008 |
| | |||||
* | Update initial changelog for 2.1.4 | Brent Cook | 2015-02-22 | 1 | -0/+39 |
| | |||||
* | enable Windows NX / ALSR / stack protector | Brent Cook | 2015-02-19 | 1 | -1/+5 |
| | | | | | | I will update my toolchain and try --high-entropy-va and stack-protector-strong later. We will probably need to ship libssp-0.dll as well. Thanks to jsg for hints. | ||||
* | add script for building windows binary distribution packages | Brent Cook | 2015-02-19 | 1 | -0/+52 |
| | |||||
* | add missing line continuation | Brent Cook | 2015-02-19 | 1 | -1/+1 |
| | |||||
* | disable system issetugid on OS X since it is not fork-safe | Brent Cook | 2015-02-17 | 3 | -0/+24 |
| | | | | | Noticed while testing similar code for AIX. ok beck@ | ||||
* | remove getuid/getgid fallbacks from hp-ux issetugid emulation | Brent Cook | 2015-02-16 | 1 | -15/+6 |
| | | | | | Fail closed if we cannot obtain the process flags. Noticed while looking at a similar function for AIX. | ||||
* | add strsep fallback for libtls | Brent Cook | 2015-02-14 | 4 | -2/+16 |
| | |||||
* | conditionally build certhash into openssl(1) | Brent Cook | 2015-02-14 | 4 | -1/+22 |
| | | | | | For now, look for openat and symlink. We may switch to just needing symlink later. | ||||
* | update for new manpage conversions, add links | Brent Cook | 2015-02-14 | 2 | -0/+6 |
| | |||||
* | add the new openssl(1) certhash command | Brent Cook | 2015-02-11 | 1 | -0/+1 |
| | |||||
* | rc5 is removed | Brent Cook | 2015-02-10 | 1 | -1/+1 |
| | |||||
* | c_all* have merged into c_all.c | Brent Cook | 2015-02-08 | 1 | -2/+0 |
| | |||||
* | disable biotest | Brent Cook | 2015-02-06 | 1 | -0/+3 |
| | |||||
* | update with latest, add more tests | Brent Cook | 2015-02-06 | 4 | -15/+11 |
| | | | | this adds the new bytestring apis and new regression tests | ||||
* | be even nicer to OS X's fork | Brent Cook | 2015-01-31 | 1 | -1/+0 |
| | |||||
* | be nicer to travis OS X machines, remove unneeded 'make clean' | Brent Cook | 2015-01-31 | 1 | -11/+15 |
| | |||||
* | only use the specific build matrix | Brent Cook | 2015-01-31 | 2 | -13/+5 |
| | | | | use sudo to install mingw toolchains | ||||
* | fix whitespace in yml | Brent Cook | 2015-01-31 | 1 | -12/+12 |
| | |||||
* | update travis-ci build to check mingw32/64 targets | Brent Cook | 2015-01-31 | 2 | -1/+55 |
| | |||||
* | include 'struct iovec' for Windows | Brent Cook | 2015-01-31 | 2 | -0/+18 |
| | | | | this is used for in-memory cert loading | ||||
* | bump version | Brent Cook | 2015-01-26 | 1 | -1/+1 |
| | |||||
* | add by_mem.c for X509_STORE_load_mem | Brent Cook | 2015-01-26 | 1 | -0/+1 |
| | |||||
* | add 2.1.3 notesv2.1.3 | Brent Cook | 2015-01-21 | 1 | -0/+42 |
| | |||||
* | add NetBSD shims for arc4random | Brent Cook | 2015-01-21 | 3 | -8/+22 |
| | | | | | | The current NetBSD release, 6.1.5, fails to reseed arc4random fork. Work around it by providing arc4random/getentropy shims. Revisit when NetBSD 7 is available. | ||||
* | catch GCC versions that only warn on unused flags | Brent Cook | 2015-01-06 | 1 | -3/+3 |
| | | | | | Noticed while building with GCC 4.2 with HP-UX. Switching the ERROR to a WARN for a first release while we continue to survey the field. | ||||
* | remove bash-style comparisons from tests | Brent Cook | 2015-01-06 | 1 | -3/+3 |
| | |||||
* | Add support for HP-UX | kinichiro | 2015-01-06 | 4 | -0/+42 |
| | | | | | | | | | | tested on: HP-UX 11.31 ia64, gcc 4.7.1(HP AllianceOne version) gcc 4.2.3(http://hpux.connect.org.uk) HP C/aC++ HP-UX defaults to use LP32 and it treats long as 32 bit (= 4 bytes). This build forces LP64 for treating long as 64 bit. | ||||
* | quoting and ensure old_*flags are restored before the 'else' | Brent Cook | 2015-01-05 | 1 | -8/+10 |
| | |||||
* | preserve CFLAGS between hardening checks, enable mingw | Brent Cook | 2015-01-05 | 1 | -26/+46 |
| | | | | | | Allow hardening CFLAGS for mingw that do not cause link-time failures. Add proper quoting on flags for commas Check LDFLAGS for linker-only flags. | ||||
* | simplify hardening check logic, disable for mingw | Brent Cook | 2015-01-05 | 3 | -185/+33 |
| | | | | | | | | | | | Rather than doing separate linker/compiler checks, just build a non-empty program with each so that the compiler will actually try to use the hardening features. Reduce redundancy in the macro calls by just setting the flag that was just tested. Also, disable hardening for mingw, since its trying to use a libssp-0.dll file that I can't find right now. The detected hardening flags break mingw builds currently. | ||||
* | move public domain to top, help automatic tools | Brent Cook | 2015-01-02 | 1 | -1/+3 |
| | |||||
* | Change comments to remark on script not being needed for clang >= 5.1 | Jim Barlow | 2015-01-01 | 2 | -4/+8 |
| | |||||
* | Fix build failure of "make distcheck" (new scripts/ folder missing) | Jim Barlow | 2014-12-31 | 1 | -1/+1 |
| | |||||
* | Fix typo causing output of clang test to read "CLANG" instead of yes/no | Jim Barlow | 2014-12-31 | 1 | -1/+1 |
| | |||||
* | Merge recent upstream changes with compiler hardening | Jim Barlow | 2014-12-30 | 2 | -4/+29 |
|\ | | | | | | | | | Conflicts: configure.ac |