aboutsummaryrefslogtreecommitdiff
path: root/apps (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Land #192, fix fix ld warning "attempted multiple inclusion of file" on SolarisBrent Cook2016-05-022-5/+5
|\
| * fix ld warning "attempted multiple inclusion of file" on Solariskinichiro2016-04-212-5/+5
| | | | | | | | - To avoid ld warning on Solaris, use abs_top_builddir in Makefile.am
* | add cmake build optionskinichiro2016-04-142-0/+14
|/ | | | | | | | | | | | | - add cmake build options as configure provides * -DENABLE_ASM (default ON) * -DENABLE_EXTRATESTS (default OFF) * -DENABLE_NC (default OFF) * -DOPENSSLDIR (default ${CMAKE_INSTALL_PREFIX}/etc/ssl) - add biotest and pidwraptest if ENABLE_EXTRATESTS is ON - add compiler flag `-fno-common` if CMAKE_SYSTEM_NAME is Darwin to prevent link error Undefined symbols "_OPENSSL_ia32cap_P"
* modify cmake to build nckinichiro2016-04-095-80/+139
| | | | | | | | | | | - modify structure of CMakeLists.txt under apps/ * move apps/CMakeLists.txt to apps/openssl/ since this is for openssl build * create new apps/nc/CMakeLists.txt for nc build * modify apps/CMakeLists.txt just add_subdirectory() - add checking and compile of arc4random_uniform() - add installing man files, openssl.1 and nc.1
* allow optionally installing nc(1) with '--enable-nc'Brent Cook2015-12-071-0/+4
|
* fixup cert.pem path override for libtls, add for nc(1)Brent Cook2015-12-071-0/+5
| | | | this also fixes the formatting of help for nc(1)
* ensure we don't pass a negative int to ctypes functionsBrent Cook2015-11-231-3/+3
| | | | | Some implementations, e.g. cygwin, use a table lookup that can cast a char to a negative array offset.
* update apps.h includeBrent Cook2015-10-181-1/+1
|
* Windows compatibility fixesBrent Cook2015-10-184-6/+5
| | | | | | | | | | | VS2013 has trouble with relative include paths for apps/openssl, so move certhash_win/apps_win.c back to apps/openssl. gmtime_r on mingw64 fails with negative time_t, override gmtime_s fails all of the time unit tests, override SHUT_RD/WR are defined in newer mingw64 headers, check before overriding
* nc: Use AM_CPPFLAGS, not CPPFLAGS in Makefile.amJeremy Huddleston Sequoia2015-10-141-1/+1
| | | | | | CPPFLAGS should just be set by the user at configure time Signed-off-by: Jeremy Huddleston Sequoia <jeremyhu@apple.com>
* add b64_ntop checking and fallback for nc(1)Brent Cook2015-10-012-0/+319
|
* visual studio path updatesBrent Cook2015-09-183-3/+4
|
* fix a library paths, nc patchBrent Cook2015-09-131-2/+2
|
* a few more linux nc build tweaksBrent Cook2015-09-131-0/+2
|
* allow nc to build on linux and os xBrent Cook2015-09-136-5/+361
|
* move windows file IO mode setup to apps_win.cBrent Cook2015-09-131-0/+31
|
* readd openssl.1, distribute nc.1Brent Cook2015-09-132-0/+4
|
* restrict nc to openbsd builds for nowBrent Cook2015-09-121-0/+4
|
* correct nc compat pathBrent Cook2015-09-121-1/+1
|
* add some backcompat in nc, don't install itBrent Cook2015-09-121-1/+9
|
* add 'nc' to the distribution as an example of libtls client and serverBrent Cook2015-09-127-168/+183
|
* remove engine.c from CMakeBrent Cook2015-09-111-1/+0
|
* remove engine from openssl(1)Brent Cook2015-09-111-1/+0
|
* Add install targets and shared libraries to CMakeJeff Davey2015-08-181-0/+2
|
* add cmake testsBrent Cook2015-07-211-5/+0
|
* add initial CMake and Visual Studio build supportBrent Cook2015-07-212-0/+85
| | | | | | | | This moves the compatibility include files from include to include/compat so we can use the awful MS C compiler <../include/> trick to emulate the GNU #include_next extension. This also removes a few old compat files we do not need anymore.
* fixup how OPENSSLDIR is derived and expandedBrent Cook2015-07-151-8/+18
| | | | | | | | As per http://www.gnu.org/software/autoconf/manual/autoconf-2.69/html_node/Installation-Directory-Variables.html we should not try to expand variables like sysconfdir in the configure script, but rather derive the correct value in the Makefiles instead. This fixes missing expansions as the preprocessor define.
* Improve automatic handling of OPENSSLDIRBrent Cook2015-07-121-1/+21
| | | | | Install a default cert.pem, openssl.cnf, x509v3.cnf in OPENSSLDIR, which is derived by default from sysconfdir and the prefix setting.
* rework CFLAGS/CPPFLAGS settings during configurationBrent Cook2015-03-221-1/+0
| | | | | | Move define adjustments to CPPFLAGS. Adjust user CFLAGS directly, do not override during configuration. USER_CFLAGS is not necessary to build libcompat_noopt correctly.
* fix hangs reading stdin on WindowsBrent Cook2015-03-081-23/+16
|
* conditionally build certhash into openssl(1)Brent Cook2015-02-142-1/+19
| | | | | For now, look for openat and symlink. We may switch to just needing symlink later.
* add the new openssl(1) certhash commandBrent Cook2015-02-111-0/+1
|
* simplify building the apps MakefileBrent Cook2014-12-063-21/+82
| | | | | Remove extra machinery in favor of a plain-old Makefile.am. Tighten up what files are copied on build, package a simple openssl.cnf.
* add minimal poll(2) implementation for WindowsBrent Cook2014-12-032-0/+339
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This provides sufficient functionality to run openssl(1) from a Windows console. This is based on the original select-based version from from songdongsheng@live.cn. Changes: * use nfds_t directly for iterating the fds. * add WSAGetLastError -> errno mappings * handle POLLHUP and the OOB data cases for revents * handle sparse arrays of fds correctly * KNF style updates * teach poll how to handle file handles as well as sockets This handles the socket/non-socket issue by alternating a loop between WaitForMultipleObjects for non-sockets and and select for sockets. One would think this would be terrible for performance, but as of this writing, poll consumes about 6% of the time doing a bulk transfer between a Linux box and 'openssl.exe s_server'. I tried to implement this all in terms of WaitForMultipleObjects with a select 'poll' at the end to get extra specific socket status. However, the cost of setting up an event handle for each socket, setting the WSAEventSelect attributes, and cleaning them up reliably was pretty high. Since the event handle associated with a socket is also global, creating a new one cancels the previous one or can be disabled externally. In addition, the 'FD_WRITE' status of a socket event handle does not behave in an expected fashion, being triggered by an edge on a write event rather than being level triggered. Another fun horror story is how stdin in windows might be a console, it might be a pipe, it might be something else. If these all worked in the same way, it would be great. But, since a console-stdin can also signal on a mouse or window event, it means we can easily get stuck in a blocking read (you can't make stdin non-blocking) if the non-character events are not filtered out. So, poll does that too. See here for various additional horror stories: http://www.postgresql.org/message-id/4351.1336927207@sss.pgh.pa.us
* Add conditional compilation for windows and posix functions.Brent Cook2014-12-031-0/+29
| | | | | This adds a Windows-specific versions of several symbols from libcrypto and openssl(1).
* improve readability of generated Makefile.am filesBrent Cook2014-11-231-0/+1
|
* override native arc4random_buf on FreeBSDBrent Cook2014-11-031-1/+1
| | | | | | | | | | | | | | | | The FreeBSD-native arc4random_buf implementation falls back to weak sources of entropy if the sysctl fails. Remove these dangerous fallbacks by overriding locally. Unfortunately, pthread_atfork() is broken on FreeBSD (at least 9 and 10) if a program does not link to -lthr. Callbacks registered with pthread_atfork() simply fail silently. So, it is not always possible to detect a PID wraparound. I wish we could do better. This improves arc4random_buf's safety compared to the native FreeBSD implementation. Tested on FreeBSD 9 and 10. ok beck@ deraadt@
* Improve and simplify function and header detection logic.Brent Cook2014-10-301-1/+1
| | | | | | | | | Simplify autoconf checks by using AC_CHECK_FUNCS/HEADERS. Clarify some ambiguous dependencies around strnlen/strndup. Unconditionally enable pidwraptest for all arc4random implementations. Remove HAVE_VASPRINTF conditional, since asprintf requires vasprintf. ok @doug
* use correct link order for app and testsBrent Cook2014-07-211-1/+1
| | | | ok beck@ guenther@
* build strtonum directly into apps/opensslBrent Cook2014-07-111-0/+4
| | | | | | it is not needed as a library export ok beck@
* initial top-level import of subdirectoriesBrent Cook2014-07-101-0/+11
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-16 01:39:12 +0000