Brent Cook
1eea14957d
clarify 2.1.5 release note
...
Specify that we are rejecting server ephemeral DH keys < 1024 bits.
2015-03-08 22:34:48 -05:00
Brent Cook
44d308df41
track the OPENBSD_5_7 tag
2015-03-08 22:04:14 -05:00
Brent Cook
ab0dea2321
update changelog for 2.1.5
2015-03-08 22:02:54 -05:00
Brent Cook
8dbe1d6257
bump version to 2.1.5
2015-03-08 22:02:54 -05:00
Brent Cook
73329d4311
update __STRICT_ALIGNMENT check
2015-03-08 22:02:54 -05:00
Brent Cook
f7e4e4a266
initialize winsock earlier in openssl(1)
...
This allows commands like ocsp to work properly since we no longer
initialize Winsock as a side-effect of doing a BIO_gethostbyname.
2015-03-08 22:02:54 -05:00
Brent Cook
031f0aaa8f
specify -static-libgcc for mingw builds
...
Avoid external external dependencies on 32-bit windows builds.
2015-03-08 22:02:19 -05:00
Brent Cook
148aebdbb1
fix hangs reading stdin on Windows
2015-03-08 20:47:03 -05:00
Brent Cook
213eb9465e
avoid doubling user-specified cflags
2015-03-07 12:02:57 -06:00
Brent Cook
d193b171b6
Add '-windows' to windows binary archive.
2015-03-02 23:17:48 -06:00
Brent Cook
79492b46f6
add windows README, package README files with distribution
2015-03-02 23:14:35 -06:00
Brent Cook
e0855bdb1d
point out where to report bugs, update links.
2015-03-02 21:12:47 -06:00
Brent Cook
3b3a290b73
update changelog with security updates
2015-03-02 20:47:26 -06:00
Brent Cook
3cb34ee99f
add a simple code coverage generation script
...
The lcov tools (http://ltp.sourceforge.net/coverage/lcov.php ) are
required to generate reports.
Original idea from this PR, thanks to Jim Barlow for doing the initial
integration work.
https://github.com/libressl-portable/portable/pull/58
2015-03-01 17:37:12 -06:00
Brent Cook
701aa50e77
ignore temp windows library build files
2015-03-01 17:16:00 -06:00
Brent Cook
933820a0f5
separate the BSWAP check from the action
...
checks need to be unconditional with autoconf
2015-03-01 16:30:23 -06:00
Brent Cook
8695b50688
check if the BSWAP assembly for ARM works before building
2015-03-01 15:57:21 -06:00
Brent Cook
557df7eed8
refine building windows binaries, enable shared
2015-03-01 05:34:43 -06:00
Brent Cook
f94d3d671c
update windows binary build script
...
This puts the 32 and 64-bit binaries in the same zip file, adds debug
files that are compatible with Visual Studio/windbg, and updates for the
new configure options.
2015-02-24 19:42:26 -06:00
Brent Cook
ab0d3e54a2
add windows-specific hardening options
...
This enables DEP and ALSR capabilities. Stack protection is enabled
optionally, there are some extra linking steps required that make it
difficult to enable by default.
2015-02-24 19:39:16 -06:00
Brent Cook
347c03d3a0
remove openat requirement for building certhash
2015-02-23 09:48:04 -06:00
Brent Cook
9da890ffb9
update libtls mlinks
2015-02-23 09:25:53 -06:00
Brent Cook
f54d0d4f38
remove unneeded continuation characters in ssl/crypto mlinks list
2015-02-23 09:25:53 -06:00
Brent Cook
2c5ac47db4
Update initial changelog for 2.1.4
2015-02-22 18:06:46 -06:00
Brent Cook
329df39a13
enable Windows NX / ALSR / stack protector
...
I will update my toolchain and try --high-entropy-va and
stack-protector-strong later. We will probably need to ship libssp-0.dll
as well. Thanks to jsg for hints.
2015-02-19 23:05:51 -06:00
Brent Cook
7ba784891d
add script for building windows binary distribution packages
2015-02-19 21:23:31 -06:00
Brent Cook
49d80f0e89
add missing line continuation
2015-02-19 21:16:55 -06:00
Brent Cook
a859b93ff5
disable system issetugid on OS X since it is not fork-safe
...
Noticed while testing similar code for AIX.
ok beck@
2015-02-17 18:15:17 -06:00
Brent Cook
adc416e922
remove getuid/getgid fallbacks from hp-ux issetugid emulation
...
Fail closed if we cannot obtain the process flags. Noticed while looking
at a similar function for AIX.
2015-02-16 22:30:27 -06:00
Brent Cook
ad7ac48d03
add strsep fallback for libtls
2015-02-14 20:03:39 -06:00
Brent Cook
28311d4355
conditionally build certhash into openssl(1)
...
For now, look for openat and symlink. We may switch to just needing
symlink later.
2015-02-14 18:54:43 -06:00
Brent Cook
2286578fd4
update for new manpage conversions, add links
2015-02-14 18:15:15 -06:00
Brent Cook
5e96c047f7
add the new openssl(1) certhash command
2015-02-11 20:50:10 -06:00
Brent Cook
687a5083f4
rc5 is removed
2015-02-10 11:10:04 -06:00
Brent Cook
9de5b8a963
c_all* have merged into c_all.c
2015-02-08 19:40:03 -06:00
Brent Cook
c386ab2149
disable biotest
2015-02-06 20:41:07 -06:00
Brent Cook
be5d0cca13
update with latest, add more tests
...
this adds the new bytestring apis and new regression tests
2015-02-06 20:17:31 -06:00
Brent Cook
a323f52a3f
be even nicer to OS X's fork
2015-01-31 22:42:08 -06:00
Brent Cook
fc7ba46906
be nicer to travis OS X machines, remove unneeded 'make clean'
2015-01-31 22:35:52 -06:00
Brent Cook
100625e317
only use the specific build matrix
...
use sudo to install mingw toolchains
2015-01-31 22:24:31 -06:00
Brent Cook
5ea47a8fa2
fix whitespace in yml
2015-01-31 22:17:39 -06:00
Brent Cook
dd7ed132ee
update travis-ci build to check mingw32/64 targets
2015-01-31 22:13:19 -06:00
Brent Cook
9909bd7aa5
include 'struct iovec' for Windows
...
this is used for in-memory cert loading
2015-01-31 21:52:20 -06:00
Brent Cook
6c46e80871
bump version
2015-01-26 10:30:17 -06:00
Brent Cook
d88e90def9
add by_mem.c for X509_STORE_load_mem
2015-01-26 10:20:26 -06:00
Brent Cook
20e329e272
add 2.1.3 notes
2015-01-21 08:04:11 -06:00
Brent Cook
a223365127
add NetBSD shims for arc4random
...
The current NetBSD release, 6.1.5, fails to reseed arc4random fork. Work
around it by providing arc4random/getentropy shims. Revisit when NetBSD
7 is available.
2015-01-21 06:14:24 -06:00
Brent Cook
ec81c28219
catch GCC versions that only warn on unused flags
...
Noticed while building with GCC 4.2 with HP-UX. Switching the ERROR to a
WARN for a first release while we continue to survey the field.
2015-01-06 17:47:16 -06:00
Brent Cook
f2d68c7d21
remove bash-style comparisons from tests
2015-01-06 17:47:16 -06:00
kinichiro
0308b63cbf
Add support for HP-UX
...
tested on: HP-UX 11.31 ia64,
gcc 4.7.1(HP AllianceOne version)
gcc 4.2.3(http://hpux.connect.org.uk )
HP C/aC++
HP-UX defaults to use LP32 and it treats long as 32 bit (= 4 bytes).
This build forces LP64 for treating long as 64 bit.
2015-01-06 17:47:16 -06:00