summaryrefslogtreecommitdiffstats
path: root/secure/lib
Commit message (Collapse)AuthorAgeFilesLines
* Merge remote-tracking branch 'origin/releng/11.1' into RELENG_2_4Renato Botelho2017-12-111-5/+6
|\
| * Fix multiple OpenSSL vulnerabilities.gordon2017-12-091-5/+6
| | | | | | | | | | | | | | Approved by: so Security: CVE-2017-3737 Security: CVE-2017-3738 Security: FreeBSD-SA-17:12.openssl
| * Fix multiple vulnerabilities of OpenSSL.delphij2017-11-291-2/+10
| | | | | | | | | | Security: FreeBSD-SA-17:11 Approved by: so
* | MFC: r325328jkim2017-11-13330-345/+1318
| | | | | | | | | | | | Merge OpenSSL 1.0.2m. (cherry picked from commit a88f0513c4cf81f98bab740e4f112f1a6d7f4d42)
* | MFC: r318899jkim2017-11-13329-1026/+1237
|/ | | | | | Merge OpenSSL 1.0.2l. (cherry picked from commit ffd1bb8c599181e0733f8e00d8d8198b4ea6a73b)
* MFC r314658:ngie2017-05-304-5/+5
| | | | | | crypto: normalize paths using SRCTOP-relative paths or :H when possible This simplifies make logic/output
* MFC: r312825jkim2017-01-26323-4544/+3257
| | | | Merge OpenSSL 1.0.2k.
* MFC r311140:ngie2017-01-161-1/+1
| | | | | | | | | | | | Only bake krb5_config.h support in to ssh(3), etc if both MK_GSSAPI and MK_KERBEROS_SUPPORT != no This fixes the odd case where someone specified MK_GSSAPI=no and MK_KERBEROS_SUPPORT=yes (which admittedly, probably doesn't make sense, but the build system doesn't prevent this case today, and it didn't when I filed the bug back in 2011 either). PR: 159745
* MFC: r306342jkim2016-09-26321-322/+322
| | | | Merge OpenSSL 1.0.2j.
* MFC: r306193jkim2016-09-22328-1033/+1359
| | | | Merge OpenSSL 1.0.2u.
* MFC: r304638, r304640jkim2016-08-3159-126/+126
| | | | Fix white spaces and prefer C-style comments in assembly sources.
* MFC: r304636jkim2016-08-3113-0/+12100
| | | | Build OpenSSL assembly sources for arm.
* MFC: r304320jkim2016-08-3110-62/+80
| | | | | | Disable assembly sources when compiler/assembler cannot compile certain instructions. For example, GCC 4.2.1 + binutils 2.17.50 does not support AVX instructions.
* Regen x86 assembly files for r299480.jkim2016-05-1148-125/+37788
|
* Set CC environment variable for Perl scripts. This is for detectingjkim2016-05-111-4/+4
| | | | assembler/compiler capabilities, e.g., AVX instructions.
* Refine comments to add its origin.jkim2016-05-111-21/+27
|
* libcrypto: add "Do not modify" comment to generated source filesemaste2016-05-111-1/+4
| | | | | Reviewed by: jkim Differential Revision: https://reviews.freebsd.org/D6237
* Enable linker error if libcrypto.so contains a relocation against text. Itjkim2016-05-111-1/+0
| | | | | | is position independent on all platforms since r299389. Submitted by: kib
* Make libcrypto.so position independent on i386.jkim2016-05-1046-33345/+66749
|
* Revert r299139: these are generated filesemaste2016-05-062-9/+1
| | | | | | We'll need to properly generate PIC/non-PIC from the source .pl files. Reported by: jkim
* Make libcrypto position independent on i386emaste2016-05-052-1/+9
| | | | | | | | | | Prior to this change libcrypto ended up with a .text relocation. Submitted by: Rafael Espíndola (earlier version) Reviewed by: kib Approved by: so (glebius) Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D6164
* Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installedngie2016-05-041-8/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | after r298107 Summary of changes: - Replace all instances of FILES/TESTS with ${PACKAGE}FILES. This ensures that namespacing is kept with FILES appropriately, and that this shouldn't need to be repeated if the namespace changes -- only the definition of PACKAGE needs to be changed - Allow PACKAGE to be overridden by callers instead of forcing it to always be `tests`. In the event we get to the point where things can be split up enough in the base system, it would make more sense to group the tests with the blocks they're a part of, e.g. byacc with byacc-tests, etc - Remove PACKAGE definitions where possible, i.e. where FILES wasn't used previously. - Remove unnecessary TESTSPACKAGE definitions; this has been elided into bsd.tests.mk - Remove unnecessary BINDIRs used previously with ${PACKAGE}FILES; ${PACKAGE}FILESDIR is now automatically defined in bsd.test.mk. - Fix installation of files under data/ subdirectories in lib/libc/tests/hash and lib/libc/tests/net/getaddrinfo - Remove unnecessary .include <bsd.own.mk>s (some opportunistic cleanup) Document the proposed changes in share/examples/tests/tests/... via examples so it's clear that ${PACKAGES}FILES is the suggested way forward in terms of replacing FILES. share/mk/bsd.README didn't seem like the appropriate method of communicating that info. MFC after: never probably X-MFC with: r298107 PR: 209114 Relnotes: yes Tested with: buildworld, installworld, checkworld; buildworld, packageworld Sponsored by: EMC / Isilon Storage Division
* Merge OpenSSL 1.0.2h.jkim2016-05-03331-415/+1029
| | | | Relnotes: yes
* Fix including Kyuafile in packaged base system.gjb2016-04-291-1/+2
| | | | | | | | | | | | Fix a related typo while here. Note, this change results in the Kyuafile inclusion in the runtime package, which needs to be fixed, however addresses the PR as far as I can tell in my tests. PR: 209114 Submitted by: ngie Sponsored by: The FreeBSD Foundation
* MFHgjb2016-03-141-1/+2
|\ | | | | | | Sponsored by: The FreeBSD Foundation
| * Upgrade to OpenSSH 7.2p2.des2016-03-111-1/+2
| |
* | MFHgjb2016-03-101-0/+11
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * DIRDEPS_BUILD: Connect MK_TESTS.bdrewery2016-03-091-0/+11
| | | | | | | | Sponsored by: EMC / Isilon Storage Division
* | MFHgjb2016-03-02345-1124/+1838
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Merge OpenSSL 1.0.2g.jkim2016-03-01344-1121/+1838
| | | | | | | | Relnotes: yes
| * DIRDEPS_BUILD: Regenerate without local dependencies.bdrewery2016-02-241-3/+0
| | | | | | | | | | | | | | | | These are no longer needed after the recent 'beforebuild: depend' changes and hooking DIRDEPS_BUILD into a subset of FAST_DEPEND which supports skipping 'make depend'. Sponsored by: EMC / Isilon Storage Division
* | MFHgjb2016-02-181-0/+1
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * DIRDEPS_BUILD: Update dependencies.bdrewery2016-02-161-0/+1
| | | | | | | | Sponsored by: EMC / Isilon Storage Division
* | First pass to fix the 'tests' packages.gjb2016-02-021-0/+5
| | | | | | | | Sponsored by: The FreeBSD Foundation
* | MFHgjb2016-01-29319-664/+857
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Merge OpenSSL 1.0.2f.jkim2016-01-28319-664/+857
| | | | | | | | Relnotes: yes
* | MFHgjb2016-01-271-0/+254
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Add the openssl header for RISC-V.br2016-01-261-0/+254
| | | | | | | | Copied from aarch64 as we can't generate it yet.
* | MFHgjb2016-01-251-2/+2
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Upgrade to OpenSSH 7.0p1.des2016-01-201-2/+2
| |
* | MFHgjb2016-01-201-10/+14
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * List source files (foo.c) instead of object files in SRCS.jhb2016-01-201-1/+1
| | | | | | | | Reviewed by: bdrewery
| * Upgrade to OpenSSH 6.8p1.des2016-01-191-12/+14
| |
| * Upgrade to OpenSSH 6.7p1, retaining libwrap support (which has been removeddes2016-01-191-1/+3
| | | | | | | | | | | | upstream) and a number of security fixes which we had already backported. MFC after: 1 week
* | MFH r289384-r293170gjb2016-01-04377-11604/+35800
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Build engines in parallel.bdrewery2015-12-151-1/+1
| | | | | | | | Sponsored by: EMC / Isilon Storage Division
| * Replace unneeded manual dependency on header by adding it to SRCS.bdrewery2015-12-071-5/+2
| | | | | | | | | | | | | | | | | | | | bsd.lib.mk and bsd.prog.mk already depend all objs on headers in SRCS if there is not yet a depend file. The headers in SRCS are never built or installed. After 'make depend' the header was already added as a proper dependency on the objects where needed. MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
| * Merge OpenSSL 1.0.2e.jkim2015-12-03320-692/+940
| |
| * META MODE: Update dependencies with 'the-lot' and add missing directories.bdrewery2015-12-011-0/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This is not properly respecting WITHOUT or ARCH dependencies in target/. Doing so requires a massive effort to rework targets/ to do so. A better approach will be to either include the SUBDIR Makefiles directly and map to DIRDEPS or just dynamically lookup the SUBDIR. These lose the benefit of having a userland/lib, userland/libexec, etc, though and results in a massive package. The current implementation of targets/ is very unmaintainable. Currently rescue/rescue and sys/modules are still not connected. Sponsored by: EMC / Isilon Storage Division
| * META MODE: Prefer INSTALL=tools/install.sh to lessen the need for xinstall.host.bdrewery2015-11-253-3/+0
| | | | | | | | | | | | | | | | This both avoids some dependencies on xinstall.host and allows bootstrapping on older releases to work due to lack of at least 'install -l' support. Sponsored by: EMC / Isilon Storage Division
OpenPOWER on IntegriCloud