summaryrefslogtreecommitdiffstats
path: root/secure
Commit message (Collapse)AuthorAgeFilesLines
* Upgrade to OpenSSH 6.7p1, retaining libwrap support (which has been removeddes2016-01-191-1/+3
| | | | | | upstream) and a number of security fixes which we had already backported. MFC after: 1 week
* Build engines in parallel.bdrewery2015-12-151-1/+1
| | | | Sponsored by: EMC / Isilon Storage Division
* Replace unneeded manual dependency on header by adding it to SRCS.bdrewery2015-12-0712-34/+17
| | | | | | | | | | bsd.lib.mk and bsd.prog.mk already depend all objs on headers in SRCS if there is not yet a depend file. The headers in SRCS are never built or installed. After 'make depend' the header was already added as a proper dependency on the objects where needed. MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
* Merge OpenSSL 1.0.2e.jkim2015-12-03366-803/+1041
|
* META MODE: Update dependencies with 'the-lot' and add missing directories.bdrewery2015-12-011-0/+19
| | | | | | | | | | | | | | This is not properly respecting WITHOUT or ARCH dependencies in target/. Doing so requires a massive effort to rework targets/ to do so. A better approach will be to either include the SUBDIR Makefiles directly and map to DIRDEPS or just dynamically lookup the SUBDIR. These lose the benefit of having a userland/lib, userland/libexec, etc, though and results in a massive package. The current implementation of targets/ is very unmaintainable. Currently rescue/rescue and sys/modules are still not connected. Sponsored by: EMC / Isilon Storage Division
* META MODE: Prefer INSTALL=tools/install.sh to lessen the need for xinstall.host.bdrewery2015-11-253-3/+0
| | | | | | | | This both avoids some dependencies on xinstall.host and allows bootstrapping on older releases to work due to lack of at least 'install -l' support. Sponsored by: EMC / Isilon Storage Division
* Retire the NONE cipher option.des2015-11-233-12/+0
|
* Simplify man-makefile-update target.jkim2015-11-171-2/+2
|
* Remove duplicate manual pages.jkim2015-11-165-204/+7
| | | | Reported by: brd
* Fix a typo. I did not mean it, really.jkim2015-11-061-1/+1
|
* Clean up OpenSSL makefiles.jkim2015-11-064-17/+21
|
* Merge OpenSSL 1.0.2d.jkim2015-10-30418-11335/+35613
|
* Fix GOST engine cipher linkage by adding e_gost_err.c to SRCS so itngie2015-10-301-1/+2
| | | | | | | | | picks up undefined symbols, like "ERR_load_GOST_strings" MFC after: 3 days PR: 184805 Submitted by: Ivan IvanZhdanov <ivan.zhdanov@gmail.com> Sponsored by: EMC / Isilon Storage Division
* Define endianness for non-x86 platforms.jkim2015-10-281-2/+10
| | | | MFC after: 3 days
* Add more SUBDIR_PARALLEL.bdrewery2015-10-154-1/+9
| | | | | MFC after: 3 weeks Sponsored by: EMC / Isilon Storage Division
* Mark sub-make targets as .MAKE and .PHONY to handle -n and always-build ↵bdrewery2015-10-151-2/+2
| | | | | | | properly. MFC after: 1 week Sponsored by: EMC / Isilon Storage Division
* Refactor the test/ Makefiles after recent changes to bsd.test.mk (r289158) andngie2015-10-125-15/+5
| | | | | | | | | | | | netbsd-tests.test.mk (r289151) - Eliminate explicit OBJTOP/SRCTOP setting - Convert all ad hoc NetBSD test integration over to netbsd-tests.test.mk - Remove unnecessary TESTSDIR setting - Use SRCTOP where possible for clarity MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Divison
* Replace afterinstall: hack from r111083 with 'make delete-old' functionality.bdrewery2015-09-191-8/+0
| | | | Sponsored by: EMC / Isilon Storage Division
* Remove remnant from USEPRIVATELIB removalbapt2015-09-049-9/+0
| | | | Sponsored by: gandi.net
* Merge OpenSSL 1.0.1p.jkim2015-07-09338-344/+357
|
* Add compatibility with $2y$ bcrypt hashesallanjude2015-06-161-0/+3
| | | | | | | | | | | | | | | crypt_blowfish and many implementations based on it (Apache, PHP, PostgreSQL) implemented $2y$ before OpenBSD went with $2b$. This changes marks them as equivalent. http://www.openwall.com/lists/announce/2011/07/17/1 This change is required for applications that use the base crypt() implementation (including nginx) to be able to validate $2y$ hashes Reviewed by: eadler Approved by: delphij MFC after: 1 week Relnotes: yes Sponsored by: ScaleEngine Inc. Differential Revision: https://reviews.freebsd.org/D2742
* new dependssjg2015-06-163-0/+3
|
* Revert r284417 it is not necessary anymorebapt2015-06-151-1/+1
|
* Enforce overwritting SHLIBDIRbapt2015-06-151-1/+1
| | | | | | | | | Since METAMODE has been added, sys.mk loads bsd.mkopt.mk which ends load loading bsd.own.mk which then defines SHLIBDIR before all the Makefile.inc everywhere. This makes /lib being populated again. Reported by: many
* Add META_MODE support.sjg2015-06-1325-0/+588
|\ | | | | | | | | | | | | | | | | | | | | Off by default, build behaves normally. WITH_META_MODE we get auto objdir creation, the ability to start build from anywhere in the tree. Still need to add real targets under targets/ to build packages. Differential Revision: D2796 Reviewed by: brooks imp
| * dirdeps.mk now sets DEP_RELDIRsjg2015-06-0825-50/+0
| |
| * Merge sync of headsjg2015-05-27374-4575/+8433
| |\
| * \ Merge from head@274682sjg2014-11-19350-561/+1459
| |\ \
| * \ \ Merge head from 7/28sjg2014-08-19347-599/+404
| |\ \ \
| * | | | Updated dependenciessjg2014-05-1625-0/+29
| | | | |
| * | | | Merge from headsjg2014-05-0818-18/+18
| |\ \ \ \
| * \ \ \ \ Merge headsjg2014-04-28351-970/+990
| |\ \ \ \ \
| * \ \ \ \ \ Merge head@256284sjg2013-10-134-32/+19
| |\ \ \ \ \ \
| * | | | | | | Updated dependenciessjg2013-10-1312-0/+128
| | | | | | | |
| * | | | | | | Merge headsjg2013-09-1112-46/+202
| |\ \ \ \ \ \ \
| * \ \ \ \ \ \ \ Merge from headsjg2013-09-053-21/+1
| |\ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ sync from headsjg2013-04-12338-738/+741
| |\ \ \ \ \ \ \ \ \
| * | | | | | | | | | Updated dependenciessjg2013-03-1125-0/+25
| | | | | | | | | | |
| * | | | | | | | | | Updated dependenciessjg2013-02-1625-50/+0
| | | | | | | | | | |
| * | | | | | | | | | Sync with HEAD.obrien2013-02-084-1/+13
| |\ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | Updated/new Makefile.dependsjg2012-11-0812-1/+69
| | | | | | | | | | | |
| | | | | | | | | | | |
| | \ \ \ \ \ \ \ \ \ \
| | \ \ \ \ \ \ \ \ \ \
| | \ \ \ \ \ \ \ \ \ \
| *---. \ \ \ \ \ \ \ \ \ \ Sync from headsjg2012-11-04395-14111/+67350
| |\ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | | Sync FreeBSD's bmake branch with Juniper's internal bmake branch.marcel2012-08-2224-0/+531
| | |_|/ / / / / / / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Requested by: Simon Gerraty <sjg@juniper.net>
* | | | | | | | | | | | | | Merge OpenSSL 1.0.1o.jkim2015-06-12338-339/+339
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | Merge OpenSSL 1.0.1n.jkim2015-06-11338-759/+807
| |_|_|_|_|_|_|_|_|_|_|_|/ |/| | | | | | | | | | | |
* | | | | | | | | | | | | Add the openssl header for arm64. As it is based on MACHINE_CPUARCH itandrew2015-03-241-0/+242
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | is named opensslconf-aarch64.h. Sponsored by: The FreeBSD Foundation
* | | | | | | | | | | | | Disable insecure SSLv2 support from the base OpenSSL.jkim2015-03-206-5/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Differential Revision: https://reviews.freebsd.org/D1304
* | | | | | | | | | | | | Merge OpenSSL 1.0.1m.jkim2015-03-20345-709/+1440
| | | | | | | | | | | | |
* | | | | | | | | | | | | Update buildinf.h to make SSLeay_version(3) little bit more useful.jkim2015-01-161-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | MFC after: 1 week
* | | | | | | | | | | | | Add a ${CP} alias for copying files in the build.will2015-01-161-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some users build FreeBSD as non-root in Perforce workspaces. By default, Perforce sets files read-only unless they're explicitly being edited. As a result, the -f argument must be used to cp in order to override the read-only flag when copying source files to object directories. Bare use of 'cp' should be avoided in the future. Update all current users of 'cp' in the src tree. Reviewed by: emaste MFC after: 1 week Sponsored by: Spectra Logic
OpenPOWER on IntegriCloud