Skip to content

Commit 65d03f0

Browse files
sam-githubrvagg
sam-github
authored and
rvagg
committed
deps: upgrade openssl sources to 1.1.0j
This updates all sources in deps/openssl/openssl with openssl-1.1.0j. PR-URL: #24523 Reviewed-By: Shigeki Ohtsu <ohtsu@ohtsu.org> Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com> Reviewed-By: Rod Vagg <rod@vagg.org>
1 parent fbe63ab commit 65d03f0

File tree

120 files changed

+9123
-3636
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

120 files changed

+9123
-3636
lines changed

‎deps/openssl/openssl/.gitignore

+176
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,176 @@
1+
# Ignore editor artefacts
2+
/.dir-locals.el
3+
4+
# Top level excludes
5+
/Makefile.orig
6+
/MINFO
7+
/TABLE
8+
/*.a
9+
/*.pc
10+
/rehash.time
11+
/inc.*
12+
/makefile.*
13+
/out.*
14+
/tmp.*
15+
/configdata.pm
16+
17+
# *all* Makefiles
18+
Makefile
19+
# ... except in demos
20+
!/demos/*/Makefile
21+
22+
# Links under apps
23+
/apps/CA.pl
24+
/apps/tsget
25+
/apps/tsget.pl
26+
/apps/md4.c
27+
28+
# Auto generated headers
29+
/crypto/buildinf.h
30+
/apps/progs.h
31+
/crypto/include/internal/*_conf.h
32+
/openssl/include/opensslconf.h
33+
/util/domd
34+
35+
# Executables
36+
/apps/openssl
37+
/test/sha256t
38+
/test/sha512t
39+
/test/gost2814789t
40+
/test/ssltest_old
41+
/test/*test
42+
/test/fips_aesavs
43+
/test/fips_desmovs
44+
/test/fips_dhvs
45+
/test/fips_drbgvs
46+
/test/fips_dssvs
47+
/test/fips_ecdhvs
48+
/test/fips_ecdsavs
49+
/test/fips_rngvs
50+
/test/fips_test_suite
51+
/test/ssltest_old
52+
/test/x509aux
53+
/test/v3ext
54+
/test/versions
55+
/test/rsa_complex
56+
57+
# Certain files that get created by tests on the fly
58+
/test/test-runs
59+
/test/buildtest_*
60+
61+
# Fuzz stuff.
62+
# Anything without an extension is an executable on Unix, so we keep files
63+
# with extensions. And we keep the corpora subddir versioned as well.
64+
# Anything more generic with extensions that should be ignored will be taken
65+
# care of by general ignores for those extensions (*.o, *.obj, *.exe, ...)
66+
/fuzz/*
67+
!/fuzz/README*
68+
!/fuzz/corpora
69+
!/fuzz/*.*
70+
71+
# Misc auto generated files
72+
/include/openssl/opensslconf.h
73+
/tools/c_rehash
74+
/tools/c_rehash.pl
75+
/util/shlib_wrap.sh
76+
/tags
77+
/TAGS
78+
/crypto.map
79+
/ssl.map
80+
81+
# Windows (legacy)
82+
/tmp32
83+
/tmp32.dbg
84+
/tmp32dll
85+
/tmp32dll.dbg
86+
/out32
87+
/out32.dbg
88+
/out32dll
89+
/out32dll.dbg
90+
/inc32
91+
/MINFO
92+
/ms/.rnd
93+
/ms/bcb.mak
94+
/ms/libeay32.def
95+
/ms/nt.mak
96+
/ms/ntdll.mak
97+
/ms/ssleay32.def
98+
/ms/version32.rc
99+
100+
# Files created on other branches that are not held in git, and are not
101+
# needed on this branch
102+
/include/openssl/asn1_mac.h
103+
/include/openssl/des_old.h
104+
/include/openssl/fips.h
105+
/include/openssl/fips_rand.h
106+
/include/openssl/krb5_asn.h
107+
/include/openssl/kssl.h
108+
/include/openssl/pq_compat.h
109+
/include/openssl/ssl23.h
110+
/include/openssl/tmdiff.h
111+
/include/openssl/ui_compat.h
112+
/test/fips_aesavs.c
113+
/test/fips_desmovs.c
114+
/test/fips_dsatest.c
115+
/test/fips_dssvs.c
116+
/test/fips_hmactest.c
117+
/test/fips_randtest.c
118+
/test/fips_rngvs.c
119+
/test/fips_rsagtest.c
120+
/test/fips_rsastest.c
121+
/test/fips_rsavtest.c
122+
/test/fips_shatest.c
123+
/test/fips_test_suite.c
124+
/test/shatest.c
125+
126+
##### Generic patterns
127+
# Auto generated assembly language source files
128+
*.s
129+
!/crypto/*/asm/*.s
130+
/crypto/arm*.S
131+
/crypto/*/*.S
132+
*.asm
133+
!/crypto/*/asm/*.asm
134+
135+
# Object files
136+
*.o
137+
*.obj
138+
139+
# editor artefacts
140+
*.swp
141+
.#*
142+
\#*#
143+
*~
144+
145+
# Certificate symbolic links
146+
*.0
147+
148+
# All kinds of executables
149+
*.so
150+
*.so.*
151+
*.dylib
152+
*.dylib.*
153+
*.dll
154+
*.dll.*
155+
*.exe
156+
*.pyc
157+
*.exp
158+
*.lib
159+
*.pdb
160+
*.ilk
161+
*.def
162+
*.rc
163+
*.res
164+
165+
# Misc generated stuff
166+
Makefile.save
167+
/crypto/**/lib
168+
/engines/**/lib
169+
/ssl/**/lib
170+
*.bak
171+
cscope.*
172+
*.d
173+
pod2htmd.tmp
174+
175+
# Windows manifest files
176+
*.manifest

‎deps/openssl/openssl/CHANGES

+27
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,33 @@
77
https://github.com/openssl/openssl/commits/ and pick the appropriate
88
release branch.
99

10+
Changes between 1.1.0i and 1.1.0j [20 Nov 2018]
11+
12+
*) Timing vulnerability in DSA signature generation
13+
14+
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a
15+
timing side channel attack. An attacker could use variations in the signing
16+
algorithm to recover the private key.
17+
18+
This issue was reported to OpenSSL on 16th October 2018 by Samuel Weiser.
19+
(CVE-2018-0734)
20+
[Paul Dale]
21+
22+
*) Timing vulnerability in ECDSA signature generation
23+
24+
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a
25+
timing side channel attack. An attacker could use variations in the signing
26+
algorithm to recover the private key.
27+
28+
This issue was reported to OpenSSL on 25th October 2018 by Samuel Weiser.
29+
(CVE-2018-0735)
30+
[Paul Dale]
31+
32+
*) Add coordinate blinding for EC_POINT and implement projective
33+
coordinate blinding for generic prime curves as a countermeasure to
34+
chosen point SCA attacks.
35+
[Sohaib ul Hassan, Nicola Tuveri, Billy Bob Brumley]
36+
1037
Changes between 1.1.0h and 1.1.0i [14 Aug 2018]
1138

1239
*) Client DoS due to large DH parameter

‎deps/openssl/openssl/Configurations/00-base-templates.conf

+6
Original file line numberDiff line numberDiff line change
@@ -68,6 +68,8 @@
6868
}
6969
return (); },
7070

71+
shared_extension => ".so",
72+
7173
build_scheme => [ "unified", "unix" ],
7274
build_file => "Makefile",
7375
},
@@ -99,6 +101,8 @@
99101
mtinflag => "-manifest ",
100102
mtoutflag => "-outputresource:",
101103

104+
shared_extension => ".dll",
105+
102106
build_file => "makefile",
103107
build_scheme => [ "unified", "windows" ],
104108
},
@@ -107,6 +111,8 @@
107111
inherit_from => [ "BASE_common" ],
108112
template => 1,
109113

114+
shared_extension => ".exe",
115+
110116
build_file => "descrip.mms",
111117
build_scheme => [ "unified", "VMS" ],
112118
},

‎deps/openssl/openssl/Configurations/descrip.mms.tmpl

+25-28
Original file line numberDiff line numberDiff line change
@@ -368,12 +368,10 @@ descrip.mms : FORCE
368368

369369
# Install helper targets #############################################
370370

371-
install_sw : all install_shared _install_dev_ns -
372-
install_engines _install_runtime_ns -
371+
install_sw : install_dev install_engines install_runtime -
373372
install_startup install_ivp
374373

375-
uninstall_sw : uninstall_shared _uninstall_dev_ns -
376-
uninstall_engines _uninstall_runtime_ns -
374+
uninstall_sw : uninstall_dev uninstall_engines uninstall_runtime -
377375
uninstall_startup uninstall_ivp
378376

379377
install_docs : install_html_docs
@@ -396,17 +394,7 @@ install_ssldirs : check_INSTALLTOP
396394
COPY/PROT=W:R {- sourcefile("apps", "openssl-vms.cnf") -} -
397395
ossl_dataroot:[000000]openssl.cnf
398396

399-
install_shared : check_INSTALLTOP
400-
@ {- output_off() if $disabled{shared}; "" -} !
401-
@ WRITE SYS$OUTPUT "*** Installing shareable images"
402-
@ ! Install shared (runtime) libraries
403-
- CREATE/DIR ossl_installroot:[LIB.'arch']
404-
{- join("\n ",
405-
map { "COPY/PROT=W:R $_.EXE ossl_installroot:[LIB.'arch']" }
406-
@install_shlibs) -}
407-
@ {- output_on() if $disabled{shared}; "" -} !
408-
409-
_install_dev_ns : check_INSTALLTOP
397+
install_dev : check_INSTALLTOP install_runtime_libs
410398
@ WRITE SYS$OUTPUT "*** Installing development files"
411399
@ ! Install header files
412400
- CREATE/DIR ossl_installroot:[include.openssl]
@@ -417,9 +405,29 @@ _install_dev_ns : check_INSTALLTOP
417405
map { "COPY/PROT=W:R $_.OLB ossl_installroot:[LIB.'arch']" }
418406
@{$unified_info{install}->{libraries}}) -}
419407

420-
install_dev : install_shared _install_dev_ns
408+
install_engines : check_INSTALLTOP install_runtime_libs build_engines
409+
@ {- output_off() unless scalar @{$unified_info{engines}}; "" -} !
410+
@ WRITE SYS$OUTPUT "*** Installing engines"
411+
- CREATE/DIR ossl_installroot:[ENGINES{- $sover.$target{pointer_size} -}.'arch']
412+
{- join("\n ",
413+
map { "COPY/PROT=W:RE $_.EXE ossl_installroot:[ENGINES$sover$target{pointer_size}.'arch']" }
414+
@{$unified_info{install}->{engines}}) -}
415+
@ {- output_on() unless scalar @{$unified_info{engines}}; "" -} !
421416

422-
_install_runtime_ns : check_INSTALLTOP
417+
install_runtime : install_programs
418+
419+
install_runtime_libs : check_INSTALLTOP build_libs
420+
@ {- output_off() if $disabled{shared}; "" -} !
421+
@ WRITE SYS$OUTPUT "*** Installing shareable images"
422+
@ ! Install shared (runtime) libraries
423+
- CREATE/DIR ossl_installroot:[LIB.'arch']
424+
{- join("\n ",
425+
map { "COPY/PROT=W:R $_.EXE ossl_installroot:[LIB.'arch']" }
426+
@install_shlibs) -}
427+
@ {- output_on() if $disabled{shared}; "" -} !
428+
429+
install_programs : check_INSTALLTOP install_runtime_libs build_programs
430+
@ {- output_off() if $disabled{apps}; "" -} !
423431
@ ! Install the main program
424432
- CREATE/DIR ossl_installroot:[EXE.'arch']
425433
COPY/PROT=W:RE [.APPS]openssl.EXE -
@@ -428,17 +436,6 @@ _install_runtime_ns : check_INSTALLTOP
428436
COPY/PROT=W:RE $(BIN_SCRIPTS) ossl_installroot:[EXE]
429437
@ ! {- output_on() if $disabled{apps}; "" -}
430438

431-
install_runtime : install_shared _install_runtime_ns
432-
433-
install_engines : check_INSTALLTOP
434-
@ {- output_off() unless scalar @{$unified_info{engines}}; "" -} !
435-
@ WRITE SYS$OUTPUT "*** Installing engines"
436-
- CREATE/DIR ossl_installroot:[ENGINES{- $sover.$target{pointer_size} -}.'arch']
437-
{- join("\n ",
438-
map { "COPY/PROT=W:RE $_.EXE ossl_installroot:[ENGINES$sover$target{pointer_size}.'arch']" }
439-
@{$unified_info{install}->{engines}}) -}
440-
@ {- output_on() unless scalar @{$unified_info{engines}}; "" -} !
441-
442439
install_startup : [.VMS]openssl_startup.com [.VMS]openssl_shutdown.com -
443440
[.VMS]openssl_utils.com, check_INSTALLTOP
444441
- CREATE/DIR ossl_installroot:[SYS$STARTUP]

0 commit comments

Comments
 (0)