Commit Graph

21 Commits

Author SHA1 Message Date
DeckerSU
c4c5746e9c added config flags to openssl
to make libcurl HTTPS connections work OpenSSL needs to be built
with sock, ssl, tls and des. all other config options can be disabled,
like in ZCash.
2019-04-22 20:56:25 +03:00
DeckerSU
1a9f6cb607 return OpenSSL 1.1.1a and applied patch
More info:

- https://github.com/openssl/openssl/issues/7350
- f725fe5b4b

Without this patch we will get following error:

```
SSL: couldn't create a context: error:00000000:lib(0):func(0):reason(0)
```

during trying to connect HTTPS.
2019-04-22 20:27:28 +03:00
DeckerSU
03794dc208 first approach to get HTTPS in libcurl work
1. libcurl.mk now changed to build against static openssl from deps.
2. but, it won't work with openssl 1.1.1a, bcz of SSL: couldn't create a context: error:00000000:lib(0):func(0):reason(0)	,
so, in test i decided to upgrade openssl to 1.1.1b.
3. original openssl.mk was with many disabled features, i enable all of them,
of course it's don't needed and we need to leave only SSL/TLS things enabled
in OpenSSL build.
4. probably i broke something in Windows and MacOS build.

This commit is only first approach to continue work.
2019-04-19 21:57:10 +03:00
ca333
d257da66dc update openssl 2019-02-19 22:55:14 +01:00
Simon
09bf7d2d3c Upgrade OpenSSL to 1.1.0h 2018-03-29 23:05:17 -07:00
daniel
0b2a64f484 add powerpc build support for openssl lib 2017-12-01 14:10:15 +00:00
Jack Grigg
18cc8f45fd Upgrade OpenSSL to 1.1.0d
Closes #2047
2017-01-31 15:23:56 +01:00
Jack Grigg
be9e7ce722 Remove no-autoalginit and no-autoerrinit OpenSSL flags
These flags are potentially risky, because they require that the app explicitly
initialize stuff that it wouldn't otherwise need to initialize, and we don't
have time for the necessary review.
2016-09-30 14:11:27 +13:00
Jack Grigg
629c8743a7 Disable nearly everything in OpenSSL
Flags obtained from:
https://gist.github.com/steakknife/8247726#gistcomment-1739713

Some flags not enabled because they aren't supported in OpenSSL 1.1.0b.

Flags not enabled because they break compilation:
- no-deprecated
- no-dh
- no-ec
2016-09-29 15:53:41 +13:00
Jack Grigg
fa318aa9fe Upgrade OpenSSL to 1.1.0b
Closes #1348
2016-09-29 12:34:09 +13:00
fanquake
95efc7cccb [depends] OpenSSL 1.0.1k - update config_opts 2016-09-29 12:07:23 +13:00
Taylor Hornby
0af5e31282 Pass -DPURIFY to OpenSSL so it doesn't clutter valgrind output. 2016-05-25 16:42:39 -06:00
Wladimir J. van der Laan
21e58b8e35 build: make sure OpenSSL heeds noexecstack
This passes `-Wa,--noexecstack` to the assembler when building
platform-specific assembly files, to signal that a non-executable stack
can be used. This is the same approach as used by Debian
(see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=430583)

Rebased-From: bfcdc21a5da25ec1aa4aecc4cd8960dfa1c11781
Github-Pull: #6852
2015-10-19 15:04:14 +02:00
Wladimir J. van der Laan
90c71548c7 depends: remove embedded OpenSSL timestamp for determinism
Chery-picked from 0.10 branch.

Rebased-From: c3200bcd1e7116e079aebabed3a01dc5385bfc9e
2015-01-12 16:19:24 +01:00
Cory Fields
dad7764a9d depends: bump openssl to 1.0.1k 2015-01-09 21:31:38 -05:00
Wladimir J. van der Laan
e36e619886 Add mips, mipsel and aarch64 to depends platforms 2014-12-17 13:20:11 +01:00
Cory Fields
4302fa67b1 depends: Use pic for all linux dependencies
This avoids textrels, and matches previous gitian behavior.
2014-11-19 22:49:41 -05:00
Dominyk Tiller
a6a3f141b1 openssl version bump
Bumps the OpenSSL version to the latest release, and kills SSL2. (SSL3 was already killed here, so I'm not sure why SSL2 was left around?)

No other changes.
2014-10-21 21:49:45 +01:00
Cory Fields
7e99df78c4 depends: make sure openssl sees cppflags 2014-09-25 14:56:26 -04:00
Cory Fields
f628127887 depends: bump openssl to 1.0.1i
This is the forward-port of bba01750226745d6666d587cabe57c321fde0875.
2014-08-26 15:28:31 -04:00
Cory Fields
1dec09b341 depends: add shared dependency builder
See the README's in depends for documentation
2014-08-08 15:10:46 -04:00