Commit graph

263 commits

Author SHA1 Message Date
volth f3282c8d1e treewide: remove unused variables (#63177)
* treewide: remove unused variables

* making ofborg happy
2019-06-16 19:59:05 +00:00
Will Dietz 642c9a7e74
Revert "openssl: fix CVE-2019-1543"
This reverts commit aae4c114a4.
2019-05-29 07:54:00 -05:00
Will Dietz f6297de3bc
openssl: 1.1.1b -> 1.1.1c
https://mta.openssl.org/pipermail/openssl-announce/2019-May/000153.html
2019-05-28 19:04:31 -05:00
Will Dietz c83b9bb6aa
openssl: 1.0.2r -> 1.0.2s
https://mta.openssl.org/pipermail/openssl-announce/2019-May/000151.html
2019-05-28 19:04:25 -05:00
Tom Bereknyei aae4c114a4 openssl: fix CVE-2019-1543
Closes https://github.com/NixOS/nixpkgs/pull/61827.
Fixes https://github.com/NixOS/nixpkgs/issues/60107.
2019-05-22 17:06:49 +02:00
Alyssa Ross fed0926960
openssl_1_1: 1.1.1a -> 1.1.1b 2019-02-26 16:35:27 +00:00
Alyssa Ross 9c94d74836
openssl: 1.0.2q -> 1.0.2r 2019-02-26 16:33:06 +00:00
Vladimír Čunát 6f61d8b0f6
openssl_1_1: use the same default CA path as 1.0.*
Fixes https://github.com/NixOS/nixpkgs/issues/54437
2019-01-21 21:15:42 +01:00
Andrew Dunham 14087abe6a
openssl_1_1: Add "doc" output to contain HTML documentation
This prevents cluttering up openssl_1_1.out with many megabytes of
documentation.

Fixes #51659
2018-12-09 14:49:00 +00:00
Frederik Rietdijk c1792242ef Merge staging-next into staging 2018-11-24 10:44:50 +01:00
Daniel Goertzen e8bce19aea openssl: fix cross compile (perl)
Fixes issue #50921. Build result was depending on build perl instead of
host perl which broke cross compilation.
2018-11-23 10:37:54 +01:00
Jan Malakhovski 7c48015019 openssl: fix cryptodev fallout from d836b811cb 2018-11-22 09:45:34 +00:00
Alyssa Ross d012516c44
openssl_1_1: 1.1.1 -> 1.1.1a
CVE-2018-0734: https://www.openssl.org/news/vulnerabilities.html#2018-0734
CVE-2018-0735: https://www.openssl.org/news/vulnerabilities.html#2018-0735
2018-11-20 16:52:22 +00:00
Alyssa Ross ae29a9e688
openssl: 1.0.2p -> 1.0.2q
CVE-2018-0734: https://www.openssl.org/news/vulnerabilities.html#2018-0734
CVE-2018-5407: https://www.openssl.org/news/vulnerabilities.html#2018-5407

No patches can any longer be shared between 1.0.2 and 1.1, so reorganize
patches into subdirectories (and remove an unused one).
2018-11-20 16:51:48 +00:00
Renaud de8f3b422a
Merge pull request #47953 from lopsided98/openssl-arm
openssl: don't autodetect platform on armv6/7l
2018-10-28 14:08:02 +01:00
Markus Kowalewski 598ed197db
openssl-chacha: add license 2018-10-25 23:10:00 +02:00
Ben Wolsieffer d3ba32e117 openssl: don't autodetect platform on armv6/7l 2018-10-05 22:46:45 -04:00
Alyssa Ross 1ec301ded2 openssl: 1.1.0 -> 1.1.1 (#46524) 2018-09-12 23:56:08 +00:00
John Ericson 0828e2d8c3 treewide: Remove usage of remaining redundant platform compatability stuff
Want to get this out of here for 18.09, so it can be deprecated
thereafter.
2018-08-30 17:20:32 -04:00
Vladimír Čunát 153a19df05
Merge branch 'master' into staging-next
Hydra: ?compare=1474536
2018-08-20 09:15:33 +02:00
Markus Kowalewski 4ba295b797
openssl: add license 2018-08-18 00:05:21 +02:00
Vladimír Čunát 14aa936ec5
Merge branch 'staging-next' into staging 2018-08-17 20:53:27 +02:00
Andreas Rammhold 98a7b92261
openssl_1_0_2: 1.0.2o -> 1.0.2p
this addresses:
 - Client DoS due to large DH parameter (CVE-2018-0732)
 - Cache timing vulnerability in RSA Key Generation (CVE-2018-0737)

Changelog: https://www.openssl.org/news/cl102.txt
2018-08-15 21:35:23 +02:00
Andreas Rammhold 0a40875439
openssl_1_1_0: 1.1.0h -> 1.1.0i
this addresses:
 - Client DoS due to large DH parameter (CVE-2018-0732)
 - Cache timing vulnerability in RSA Key Generation (CVE-2018-0737)

Changelog: https://www.openssl.org/news/changelog.html#x1
2018-08-15 21:12:00 +02:00
Jan Malakhovski 7ea0904347 openssl: fix tests, also cleanup 2018-08-10 12:56:34 +00:00
Franz Pletz 459a34ce5f
openssl_1_1_0: add patch to fix c_rehash quoting 2018-08-06 22:49:29 +02:00
Matthew Bauer 4639d55562
Merge pull request #43870 from nh2/static-krb5-openssl-flags
Optional static libraries for krb5 and openssl
2018-07-23 17:31:24 -04:00
Matthew Bauer 916f096911
Merge pull request #43890 from matthewbauer/mingw-fixes
Mingw fixes
2018-07-21 17:04:20 -04:00
Matthew Bauer 522b61a069 openssl: work with mingw32 2018-07-21 17:00:05 -04:00
volth 52f53c69ce pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
Niklas Hambüchen 479dcc3b54 openssl: Add static flag.
Its effect on `postInstall` is carefully written to not
cause recompilation in the default case.
2018-07-21 04:43:50 +02:00
Silvan Mosberger 57bccb3cb8 treewide: http -> https sources (#42676)
* treewide: http -> https sources

This updates the source urls of all top-level packages from http to
https where possible.

* buildtorrent: fix url and tab -> spaces
2018-06-28 20:43:35 +02:00
Matthew Justin Bauer eeb016e8f0
Merge branch 'staging' into fix-ncurses-darwin-extensions 2018-05-02 15:40:38 -05:00
John Ericson 0c3efb9ba0 openssl: Support iOS cross compilation (in theory) 2018-05-01 01:13:44 -04:00
WilliButz 01a4d957dd
openssl: enable parallel building
There is no improvement for the build duration of openssl 1.0
but the one of openssl 1.1 is reduced significantly.
2018-04-20 14:55:01 +02:00
Andreas Rammhold 72110322c0
openssl_1_1_0: 1.1.0g -> 1.1.0h (fixes CVE-2018-0739, CVE-2017-3738)
Also fixes CVE-2018-0733 but we do not support HP-UX to my knowledge :-)

Announcement at [1].

[1] https://www.openssl.org/news/secadv/20180327.txt
2018-03-27 21:31:59 +02:00
Andreas Rammhold 4bf9b4a328
openssl: 1.0.2n -> 1.0.2o (fixes CVE-2017-3738, CVE-2018-0739)
Announcement can be found at [1].

[1] https://www.openssl.org/news/secadv/20180327.txt
2018-03-27 21:31:41 +02:00
Will Dietz cccf48ca0c openssl: isMusl 2018-02-13 09:44:50 -06:00
Will Dietz 6593d882a9 openssl: fix cross, ensure 'Configure' has shebang patched 2018-02-13 09:44:49 -06:00
Will Dietz aa00d53708 openssl 1.1.0: disable 'async' bits relating to setcontext/etc on musl 2018-02-13 09:44:49 -06:00
John Ericson 57b01b1bcf lib, openssl: Get rid of openssl.system
We compute it on the fly, careful to avoid any mass rebuilds for now.
2018-01-26 21:22:00 -05:00
adisbladis 4cc3510a92 openssl_1_1_0: Fix CVE-2017-3738 2018-01-07 14:48:24 +01:00
Andreas Rammhold 0841f14a8f
openssl_1_0_2: 1.0.2m -> 1.0.2n (CVE-2017-3737, CVE-2017-3738)
See [1] for more details

[1] https://www.openssl.org/news/secadv/20171207.txt
2017-12-09 13:15:00 +01:00
Graham Christensen e06dbe4f5b
openssl: fix nix patch for recent update 2017-11-02 15:16:41 -04:00
Graham Christensen 5e2d96deb3
openssl_1_1_0: 1.1.0f -> 1.1.0g 2017-11-02 14:44:04 -04:00
Graham Christensen 7726b46027
openssl_1_0_2: 1.0.2l -> 1.0.2m 2017-11-02 14:40:25 -04:00
Matthew Bauer 269f057be3 openssl: use https for homepage 2017-08-17 15:04:22 -07:00
georgewhewell e85a855d2c openssl 1_1_0: fix build on aarch64 2017-08-06 20:38:32 +02:00
Eelco Dolstra c23dcd72a0
Enable some more debug info 2017-07-05 16:04:54 +02:00
John Ericson 16be434b0b Merge accepted cross compilation PRs into staging 2017-06-28 23:17:21 -04:00