kris/boringssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
f5b30cc28c
boringssl/decrepit/CMakeLists.txt

38 lines
894 B
CMake
Raw Normal View History

Restore |BIO_f_base64| from OpenSSL at b4f0d1a, modulo style fixes. Change-Id: Ia7f4f4f6d063d882cf3d3ac0f5f33ad8d8cd9875 Reviewed-on: https://boringssl-review.googlesource.com/5151 Reviewed-by: Adam Langley <agl@google.com>
2015-06-17 23:17:19 +01:00
add_subdirectory(bio)
Add a simplified SSL BIO for curl. A recent change to curl[1] added support for HTTPS proxies, which involves running a TLS connection inside another TLS connection. This was done by using SSL BIOs, which we removed from BoringSSL for being crazy. This change adds a stripped-down version of the SSL BIO to decrepit in order to suport curl. [1] https://github.com/curl/curl/commit/cb4e2be7c6d42ca0780f8e0a747cecf9ba45f151 Change-Id: I9cb8f2db5b28a5a70724f6f93544297c380ac124 Reviewed-on: https://boringssl-review.googlesource.com/12631 Reviewed-by: Adam Langley <agl@google.com>
2016-12-07 18:55:27 +00:00
add_subdirectory(biossl)
Restore |RSA_generate_key()| from OpenSSL at b4f0d1a. The callback arguments are required to be NULL. Change-Id: I266ec46efdaca411a7f0c2b645883b2c5bec1c96 Reviewed-on: https://boringssl-review.googlesource.com/5160 Reviewed-by: Adam Langley <agl@google.com>
2015-06-18 01:16:02 +01:00
add_subdirectory(blowfish)
add_subdirectory(cast)
Restore |DES_ede3_cfb_encrypt| and |DES_ede3_cfb64_encrypt| from OpenSSL at ce7e647b. Change-Id: I7ab7ea3cdabc697b2945a50c8d8f349d6b408848 Reviewed-on: https://boringssl-review.googlesource.com/5211 Reviewed-by: Adam Langley <agl@google.com>
2015-05-18 19:29:30 +01:00
add_subdirectory(des)
Add |DH_generate_parameters| to decrepit. This makes building OpenLDAP easier. Change-Id: Id64699f95477fb8fb98957027c97070ebf41f4b1 Reviewed-on: https://boringssl-review.googlesource.com/7407 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-10 17:23:03 +00:00
add_subdirectory(dh)
Add DSA_generate_parameters to decrepit. This function was deprecated by OpenSSL in 0.9.8 but code that uses it still exists. This change adds an implementation of this function to decreipt/ to support these programs. Change-Id: Ie99cd00ff8b0ab2675f2b1c821c3d664b9811f16 Reviewed-on: https://boringssl-review.googlesource.com/7360 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-08 00:11:01 +00:00
add_subdirectory(dsa)
Tweaks for node.js node.js is, effectively, another bindings library. However, it's better written than most and, with these changes, only a couple of tiny fixes are needed in node.js. Some of these changes are a little depressing however so we'll need to push node.js to use APIs where possible. Changes: ∙ Support verify_recover. This is very obscure and the motivation appears to be https://github.com/nodejs/node/issues/477 – where it's not clear that anyone understands what it means :( ∙ Add a few, no-op #defines ∙ Add some members to |SSL_CTX| and |SSL| – node.js needs to not reach into these structs in the future. ∙ Add EC_get_builtin_curves. ∙ Add EVP_[CIPHER|MD]_do_all_sorted – these functions are limited to decrepit. Change-Id: I9a3566054260d6c4db9d430beb7c46cc970a9d46 Reviewed-on: https://boringssl-review.googlesource.com/6952 Reviewed-by: Adam Langley <agl@google.com>
2016-01-24 23:58:39 +00:00
add_subdirectory(evp)
Add |OBJ_NAME_do_all_sorted|. This another of those functions that tries to turn C into Python. In this case, implement it in terms of the similar functions in EVP so that at least we only have one list of things. This makes life with nmap easier. Change-Id: I6d01c43f062748d4ba7d7020587c286322e610bb Reviewed-on: https://boringssl-review.googlesource.com/7403 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-08 23:00:18 +00:00
add_subdirectory(obj)
Add |RC4_options| to decrepit. I've no idea who thought that this function was a good idea in the first place, but including it in decrepit makes supporting nmap easier. Change-Id: I7433cda6a6ddf1cc545126edf779625e9fc70ada Reviewed-on: https://boringssl-review.googlesource.com/7401 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-08 22:15:35 +00:00
add_subdirectory(rc4)
Add RIPEMD160 support in decrepit. This version is taken from OpenSSL 1.0.2 with tweaks to support the changes that we have made to md32_common.h. None of the assembly implementations have been imported. This makes supporting nmap easier. Change-Id: Iae9241abdbc9021cc6bc35a65b40c3d739011ccc Reviewed-on: https://boringssl-review.googlesource.com/7402 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-08 22:17:02 +00:00
add_subdirectory(ripemd)
Restore |RSA_generate_key()| from OpenSSL at b4f0d1a. The callback arguments are required to be NULL. Change-Id: I266ec46efdaca411a7f0c2b645883b2c5bec1c96 Reviewed-on: https://boringssl-review.googlesource.com/5160 Reviewed-by: Adam Langley <agl@google.com>
2015-06-18 01:16:02 +01:00
add_subdirectory(rsa)
Banish SSL_add_dir_cert_subjects_to_stack and OPENSSL_DIR_CTX to decrepit. There was only one function that required BoringSSL to know how to read directories. Unfortunately, it does have some callers and it's not immediately obvious whether the code is unreachable. Rather than worry about that, just toss it all into decrepit. In doing so, do away with the Windows and PNaCl codepaths. Only implement OPENSSL_DIR_CTX on Linux. Change-Id: Ie64d20254f2f632fadc3f248bbf5a8293ab2b451 Reviewed-on: https://boringssl-review.googlesource.com/7661 Reviewed-by: Adam Langley <agl@google.com>
2016-04-01 23:37:07 +01:00
add_subdirectory(ssl)
Add |X509_EXT_conf_nid| to decrepit. This function is a deprecated version of |X509_EXT_nconf_nid| that takes a hash of |CONF_VALUE|s directly rather than a |CONF|. Change-Id: I5fd1025b31d73b988d9298b2624453017dd34ff4 Reviewed-on: https://boringssl-review.googlesource.com/7363 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-08 01:07:54 +00:00
add_subdirectory(x509)
Re-add the C version (only) of |EVP_aes_256_xts| Change-Id: I63c70f93a0f9395673c9fbe01eb5d864a14a48b6 Reviewed-on: https://boringssl-review.googlesource.com/5520 Reviewed-by: Adam Langley <agl@google.com> Reviewed-by: Matt Braithwaite <mab@google.com>
2015-07-29 00:49:58 +01:00
add_subdirectory(xts)
Add decrepit, initially containing CAST and Blowfish. decrepit will contain algorithms that we really wish didn't exist any longer. It won't be built by default in Chromium etc, but the code will exist for crummy code that still needs it. Change-Id: Ic307f5f0a69efe9e0a5fd54052f49d219e90dcdd
2015-02-03 18:45:12 +00:00
add_library(
decrepit
Restore |BIO_f_base64| from OpenSSL at b4f0d1a, modulo style fixes. Change-Id: Ia7f4f4f6d063d882cf3d3ac0f5f33ad8d8cd9875 Reviewed-on: https://boringssl-review.googlesource.com/5151 Reviewed-by: Adam Langley <agl@google.com>
2015-06-17 23:17:19 +01:00
$<TARGET_OBJECTS:bio_decrepit>
Add a simplified SSL BIO for curl. A recent change to curl[1] added support for HTTPS proxies, which involves running a TLS connection inside another TLS connection. This was done by using SSL BIOs, which we removed from BoringSSL for being crazy. This change adds a stripped-down version of the SSL BIO to decrepit in order to suport curl. [1] https://github.com/curl/curl/commit/cb4e2be7c6d42ca0780f8e0a747cecf9ba45f151 Change-Id: I9cb8f2db5b28a5a70724f6f93544297c380ac124 Reviewed-on: https://boringssl-review.googlesource.com/12631 Reviewed-by: Adam Langley <agl@google.com>
2016-12-07 18:55:27 +00:00
$<TARGET_OBJECTS:biossl_decrepit>
Add decrepit, initially containing CAST and Blowfish. decrepit will contain algorithms that we really wish didn't exist any longer. It won't be built by default in Chromium etc, but the code will exist for crummy code that still needs it. Change-Id: Ic307f5f0a69efe9e0a5fd54052f49d219e90dcdd
2015-02-03 18:45:12 +00:00
$<TARGET_OBJECTS:blowfish>
Restore |BIO_f_base64| from OpenSSL at b4f0d1a, modulo style fixes. Change-Id: Ia7f4f4f6d063d882cf3d3ac0f5f33ad8d8cd9875 Reviewed-on: https://boringssl-review.googlesource.com/5151 Reviewed-by: Adam Langley <agl@google.com>
2015-06-17 23:17:19 +01:00
$<TARGET_OBJECTS:cast>
Restore |DES_ede3_cfb_encrypt| and |DES_ede3_cfb64_encrypt| from OpenSSL at ce7e647b. Change-Id: I7ab7ea3cdabc697b2945a50c8d8f349d6b408848 Reviewed-on: https://boringssl-review.googlesource.com/5211 Reviewed-by: Adam Langley <agl@google.com>
2015-05-18 19:29:30 +01:00
$<TARGET_OBJECTS:des_decrepit>
Add |DH_generate_parameters| to decrepit. This makes building OpenLDAP easier. Change-Id: Id64699f95477fb8fb98957027c97070ebf41f4b1 Reviewed-on: https://boringssl-review.googlesource.com/7407 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-10 17:23:03 +00:00
$<TARGET_OBJECTS:dh_decrepit>
Add DSA_generate_parameters to decrepit. This function was deprecated by OpenSSL in 0.9.8 but code that uses it still exists. This change adds an implementation of this function to decreipt/ to support these programs. Change-Id: Ie99cd00ff8b0ab2675f2b1c821c3d664b9811f16 Reviewed-on: https://boringssl-review.googlesource.com/7360 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-08 00:11:01 +00:00
$<TARGET_OBJECTS:dsa_decrepit>
Tweaks for node.js node.js is, effectively, another bindings library. However, it's better written than most and, with these changes, only a couple of tiny fixes are needed in node.js. Some of these changes are a little depressing however so we'll need to push node.js to use APIs where possible. Changes: ∙ Support verify_recover. This is very obscure and the motivation appears to be https://github.com/nodejs/node/issues/477 – where it's not clear that anyone understands what it means :( ∙ Add a few, no-op #defines ∙ Add some members to |SSL_CTX| and |SSL| – node.js needs to not reach into these structs in the future. ∙ Add EC_get_builtin_curves. ∙ Add EVP_[CIPHER|MD]_do_all_sorted – these functions are limited to decrepit. Change-Id: I9a3566054260d6c4db9d430beb7c46cc970a9d46 Reviewed-on: https://boringssl-review.googlesource.com/6952 Reviewed-by: Adam Langley <agl@google.com>
2016-01-24 23:58:39 +00:00
$<TARGET_OBJECTS:evp_decrepit>
Add |OBJ_NAME_do_all_sorted|. This another of those functions that tries to turn C into Python. In this case, implement it in terms of the similar functions in EVP so that at least we only have one list of things. This makes life with nmap easier. Change-Id: I6d01c43f062748d4ba7d7020587c286322e610bb Reviewed-on: https://boringssl-review.googlesource.com/7403 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-08 23:00:18 +00:00
$<TARGET_OBJECTS:obj_decrepit>
Add |RC4_options| to decrepit. I've no idea who thought that this function was a good idea in the first place, but including it in decrepit makes supporting nmap easier. Change-Id: I7433cda6a6ddf1cc545126edf779625e9fc70ada Reviewed-on: https://boringssl-review.googlesource.com/7401 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-08 22:15:35 +00:00
$<TARGET_OBJECTS:rc4_decrepit>
Add RIPEMD160 support in decrepit. This version is taken from OpenSSL 1.0.2 with tweaks to support the changes that we have made to md32_common.h. None of the assembly implementations have been imported. This makes supporting nmap easier. Change-Id: Iae9241abdbc9021cc6bc35a65b40c3d739011ccc Reviewed-on: https://boringssl-review.googlesource.com/7402 Reviewed-by: David Benjamin <davidben@google.com>
2016-03-08 22:17:02 +00:00
$<TARGET_OBJECTS:ripemd_decrepit>
Restore |RSA_generate_key()| from OpenSSL at b4f0d1a. The callback arguments are required to be NULL. Change-Id: I266ec46efdaca411a7f0c2b645883b2c5bec1c96 Reviewed-on: https://boringssl-review.googlesource.com/5160 Reviewed-by: Adam Langley <agl@google.com>
2015-06-18 01:16:02 +01:00
$<TARGET_OBJECTS:rsa_decrepit>
Banish SSL_add_dir_cert_subjects_to_stack and OPENSSL_DIR_CTX to decrepit. There was only one function that required BoringSSL to know how to read directories. Unfortunately, it does have some callers and it's not immediately obvious whether the code is unreachable. Rather than worry about that, just toss it all into decrepit. In doing so, do away with the Windows and PNaCl codepaths. Only implement OPENSSL_DIR_CTX on Linux. Change-Id: Ie64d20254f2f632fadc3f248bbf5a8293ab2b451 Reviewed-on: https://boringssl-review.googlesource.com/7661 Reviewed-by: Adam Langley <agl@google.com>
2016-04-01 23:37:07 +01:00
$<TARGET_OBJECTS:ssl_decrepit>
Fix the shared library build. libdecrepit wants some symbols visible. Also a build file typo. Change-Id: I670d2324ab9048f84e7f80afdefc98cbab80335d Reviewed-on: https://boringssl-review.googlesource.com/7411 Reviewed-by: Adam Langley <agl@google.com>
2016-03-09 20:11:12 +00:00
$<TARGET_OBJECTS:x509_decrepit>
Re-add the C version (only) of |EVP_aes_256_xts| Change-Id: I63c70f93a0f9395673c9fbe01eb5d864a14a48b6 Reviewed-on: https://boringssl-review.googlesource.com/5520 Reviewed-by: Adam Langley <agl@google.com> Reviewed-by: Matt Braithwaite <mab@google.com>
2015-07-29 00:49:58 +01:00
$<TARGET_OBJECTS:xts>
Add decrepit, initially containing CAST and Blowfish. decrepit will contain algorithms that we really wish didn't exist any longer. It won't be built by default in Chromium etc, but the code will exist for crummy code that still needs it. Change-Id: Ic307f5f0a69efe9e0a5fd54052f49d219e90dcdd
2015-02-03 18:45:12 +00:00
)
Fix shared library build on OS X. It seems OS X actually cares about symbol resolution and dependencies when you create a dylib. Probably because they do two-level name resolution. (Obligatory disclaimer: BoringSSL does not have a stable ABI and is thus not suitable for a traditional system-wide library.) BUG=539603 Change-Id: Ic26c4ad23840fe6c1f4825c44671e74dd2e33870 Reviewed-on: https://boringssl-review.googlesource.com/6131 Reviewed-by: Adam Langley <alangley@gmail.com>
2015-10-06 02:32:10 +01:00
Banish SSL_add_dir_cert_subjects_to_stack and OPENSSL_DIR_CTX to decrepit. There was only one function that required BoringSSL to know how to read directories. Unfortunately, it does have some callers and it's not immediately obvious whether the code is unreachable. Rather than worry about that, just toss it all into decrepit. In doing so, do away with the Windows and PNaCl codepaths. Only implement OPENSSL_DIR_CTX on Linux. Change-Id: Ie64d20254f2f632fadc3f248bbf5a8293ab2b451 Reviewed-on: https://boringssl-review.googlesource.com/7661 Reviewed-by: Adam Langley <agl@google.com>
2016-04-01 23:37:07 +01:00
target_link_libraries(decrepit crypto ssl)
Reference in New Issue Copy Permalink