Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade to openssl-1.0.2a (Part2: final) #1389

Closed
wants to merge 16 commits into from
Closed

Upgrade to openssl-1.0.2a (Part2: final) #1389

wants to merge 16 commits into from

Commits on Apr 14, 2015

  1. deps: upgrade openssl to 1.0.2a 

    This just replaces all sources in deps/openssl/openssl to originals in
https://www.openssl.org/source/openssl-1.0.2a.tar.gz
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    b8e6ac1 View commit details
    Browse the repository at this point in the history

  2. deps: fix openssl assembly error on ia32 win32 

    `x86masm.pl` was mistakenly using .486 instruction set, why `cpuid` (and
perhaps others) are requiring .686 .
    @indutny
    indutny authored and Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    6dd35fe View commit details
    Browse the repository at this point in the history

  3. deps: fix asm build error of openssl in x86_win32 

    See
https://mta.openssl.org/pipermail/openssl-dev/2015-February/000651.html

iojs needs to stop using masm and move to nasm or yasm on Win32.
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    9e48b08 View commit details
    Browse the repository at this point in the history

  4. deps: backport openssl patch of alt cert chains 1 

    This a backport of da084a5ec6cebd67ae27f2463ebe4a50bb840fa5 in
https://github.com/openssl/openssl by Matt Caswell <matt@openssl.org> as

In certain situations the server provided certificate chain may no
longer be valid. However the issuer of the leaf, or some intermediate
cert is in fact in the trust store.

When building a trust chain if the first attempt fails, then try to
see if alternate chains could be constructed that are trusted.

deps: backport openssl patch of alt cert chains 2

This a backport of 15dba5be6a4482a9ad7e5b846291f31e97e338ca in
https://github.com/openssl/openssl by Matt Caswell <matt@openssl.org> as

Add flag to inhibit checking for alternate certificate chains. Setting this
behaviour will force behaviour as per previous versions of OpenSSL
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    4319e75 View commit details
    Browse the repository at this point in the history

  5. openssl: fix keypress requirement in apps on win32 

    Reapply b910613 .
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    4245ff6 View commit details
    Browse the repository at this point in the history

  6. deps: replace all headers in openssl 

    Change all openssl/include/openssl/*.h to include resolved symbolic
links and openssl/crypto/opensslconf.h to refer config/opensslconf.h
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    d0cde64 View commit details
    Browse the repository at this point in the history

  7. deps: add x32 and arm64 support for opensslconf.h 

    linux-x32 and linux-aarch64(arm64) are officially supported in
openssl-1.0.2. With this fix opensslconf.h for these new architectures
can be generated by Makefile.

The patch for opensslconf.h of linux-x32 with Makefile was removed.

For the fix of opensslconf.h in WIN32/WIN64, adding defines of
OPENSSL_NO_DYNAMIC_ENGINE and OPENSSL_NO_CAPIENG move to openssl.gypi
so that we no longer need insert a patch with Makefile and removed it.
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    8633524 View commit details
    Browse the repository at this point in the history

  8. deps: update opensslconf.h for 1.0.2a 

    just type `make` in `deps/openssl/conf` then opensslconf.h in all
architectures are updated.
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    37fd75f View commit details
    Browse the repository at this point in the history

  9. deps: update openssl.gyp/gypi for openssl-1.0.2a 

    Update gyp sources for openssl-1.0.2a. The source list was extracted
from Makefiles in `deps/openssl/openssl/{crypto/ssl/engines}`.

Defines are created by referring the table in
`deps/openssl/doc/openssl_define_list.pdf` that was derived from
Makefile entries and outputs of
`deps/openssl/openssl/Configure TABLE`.

Renamed the variable of openssl_sources_arm_elf_gas to
openssl_sources_arm_void_gas to be consistent with PERLASM_SCHEME.

This also includes arm64 support.
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    974093e View commit details
    Browse the repository at this point in the history

  10. deps: update asm Makefile for openssl-1.0.2a 

    This includes following changes,
 - Updated asm files for each platforms which are required in
 openssl-1.0.2a.
 - Some perl files need CC and ASM envs. Added a check if these envs
 exist. Followed asm files are to be generated with CC=gcc and
 ASM=nasm on Linux. See
 `deps/openssl/openssl/crypto/sha/asm/sha512-x86_64.pl`
 - Added new 32bit targets/rules with a sse2 flag (OPENSSL_IA32_SSE2)
 to generate asm for use SSE2.
 - Generating sha512 asm files in x86_64 need output filename which
 has 512. Added new rules so as not to use stdout for outputs.
 - PERLASM_SCHEME of linux-armv4 is `void` as defined in openssl
 Configure. Changed its target/rule and all directories are moved from
 arm-elf-gas to arm-void-gas.

deps: add arm64 support in openssl/asm/Makefile
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    9ab4c08 View commit details
    Browse the repository at this point in the history

  11. deps, build: add support older assembler 

    Asm files for OpenSSL depends on the version of assembler.
We provide two sets of asm files, one is asm_latest(avx2 and addx
supported) and the other asm_obsolute(without avx1/2 and addx)

The asm_latest needs the version of gas >= 2.23, llvm >= 3.3
or ml64 >= 12 as defined in
https://github.com/openssl/openssl/blob/OpenSSL_1_0_2-stable/crypto/sha/asm/sha512-x86_64.pl#L112-L129
, otherwise asm_obsolute are used.

We take MSVS_VERSION in gyp as a version check of assembler on
Windows because the path to ml64.exe was set after configure in
vcbuild.bat and executing ml64.exe was failed in configure.
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    866ae2d View commit details
    Browse the repository at this point in the history

  12. deps: update asm files for openssl-1.0.2a 

    asm files are generated as
- In `deps/openssl/asm/`, make with CC=gcc and ASM=nasm
- In `deps/openssl/asm_obsolute/`, make with no envs for compilers
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    9e52b6c View commit details
    Browse the repository at this point in the history

  13. build: enable ssl support on arm64

    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    4533707 View commit details
    Browse the repository at this point in the history

  14. test: fix error message check for openssl-1.0.2a 

    openssl-1.0.2a does not include function name of SSL3_GET_CLIENT_HELLO
in the error message
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    a755e0c View commit details
    Browse the repository at this point in the history

  15. deps: add docs to upgrade openssl 

    This document is intended to describe the procedure to upgrade openssl
from 1.0.1m to 1.0.2a in io.js.
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    0005f23 View commit details
    Browse the repository at this point in the history

  16. build: fix error message in configure 

    Replace Node.js to io.js in error messages.
    Shigeki Ohtsu committed Apr 14, 2015
    Copy the full SHA
    d9fbcc0 View commit details
    Browse the repository at this point in the history