commit | 0370b0d242c172c92487917fb637988b4612ebc4 | [log] [tgz] |
---|---|---|
author | Piotr Sikora <piotrsikora@google.com> | Wed Dec 26 15:24:47 2018 -0800 |
committer | Piotr Sikora <piotrsikora@google.com> | Wed Jan 02 20:59:23 2019 +0000 |
tree | 1d4de5a174951339ed0d271a2250b4b83af5aad2 | |
parent | 6cac54f4893bd132540f0dd0bd2d294243c0372f [diff] |
Bazel: update BoringSSL to 9b0970f / 5b8bd1b (master-with-bazel). This update includes the following changes: 9b0970f1b Fix HRSS build error on ARM 4cce955d1 Fix thread-safety bug in SSL_get_peer_cert_chain. 200fe6786 Remove HRSS confirmation hash. 35a66d4aa Drop NEON assembly for HRSS. d6e1f230b Add |SSL_export_traffic_secrets|. 3adb1e5a3 Patch out the XTS implementation in bsaes. fc30467f2 Remove .file and .loc directives from HRSS ARM asm. 43cc9c6e8 Do not allow AES_128_GCM_SHA256 with CECPQ2. 1ea083d8b Always 16-byte align |poly| elements. 2526c66b7 Fix bug in HRSS tests. 7b935937b Add initial HRSS support. 602f4669a Forbid empty CertificateRequestsupported_signature_algorithms in TLS 1.2. bf5021a6b Eliminate |OPENSSL_ia32cap_P| in C code in the FIPS module. 750fea158 Fix d2i_*_bio on partial reads. ff433815b Fix |BN_HEX_FMT2|. 90247be1d Remove XOP code from sha512-x86_64.pl. 36ee9a5a0 Pretend AMD XOP was never a thing. e6ad7a027 Drop some explicit SSLKeyShare destructors. 96b05ed48 Assume hyper-threading-like vulnerabilities are always present. eb7d5b69e Replace the last CRITICAL_SECTION with SRWLOCK. 278b3120e Validate ClientHellos in tests some more. 0f5ecd3a8 Re-enable AES-NI on 32-bit x86 too. e157dc920 Make symbol-prefixing work on 32-bit x86. 8c23d3a5d Make Windows symbol-prefixing work. c8cf62bba Support Windows-style ar files. 1a0f908e9 Move __.SYMDEF handling to ar.go. 00d72d342 Fix stack_test.cc in the prefixed build. 8b0dad4a7 Don't double-mangle C++ symbols on macOS. abbc59896 Make read_symbols.go a bit more idiomatic. Change-Id: I45c8cc49fac5814ab09bc50163ad81cdad84e08a Signed-off-by: Piotr Sikora <piotrsikora@google.com> Reviewed-on: https://nginx-review.googlesource.com/c/3601 Reviewed-by: Wayne Zhang <qiwzhang@google.com>
To build nginx
binary with Bazel:
$ bazel build :nginx
To build Debian package:
$ bazel build :nginx-google.deb
This repository is currently maintained by Google developers.
Any code changes should be submitted to upstream NGINX.
Copyright (C) 2002-2018 Igor Sysoev Copyright (C) 2011-2018 Nginx, Inc. Copyright (C) 2015-2018 Google Inc. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This is not an official Google product.