Bazel: update BoringSSL to 9b0970f / 5b8bd1b (master-with-bazel).

This update includes the following changes:

9b0970f1b Fix HRSS build error on ARM
4cce955d1 Fix thread-safety bug in SSL_get_peer_cert_chain.
200fe6786 Remove HRSS confirmation hash.
35a66d4aa Drop NEON assembly for HRSS.
d6e1f230b Add |SSL_export_traffic_secrets|.
3adb1e5a3 Patch out the XTS implementation in bsaes.
fc30467f2 Remove .file and .loc directives from HRSS ARM asm.
43cc9c6e8 Do not allow AES_128_GCM_SHA256 with CECPQ2.
1ea083d8b Always 16-byte align |poly| elements.
2526c66b7 Fix bug in HRSS tests.
7b935937b Add initial HRSS support.
602f4669a Forbid empty CertificateRequestsupported_signature_algorithms in TLS 1.2.
bf5021a6b Eliminate |OPENSSL_ia32cap_P| in C code in the FIPS module.
750fea158 Fix d2i_*_bio on partial reads.
ff433815b Fix |BN_HEX_FMT2|.
90247be1d Remove XOP code from sha512-x86_64.pl.
36ee9a5a0 Pretend AMD XOP was never a thing.
e6ad7a027 Drop some explicit SSLKeyShare destructors.
96b05ed48 Assume hyper-threading-like vulnerabilities are always present.
eb7d5b69e Replace the last CRITICAL_SECTION with SRWLOCK.
278b3120e Validate ClientHellos in tests some more.
0f5ecd3a8 Re-enable AES-NI on 32-bit x86 too.
e157dc920 Make symbol-prefixing work on 32-bit x86.
8c23d3a5d Make Windows symbol-prefixing work.
c8cf62bba Support Windows-style ar files.
1a0f908e9 Move __.SYMDEF handling to ar.go.
00d72d342 Fix stack_test.cc in the prefixed build.
8b0dad4a7 Don't double-mangle C++ symbols on macOS.
abbc59896 Make read_symbols.go a bit more idiomatic.

Change-Id: I45c8cc49fac5814ab09bc50163ad81cdad84e08a
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
Reviewed-on: https://nginx-review.googlesource.com/c/3601
Reviewed-by: Wayne Zhang <qiwzhang@google.com>
1 file changed
tree: 1d4de5a174951339ed0d271a2250b4b83af5aad2
  1. auto/
  2. conf/
  3. contrib/
  4. docs/
  5. misc/
  6. src/
  7. .hgtags
  8. BUILD
  9. build.bzl
  10. LICENSE
  11. README.md
  12. WORKSPACE
README.md

About

NGINX + BoringSSL + Brotli.

Building

To build nginx binary with Bazel:

$ bazel build :nginx

To build Debian package:

$ bazel build :nginx-google.deb

Contributing

This repository is currently maintained by Google developers.

Any code changes should be submitted to upstream NGINX.

License

Copyright (C) 2002-2018 Igor Sysoev
Copyright (C) 2011-2018 Nginx, Inc.
Copyright (C) 2015-2018 Google Inc.
All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
1. Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the distribution.

THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
SUCH DAMAGE.

Disclaimer

This is not an official Google product.