Bazel: update BoringSSL to 9b0970f / 5b8bd1b (master-with-bazel).
This update includes the following changes:
9b0970f1b Fix HRSS build error on ARM
4cce955d1 Fix thread-safety bug in SSL_get_peer_cert_chain.
200fe6786 Remove HRSS confirmation hash.
35a66d4aa Drop NEON assembly for HRSS.
d6e1f230b Add |SSL_export_traffic_secrets|.
3adb1e5a3 Patch out the XTS implementation in bsaes.
fc30467f2 Remove .file and .loc directives from HRSS ARM asm.
43cc9c6e8 Do not allow AES_128_GCM_SHA256 with CECPQ2.
1ea083d8b Always 16-byte align |poly| elements.
2526c66b7 Fix bug in HRSS tests.
7b935937b Add initial HRSS support.
602f4669a Forbid empty CertificateRequestsupported_signature_algorithms in TLS 1.2.
bf5021a6b Eliminate |OPENSSL_ia32cap_P| in C code in the FIPS module.
750fea158 Fix d2i_*_bio on partial reads.
ff433815b Fix |BN_HEX_FMT2|.
90247be1d Remove XOP code from sha512-x86_64.pl.
36ee9a5a0 Pretend AMD XOP was never a thing.
e6ad7a027 Drop some explicit SSLKeyShare destructors.
96b05ed48 Assume hyper-threading-like vulnerabilities are always present.
eb7d5b69e Replace the last CRITICAL_SECTION with SRWLOCK.
278b3120e Validate ClientHellos in tests some more.
0f5ecd3a8 Re-enable AES-NI on 32-bit x86 too.
e157dc920 Make symbol-prefixing work on 32-bit x86.
8c23d3a5d Make Windows symbol-prefixing work.
c8cf62bba Support Windows-style ar files.
1a0f908e9 Move __.SYMDEF handling to ar.go.
00d72d342 Fix stack_test.cc in the prefixed build.
8b0dad4a7 Don't double-mangle C++ symbols on macOS.
abbc59896 Make read_symbols.go a bit more idiomatic.
Change-Id: I45c8cc49fac5814ab09bc50163ad81cdad84e08a
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
Reviewed-on: https://nginx-review.googlesource.com/c/3601
Reviewed-by: Wayne Zhang <qiwzhang@google.com>
diff --git a/build.bzl b/build.bzl
index b91b2b1..e5b2038 100644
--- a/build.bzl
+++ b/build.bzl
@@ -602,7 +602,7 @@
def nginx_repositories_boringssl(bind):
native.git_repository(
name = "boringssl",
- commit = "14164f6fef47b7ebd97cdb0cea1624eabd6fe6b8", # 2018-11-27
+ commit = "5b8bd1ba221804c81c8a92c6d1d353ef43a851ab", # 2018-12-14
remote = "https://boringssl.googlesource.com/boringssl",
)
