commit | 1b697c7e7974c0d1237c378b47cc8ea695e35e0b | [log] [tgz] |
---|---|---|
author | Piotr Sikora <piotrsikora@google.com> | Tue Oct 10 16:09:02 2017 -0700 |
committer | Piotr Sikora <piotrsikora@google.com> | Tue Oct 10 16:09:02 2017 -0700 |
tree | 9305112dea8c2bb328d9c743716c8bb00854da61 | |
parent | 5c447aebb83802efbec770275fde0d742cec807b [diff] |
Bazel: update BoringSSL to 2e9bb4e / 1766b1c (master-with-bazel). This update includes the following changes: 2e9bb4eb Fix comment about EarlyCCS. 861f28a6 Clear one more timeout when using gdb. 4519a5a0 Pass -fmsc-version=1900 to clang-cl. 3b5b87f5 Teach vs_toolchain.py to load both MSVC 2015 and 2017. 75d36eac No-op change to kick the bots 02afbd33 Build with clang-cl standalone. 392cedd0 Fx DH_set0_pqg. 12fdd08a Remove C4245 suppression. 1de690b9 Ignore unused value 6c1f2b77 Test that we tolerate server-sent supported groups. a65c252f Further simplify error queue flags. 1c58471c Add TLS 1.3 EXPORTER_SECRET to SSLKEYLOGFILE. e7136a97 Fix sha1.c's preprocessor checks. a4bafd33 Add SSL_SESSION_{get,set}_protocol_version. 4c7f5fa0 Remove old TLS 1.3 variants (NoSessionID and RecordType). 51776b0a Document more of err.h. e1c3dad9 Error data is always a NUL-terminated malloced string. f4962494 Switch int to bool in ssl_cipher.cc. ed9aed1a int to bool in ssl_versions.cc. 63a0797f Remove now unnecessary _POSIX_C_SOURCE bits to work around macOS bug. b9493551 Add bssl::Span<T>::subspan and use it. 312e1e4f Quote CMAKE_OSX_SYSROOT. 57533465 Use BN_mod_exp_mont_consttime in dsa_priv_decode. 81f030b1 Switch OPENSSL_VERSION_NUMBER to 1.1.0. ced6e766 Make all_tests.go output cleaner. 737d2dff Convert ClientHello tests to GTest. e9c7b1c8 Add SSL_SESSION_is_single_use. 21fa6842 Have fun with lock scopers. 9eaa3bd5 Remove SSL_CTX_sessions and properly lock SSL_CTX_sess_number. 73d42e61 Inline ssl_clear_tls13_state. b1cf48ea Store the peer_sigalgs as an Array. 879efc3f Switch more things to Array. 08f5c768 Convert more things to Array. 6b3ab726 Add an implicit CBS to Span<const uint8_t> conversion. cf0ce676 Use Span and Array for the curve list. 499742c6 Introduce bssl::Array<T> and use it in SSLKeyShare. 6666886a Fix EnableIfContainer with MSVC 2015. 15868b3b Revert "Work around a Java client bug when rotating certificates." 42e93b6c Export EVP_parse_digest_algorithm and add EVP_marshal_digest_algorithm. 3a18bf04 Tidy up alignof #defines. e58f8a6b Simplify tls1_change_cipher_spec. 38570b26 Clear a goto in d1_srtp.cc. b7e5b08a Remove some redundant OPENSSL_cleanses. b1b76aee Add SSL_CIPHER_get_prf_nid. cecf1a72 Remove unused RSA_METHOD field. c03c2181 Fix some issues with name constraints test certs. 4015000e Add a test for lots of names and constraints. 60931e2d Explicit fallthrough on switch 6b352622 Maintain EVP_MD_CTX invariants. 40b24c81 Add "-www" option to server tool. 5663b634 Write connection info to a BIO instead of stderr. 1d6e3652 Remove CHROMIUM_ROLLING_MAGENTA_TO_ZIRCON scaffolding. 2186fbc2 Refresh update_clang.py and download Windows Clang. 246e27d8 Switch the buggy RSA parser off by default. f231d6bf Remove CTR_DRBG_STATE alignment marker. 6dc892fc Remove redundant calls to |OPENSSL_cleanse| and |OPENSSL_realloc_clean|. c5cc88d8 Test that movsd without arguments is left as-is. e314e1c0 Support [v]movsd in delocate. 32c5b8de delocate vmovq correctly. e64ef27c Add EVP AES-128 CFB128 support via decrepit. 9a127b43 Add CRYPTO_needs_hwcap2_workaround. 82dfea8d Bound everything parsed by the legacy ASN.1 stack. 288ca7dc Remove ASN1_template_(i2d,d2i). 9a4876e1 Remove hmac.h include from ssl.h. f51f273e Temporarily gate new Fuchsia APIs on CHROMIUM_ROLLING_MAGENTA_TO_ZIRCON. 36d59479 Update Fuchsia symbols that have been renamed 5a79ff5e Clarify some comments. 33fc2ba4 Opaquify SSL_CIPHER. 368cc3b7 Add support for SSLKEYLOGFILE to server tool. Change-Id: I7b39b410778a81879abf4d4e6d83d4050cccb8ee Signed-off-by: Piotr Sikora <piotrsikora@google.com>
To build nginx
binary with Bazel:
$ bazel build :nginx
To build Debian package:
$ bazel build :nginx-google.deb
This repository is currently maintained by Google developers.
Any code changes should be submitted to upstream NGINX.
Copyright (C) 2002-2017 Igor Sysoev Copyright (C) 2011-2017 Nginx, Inc. Copyright (C) 2015-2017 Google Inc. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
This is not an official Google product.