Bazel: update BoringSSL to 2e9bb4e / 1766b1c (master-with-bazel).

This update includes the following changes:

2e9bb4eb Fix comment about EarlyCCS.
861f28a6 Clear one more timeout when using gdb.
4519a5a0 Pass -fmsc-version=1900 to clang-cl.
3b5b87f5 Teach vs_toolchain.py to load both MSVC 2015 and 2017.
75d36eac No-op change to kick the bots
02afbd33 Build with clang-cl standalone.
392cedd0 Fx DH_set0_pqg.
12fdd08a Remove C4245 suppression.
1de690b9 Ignore unused value
6c1f2b77 Test that we tolerate server-sent supported groups.
a65c252f Further simplify error queue flags.
1c58471c Add TLS 1.3 EXPORTER_SECRET to SSLKEYLOGFILE.
e7136a97 Fix sha1.c's preprocessor checks.
a4bafd33 Add SSL_SESSION_{get,set}_protocol_version.
4c7f5fa0 Remove old TLS 1.3 variants (NoSessionID and RecordType).
51776b0a Document more of err.h.
e1c3dad9 Error data is always a NUL-terminated malloced string.
f4962494 Switch int to bool in ssl_cipher.cc.
ed9aed1a int to bool in ssl_versions.cc.
63a0797f Remove now unnecessary _POSIX_C_SOURCE bits to work around macOS bug.
b9493551 Add bssl::Span<T>::subspan and use it.
312e1e4f Quote CMAKE_OSX_SYSROOT.
57533465 Use BN_mod_exp_mont_consttime in dsa_priv_decode.
81f030b1 Switch OPENSSL_VERSION_NUMBER to 1.1.0.
ced6e766 Make all_tests.go output cleaner.
737d2dff Convert ClientHello tests to GTest.
e9c7b1c8 Add SSL_SESSION_is_single_use.
21fa6842 Have fun with lock scopers.
9eaa3bd5 Remove SSL_CTX_sessions and properly lock SSL_CTX_sess_number.
73d42e61 Inline ssl_clear_tls13_state.
b1cf48ea Store the peer_sigalgs as an Array.
879efc3f Switch more things to Array.
08f5c768 Convert more things to Array.
6b3ab726 Add an implicit CBS to Span<const uint8_t> conversion.
cf0ce676 Use Span and Array for the curve list.
499742c6 Introduce bssl::Array<T> and use it in SSLKeyShare.
6666886a Fix EnableIfContainer with MSVC 2015.
15868b3b Revert "Work around a Java client bug when rotating certificates."
42e93b6c Export EVP_parse_digest_algorithm and add EVP_marshal_digest_algorithm.
3a18bf04 Tidy up alignof #defines.
e58f8a6b Simplify tls1_change_cipher_spec.
38570b26 Clear a goto in d1_srtp.cc.
b7e5b08a Remove some redundant OPENSSL_cleanses.
b1b76aee Add SSL_CIPHER_get_prf_nid.
cecf1a72 Remove unused RSA_METHOD field.
c03c2181 Fix some issues with name constraints test certs.
4015000e Add a test for lots of names and constraints.
60931e2d Explicit fallthrough on switch
6b352622 Maintain EVP_MD_CTX invariants.
40b24c81 Add "-www" option to server tool.
5663b634 Write connection info to a BIO instead of stderr.
1d6e3652 Remove CHROMIUM_ROLLING_MAGENTA_TO_ZIRCON scaffolding.
2186fbc2 Refresh update_clang.py and download Windows Clang.
246e27d8 Switch the buggy RSA parser off by default.
f231d6bf Remove CTR_DRBG_STATE alignment marker.
6dc892fc Remove redundant calls to |OPENSSL_cleanse| and |OPENSSL_realloc_clean|.
c5cc88d8 Test that movsd without arguments is left as-is.
e314e1c0 Support [v]movsd in delocate.
32c5b8de delocate vmovq correctly.
e64ef27c Add EVP AES-128 CFB128 support via decrepit.
9a127b43 Add CRYPTO_needs_hwcap2_workaround.
82dfea8d Bound everything parsed by the legacy ASN.1 stack.
288ca7dc Remove ASN1_template_(i2d,d2i).
9a4876e1 Remove hmac.h include from ssl.h.
f51f273e Temporarily gate new Fuchsia APIs on CHROMIUM_ROLLING_MAGENTA_TO_ZIRCON.
36d59479 Update Fuchsia symbols that have been renamed
5a79ff5e Clarify some comments.
33fc2ba4 Opaquify SSL_CIPHER.
368cc3b7 Add support for SSLKEYLOGFILE to server tool.

Change-Id: I7b39b410778a81879abf4d4e6d83d4050cccb8ee
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
1 file changed
tree: 9305112dea8c2bb328d9c743716c8bb00854da61
  1. auto/
  2. conf/
  3. contrib/
  4. docs/
  5. misc/
  6. src/
  7. .hgtags
  8. BUILD
  9. build.bzl
  10. LICENSE
  11. README.md
  12. WORKSPACE
README.md

About

NGINX + BoringSSL + Brotli.

Building

To build nginx binary with Bazel:

$ bazel build :nginx

To build Debian package:

$ bazel build :nginx-google.deb

Contributing

This repository is currently maintained by Google developers.

Any code changes should be submitted to upstream NGINX.

License

Copyright (C) 2002-2017 Igor Sysoev
Copyright (C) 2011-2017 Nginx, Inc.
Copyright (C) 2015-2017 Google Inc.
All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
1. Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the distribution.

THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
SUCH DAMAGE.

Disclaimer

This is not an official Google product.