Bazel: update BoringSSL to 2e9bb4e / 1766b1c (master-with-bazel).
This update includes the following changes:
2e9bb4eb Fix comment about EarlyCCS.
861f28a6 Clear one more timeout when using gdb.
4519a5a0 Pass -fmsc-version=1900 to clang-cl.
3b5b87f5 Teach vs_toolchain.py to load both MSVC 2015 and 2017.
75d36eac No-op change to kick the bots
02afbd33 Build with clang-cl standalone.
392cedd0 Fx DH_set0_pqg.
12fdd08a Remove C4245 suppression.
1de690b9 Ignore unused value
6c1f2b77 Test that we tolerate server-sent supported groups.
a65c252f Further simplify error queue flags.
1c58471c Add TLS 1.3 EXPORTER_SECRET to SSLKEYLOGFILE.
e7136a97 Fix sha1.c's preprocessor checks.
a4bafd33 Add SSL_SESSION_{get,set}_protocol_version.
4c7f5fa0 Remove old TLS 1.3 variants (NoSessionID and RecordType).
51776b0a Document more of err.h.
e1c3dad9 Error data is always a NUL-terminated malloced string.
f4962494 Switch int to bool in ssl_cipher.cc.
ed9aed1a int to bool in ssl_versions.cc.
63a0797f Remove now unnecessary _POSIX_C_SOURCE bits to work around macOS bug.
b9493551 Add bssl::Span<T>::subspan and use it.
312e1e4f Quote CMAKE_OSX_SYSROOT.
57533465 Use BN_mod_exp_mont_consttime in dsa_priv_decode.
81f030b1 Switch OPENSSL_VERSION_NUMBER to 1.1.0.
ced6e766 Make all_tests.go output cleaner.
737d2dff Convert ClientHello tests to GTest.
e9c7b1c8 Add SSL_SESSION_is_single_use.
21fa6842 Have fun with lock scopers.
9eaa3bd5 Remove SSL_CTX_sessions and properly lock SSL_CTX_sess_number.
73d42e61 Inline ssl_clear_tls13_state.
b1cf48ea Store the peer_sigalgs as an Array.
879efc3f Switch more things to Array.
08f5c768 Convert more things to Array.
6b3ab726 Add an implicit CBS to Span<const uint8_t> conversion.
cf0ce676 Use Span and Array for the curve list.
499742c6 Introduce bssl::Array<T> and use it in SSLKeyShare.
6666886a Fix EnableIfContainer with MSVC 2015.
15868b3b Revert "Work around a Java client bug when rotating certificates."
42e93b6c Export EVP_parse_digest_algorithm and add EVP_marshal_digest_algorithm.
3a18bf04 Tidy up alignof #defines.
e58f8a6b Simplify tls1_change_cipher_spec.
38570b26 Clear a goto in d1_srtp.cc.
b7e5b08a Remove some redundant OPENSSL_cleanses.
b1b76aee Add SSL_CIPHER_get_prf_nid.
cecf1a72 Remove unused RSA_METHOD field.
c03c2181 Fix some issues with name constraints test certs.
4015000e Add a test for lots of names and constraints.
60931e2d Explicit fallthrough on switch
6b352622 Maintain EVP_MD_CTX invariants.
40b24c81 Add "-www" option to server tool.
5663b634 Write connection info to a BIO instead of stderr.
1d6e3652 Remove CHROMIUM_ROLLING_MAGENTA_TO_ZIRCON scaffolding.
2186fbc2 Refresh update_clang.py and download Windows Clang.
246e27d8 Switch the buggy RSA parser off by default.
f231d6bf Remove CTR_DRBG_STATE alignment marker.
6dc892fc Remove redundant calls to |OPENSSL_cleanse| and |OPENSSL_realloc_clean|.
c5cc88d8 Test that movsd without arguments is left as-is.
e314e1c0 Support [v]movsd in delocate.
32c5b8de delocate vmovq correctly.
e64ef27c Add EVP AES-128 CFB128 support via decrepit.
9a127b43 Add CRYPTO_needs_hwcap2_workaround.
82dfea8d Bound everything parsed by the legacy ASN.1 stack.
288ca7dc Remove ASN1_template_(i2d,d2i).
9a4876e1 Remove hmac.h include from ssl.h.
f51f273e Temporarily gate new Fuchsia APIs on CHROMIUM_ROLLING_MAGENTA_TO_ZIRCON.
36d59479 Update Fuchsia symbols that have been renamed
5a79ff5e Clarify some comments.
33fc2ba4 Opaquify SSL_CIPHER.
368cc3b7 Add support for SSLKEYLOGFILE to server tool.
Change-Id: I7b39b410778a81879abf4d4e6d83d4050cccb8ee
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
diff --git a/build.bzl b/build.bzl
index 392d757..0cd4e49 100644
--- a/build.bzl
+++ b/build.bzl
@@ -602,7 +602,7 @@
def nginx_repositories_boringssl(bind):
native.git_repository(
name = "boringssl",
- commit = "5ddc9cd665162147eeea3283cc8253f61bc932cf", # 2017-09-12
+ commit = "1766b1c5997101ce8089e9ac29b903c6ef17c372", # 2017-10-06
remote = "https://boringssl.googlesource.com/boringssl",
)
