Bazel: update BoringSSL to 74161f4 / 2192bbc (master-with-bazel). 74161f485 Enforce presence of ALPN when QUIC is in use. 7d3a24d9d Fix the naming of alert error codes. 70fee1720 Use golang.org/x/crypto in runner. 281a8f5ea Disable ClientHello padding for QUIC. db129f3f3 Add X509_SIG_get0 and X509_SIG_getm. 8b601c88f Implement HPKE. cac93924a Disallow TLS 1.3 compatibility mode in QUIC. 54858b63c Switch clang-format IncludeBlocks to Preserve. d054e1bc6 Fix unterminated clang-format off. 1a63507c4 Add line number to doc.go error messages. f0558c359 Kick the bots. 8c0a6ebfc Add a JSON output to generate_build_files.py. 83b74c6a7 Add details of 20190808 FIPS certification. 8f88b27d6 Link to ws2_32 more consistently. de196121b Allow explicitly-encoded X.509v1 versions for now. eda849d2e Opaquify PKCS8_PRIV_KEY_INFO. 5d7c2f8b1 Implement i2d_PUBKEY and friends without crypto/asn1. d0637e901 Remove TRUST_TOKEN_experiment_v0. b9fbf4069 Clarify in-place rules for low-level AES mode functions. fb0c05cac acvp: add CMAC-AES support. c65506527 acvp: add SP800-108 KDF support. 25638f06e Remove x509->name. 939d426f6 Maybe build for AArch64 Windows. e2abade42 sha1-x86_64: fix CFI. 5d7446330 Use |crypto_word_t| and |size_t| more consistently in ECC scalar recoding. 7361ee42c Enable shaext path for sha1. 5fa22ed85 Avoid relying on SSL_get_session's behavior during the handshake. b3c5ac51d Add a -wait-for-debugger flag to runner. 86f86cbdf Add missing OPENSSL_EXPORT to X509_get_X509_PUBKEY. Change-Id: I278660cb046c96d0588f556a2178e38d711961d0 Signed-off-by: Piotr Sikora <piotrsikora@google.com> Reviewed-on: https://nginx-review.googlesource.com/c/nginx/+/3701
diff --git a/build.bzl b/build.bzl index 3a96e82..a0361a1 100644 --- a/build.bzl +++ b/build.bzl
@@ -609,9 +609,9 @@ def nginx_repositories_boringssl(bind): git_repository( name = "boringssl", - commit = "597b810379e126ae05d32c1d94b1a9464385acd0", # 2020-06-23 + commit = "2192bbc878822cf6ab5977d4257a1339453d9d39", # 2020-07-30 remote = "https://boringssl.googlesource.com/boringssl", - shallow_since = "1592935160 +0000", + shallow_since = "1596127363 +0000", ) if bind: