Bazel: update BoringSSL to dfe0b01 / 55b3946 (master-with-bazel). dfe0b01b3 Stub out some more of PKCS7. 24df734d2 Remove TODO to reverse the output of PKCS12_parse. d4fdb7bae Make the X509_VAL structure opaque. abd6c05a4 Support creating unencrypted PKCS#12 files. 84c0c900f Move PKCS#12 samples to embed_test_data. a1d1a6758 Remove some remnants of TLS 1.3 downgrade carveouts. e9315d5f8 Remove X509_REQ_to_X509. e7bb89bae Fix OPENSSL_EC_* constants and add EC_GROUP_get_asn1_flag 0a86cbff4 RAND_set_rand_method returns int. eb5640bc4 Check the inner and outer CRL signature algorithms match. a3aeea7c7 Remove block_mask from EVP_CIPHER_CTX. f69624a16 Document a couple more functions in x509.h. 89d124148 Define X509V*_VERSION constants. d707bc026 Handle the default X.509 version explicitly. 565226278 Compile for RISC-V. 409ea2837 Add ECDSA nonce-testing functions. fd68d7552 Rearrange ECDSA implementation. e7b567501 Split the FIPS mode PRNG lock in two. 94634a72b Remove legacy vs_toolchain.py environment variable. 065314748 runner: Rename 'masterSecret' on session objects to plain 'secret'. 8640b412d Test ECDSA signing is non-deterministic. bc0a4f1f0 acvp: split ACVP modulewrapper for reuse by Trusty 1a7456ac1 No-op CL to trigger some builds. 48d80bb6c Use CIPD Go packages. 814465f01 Update CMake on the bots and switch to CIPD where available. e5d41a57e Future-proof vs_toolchain.py for VS2019. be9a86f45 Revert "Revert "Disable check that X.509 extensions implies v3."" bbd1742f6 Update Clang and Go on the bots. Change-Id: I16417c576591ba5ae93e3e9e4ddaf9fe0df9ec04 Signed-off-by: Piotr Sikora <piotrsikora@google.com> Reviewed-on: https://nginx-review.googlesource.com/c/nginx/+/3860 Reviewed-by: Patryk Lesiewicz <patryk@google.com>
diff --git a/build.bzl b/build.bzl index 4800a24..c331e16 100644 --- a/build.bzl +++ b/build.bzl
@@ -609,9 +609,9 @@ def nginx_repositories_boringssl(bind): git_repository( name = "boringssl", - commit = "8d60b0d092bd6e637d11b2ec7b34c1001beed6f5", # 2021-02-17 + commit = "55b3946d1d961e76ec0a21b37c20457efd273af6", # 2021-03-02 remote = "https://boringssl.googlesource.com/boringssl", - shallow_since = "1613527634 +0000", + shallow_since = "1614643264 +0000", ) if bind: