tree 5cc05779c65f34b18edae42a1c4ad4f846fe6b4c
parent f134273bd998f614731f04f1dd9dd8b3ebb7a9d7
author Piotr Sikora <piotrsikora@google.com> 1617862997 -0700
committer Piotr Sikora <piotrsikora@google.com> 1617922926 +0000

Bazel: update BoringSSL to dfe0b01 / 55b3946 (master-with-bazel).

dfe0b01b3 Stub out some more of PKCS7.
24df734d2 Remove TODO to reverse the output of PKCS12_parse.
d4fdb7bae Make the X509_VAL structure opaque.
abd6c05a4 Support creating unencrypted PKCS#12 files.
84c0c900f Move PKCS#12 samples to embed_test_data.
a1d1a6758 Remove some remnants of TLS 1.3 downgrade carveouts.
e9315d5f8 Remove X509_REQ_to_X509.
e7bb89bae Fix OPENSSL_EC_* constants and add EC_GROUP_get_asn1_flag
0a86cbff4 RAND_set_rand_method returns int.
eb5640bc4 Check the inner and outer CRL signature algorithms match.
a3aeea7c7 Remove block_mask from EVP_CIPHER_CTX.
f69624a16 Document a couple more functions in x509.h.
89d124148 Define X509V*_VERSION constants.
d707bc026 Handle the default X.509 version explicitly.
565226278 Compile for RISC-V.
409ea2837 Add ECDSA nonce-testing functions.
fd68d7552 Rearrange ECDSA implementation.
e7b567501 Split the FIPS mode PRNG lock in two.
94634a72b Remove legacy vs_toolchain.py environment variable.
065314748 runner: Rename 'masterSecret' on session objects to plain 'secret'.
8640b412d Test ECDSA signing is non-deterministic.
bc0a4f1f0 acvp: split ACVP modulewrapper for reuse by Trusty
1a7456ac1 No-op CL to trigger some builds.
48d80bb6c Use CIPD Go packages.
814465f01 Update CMake on the bots and switch to CIPD where available.
e5d41a57e Future-proof vs_toolchain.py for VS2019.
be9a86f45 Revert "Revert "Disable check that X.509 extensions implies v3.""
bbd1742f6 Update Clang and Go on the bots.

Change-Id: I16417c576591ba5ae93e3e9e4ddaf9fe0df9ec04
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
Reviewed-on: https://nginx-review.googlesource.com/c/nginx/+/3860
Reviewed-by: Patryk Lesiewicz <patryk@google.com>