ssl: upgrade FIPS boringssl version #27087
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Greg Greenway <ggreenway@apple.com>
repokitteh-read-only
bot
added
the
deps
|
CC @envoyproxy/dependency-shepherds: Your approval is needed for changes made to |
repokitteh-read-only
bot
removed
the
deps
|
Looks like a fragile change detector test has failed. /wait |
Signed-off-by: Greg Greenway <ggreenway@apple.com>
repokitteh-read-only
bot
added
deps
yanavlasov
approved these changes
May 1, 2023
|
/retest |
|
Retrying Azure Pipelines: |
michaelfinch
added a commit
to michaelfinch/envoy
that referenced
this pull request
May 2, 2023
* main: (175 commits) xds: add config for pick_first LB policy extension (envoyproxy#26952) ci: run Kotlin tests with signal_trace disabled (envoyproxy#27090) ssl: upgrade FIPS boringssl version (envoyproxy#27087) Add createPath to Filesystem abstraction. (envoyproxy#27052) mobile/ci: Increase test_timeout for ios tests (envoyproxy#27044) [mobile]remove Java and GMScore impl from Cronvoy (envoyproxy#27039) Fix compliance issues for iOS builds (envoyproxy#27027) docs: fix the license URL of the dependency "dd-trace-cpp" (envoyproxy#27054) ci/mobile: Hide CI progress in .bazelrc (envoyproxy#27045) thrift_proxy: add access log support for local reply (envoyproxy#27057) ci: Consolidate artifact targets (envoyproxy#27079) lb: moving maglev to extensions (envoyproxy#27037) Overload Manager: LoadShedPoint for HCM decode headers (envoyproxy#26769) Plumb ServerFactoryContext into header validator factory (envoyproxy#27008) access_log: use AccessLogType::NotSet instead of default value (envoyproxy#27058) access_log: pass access log type parameter to evaluate function (envoyproxy#27063) Remove unused member from GrpcStream (envoyproxy#27055) tools: setup build in local_fix_format (envoyproxy#27060) generic proxy: virtual host support for the generic proxy routing (envoyproxy#26932) deps: Bump pytooling publishing deps (envoyproxy#27059) ...
This was referenced Jul 7, 2023
reskin89
pushed a commit
to reskin89/envoy
that referenced
this pull request
Jul 11, 2023
* ssl: upgrade FIPS boringssl version Signed-off-by: Greg Greenway <ggreenway@apple.com> Signed-off-by: Ryan Eskin <ryan.eskin89@protonmail.com>
phlax
pushed a commit
to phlax/envoy
that referenced
this pull request
Jul 24, 2023
* ssl: upgrade FIPS boringssl version Signed-off-by: Greg Greenway <ggreenway@apple.com> Signed-off-by: Ryan Northey <ryan@synca.io>
phlax
pushed a commit
to phlax/envoy
that referenced
this pull request
Jul 24, 2023
* ssl: upgrade FIPS boringssl version Signed-off-by: Greg Greenway <ggreenway@apple.com> Signed-off-by: Ryan Northey <ryan@synca.io>
phlax
pushed a commit
to phlax/envoy
that referenced
this pull request
Jul 24, 2023
* ssl: upgrade FIPS boringssl version Signed-off-by: Greg Greenway <ggreenway@apple.com> Signed-off-by: Ryan Northey <ryan@synca.io>
phlax
pushed a commit
that referenced
this pull request
Jul 24, 2023
* ssl: upgrade FIPS boringssl version Signed-off-by: Greg Greenway <ggreenway@apple.com> Signed-off-by: Ryan Northey <ryan@synca.io>
phlax
pushed a commit
that referenced
this pull request
Jul 24, 2023
* ssl: upgrade FIPS boringssl version Signed-off-by: Greg Greenway <ggreenway@apple.com> Signed-off-by: Ryan Northey <ryan@synca.io>
phlax
pushed a commit
that referenced
this pull request
Jul 24, 2023
* ssl: upgrade FIPS boringssl version Signed-off-by: Greg Greenway <ggreenway@apple.com> Signed-off-by: Ryan Northey <ryan@synca.io>
phlax
added a commit
that referenced
this pull request
Jul 24, 2023
phlax
added a commit
to phlax/envoy
that referenced
this pull request
Jul 25, 2023
Follow up from: - envoyproxy#27087 - envoyproxy#27622 Signed-off-by: Ryan Northey <ryan@synca.io> Signed-off-by: phlax <phlax@users.noreply.github.com>
phlax
added a commit
that referenced
this pull request
Jul 25, 2023
phlax
added a commit
to phlax/envoy
that referenced
this pull request
Jul 25, 2023
Follow up from: - envoyproxy#27087 - envoyproxy#27622 Signed-off-by: Ryan Northey <ryan@synca.io> Signed-off-by: phlax <phlax@users.noreply.github.com>
phlax
added a commit
that referenced
this pull request
Jul 26, 2023
phlax
added a commit
to phlax/envoy
that referenced
this pull request
Jul 26, 2023
Follow up from: - envoyproxy#27087 - envoyproxy#27622 Signed-off-by: Ryan Northey <ryan@synca.io> Signed-off-by: phlax <phlax@users.noreply.github.com>
phlax
added a commit
that referenced
this pull request
Jul 26, 2023
alyssawilk
pushed a commit
that referenced
this pull request
Sep 19, 2023
Commit Message: QUICHE QUIC code and libraries are supposed to be hidden behind macro ENVOY_ENABLE_QUIC and envoy_select_enable_http3(). Any violation should have resulted in open SSL FIPS build error because of the interface incompatibility. But recent FIPS dependency update #27087 resolved the incompatibility. So upstream_request_lib unhide QUIC code accidentally. This change fix the dependency leakage and change some critical QUIC libraries to be wrapped in envoy_select_enable_http3 which skips building the libraries under bazel option //bazel:http3=False to avoid future leakage. Risk Level: low Testing: existing builds are happy Docs Changes: N/A Release Notes: N/A Platform Specific Features: N/A Signed-off-by: Dan Zhang <danzh@google.com> Co-authored-by: Dan Zhang <danzh@google.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Commit Message: Update FIPS BoringSSL version to 20210429
Additional Description:
Risk Level: low
Testing: existing tests
Docs Changes: none
Release Notes: none
Platform Specific Features: no changes
[Optional Runtime guard:]
[Optional Fixes #Issue]
[Optional Fixes commit #PR or SHA]
[Optional Deprecated:]
[Optional API Considerations:]