Skip to content
Permalink
Branch: master
Commits on Apr 4, 2019
  1. deps: add ARM64 Windows support in openssl

    shigeki authored and BridgeAR committed Feb 23, 2019
    This adds ARM64 Windows support in the OpenSSL build system.
    
    Since OpenSSL's ARM64 Windows support does not have support for ASM--
    that is, VC-WIN64-ARM inherits from VC-noCE-common which has no ASM
    files--`openssl_no_asm.gypi` is always used for building. This
    essentially forces the 'no-asm' Configure flag.
    
    PR-URL: #26001
    Fixes: #25998
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Sam Roberts <vieuxtech@gmail.com>
Commits on Mar 5, 2019
  1. deps: add s390 asm rules for OpenSSL-1.1.1

    shigeki authored and sam-github committed Mar 7, 2018
    This is a floating patch against OpenSSL-1.1.1 to generate asm files
    with Makefile rules.
    
    PR-URL: #26327
    Reviewed-By: Gireesh Punathil <gpunathi@in.ibm.com>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    
    Original:
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
Commits on Jan 22, 2019
  1. tls: workaround handshakedone in renegotiation

    shigeki authored and sam-github committed Sep 12, 2018
    `SSL_CB_HANDSHAKE_START` and `SSL_CB_HANDSHAKE_DONE` are called
    sending HelloRequest in OpenSSL-1.1.1.
    We need to check whether this is in a renegotiation state or not.
    
    PR-URL: #25381
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    Reviewed-By: Shigeki Ohtsu <ohtsu@ohtsu.org>
  2. doc: fix assembler requirement for OpenSSL-1.1.1

    shigeki authored and sam-github committed Nov 10, 2018
    Add new requirements of assembler version for AVX-512 support
    in OpenSSL-1.1.1.
    
    PR-URL: #25381
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    Reviewed-By: Shigeki Ohtsu <ohtsu@ohtsu.org>
  3. deps: fix for non GNU assembler in AIX

    shigeki authored and sam-github committed Nov 15, 2018
    AIX has own assembler not GNU as that does not support --noexecstack.
    
    PR-URL: #25381
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    Reviewed-By: Shigeki Ohtsu <ohtsu@ohtsu.org>
  4. deps: add only avx2 configs for OpenSSL-1.1.1

    shigeki authored and sam-github committed Nov 8, 2018
    OpenSSL-1.1.1 has new support of AVX-512 but AVX-2 asm files still need
    to be generated for the older assembler support to keep backward
    compatibilities.
    
    PR-URL: #25381
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    Reviewed-By: Shigeki Ohtsu <ohtsu@ohtsu.org>
  5. deps: add s390 asm rules for OpenSSL-1.1.1

    shigeki authored and sam-github committed Mar 7, 2018
    This is a floating patch against OpenSSL-1.1.1 to generate asm files
    with Makefile rules.
    
    PR-URL: #25381
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    Reviewed-By: Shigeki Ohtsu <ohtsu@ohtsu.org>
  6. deps: fix MacOS and Win build for OpenSSL-1.1.1

    shigeki authored and sam-github committed Nov 1, 2018
    Because llvm on MacOS does not support AVX-512, asm files need to be limited to
    AVX-2 support even when they are generated on Linux.  fake_gcc.pl returns the
    fake llvm banner version for MacOS as if the assembler supports upto AVX-2.
    
    For Windows, makefiles for nmake were updated in OpenSSL-1.1.1 and they are
    rewritten into GNU makefile format by hand.
    
    PR-URL: #25381
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    Reviewed-By: Shigeki Ohtsu <ohtsu@ohtsu.org>
  7. deps: fix gyp/gypi for openssl-1.1.1

    shigeki authored and sam-github committed May 5, 2018
    Some of defines and cppflags in the build config of OpenSSL-1.1.1 were
    moved to new attributes. Gyp and gypi file generations are needed to be
    fixed to include them.
    
    PR-URL: #25381
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    Reviewed-By: Shigeki Ohtsu <ohtsu@ohtsu.org>
Commits on Nov 22, 2018
  1. deps: add s390 asm rules for OpenSSL-1.1.0

    shigeki authored and sam-github committed Mar 7, 2018
    This is a floating patch against OpenSSL-1.1.0 to generate asm files
    with Makefile rules and it is to be submitted to the upstream.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
    
    PR-URL: #24523
    Reviewed-By: Shigeki Ohtsu <ohtsu@ohtsu.org>
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
Commits on Aug 16, 2018
  1. test: fix error messages for OpenSSL-1.1.0i

    shigeki authored and rvagg committed Aug 14, 2018
    After upgradeing OpenSSL-1.1.0i, two tests are failed due to changes
    of error messages.
    
    Ref: openssl/openssl@45ae18b
    Ref: openssl/openssl@36d2517
    PR-URL: #22318
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
  2. deps: update archs files for OpenSSL-1.1.0i

    shigeki authored and rvagg committed Aug 14, 2018
    `cd deps/openssl/config; make` updates all archs dependant files.
    
    PR-URL: #22318
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
  3. deps: add s390 asm rules for OpenSSL-1.1.0

    shigeki authored and rvagg committed Mar 7, 2018
    This is a floating patch against OpenSSL-1.1.0 to generate asm files
    with Makefile rules and it is to be submitted to the upstream.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
  4. deps: upgrade openssl sources to 1.1.0i

    shigeki authored and rvagg committed Aug 14, 2018
    This updates all sources in deps/openssl/openssl with openssl-1.1.0i.
    
    PR-URL: #22318
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
Commits on Jun 13, 2018
  1. test: add tls write error regression test

    shigeki authored and MylesBorins committed Apr 12, 2018
    Add a mock TLS socket implementation and a regression test for
    the previous commit.
    
    Refs: nodejs-private/security#189
    PR-URL: nodejs-private/node-private#127
    Reviewed-By: Anna Henningsen <anna@addaleax.net>
    Reviewed-By: Evan Lucas <evanlucas@me.com>
Commits on Apr 28, 2018
  1. tls: fix getEphemeralKeyInfo to support X25519

    shigeki authored and BridgeAR committed Apr 25, 2018
    `EVP_PKEY_EC` only covers ANSI X9.62 curves not IETF ones(curve25519
    and curve448). This fixes to add support of X25519 in
    `tlsSocket.getEphemeralKeyInfo()`.
    X448 should be added in the future upgrade to OpenSSL-1.1.1.
    
    PR-URL: #20273
    Fixes: #20262
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Commits on Apr 23, 2018
  1. build: limit assembler version check on x86

    shigeki authored and jasnell committed Apr 23, 2018
    The current openssl checks assembler version only x86_64 or ia32
    target arch for use of AES-NI, AVX and AVX2.
    This requires --openssl-no-asm option during configure when an older
    assembler version is found only on x86_64 or ia32.
    
    PR-URL: #20226
    Fixes: #19944
    Refs: #20217
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Ali Ijaz Sheikh <ofrobots@google.com>
    Reviewed-By: Myles Borins <myles.borins@gmail.com>
    Reviewed-By: Richard Lau <riclau@uk.ibm.com>
Commits on Apr 12, 2018
  1. build, win: opt-in openssl_no_asm if no nasm found

    shigeki authored and sohtsu committed Apr 11, 2018
    Instead of automatically falling back to openssl_no_asm with warning
    if no nasm is found during build on Windows, this stops vcbuild.bat
    and requires users to specify openssl_no_asm option explicitly.
    
    Fixes: #19918
    PR-URL: #19943
    Refs: #19930
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Bartosz Sosnowski <bartosz@janeasystems.com>
Commits on Apr 9, 2018
  1. doc: fix API descriptions for OpenSSL-1.1.0

    shigeki committed Mar 14, 2018
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
  2. crypto: remove deperecated methods of TLS version

    shigeki committed Mar 14, 2018
    All version-specific methods were deprecated in OpenSSL 1.1.0 and
    min/max versions explicitly need to be set.
    This still keeps comptatible with JS and OpenSSL-1.0.2 APIs for now.
    
    crypto, constants: add constant of OpenSSL-1.1.0
    
    Several constants for OpenSSL-1.1.0 engine were removed and renamed in
    OpenSSL-1.1.0. This added one renamed constant in order to have a
    compatible feature with that of OpenSSL-1.0.2.
    Other missed or new constants in OpenSSL-1.1.0 are not yet added.
    
    crypto,tls,constants: remove OpenSSL1.0.2 support
    
    This is semver-majar change so that we need not to have
    compatibilities with older versions.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
  3. tools: install all header files OpenSSL-1.1.0

    shigeki committed Mar 14, 2018
    After upgrading OpenSSL-1.1.0, header files depends on architectures
    were changed. This fixes to copy all `deps/openssl/config/*.h' into
    the install directory.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
  4. test: remove openssl -no_rand_screen opts

    shigeki committed Feb 25, 2018
    This option was made from the floating patch of d269e07.
    It is no longer needed because the issue was resolved in
    OpenSSL-1.1.0.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
  5. build: add OpenSSL-1.1.0 support

    shigeki committed Mar 7, 2018
    - For Windows, nasm is new build requirements and openssl_no_asm is
      set to 1 with warning if it is not installed.
    - For use of openssl assemble codes, either gas_version >= 2.23,
      xcode_version >= 5.0 ,llvm_version >= 3.3 or nasm_version >= 2.10 is
      needed. Otherwise, openssl_no_asm is set to 1 with warning.
    - FIPS is not supported in OpenSSL-1.1.0 so that it leads an error
      when openssl_fips options is enabled in configure.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
  6. deps: update archs files for OpenSSL-1.1.0

    shigeki committed Mar 29, 2018
    `cd deps/openssl/config; make` updates all archs dependant files.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
  7. deps: add gyp, header and Makefile for openssl110

    shigeki committed Mar 7, 2018
    This commit has a new binding scheme in builing OpenSSL-1.1.0 library
    with Node. OpenSSL-1.1.0 uses a new build system with perl for various
    supported platforms. See `Configurations/README` and
    `Configurations/README.design` in the OpenSSL source for details.
    
    In order to build OpenSSL library without perl in the build of Node
    for various supported platforms, platform dependent files (e.g. asm
    and header files ) are pre-generated and stored into the `config/arch`
    directory.
    
    - Makefile and generate_gypi.pl
    Makefile has supported platform list and generates and copies platform
    dependent files (e.g. asm files) into arch directory with
    generate_gypi.pl. Platform dependent gypi files also created obtaining
    build information from `configdata.pm` that is generated with
    `Configure` in the OpenSSL build system.
    
    For Windows, `Configure` generates makefile that is only available to
    nmake command.  Since nmake is not supported in Linux,
    `Makefile_VC-WIN32` and `Makefile_VC-WIN64A` are made created by hand
    for the use of GNU make. If make rules or targets are changed in the
    version up of OpenSSL, they should be also updated.
    
    The following files are used in upgrading openssl-1.1.0.
    
    - gyp and gypi files
    openssl.gyp has two targets of openssl and openssl-cli referred from
    node.gyp. They includes asm and no_asm gypi files with arch dependent
    gypi according to its build options and platforms . The gyp data which
    is common with asm and no_asm are stored in openssl_common.gypi.
    
    - header files
    bn_conf.h, dso_conf.h and opensslconf.h are platform dependent in the
    OpenSSL sources. They are replaced with *.h.tmpl files to include the
    file in the `../../../config/` and referred to each arch files that
    depends on asm and no-asm option.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
  8. deps: add s390 asm rules for OpenSSL-1.1.0

    shigeki committed Mar 7, 2018
    This is a floating patch against OpenSSL-1.1.0 to generate asm files
    with Makefile rules and it is to be submitted to the upstream.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
  9. deps: delete files of OpenSSL-1.0.2

    shigeki committed Mar 7, 2018
    They are no longer necessary.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
  10. deps: upgrade openssl sources to 1.1.0h

    shigeki committed Mar 29, 2018
    This updates all sources in deps/openssl/openssl with openssl-1.1.0h.
    
    Fixes: #4270
    PR-URL: #19794
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
Commits on Mar 28, 2018
  1. deps: copy all openssl header files to include dir

    shigeki authored and MylesBorins committed Mar 27, 2018
    All symlink files in `deps/openssl/openssl/include/openssl/`
    are removed and replaced with real header files to avoid
    issues on Windows. Two files of opensslconf.h in crypto and
    include dir are replaced to refer config/opensslconf.h.
    
    PR-URL: #19638
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Tobias Nießen <tniessen@tnie.de>
    Reviewed-By: Rod Vagg <rod@vagg.org>
  2. deps: upgrade openssl sources to 1.0.2o

    shigeki authored and MylesBorins committed Mar 27, 2018
    This replaces all sources of openssl-1.0.2o.tar.gz into
    deps/openssl/openssl
    
    PR-URL: #19638
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Tobias Nießen <tniessen@tnie.de>
    Reviewed-By: Rod Vagg <rod@vagg.org>
Commits on Dec 7, 2017
  1. deps: update openssl asm and asm_obsolete files

    shigeki authored and MylesBorins committed Dec 7, 2017
    Regenerate asm files with Makefile and CC=gcc and ASM=nasm where gcc
    version was 5.4.0 and nasm version was 2.11.08.
    
    Also asm files in asm_obsolete dir to support old compiler and
    assembler are regenerated without CC and ASM envs.
    
    PR-URL: #17526
    Reviewed-By: Tobias Nießen <tniessen@tnie.de>
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Myles Borins <myles.borins@gmail.com>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
  2. deps: copy all openssl header files to include dir

    shigeki authored and MylesBorins committed Dec 7, 2017
    All symlink files in `deps/openssl/openssl/include/openssl/`
    are removed and replaced with real header files to avoid
    issues on Windows. Two files of opensslconf.h in crypto and
    include dir are replaced to refer config/opensslconf.h.
    
    PR-URL: #17526
    Reviewed-By: Tobias Nießen <tniessen@tnie.de>
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Myles Borins <myles.borins@gmail.com>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
  3. deps: upgrade openssl sources to 1.0.2n

    shigeki authored and MylesBorins committed Dec 7, 2017
    This replaces all sources of openssl-1.0.2n.tar.gz into
    deps/openssl/openssl
    
    PR-URL: #17526
    Reviewed-By: Tobias Nießen <tniessen@tnie.de>
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Myles Borins <myles.borins@gmail.com>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
    Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
Commits on Nov 3, 2017
  1. deps: update openssl asm and asm_obsolete files

    shigeki authored and MylesBorins committed Nov 2, 2017
    Regenerate asm files with Makefile and CC=gcc and ASM=nasm where gcc
    version was 5.4.0 and nasm version was 2.11.08.
    
    Also asm files in asm_obsolete dir to support old compiler and
    assembler are regenerated without CC and ASM envs.
    
    PR-URL: #16691
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Tobias Nießen <tniessen@tnie.de>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
    Reviewed-By: Myles Borins <myles.borins@gmail.com>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Gireesh Punathil <gpunathi@in.ibm.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
  2. deps: copy all openssl header files to include dir

    shigeki authored and MylesBorins committed Nov 2, 2017
    All symlink files in `deps/openssl/openssl/include/openssl/`
    are removed and replaced with real header files to avoid
    issues on Windows. Two files of opensslconf.h in crypto and
    include dir are replaced to refer config/opensslconf.h.
    
    PR-URL: #16691
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Tobias Nießen <tniessen@tnie.de>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
    Reviewed-By: Myles Borins <myles.borins@gmail.com>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Reviewed-By: Gireesh Punathil <gpunathi@in.ibm.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
Older
You can’t perform that action at this time.