summaryrefslogtreecommitdiffhomepage
path: root/auto/lib/openssl (follow)
AgeCommit message (Collapse)AuthorFilesLines
2018-03-22Configure: restored "no-threads" in OpenSSL builds.Maxim Dounin1-1/+1
This was previously used, but was incorrectly removed in 83d54192e97b while removing old threads remnants. Instead of using it conditionally when threads are not used, we now set in unconditionally, as even with thread pools enabled we never call OpenSSL functions in threads. This fixes resulting binary when using --with-openssl with OpenSSL 1.1.0+ and without -lpthread linked (notably on FreeBSD without PCRE).
2018-03-22Configure: fixed static compilation with OpenSSL 1.1.1.Maxim Dounin1-7/+14
OpenSSL now uses pthread_atfork(), and this requires -lpthread on Linux to compile. Introduced NGX_LIBPTHREAD to add it as appropriate, similar to existing NGX_LIBDL.
2016-12-24Win32: compatiblity with OpenSSL 1.1.0.Maxim Dounin2-7/+22
OpenSSL 1.1.0 now uses normal "nmake; nmake install" instead of using custom "ms\do_ms.bat" script and "ms\nt.mak" makefile. And Configure now requires --prefix to be absolute, and no longer derives --openssldir from prefix (so it's specified explicitly). Generated libraries are now called "libcrypto.lib" and "libssl.lib" instead of "libeay32.lib" and "ssleay32.lib". Appropriate tests added to support both old and new variants. Additionally, openssl/lhash.h now triggers warning C4090 ('function' : different 'const' qualifiers), so the warning was disabled.
2016-03-31SSL: initialization changes for OpenSSL 1.1.0.Maxim Dounin1-1/+1
OPENSSL_config() deprecated in OpenSSL 1.1.0. Additionally, SSL_library_init(), SSL_load_error_strings() and OpenSSL_add_all_algorithms() are no longer available if OPENSSL_API_COMPAT is set to 0x10100000L. The OPENSSL_init_ssl() function is now used instead with appropriate arguments to trigger the same behaviour. The configure test changed to use SSL_CTX_set_options(). Deinitialization now happens automatically in OPENSSL_cleanup() called via atexit(3), so we no longer call EVP_cleanup() and ENGINE_cleanup() directly.
2016-02-19Configure: skip building OpenSSL documentation to conserve time.Sergey Kandaurov1-1/+1
The install_sw target first appeared in OpenSSL 0.9.7e and is documented since OpenSSL 1.0.0 as the way to install the OpenSSL software without documentation.
2016-02-18Configure: fixed static nginx build with OpenSSL (ticket #903).Ruslan Ermilov1-7/+8
Before 7142b04337d6, it was possible to build the OpenSSL library along with nginx, and link nginx statically with this library (--with-openssl=DIR --with-ld-opt=-static --with-http_ssl_module). This was broken on Linux by not adding -ldl after -lcrypto. The fix also makes it possible to link nginx statically on Linux with the system OpenSSL library, which never worked before.
2016-02-04Dynamic modules: dlopen() support.Maxim Dounin1-2/+1
2015-11-23Configure: fixed using OpenSSL include paths.Maxim Dounin1-0/+1
2015-06-10Configure: search OpenSSL in a bunch of standard places.Ruslan Ermilov1-0/+48
2015-03-13Configure: removed obsolete threads bits.Ruslan Ermilov1-5/+0
2013-11-04Configure: call "make clean" for OpenSSL only if Makefile exists.Piotr Sikora1-1/+1
This change allows to build nginx against git checkout of OpenSSL. Signed-off-by: Piotr Sikora <piotr@cloudflare.com>
2013-09-04Win32: MinGW GCC compatibility.Maxim Dounin1-0/+4
Several warnings silenced, notably (ngx_socket_t) -1 is now checked on socket operations instead of -1, as ngx_socket_t is unsigned on win32 and gcc complains on comparison. With this patch, it's now possible to compile nginx using mingw gcc, with options we normally compile on win32.
2012-01-18Copyright updated.Maxim Konovalov4-0/+4
2010-07-08stop ./configure on Win32 if no library sources was specified,Igor Sysoev1-3/+5
the bug has been introduced in r2894
2010-07-08do not use prebuild OpenSSL Win32 librariesIgor Sysoev1-34/+18
2010-04-02fix building OpenSSL-1.0.0 on 64-bit Linux:Igor Sysoev1-1/+1
make installs the libraries in lib64 directory
2010-04-01MSVC8 compatibility with OpenSSL 1.0.0Igor Sysoev3-4/+4
2009-09-28allow "make clean" for OpenSSL, the bug was introduced in r2874Igor Sysoev2-7/+7
2009-05-28*) use no-threads for Unix builds onlyIgor Sysoev1-15/+8
*) style fix
2009-05-26stop ./configure at once on library failureIgor Sysoev1-0/+11
2009-05-24allow absolute path in --with-openssl=Igor Sysoev1-1/+13
2009-05-22use -ldl for any OS that needs itIgor Sysoev1-13/+1
2009-05-19fix building OpenSSL on UnixIgor Sysoev2-14/+10
2009-05-14fix building OpenSSL on Win32Igor Sysoev4-21/+51
2009-05-12backout r2833: CURDIR was set to Unix style pathIgor Sysoev2-6/+15
instead, do chdir inside Makefile
2009-05-11use $(CURDIR) instead of "..\..\.." because the later does not allow to useIgor Sysoev1-2/+2
options as --with-zlib=../zlib-1.2.3. It seems there is no common way to learn the current directory in Win32 make's: although nmake has MAKEDIR variable, nevertheless Borland make's MAKEDIR is the directory where make is installed, and OpenWatcom wmake has no MAKEDIR at all.
2009-05-08test whether libdl is required for dynamic linking:Igor Sysoev1-2/+2
Solaris 10 has dlopen()/etc. in libc
2009-04-21*) move advapi32.lib to core libs since it's required for Registry and Event LogIgor Sysoev1-4/+4
*) delete shell32.lib since we do not use tray icon anymore
2009-04-15OpenSSL building by MSVC and BCC from sourcesIgor Sysoev2-5/+49
2007-01-10do not build OpenSSL with threads, if they are not usedIgor Sysoev1-3/+4
2006-11-27test PCRE in FreeBSD, Linux, and NetBSDIgor Sysoev1-0/+1
2005-12-05nginx-0.3.13-RELEASE importrelease-0.3.13Igor Sysoev2-20/+39
*) Feature: the IMAP/POP3 proxy supports STARTTLS and STLS. *) Bugfix: the IMAP/POP3 proxy did not work with the select, poll, and /dev/poll methods. *) Bugfix: in SSI handling. *) Bugfix: now Solaris sendfilev() is not used to transfer the client request body to FastCGI-server via the unix domain socket. *) Bugfix: the "auth_basic" directive did not disable the authorization; the bug had appeared in 0.3.11.
2005-11-15nginx-0.3.10-RELEASE importrelease-0.3.10Igor Sysoev1-0/+2
*) Change: the "valid_referers" directive and the "$invalid_referer" variable were moved to the new ngx_http_referer_module from the ngx_http_rewrite_module. *) Change: the "$apache_bytes_sent" variable name was changed to "$body_bytes_sent". *) Feature: the "$sent_http_..." variables. *) Feature: the "if" directive supports the "=" and "!=" operations. *) Feature: the "proxy_pass" directive supports the HTTPS protocol. *) Feature: the "proxy_set_body" directive. *) Feature: the "post_action" directive. *) Feature: the ngx_http_empty_gif_module. *) Feature: the "worker_cpu_affinity" directive for Linux. *) Bugfix: the "rewrite" directive did not unescape URI part in redirect, now it is unescaped except the %00-%25 and %7F-%FF characters. *) Bugfix: nginx could not be built by the icc 9.0 compiler. *) Bugfix: if the SSI was enabled for zero size static file, then the chunked response was encoded incorrectly.
2005-10-12nginx-0.3.2-RELEASE importrelease-0.3.2Igor Sysoev1-0/+6
*) Feature: the Sun Studio 10 C compiler support. *) Feature: the "proxy_upstream_max_fails", "proxy_upstream_fail_timeout", "fastcgi_upstream_max_fails", and "fastcgi_upstream_fail_timeout" directives.
2005-09-08nginx-0.1.45-RELEASE importrelease-0.1.45Igor Sysoev1-4/+0
*) Change: the "ssl_engine" directive was canceled in the ngx_http_ssl_module and now is introduced at global level. *) Bugfix: the responses with SSI subrequests did not transferred via SSL connection. *) Various bug fixes in the IMAP/POP3 proxy.
2005-03-19nginx-0.1.25-RELEASE importrelease-0.1.25Igor Sysoev1-8/+19
*) Bugfix: nginx did run on Linux parisc. *) Feature: nginx now does not start under FreeBSD if the sysctl kern.ipc.somaxconn value is too big. *) Bugfix: if a request was internally redirected by the ngx_http_index_module module to the ngx_http_proxy_module or ngx_http_fastcgi_module modules, then the index file was not closed after request completion. *) Feature: the "proxy_pass" can be used in location with regular expression. *) Feature: the ngx_http_rewrite_filter_module module supports the condition like "if ($HTTP_USER_AGENT ~ MSIE)". *) Bugfix: nginx started too slow if the large number of addresses and text values were used in the "geo" directive. *) Change: a variable name must be declared as "$name" in the "geo" directive. The previous variant without "$" is still supported, but will be removed soon. *) Feature: the "%{VARIABLE}v" logging parameter. *) Feature: the "set $name value" directive. *) Bugfix: gcc 4.0 compatibility. *) Feature: the --with-openssl-opt=OPTIONS autoconfiguration directive.
2005-02-22nginx-0.1.21-RELEASE importrelease-0.1.21Igor Sysoev2-2/+2
*) Bugfix: the ngx_http_stub_status_module showed incorrect statistics if "rtsig" method was used or if several worker process ran on SMP. *) Bugfix: nginx could not be built by the icc compiler on Linux or if the zlib-1.2.x library was building from sources. *) Bugfix: nginx could not be built on NetBSD 2.0.
2005-01-18nginx-0.1.14-RELEASE importrelease-0.1.14Igor Sysoev2-0/+7
*) Feature: the autoconfiguration directives: --http-client-body-temp-path=PATH, --http-proxy-temp-path=PATH, and --http-fastcgi-temp-path=PATH *) Change: the directory name for the temporary files with the client request body is specified by directive client_body_temp_path, by default it is <prefix>/client_body_temp. *) Feature: the ngx_http_fastcgi_module and the directives: fastcgi_pass, fastcgi_root, fastcgi_index, fastcgi_params, fastcgi_connect_timeout, fastcgi_send_timeout, fastcgi_read_timeout, fastcgi_send_lowat, fastcgi_header_buffer_size, fastcgi_buffers, fastcgi_busy_buffers_size, fastcgi_temp_path, fastcgi_max_temp_file_size, fastcgi_temp_file_write_size, fastcgi_next_upstream, and fastcgi_x_powered_by. *) Bugfix: the "[alert] zero size buf" error; the bug had appeared in 0.1.3. *) Change: the URI must be specified after the host name in the proxy_pass directive. *) Change: the %3F symbol in the URI was considered as the argument string start. *) Feature: the unix domain sockets support in the ngx_http_proxy_module. *) Feature: the ssl_engine and ssl_ciphers directives. Thanks to Sergey Skvortsov for SSL-accelerator.
2004-11-25nginx-0.1.9-RELEASE importrelease-0.1.9Igor Sysoev2-4/+3
*) Bugfix: the proxied request was sent without arguments if the request contains "//", "/./", "/../" or "%XX". *) Bugfix: the large compressed responses may be transferred not completely. *) Bugfix: the files bigger than 2G was not transferred on Linux that does not support sendfile64(). *) Bugfix: while the build configuration on Linux the --with-poll_module parameter was required; the bug had appeared in 0.1.8.
2004-10-21nginx-0.1.2-RELEASE importrelease-0.1.2Igor Sysoev1-10/+9
*) Feature: the --user=USER, --group=GROUP, and --with-ld-opt=OPTIONS options in configure. *) Feature: the server_name directive supports *.domain.tld. *) Bugfix: the portability improvements. *) Bugfix: if configuration file was set in command line, the reconfiguration was impossible; the bug had appeared in 0.1.1. *) Bugfix: proxy module may get caught in an endless loop when sendfile is not used. *) Bugfix: with sendfile the response was not recoded according to the charset module directives; the bug had appeared in 0.1.1. *) Bugfix: very seldom bug in the kqueue processing. *) Bugfix: the gzip module compressed the proxied responses that was already compressed.
2004-09-29nginx-0.1.0-2004-09-29-20:00:49 import; remove years from copyrightIgor Sysoev2-0/+6
2004-07-25nginx-0.0.7-2004-07-25-22:34:14 importIgor Sysoev2-0/+53