summaryrefslogtreecommitdiffhomepage
path: root/auto/lib/openssl (follow)
AgeCommit message (Collapse)AuthorFilesLines
2024-02-26Configure: added support for Homebrew on Apple Silicon.Piotr Sikora1-0/+18
Signed-off-by: Piotr Sikora <piotr@aviatrix.com>
2023-06-21SSL: avoid using OpenSSL config in build directory (ticket #2404).Maxim Dounin1-0/+2
With this change, the NGX_OPENSSL_NO_CONFIG macro is defined when nginx is asked to build OpenSSL itself. And with this macro automatic loading of OpenSSL configuration (from the build directory) is prevented unless the OPENSSL_CONF environment variable is explicitly set. Note that not loading configuration is broken in OpenSSL 1.1.1 and 1.1.1a (fixed in OpenSSL 1.1.1b, see https://github.com/openssl/openssl/issues/7350). If nginx is used to compile these OpenSSL versions, configuring nginx with NGX_OPENSSL_NO_CONFIG explicitly set to 0 might be used as a workaround.
2023-03-29Merged with the default branch.Sergey Kandaurov2-2/+15
2023-02-23Win32: OpenSSL compilation for x64 targets with MSVC.Maxim Dounin2-2/+15
To ensure proper target selection the NGX_MACHINE variable is now set based on the MSVC compiler output, and the OpenSSL target is set based on it. This is not important as long as "no-asm" is used (as in misc/GNUmakefile and win32 build instructions), but might be beneficial if someone is trying to build OpenSSL with assembler code.
2023-02-22QUIC: OpenSSL compatibility layer.Roman Arutyunyan1-24/+30
The change allows to compile QUIC with OpenSSL which lacks BoringSSL QUIC API. This implementation does not support 0-RTT.
2022-09-07Win32: disabled threads support in OpenSSL builds.Maxim Dounin1-1/+1
Threads are disabled during UNIX builds (see b329c0ab1a48), and also not needed for Windows builds. This used to be the default before OpenSSL 1.1.0.
2022-10-20Merged with the default branch.Sergey Kandaurov1-1/+1
2021-09-27Configure: fixed QUIC support test.Ruslan Ermilov1-23/+22
OpenSSL library QUIC support cannot be tested at configure time when using the --with-openssl option so assume it's present if requested. While here, fixed the error message in case QUIC support is missing.
2021-09-27Configure: check for QUIC 0-RTT support at compile time.Ruslan Ermilov1-9/+0
2021-09-21Configure: simplified condition.Ruslan Ermilov1-3/+0
2021-09-14Removed NGX_OPENSSL_QUIC macro, NGX_QUIC is enough.Ruslan Ermilov1-3/+1
2021-09-09Changed the OpenSSL QUIC support detection.Ruslan Ermilov1-1/+1
As was changed in 253cf267f95a.
2020-07-21QUIC: added "quic" listen parameter.Roman Arutyunyan1-0/+1
The parameter allows processing HTTP/0.9-2 over QUIC. Also, introduced ngx_http_quic_module and moved QUIC settings there
2020-06-01Compatibility with BoringSSL master branch.Sergey Kandaurov1-0/+12
Recently BoringSSL introduced SSL_set_quic_early_data_context() that serves as an additional constrain to enable 0-RTT in QUIC. Relevant changes: * https://boringssl.googlesource.com/boringssl/+/7c52299%5E!/ * https://boringssl.googlesource.com/boringssl/+/8519432%5E!/
2020-05-01Configure: fixed static compilation with OpenSSL 1.1.1 / BoringSSL.Sergey Kandaurov1-1/+1
See 7246:04ebf29eaf5b for details.
2020-04-30Configure: unbreak with old OpenSSL, --with-http_v3_module added.Sergey Kandaurov1-8/+26
2020-02-28HTTP UDP layer, QUIC support autotest.Sergey Kandaurov1-0/+9
2018-03-22Configure: restored "no-threads" in OpenSSL builds.Maxim Dounin1-1/+1
This was previously used, but was incorrectly removed in 83d54192e97b while removing old threads remnants. Instead of using it conditionally when threads are not used, we now set in unconditionally, as even with thread pools enabled we never call OpenSSL functions in threads. This fixes resulting binary when using --with-openssl with OpenSSL 1.1.0+ and without -lpthread linked (notably on FreeBSD without PCRE).
2018-03-22Configure: fixed static compilation with OpenSSL 1.1.1.Maxim Dounin1-7/+14
OpenSSL now uses pthread_atfork(), and this requires -lpthread on Linux to compile. Introduced NGX_LIBPTHREAD to add it as appropriate, similar to existing NGX_LIBDL.
2016-12-24Win32: compatiblity with OpenSSL 1.1.0.Maxim Dounin2-7/+22
OpenSSL 1.1.0 now uses normal "nmake; nmake install" instead of using custom "ms\do_ms.bat" script and "ms\nt.mak" makefile. And Configure now requires --prefix to be absolute, and no longer derives --openssldir from prefix (so it's specified explicitly). Generated libraries are now called "libcrypto.lib" and "libssl.lib" instead of "libeay32.lib" and "ssleay32.lib". Appropriate tests added to support both old and new variants. Additionally, openssl/lhash.h now triggers warning C4090 ('function' : different 'const' qualifiers), so the warning was disabled.
2016-03-31SSL: initialization changes for OpenSSL 1.1.0.Maxim Dounin1-1/+1
OPENSSL_config() deprecated in OpenSSL 1.1.0. Additionally, SSL_library_init(), SSL_load_error_strings() and OpenSSL_add_all_algorithms() are no longer available if OPENSSL_API_COMPAT is set to 0x10100000L. The OPENSSL_init_ssl() function is now used instead with appropriate arguments to trigger the same behaviour. The configure test changed to use SSL_CTX_set_options(). Deinitialization now happens automatically in OPENSSL_cleanup() called via atexit(3), so we no longer call EVP_cleanup() and ENGINE_cleanup() directly.
2016-02-19Configure: skip building OpenSSL documentation to conserve time.Sergey Kandaurov1-1/+1
The install_sw target first appeared in OpenSSL 0.9.7e and is documented since OpenSSL 1.0.0 as the way to install the OpenSSL software without documentation.
2016-02-18Configure: fixed static nginx build with OpenSSL (ticket #903).Ruslan Ermilov1-7/+8
Before 7142b04337d6, it was possible to build the OpenSSL library along with nginx, and link nginx statically with this library (--with-openssl=DIR --with-ld-opt=-static --with-http_ssl_module). This was broken on Linux by not adding -ldl after -lcrypto. The fix also makes it possible to link nginx statically on Linux with the system OpenSSL library, which never worked before.
2016-02-04Dynamic modules: dlopen() support.Maxim Dounin1-2/+1
2015-11-23Configure: fixed using OpenSSL include paths.Maxim Dounin1-0/+1
2015-06-10Configure: search OpenSSL in a bunch of standard places.Ruslan Ermilov1-0/+48
2015-03-13Configure: removed obsolete threads bits.Ruslan Ermilov1-5/+0
2013-11-04Configure: call "make clean" for OpenSSL only if Makefile exists.Piotr Sikora1-1/+1
This change allows to build nginx against git checkout of OpenSSL. Signed-off-by: Piotr Sikora <piotr@cloudflare.com>
2013-09-04Win32: MinGW GCC compatibility.Maxim Dounin1-0/+4
Several warnings silenced, notably (ngx_socket_t) -1 is now checked on socket operations instead of -1, as ngx_socket_t is unsigned on win32 and gcc complains on comparison. With this patch, it's now possible to compile nginx using mingw gcc, with options we normally compile on win32.
2012-01-18Copyright updated.Maxim Konovalov4-0/+4
2010-07-08stop ./configure on Win32 if no library sources was specified,Igor Sysoev1-3/+5
the bug has been introduced in r2894
2010-07-08do not use prebuild OpenSSL Win32 librariesIgor Sysoev1-34/+18
2010-04-02fix building OpenSSL-1.0.0 on 64-bit Linux:Igor Sysoev1-1/+1
make installs the libraries in lib64 directory
2010-04-01MSVC8 compatibility with OpenSSL 1.0.0Igor Sysoev3-4/+4
2009-09-28allow "make clean" for OpenSSL, the bug was introduced in r2874Igor Sysoev2-7/+7
2009-05-28*) use no-threads for Unix builds onlyIgor Sysoev1-15/+8
*) style fix
2009-05-26stop ./configure at once on library failureIgor Sysoev1-0/+11
2009-05-24allow absolute path in --with-openssl=Igor Sysoev1-1/+13
2009-05-22use -ldl for any OS that needs itIgor Sysoev1-13/+1
2009-05-19fix building OpenSSL on UnixIgor Sysoev2-14/+10
2009-05-14fix building OpenSSL on Win32Igor Sysoev4-21/+51
2009-05-12backout r2833: CURDIR was set to Unix style pathIgor Sysoev2-6/+15
instead, do chdir inside Makefile
2009-05-11use $(CURDIR) instead of "..\..\.." because the later does not allow to useIgor Sysoev1-2/+2
options as --with-zlib=../zlib-1.2.3. It seems there is no common way to learn the current directory in Win32 make's: although nmake has MAKEDIR variable, nevertheless Borland make's MAKEDIR is the directory where make is installed, and OpenWatcom wmake has no MAKEDIR at all.
2009-05-08test whether libdl is required for dynamic linking:Igor Sysoev1-2/+2
Solaris 10 has dlopen()/etc. in libc
2009-04-21*) move advapi32.lib to core libs since it's required for Registry and Event LogIgor Sysoev1-4/+4
*) delete shell32.lib since we do not use tray icon anymore
2009-04-15OpenSSL building by MSVC and BCC from sourcesIgor Sysoev2-5/+49
2007-01-10do not build OpenSSL with threads, if they are not usedIgor Sysoev1-3/+4
2006-11-27test PCRE in FreeBSD, Linux, and NetBSDIgor Sysoev1-0/+1
2005-12-05nginx-0.3.13-RELEASE importrelease-0.3.13Igor Sysoev2-20/+39
*) Feature: the IMAP/POP3 proxy supports STARTTLS and STLS. *) Bugfix: the IMAP/POP3 proxy did not work with the select, poll, and /dev/poll methods. *) Bugfix: in SSI handling. *) Bugfix: now Solaris sendfilev() is not used to transfer the client request body to FastCGI-server via the unix domain socket. *) Bugfix: the "auth_basic" directive did not disable the authorization; the bug had appeared in 0.3.11.
2005-11-15nginx-0.3.10-RELEASE importrelease-0.3.10Igor Sysoev1-0/+2
*) Change: the "valid_referers" directive and the "$invalid_referer" variable were moved to the new ngx_http_referer_module from the ngx_http_rewrite_module. *) Change: the "$apache_bytes_sent" variable name was changed to "$body_bytes_sent". *) Feature: the "$sent_http_..." variables. *) Feature: the "if" directive supports the "=" and "!=" operations. *) Feature: the "proxy_pass" directive supports the HTTPS protocol. *) Feature: the "proxy_set_body" directive. *) Feature: the "post_action" directive. *) Feature: the ngx_http_empty_gif_module. *) Feature: the "worker_cpu_affinity" directive for Linux. *) Bugfix: the "rewrite" directive did not unescape URI part in redirect, now it is unescaped except the %00-%25 and %7F-%FF characters. *) Bugfix: nginx could not be built by the icc 9.0 compiler. *) Bugfix: if the SSI was enabled for zero size static file, then the chunked response was encoded incorrectly.
generated by cgit (git 2.34.1) at 2025-12-06 10:33:32 +0000