Merge OpenSSL 1.0.2u.

Merge OpenSSL 1.0.2t.

Merge OpenSSL 1.0.2s.

Approved by: re (kib)

Merge OpenSSL 1.0.2r.

Merge OpenSSL 1.0.2q.

MFC: r337791

Merge OpenSSL 1.0.2p.

MFC: r331627

Merge OpenSSL 1.0.2o.

MFC: r329024

Remove c_rehash(1) to not confuse users.

MFC: r326662

Merge OpenSSL 1.0.2n.

MFC: r325328

Merge OpenSSL 1.0.2m.

MFC: r318899

Merge OpenSSL 1.0.2l.

MFC: r307976

Build OpenSSL assembly sources for aarch64.

MFC r314658:

crypto: normalize paths using SRCTOP-relative paths or :H when possible

This simplifies make logic/output

MFC: r312825

Merge OpenSSL 1.0.2k.

MFC: r306342

Merge OpenSSL 1.0.2j.

MFC: r306193

Merge OpenSSL 1.0.2u.

MFC: r304636

Build OpenSSL assembly sources for arm.

MFC: r304320

Disable assembly sources when compiler/assembler cannot compile certain
instructions. For example, GCC 4.2.1 + binutils 2.17.50 does not support
AVX instructions.

Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Merge OpenSSL 1.0.2h.

Relnotes: yes

Merge OpenSSL 1.0.2g.

Relnotes: yes

Merge OpenSSL 1.0.2f.

Relnotes: yes

Merge OpenSSL 1.0.2e.

Simplify man-makefile-update target.

Remove duplicate manual pages.

Reported by: brd

Clean up OpenSSL makefiles.

Merge OpenSSL 1.0.2d.

Define endianness for non-x86 platforms.

MFC after: 3 days

Merge OpenSSL 1.0.1p.

Merge OpenSSL 1.0.1o.

Merge OpenSSL 1.0.1n.

Merge OpenSSL 1.0.1m.

Merge OpenSSL 1.0.1l.

MFC after: 1 week
Relnotes: yes

Merge OpenSSL 1.0.1k.

Merge OpenSSL 1.0.1j.

Merge OpenSSL 1.0.1i.

Merge OpenSSL 1.0.1h.

Approved by: so (delphij)

Merge OpenSSL 1.0.1g.

Approved by: benl (maintainer)

Merge OpenSSL 1.0.1f.

Approved by: so (delphij), benl (silence)

Remove references to MK_IDEA.

As of r249959, we want to build with IDEA support enabled
unconditionally. As this change removed the MK_IDEA flag, update these
Makefiles accordingly.

Merge OpenSSL 1.0.1e.

Approved by: secteam (simon), benl (silence)

Sort ASM definitions by crypto module for slightly easier maintenance.
Specifically, GHASH_ASM belongs to crypto/modes.

Merge OpenSSL 1.0.1c.

Approved by: benl (maintainer)

Merge OpenSSL 0.9.8x.

Reviewed by: stas
Approved by: benl (maintainer)
MFC after: 3 days

Regenerate manual pages for OpenSSL 0.9.8q.

Regenerate manual pages for OpenSSL 0.9.8p.

- Make it slightly simpler to update OpenSSL version information
for regenerating OpenSSL manual pages.
- Explicitly set the OpenSSL release date so manual pages contain
the date OpenSSL was released and not just the date OpenSSL was
imported into the FreeBSD base system.
- Update for Makefile for OpenSSL 0.9.8n.

Regenerate manual pages for OpenSSL 0.9.8m.

MFC after: 3 weeks

Update build infrastructure for OpenSSL 0.9.8k.

Integrate the Camellia Block Cipher. For more information see RFC 4132
and its bibliography.

Submitted by: Tomoyuki Okazaki <okazaki at kick dot gr dot jp>
MFC after: 1 month

Upgrade to OpenSSL 0.9.8e.

Upgrade to OpenSSL 0.9.8d.

Remove alpha left-overs.

Upgrade to OpenSSL 0.9.8b.

Enable DSO (Dynamic Shared Object) support. This makes it possible
for OpenSSL to load engines run-time, e.g. for using the opensc
engine port.

The OpenSSL Configure script enables DSO support on FreeBSD by
default, we just don't use the Configure script during OpenSSL builds
in the base system.

This is committed to -CURRENT now (before OpenSSL 0.9.8b import), so
it can be tested at bit in -CURRENT before being MFC'ed to 6-STABLE.

Prodded by: ale
PR: bin/79570
MFC after: 1 week

Reimplementation of world/kernel build options. For details, see:

http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html

The src.conf(5) manpage is to follow in a few days.

Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)

Update OpenSSL 0.9.7d -> 0.9.7e.

Turn MAKE_IDEA into a true "bool" type variable, as documented in
the make.conf(5) manpage.

PR: conf/65738
OK'ed by: markm

Remove the -pthread from the last commit, as OpenSSL doesn't actually
call any pthread functions as we use compile it. We keep the
-DOPENSSL_THREADS, which stops OpenSSL doing thread-unsafe stuff.

Requested by: ru

Build OpenSSL so that it extects that is may be used in a threaded
environment. This stops some ports keeling over on an OpenSSL assert.
(The patch is not exactly the one from the PR, but has been refined
based on advice from freebsd-threads.)

PR: 51205
Submitted by: Jim Westfall <jwestfall@surrealistic.net>
MFC after: 1 month

Update manual pages for OpenSSL 0.9.7d.

Handle includes the normal way.

Reviewed by: markm
Approved by: nectar

Regenerate man pages after import of OpenSSL 0.9.7a.

Install the OpenSSL man pages in /usr/share/openssl/man
and remove the WANT_OPENSSL_MANPAGES knob.

Do not define OPENSSL_NO_KRB5 here in CFLAGS. It is handled in
opensslconf.h.

Reminded by: reports from des, obrien

Hopefully fix world for folks not compiling IDEA (the default).
NO_IDEA is now spelled OPENSSL_NO_IDEA. Update the bmake glue accordingly
or the IDEA references are not stripped from <openssl/evp.h>

Update for OpenSSL 0.9.7. No assembler code at the moment. This
will follow.

DON'T EVER PUT THIS BACK!

Pointy hat to: obrien

Style sync with rest of FreeBSD.

Bandaid for a broken world. The real fix is somewhat more
complicated and will be sent for a review.

Added the missing dependencies for openssl/ headers.

Added new bsd.incs.mk which handles installing of header files
via INCS. Implemented INCSLINKS (equivalent to SYMLINKS) to
handle symlinking include files. Allow for multiple groups of
include files to be installed, with the powerful INCSGROUPS knob.
Documentation to follow.

Added standard `includes' and `incsinstall' targets, use them
in Makefile.inc1. Headers from the following makefiles were
not installed before (during `includes' in Makefile.inc1):

kerberos5/lib/libtelnet/Makefile
lib/libbz2/Makefile
lib/libdevinfo/Makefile
lib/libform/Makefile
lib/libisc/Makefile
lib/libmenu/Makefile
lib/libmilter/Makefile
lib/libpanel/Makefile

Replaced all `beforeinstall' targets for installing includes
with the INCS stuff.

Renamed INCDIR to INCSDIR, for consistency with FILES and SCRIPTS,
and for compatibility with NetBSD. Similarly for INCOWN, INCGRP,
and INCMODE.

Consistently use INCLUDEDIR instead of /usr/include.

gnu/lib/libstdc++/Makefile and gnu/lib/libsupc++/Makefile changes
were only lightly tested due to the missing contrib/libstdc++-v3.
I fully tested the pre-WIP_GCC31 version of this patch with the
contrib/libstdc++.295 stuff.

These changes have been tested on i386 with the -DNO_WERROR "make
world" and "make release".

Pre-generate the optimized x86 crypto code and check it in rather than
depending on perl at build time. Makefile.asm is a helper for after the
next import.

With my cvs@ hat on, the relatively small repo cost of this is acceptable,
especially given that we have other (much bigger) things like
lib*.so.gz.uu checked in under src/lib/compat/*.

Reviewed by: kris (maintainer)

Install headers with -C. Ideally, these Makefiles should not need to
override the beforeinstall target at all, but this has proven difficult
to achieve.

Use NO_PERL as well as NOPERL. The latter is going to (eventually) go.

setlocale(3) has been fixed to match POSIX standard:
LC_ALL takes precedence over other LC_* envariables.

Introduce support for using OpenSSL ASM optimizations. This is done
through the use of a new build directive, MACHINE_CPU, which contains a
list of the CPU generations/features for which optimizations are desired.
This feature will be extended to cover the ports tree in the future.

Currently OpenSSL provides optimizations for i386, i586 and i686-class
CPUs. Currently it has not been tested on an i386 or i486.

Teach make(1) to provide sensible defaults for MACHINE_CPU if it is not
defined (namely, the lowest common denominator CPU we support for each
architecture). Currently this is i386 for the i386 architecture and ev4
for the alpha. sys.mk also sets the variable as a last resort for
consistency with MACHINE_ARCH and bootstrapping from very old versions of
make.

Benchmarks show a significant speed increase even in the i386 case, with
additional improvements for i586 and i686 systems. For maximum performance
define MACHINE_CPU=i686 i586 i386 in /etc/make.conf.

Based on a patch submitted by: Mike Silbersack <silby@silby.com>
Reviewed by: current

Update for OpenSSL 0.9.6

Overhaul of the build-time include file generation. Don't break in evp.h
if bootstrapping from a system on which the openssl headers are not
already present.

Make the temporary file _evp.h instead of evp.h to not conflict with
the real evp.h.

Reported by: markm

Generate a new evp.h at build-time instead of install-time to properly
support NFS(ro) installworlds.

Forced commit. This is to try and help folks that used the international
crypto repo and have slightly different files but with the same version.
cvsup in 'checkout mode' has no trouble with this, but cvs can get really
silly about it.

Be consistant about WITH_ vs MAKE_ flags. We have a precedent of using
MAKE_foo for things like MAKE_KERBEROS etc. Use that. I managed to
confuse myself last time and made make.conf different to the code. ;-(

Reported by: Jun Kuriyama <kuriyama@FreeBSD.org>

MFI. This is a documentation-only, diffreducing patch, that if
invoked will cause breakage. US Users - DO NOT try to turn on
IDEA - the sources are not included.

/dev/urandom is the default random device, so no use in stateing it here.
Also simplify the conditionals a little.

This version is slightly better than rev 1.10. There are still missing
dependencies for openssl/*.h. I cannot reproduce any critical race
conditions with this revision.

Use unadorned `mkdir -p', removing the "test ... ||".
There are sometimes problems with "&&" and "||" in the `make -j' case, as
it appears multiple processes may process parts of the execution line.

Use the C locale for running date(1).

Submitted by: ache

Update for OpenSSL 0.9.5a and clean up a bit.

Merge from internat.freebsd.org repo, minus change to rsa_eay.c (missing)

Reorganize and unify libcrypto's interface so that the RSA implementation
is chosen at runtime via dlopen().

This is a checkpoint and may require more tweaks still.

Merge from internat.freebsd.org; make RSAREF=YES work correctly, although
this is not very useful as the US repo is missing bits.

Fold libRSAglue into libcrypto so we don't have to special-case
all the builds. There is still no actual RSA implementation code
in libcrypto or src/* on US code trees.

Freefall/Internat diff reducer.

(Forced commit)

Support RSA via RSAref. This autodetects the RSAref package, and if it
is not found, compiles without RSA.

*** empty log message ***

Build infrastructure for OpenSSL