openssl/Configure, branch OpenSSL_1_0_2h

Disable EXPORT and LOW SSLv3+ ciphers by default

2016-03-01T11:20:35Z

Reviewed-by: Emilia Käsper

Disable SSLv2 default build, default negotiation and weak ciphers.

2016-03-01T11:20:10Z

SSLv2 is by default disabled at build-time. Builds that are not configured with "enable-ssl2" will not support SSLv2. Even if "enable-ssl2" is used, users who want to negotiate SSLv2 via the version-flexible SSLv23_method() will need to explicitly call either of: SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv2); or SSL_clear_options(ssl, SSL_OP_NO_SSLv2); as appropriate. Even if either of those is used, or the application explicitly uses the version-specific SSLv2_method() or its client or server variants, SSLv2 ciphers vulnerable to exhaustive search key recovery have been removed. Specifically, the SSLv2 40-bit EXPORT ciphers, and SSLv2 56-bit DES are no longer available. Mitigation for CVE-2016-0800 Reviewed-by: Emilia Käsper

Fix BSD -rpath parameter

2016-01-19T19:59:26Z

For BSD systems, Configure adds a shared_ldflags including a reference to the Makefile variable LIBRPATH, but since it must be passed down to Makefile.shared, care must be taken so the value of LIBRPATH doesn't get expanded too early, or it ends up giving an empty string. Reviewed-by: Viktor Dukhovni (cherry picked from commit c64879d3f3cc4c7f1c436a9fe3bd109847a23629)

Provide better "make depend" warning.

2015-12-16T22:46:07Z

Reviewed-by: Matt Caswell (cherry picked from commit 2e31ef0366d368ac8cf7f5ecc9052bff27337799)

Make the match for previous cflags a bit more strict

2015-11-09T11:15:42Z

./Configure [target] --strict-warnings -Wno-pedantic-ms-format would not add '-pedantic' because it matches '-Wno-pedantic-ms-format', which was added first. Reviewed-by: Matt Caswell (cherry picked from commit 6703c4ea87b30554283deaa5df1f8d68725d3ee4)

make depend: prefer clang over makedepend

2015-10-14T17:08:54Z

Reviewed-by: Rich Salz

Fix travis 1.0.2 builds

2015-10-07T20:42:42Z

Disable -Wshadow error when building with GCC Add support for linu-x86_64-clang debug; this is needed for Travis CI. Disable linux-clang and mingw debug builds on Travis CI; not supported. Fix Travis email notifications config Signed-off-by: Rich Salz Reviewed-by: Andy Polyakov

Use cc instead of gcc so either clang or gcc is used as appropriate. Add clang

2015-06-05T10:15:11Z

flags needed to keep it happy. Reviewed-by: Richard Levitte

Configure: replace -mv8 with -mcpu=v8 in SPARC config lines.

2015-05-26T08:22:01Z

RT#3860 Reviewed-by: Matt Caswell

Use -Wall -Wextra with clang

2015-04-17T16:26:09Z

The disabled set of -Weverything is hard to maintain across versions. Use -Wall -Wextra but also document other useful warnings that currently trigger. Reviewed-by: Rich Salz