Fossil SCM

add support for TLS 1.3, when compiled with OpenSSL 1.1.1 (LTS). Windows build adapted to use OpenSSL 1.1.1 by default. Still compiles and runs with older OpenSSL as well

jan.nijtmans 2018-09-15 20:27 trunk merge
Commit 115544e97517f447c7e668ce47f9714255abdd128c80f485f55baa4b618fcf3c
+10 -10
--- src/makemake.tcl
+++ src/makemake.tcl
@@ -694,13 +694,13 @@
694694
ZLIBCONFIG =
695695
ZLIBTARGETS =
696696
endif
697697
698698
#### Disable creation of the OpenSSL shared libraries. Also, disable support
699
-# for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
699
+# for SSLv3 (i.e. thereby forcing the use of TLS).
700700
#
701
-SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
701
+SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
702702
703703
#### When using zlib, make sure that OpenSSL is configured to use the zlib
704704
# that Fossil knows about (i.e. the one within the source tree).
705705
#
706706
ifndef FOSSIL_ENABLE_MINIZ
@@ -710,11 +710,11 @@
710710
#### The directories where the OpenSSL include and library files are located.
711711
# The recommended usage here is to use the Sysinternals junction tool
712712
# to create a hard link between an "openssl-1.x" sub-directory of the
713713
# Fossil source code directory and the target OpenSSL source directory.
714714
#
715
-OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
715
+OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
716716
OPENSSLINCDIR = $(OPENSSLDIR)/include
717717
OPENSSLLIBDIR = $(OPENSSLDIR)
718718
719719
#### Either the directory where the Tcl library is installed or the Tcl
720720
# source code directory resides (depending on the value of the macro
@@ -1566,11 +1566,11 @@
15661566
!ifndef USE_SEE
15671567
USE_SEE = 0
15681568
!endif
15691569
15701570
!if $(FOSSIL_ENABLE_SSL)!=0
1571
-SSLDIR = $(B)\compat\openssl-1.0.2p
1571
+SSLDIR = $(B)\compat\openssl-1.1.1
15721572
SSLINCDIR = $(SSLDIR)\inc32
15731573
!if $(FOSSIL_DYNAMIC_BUILD)!=0
15741574
SSLLIBDIR = $(SSLDIR)\out32dll
15751575
!else
15761576
SSLLIBDIR = $(SSLDIR)\out32
@@ -1578,11 +1578,11 @@
15781578
SSLLFLAGS = /nologo /opt:ref /debug
15791579
SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
15801580
!if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
15811581
!message Using 'x64' platform for OpenSSL...
15821582
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1583
-# SSLCONFIG = VC-WIN64A no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1583
+# SSLCONFIG = VC-WIN64A no-asm no-ssl3 no-weak-ssl-ciphers
15841584
SSLCONFIG = VC-WIN64A no-asm
15851585
!if $(FOSSIL_DYNAMIC_BUILD)!=0
15861586
SSLCONFIG = $(SSLCONFIG) shared
15871587
!else
15881588
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1593,16 +1593,16 @@
15931593
!else
15941594
SSLNMAKE = ms\nt.mak all
15951595
!endif
15961596
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
15971597
!if $(FOSSIL_DYNAMIC_BUILD)==0
1598
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1598
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
15991599
!endif
16001600
!elseif "$(PLATFORM)"=="ia64"
16011601
!message Using 'ia64' platform for OpenSSL...
16021602
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1603
-# SSLCONFIG = VC-WIN64I no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1603
+# SSLCONFIG = VC-WIN64I no-asm no-ssl3 no-weak-ssl-ciphers
16041604
SSLCONFIG = VC-WIN64I no-asm
16051605
!if $(FOSSIL_DYNAMIC_BUILD)!=0
16061606
SSLCONFIG = $(SSLCONFIG) shared
16071607
!else
16081608
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1613,16 +1613,16 @@
16131613
!else
16141614
SSLNMAKE = ms\nt.mak all
16151615
!endif
16161616
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
16171617
!if $(FOSSIL_DYNAMIC_BUILD)==0
1618
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1618
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
16191619
!endif
16201620
!else
16211621
!message Assuming 'x86' platform for OpenSSL...
16221622
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1623
-# SSLCONFIG = VC-WIN32 no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1623
+# SSLCONFIG = VC-WIN32 no-asm no-ssl3 no-weak-ssl-ciphers
16241624
SSLCONFIG = VC-WIN32 no-asm
16251625
!if $(FOSSIL_DYNAMIC_BUILD)!=0
16261626
SSLCONFIG = $(SSLCONFIG) shared
16271627
!else
16281628
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1633,11 +1633,11 @@
16331633
!else
16341634
SSLNMAKE = ms\nt.mak all
16351635
!endif
16361636
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
16371637
!if $(FOSSIL_DYNAMIC_BUILD)==0
1638
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1638
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
16391639
!endif
16401640
!endif
16411641
!endif
16421642
16431643
!if $(FOSSIL_ENABLE_TCL)!=0
16441644
--- src/makemake.tcl
+++ src/makemake.tcl
@@ -694,13 +694,13 @@
694 ZLIBCONFIG =
695 ZLIBTARGETS =
696 endif
697
698 #### Disable creation of the OpenSSL shared libraries. Also, disable support
699 # for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
700 #
701 SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
702
703 #### When using zlib, make sure that OpenSSL is configured to use the zlib
704 # that Fossil knows about (i.e. the one within the source tree).
705 #
706 ifndef FOSSIL_ENABLE_MINIZ
@@ -710,11 +710,11 @@
710 #### The directories where the OpenSSL include and library files are located.
711 # The recommended usage here is to use the Sysinternals junction tool
712 # to create a hard link between an "openssl-1.x" sub-directory of the
713 # Fossil source code directory and the target OpenSSL source directory.
714 #
715 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
716 OPENSSLINCDIR = $(OPENSSLDIR)/include
717 OPENSSLLIBDIR = $(OPENSSLDIR)
718
719 #### Either the directory where the Tcl library is installed or the Tcl
720 # source code directory resides (depending on the value of the macro
@@ -1566,11 +1566,11 @@
1566 !ifndef USE_SEE
1567 USE_SEE = 0
1568 !endif
1569
1570 !if $(FOSSIL_ENABLE_SSL)!=0
1571 SSLDIR = $(B)\compat\openssl-1.0.2p
1572 SSLINCDIR = $(SSLDIR)\inc32
1573 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1574 SSLLIBDIR = $(SSLDIR)\out32dll
1575 !else
1576 SSLLIBDIR = $(SSLDIR)\out32
@@ -1578,11 +1578,11 @@
1578 SSLLFLAGS = /nologo /opt:ref /debug
1579 SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
1580 !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
1581 !message Using 'x64' platform for OpenSSL...
1582 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1583 # SSLCONFIG = VC-WIN64A no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1584 SSLCONFIG = VC-WIN64A no-asm
1585 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1586 SSLCONFIG = $(SSLCONFIG) shared
1587 !else
1588 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1593,16 +1593,16 @@
1593 !else
1594 SSLNMAKE = ms\nt.mak all
1595 !endif
1596 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1597 !if $(FOSSIL_DYNAMIC_BUILD)==0
1598 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1599 !endif
1600 !elseif "$(PLATFORM)"=="ia64"
1601 !message Using 'ia64' platform for OpenSSL...
1602 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1603 # SSLCONFIG = VC-WIN64I no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1604 SSLCONFIG = VC-WIN64I no-asm
1605 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1606 SSLCONFIG = $(SSLCONFIG) shared
1607 !else
1608 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1613,16 +1613,16 @@
1613 !else
1614 SSLNMAKE = ms\nt.mak all
1615 !endif
1616 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1617 !if $(FOSSIL_DYNAMIC_BUILD)==0
1618 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1619 !endif
1620 !else
1621 !message Assuming 'x86' platform for OpenSSL...
1622 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1623 # SSLCONFIG = VC-WIN32 no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1624 SSLCONFIG = VC-WIN32 no-asm
1625 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1626 SSLCONFIG = $(SSLCONFIG) shared
1627 !else
1628 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1633,11 +1633,11 @@
1633 !else
1634 SSLNMAKE = ms\nt.mak all
1635 !endif
1636 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1637 !if $(FOSSIL_DYNAMIC_BUILD)==0
1638 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1639 !endif
1640 !endif
1641 !endif
1642
1643 !if $(FOSSIL_ENABLE_TCL)!=0
1644
--- src/makemake.tcl
+++ src/makemake.tcl
@@ -694,13 +694,13 @@
694 ZLIBCONFIG =
695 ZLIBTARGETS =
696 endif
697
698 #### Disable creation of the OpenSSL shared libraries. Also, disable support
699 # for SSLv3 (i.e. thereby forcing the use of TLS).
700 #
701 SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
702
703 #### When using zlib, make sure that OpenSSL is configured to use the zlib
704 # that Fossil knows about (i.e. the one within the source tree).
705 #
706 ifndef FOSSIL_ENABLE_MINIZ
@@ -710,11 +710,11 @@
710 #### The directories where the OpenSSL include and library files are located.
711 # The recommended usage here is to use the Sysinternals junction tool
712 # to create a hard link between an "openssl-1.x" sub-directory of the
713 # Fossil source code directory and the target OpenSSL source directory.
714 #
715 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
716 OPENSSLINCDIR = $(OPENSSLDIR)/include
717 OPENSSLLIBDIR = $(OPENSSLDIR)
718
719 #### Either the directory where the Tcl library is installed or the Tcl
720 # source code directory resides (depending on the value of the macro
@@ -1566,11 +1566,11 @@
1566 !ifndef USE_SEE
1567 USE_SEE = 0
1568 !endif
1569
1570 !if $(FOSSIL_ENABLE_SSL)!=0
1571 SSLDIR = $(B)\compat\openssl-1.1.1
1572 SSLINCDIR = $(SSLDIR)\inc32
1573 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1574 SSLLIBDIR = $(SSLDIR)\out32dll
1575 !else
1576 SSLLIBDIR = $(SSLDIR)\out32
@@ -1578,11 +1578,11 @@
1578 SSLLFLAGS = /nologo /opt:ref /debug
1579 SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
1580 !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
1581 !message Using 'x64' platform for OpenSSL...
1582 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1583 # SSLCONFIG = VC-WIN64A no-asm no-ssl3 no-weak-ssl-ciphers
1584 SSLCONFIG = VC-WIN64A no-asm
1585 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1586 SSLCONFIG = $(SSLCONFIG) shared
1587 !else
1588 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1593,16 +1593,16 @@
1593 !else
1594 SSLNMAKE = ms\nt.mak all
1595 !endif
1596 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1597 !if $(FOSSIL_DYNAMIC_BUILD)==0
1598 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1599 !endif
1600 !elseif "$(PLATFORM)"=="ia64"
1601 !message Using 'ia64' platform for OpenSSL...
1602 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1603 # SSLCONFIG = VC-WIN64I no-asm no-ssl3 no-weak-ssl-ciphers
1604 SSLCONFIG = VC-WIN64I no-asm
1605 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1606 SSLCONFIG = $(SSLCONFIG) shared
1607 !else
1608 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1613,16 +1613,16 @@
1613 !else
1614 SSLNMAKE = ms\nt.mak all
1615 !endif
1616 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1617 !if $(FOSSIL_DYNAMIC_BUILD)==0
1618 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1619 !endif
1620 !else
1621 !message Assuming 'x86' platform for OpenSSL...
1622 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1623 # SSLCONFIG = VC-WIN32 no-asm no-ssl3 no-weak-ssl-ciphers
1624 SSLCONFIG = VC-WIN32 no-asm
1625 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1626 SSLCONFIG = $(SSLCONFIG) shared
1627 !else
1628 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1633,11 +1633,11 @@
1633 !else
1634 SSLNMAKE = ms\nt.mak all
1635 !endif
1636 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1637 !if $(FOSSIL_DYNAMIC_BUILD)==0
1638 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1639 !endif
1640 !endif
1641 !endif
1642
1643 !if $(FOSSIL_ENABLE_TCL)!=0
1644
+10 -10
--- src/makemake.tcl
+++ src/makemake.tcl
@@ -694,13 +694,13 @@
694694
ZLIBCONFIG =
695695
ZLIBTARGETS =
696696
endif
697697
698698
#### Disable creation of the OpenSSL shared libraries. Also, disable support
699
-# for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
699
+# for SSLv3 (i.e. thereby forcing the use of TLS).
700700
#
701
-SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
701
+SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
702702
703703
#### When using zlib, make sure that OpenSSL is configured to use the zlib
704704
# that Fossil knows about (i.e. the one within the source tree).
705705
#
706706
ifndef FOSSIL_ENABLE_MINIZ
@@ -710,11 +710,11 @@
710710
#### The directories where the OpenSSL include and library files are located.
711711
# The recommended usage here is to use the Sysinternals junction tool
712712
# to create a hard link between an "openssl-1.x" sub-directory of the
713713
# Fossil source code directory and the target OpenSSL source directory.
714714
#
715
-OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
715
+OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
716716
OPENSSLINCDIR = $(OPENSSLDIR)/include
717717
OPENSSLLIBDIR = $(OPENSSLDIR)
718718
719719
#### Either the directory where the Tcl library is installed or the Tcl
720720
# source code directory resides (depending on the value of the macro
@@ -1566,11 +1566,11 @@
15661566
!ifndef USE_SEE
15671567
USE_SEE = 0
15681568
!endif
15691569
15701570
!if $(FOSSIL_ENABLE_SSL)!=0
1571
-SSLDIR = $(B)\compat\openssl-1.0.2p
1571
+SSLDIR = $(B)\compat\openssl-1.1.1
15721572
SSLINCDIR = $(SSLDIR)\inc32
15731573
!if $(FOSSIL_DYNAMIC_BUILD)!=0
15741574
SSLLIBDIR = $(SSLDIR)\out32dll
15751575
!else
15761576
SSLLIBDIR = $(SSLDIR)\out32
@@ -1578,11 +1578,11 @@
15781578
SSLLFLAGS = /nologo /opt:ref /debug
15791579
SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
15801580
!if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
15811581
!message Using 'x64' platform for OpenSSL...
15821582
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1583
-# SSLCONFIG = VC-WIN64A no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1583
+# SSLCONFIG = VC-WIN64A no-asm no-ssl3 no-weak-ssl-ciphers
15841584
SSLCONFIG = VC-WIN64A no-asm
15851585
!if $(FOSSIL_DYNAMIC_BUILD)!=0
15861586
SSLCONFIG = $(SSLCONFIG) shared
15871587
!else
15881588
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1593,16 +1593,16 @@
15931593
!else
15941594
SSLNMAKE = ms\nt.mak all
15951595
!endif
15961596
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
15971597
!if $(FOSSIL_DYNAMIC_BUILD)==0
1598
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1598
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
15991599
!endif
16001600
!elseif "$(PLATFORM)"=="ia64"
16011601
!message Using 'ia64' platform for OpenSSL...
16021602
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1603
-# SSLCONFIG = VC-WIN64I no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1603
+# SSLCONFIG = VC-WIN64I no-asm no-ssl3 no-weak-ssl-ciphers
16041604
SSLCONFIG = VC-WIN64I no-asm
16051605
!if $(FOSSIL_DYNAMIC_BUILD)!=0
16061606
SSLCONFIG = $(SSLCONFIG) shared
16071607
!else
16081608
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1613,16 +1613,16 @@
16131613
!else
16141614
SSLNMAKE = ms\nt.mak all
16151615
!endif
16161616
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
16171617
!if $(FOSSIL_DYNAMIC_BUILD)==0
1618
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1618
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
16191619
!endif
16201620
!else
16211621
!message Assuming 'x86' platform for OpenSSL...
16221622
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1623
-# SSLCONFIG = VC-WIN32 no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1623
+# SSLCONFIG = VC-WIN32 no-asm no-ssl3 no-weak-ssl-ciphers
16241624
SSLCONFIG = VC-WIN32 no-asm
16251625
!if $(FOSSIL_DYNAMIC_BUILD)!=0
16261626
SSLCONFIG = $(SSLCONFIG) shared
16271627
!else
16281628
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1633,11 +1633,11 @@
16331633
!else
16341634
SSLNMAKE = ms\nt.mak all
16351635
!endif
16361636
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
16371637
!if $(FOSSIL_DYNAMIC_BUILD)==0
1638
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1638
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
16391639
!endif
16401640
!endif
16411641
!endif
16421642
16431643
!if $(FOSSIL_ENABLE_TCL)!=0
16441644
--- src/makemake.tcl
+++ src/makemake.tcl
@@ -694,13 +694,13 @@
694 ZLIBCONFIG =
695 ZLIBTARGETS =
696 endif
697
698 #### Disable creation of the OpenSSL shared libraries. Also, disable support
699 # for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
700 #
701 SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
702
703 #### When using zlib, make sure that OpenSSL is configured to use the zlib
704 # that Fossil knows about (i.e. the one within the source tree).
705 #
706 ifndef FOSSIL_ENABLE_MINIZ
@@ -710,11 +710,11 @@
710 #### The directories where the OpenSSL include and library files are located.
711 # The recommended usage here is to use the Sysinternals junction tool
712 # to create a hard link between an "openssl-1.x" sub-directory of the
713 # Fossil source code directory and the target OpenSSL source directory.
714 #
715 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
716 OPENSSLINCDIR = $(OPENSSLDIR)/include
717 OPENSSLLIBDIR = $(OPENSSLDIR)
718
719 #### Either the directory where the Tcl library is installed or the Tcl
720 # source code directory resides (depending on the value of the macro
@@ -1566,11 +1566,11 @@
1566 !ifndef USE_SEE
1567 USE_SEE = 0
1568 !endif
1569
1570 !if $(FOSSIL_ENABLE_SSL)!=0
1571 SSLDIR = $(B)\compat\openssl-1.0.2p
1572 SSLINCDIR = $(SSLDIR)\inc32
1573 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1574 SSLLIBDIR = $(SSLDIR)\out32dll
1575 !else
1576 SSLLIBDIR = $(SSLDIR)\out32
@@ -1578,11 +1578,11 @@
1578 SSLLFLAGS = /nologo /opt:ref /debug
1579 SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
1580 !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
1581 !message Using 'x64' platform for OpenSSL...
1582 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1583 # SSLCONFIG = VC-WIN64A no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1584 SSLCONFIG = VC-WIN64A no-asm
1585 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1586 SSLCONFIG = $(SSLCONFIG) shared
1587 !else
1588 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1593,16 +1593,16 @@
1593 !else
1594 SSLNMAKE = ms\nt.mak all
1595 !endif
1596 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1597 !if $(FOSSIL_DYNAMIC_BUILD)==0
1598 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1599 !endif
1600 !elseif "$(PLATFORM)"=="ia64"
1601 !message Using 'ia64' platform for OpenSSL...
1602 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1603 # SSLCONFIG = VC-WIN64I no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1604 SSLCONFIG = VC-WIN64I no-asm
1605 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1606 SSLCONFIG = $(SSLCONFIG) shared
1607 !else
1608 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1613,16 +1613,16 @@
1613 !else
1614 SSLNMAKE = ms\nt.mak all
1615 !endif
1616 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1617 !if $(FOSSIL_DYNAMIC_BUILD)==0
1618 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1619 !endif
1620 !else
1621 !message Assuming 'x86' platform for OpenSSL...
1622 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1623 # SSLCONFIG = VC-WIN32 no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
1624 SSLCONFIG = VC-WIN32 no-asm
1625 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1626 SSLCONFIG = $(SSLCONFIG) shared
1627 !else
1628 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1633,11 +1633,11 @@
1633 !else
1634 SSLNMAKE = ms\nt.mak all
1635 !endif
1636 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1637 !if $(FOSSIL_DYNAMIC_BUILD)==0
1638 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1639 !endif
1640 !endif
1641 !endif
1642
1643 !if $(FOSSIL_ENABLE_TCL)!=0
1644
--- src/makemake.tcl
+++ src/makemake.tcl
@@ -694,13 +694,13 @@
694 ZLIBCONFIG =
695 ZLIBTARGETS =
696 endif
697
698 #### Disable creation of the OpenSSL shared libraries. Also, disable support
699 # for SSLv3 (i.e. thereby forcing the use of TLS).
700 #
701 SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
702
703 #### When using zlib, make sure that OpenSSL is configured to use the zlib
704 # that Fossil knows about (i.e. the one within the source tree).
705 #
706 ifndef FOSSIL_ENABLE_MINIZ
@@ -710,11 +710,11 @@
710 #### The directories where the OpenSSL include and library files are located.
711 # The recommended usage here is to use the Sysinternals junction tool
712 # to create a hard link between an "openssl-1.x" sub-directory of the
713 # Fossil source code directory and the target OpenSSL source directory.
714 #
715 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
716 OPENSSLINCDIR = $(OPENSSLDIR)/include
717 OPENSSLLIBDIR = $(OPENSSLDIR)
718
719 #### Either the directory where the Tcl library is installed or the Tcl
720 # source code directory resides (depending on the value of the macro
@@ -1566,11 +1566,11 @@
1566 !ifndef USE_SEE
1567 USE_SEE = 0
1568 !endif
1569
1570 !if $(FOSSIL_ENABLE_SSL)!=0
1571 SSLDIR = $(B)\compat\openssl-1.1.1
1572 SSLINCDIR = $(SSLDIR)\inc32
1573 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1574 SSLLIBDIR = $(SSLDIR)\out32dll
1575 !else
1576 SSLLIBDIR = $(SSLDIR)\out32
@@ -1578,11 +1578,11 @@
1578 SSLLFLAGS = /nologo /opt:ref /debug
1579 SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
1580 !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
1581 !message Using 'x64' platform for OpenSSL...
1582 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1583 # SSLCONFIG = VC-WIN64A no-asm no-ssl3 no-weak-ssl-ciphers
1584 SSLCONFIG = VC-WIN64A no-asm
1585 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1586 SSLCONFIG = $(SSLCONFIG) shared
1587 !else
1588 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1593,16 +1593,16 @@
1593 !else
1594 SSLNMAKE = ms\nt.mak all
1595 !endif
1596 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1597 !if $(FOSSIL_DYNAMIC_BUILD)==0
1598 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1599 !endif
1600 !elseif "$(PLATFORM)"=="ia64"
1601 !message Using 'ia64' platform for OpenSSL...
1602 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1603 # SSLCONFIG = VC-WIN64I no-asm no-ssl3 no-weak-ssl-ciphers
1604 SSLCONFIG = VC-WIN64I no-asm
1605 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1606 SSLCONFIG = $(SSLCONFIG) shared
1607 !else
1608 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1613,16 +1613,16 @@
1613 !else
1614 SSLNMAKE = ms\nt.mak all
1615 !endif
1616 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1617 !if $(FOSSIL_DYNAMIC_BUILD)==0
1618 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1619 !endif
1620 !else
1621 !message Assuming 'x86' platform for OpenSSL...
1622 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
1623 # SSLCONFIG = VC-WIN32 no-asm no-ssl3 no-weak-ssl-ciphers
1624 SSLCONFIG = VC-WIN32 no-asm
1625 !if $(FOSSIL_DYNAMIC_BUILD)!=0
1626 SSLCONFIG = $(SSLCONFIG) shared
1627 !else
1628 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -1633,11 +1633,11 @@
1633 !else
1634 SSLNMAKE = ms\nt.mak all
1635 !endif
1636 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
1637 !if $(FOSSIL_DYNAMIC_BUILD)==0
1638 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
1639 !endif
1640 !endif
1641 !endif
1642
1643 !if $(FOSSIL_ENABLE_TCL)!=0
1644
--- win/Makefile.mingw
+++ win/Makefile.mingw
@@ -158,13 +158,13 @@
158158
ZLIBCONFIG =
159159
ZLIBTARGETS =
160160
endif
161161
162162
#### Disable creation of the OpenSSL shared libraries. Also, disable support
163
-# for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
163
+# for SSLv3 (i.e. thereby forcing the use of TLS).
164164
#
165
-SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
165
+SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
166166
167167
#### When using zlib, make sure that OpenSSL is configured to use the zlib
168168
# that Fossil knows about (i.e. the one within the source tree).
169169
#
170170
ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174174
#### The directories where the OpenSSL include and library files are located.
175175
# The recommended usage here is to use the Sysinternals junction tool
176176
# to create a hard link between an "openssl-1.x" sub-directory of the
177177
# Fossil source code directory and the target OpenSSL source directory.
178178
#
179
-OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
179
+OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
180180
OPENSSLINCDIR = $(OPENSSLDIR)/include
181181
OPENSSLLIBDIR = $(OPENSSLDIR)
182182
183183
#### Either the directory where the Tcl library is installed or the Tcl
184184
# source code directory resides (depending on the value of the macro
185185
--- win/Makefile.mingw
+++ win/Makefile.mingw
@@ -158,13 +158,13 @@
158 ZLIBCONFIG =
159 ZLIBTARGETS =
160 endif
161
162 #### Disable creation of the OpenSSL shared libraries. Also, disable support
163 # for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
164 #
165 SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
166
167 #### When using zlib, make sure that OpenSSL is configured to use the zlib
168 # that Fossil knows about (i.e. the one within the source tree).
169 #
170 ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174 #### The directories where the OpenSSL include and library files are located.
175 # The recommended usage here is to use the Sysinternals junction tool
176 # to create a hard link between an "openssl-1.x" sub-directory of the
177 # Fossil source code directory and the target OpenSSL source directory.
178 #
179 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
180 OPENSSLINCDIR = $(OPENSSLDIR)/include
181 OPENSSLLIBDIR = $(OPENSSLDIR)
182
183 #### Either the directory where the Tcl library is installed or the Tcl
184 # source code directory resides (depending on the value of the macro
185
--- win/Makefile.mingw
+++ win/Makefile.mingw
@@ -158,13 +158,13 @@
158 ZLIBCONFIG =
159 ZLIBTARGETS =
160 endif
161
162 #### Disable creation of the OpenSSL shared libraries. Also, disable support
163 # for SSLv3 (i.e. thereby forcing the use of TLS).
164 #
165 SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
166
167 #### When using zlib, make sure that OpenSSL is configured to use the zlib
168 # that Fossil knows about (i.e. the one within the source tree).
169 #
170 ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174 #### The directories where the OpenSSL include and library files are located.
175 # The recommended usage here is to use the Sysinternals junction tool
176 # to create a hard link between an "openssl-1.x" sub-directory of the
177 # Fossil source code directory and the target OpenSSL source directory.
178 #
179 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
180 OPENSSLINCDIR = $(OPENSSLDIR)/include
181 OPENSSLLIBDIR = $(OPENSSLDIR)
182
183 #### Either the directory where the Tcl library is installed or the Tcl
184 # source code directory resides (depending on the value of the macro
185
--- win/Makefile.mingw
+++ win/Makefile.mingw
@@ -158,13 +158,13 @@
158158
ZLIBCONFIG =
159159
ZLIBTARGETS =
160160
endif
161161
162162
#### Disable creation of the OpenSSL shared libraries. Also, disable support
163
-# for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
163
+# for SSLv3 (i.e. thereby forcing the use of TLS).
164164
#
165
-SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
165
+SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
166166
167167
#### When using zlib, make sure that OpenSSL is configured to use the zlib
168168
# that Fossil knows about (i.e. the one within the source tree).
169169
#
170170
ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174174
#### The directories where the OpenSSL include and library files are located.
175175
# The recommended usage here is to use the Sysinternals junction tool
176176
# to create a hard link between an "openssl-1.x" sub-directory of the
177177
# Fossil source code directory and the target OpenSSL source directory.
178178
#
179
-OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
179
+OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
180180
OPENSSLINCDIR = $(OPENSSLDIR)/include
181181
OPENSSLLIBDIR = $(OPENSSLDIR)
182182
183183
#### Either the directory where the Tcl library is installed or the Tcl
184184
# source code directory resides (depending on the value of the macro
185185
--- win/Makefile.mingw
+++ win/Makefile.mingw
@@ -158,13 +158,13 @@
158 ZLIBCONFIG =
159 ZLIBTARGETS =
160 endif
161
162 #### Disable creation of the OpenSSL shared libraries. Also, disable support
163 # for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
164 #
165 SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
166
167 #### When using zlib, make sure that OpenSSL is configured to use the zlib
168 # that Fossil knows about (i.e. the one within the source tree).
169 #
170 ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174 #### The directories where the OpenSSL include and library files are located.
175 # The recommended usage here is to use the Sysinternals junction tool
176 # to create a hard link between an "openssl-1.x" sub-directory of the
177 # Fossil source code directory and the target OpenSSL source directory.
178 #
179 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
180 OPENSSLINCDIR = $(OPENSSLDIR)/include
181 OPENSSLLIBDIR = $(OPENSSLDIR)
182
183 #### Either the directory where the Tcl library is installed or the Tcl
184 # source code directory resides (depending on the value of the macro
185
--- win/Makefile.mingw
+++ win/Makefile.mingw
@@ -158,13 +158,13 @@
158 ZLIBCONFIG =
159 ZLIBTARGETS =
160 endif
161
162 #### Disable creation of the OpenSSL shared libraries. Also, disable support
163 # for SSLv3 (i.e. thereby forcing the use of TLS).
164 #
165 SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
166
167 #### When using zlib, make sure that OpenSSL is configured to use the zlib
168 # that Fossil knows about (i.e. the one within the source tree).
169 #
170 ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174 #### The directories where the OpenSSL include and library files are located.
175 # The recommended usage here is to use the Sysinternals junction tool
176 # to create a hard link between an "openssl-1.x" sub-directory of the
177 # Fossil source code directory and the target OpenSSL source directory.
178 #
179 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
180 OPENSSLINCDIR = $(OPENSSLDIR)/include
181 OPENSSLLIBDIR = $(OPENSSLDIR)
182
183 #### Either the directory where the Tcl library is installed or the Tcl
184 # source code directory resides (depending on the value of the macro
185
--- win/Makefile.mingw.mistachkin
+++ win/Makefile.mingw.mistachkin
@@ -158,13 +158,13 @@
158158
ZLIBCONFIG =
159159
ZLIBTARGETS =
160160
endif
161161
162162
#### Disable creation of the OpenSSL shared libraries. Also, disable support
163
-# for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
163
+# for SSLv3 (i.e. thereby forcing the use of TLS).
164164
#
165
-SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
165
+SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
166166
167167
#### When using zlib, make sure that OpenSSL is configured to use the zlib
168168
# that Fossil knows about (i.e. the one within the source tree).
169169
#
170170
ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174174
#### The directories where the OpenSSL include and library files are located.
175175
# The recommended usage here is to use the Sysinternals junction tool
176176
# to create a hard link between an "openssl-1.x" sub-directory of the
177177
# Fossil source code directory and the target OpenSSL source directory.
178178
#
179
-OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
179
+OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
180180
OPENSSLINCDIR = $(OPENSSLDIR)/include
181181
OPENSSLLIBDIR = $(OPENSSLDIR)
182182
183183
#### Either the directory where the Tcl library is installed or the Tcl
184184
# source code directory resides (depending on the value of the macro
185185
--- win/Makefile.mingw.mistachkin
+++ win/Makefile.mingw.mistachkin
@@ -158,13 +158,13 @@
158 ZLIBCONFIG =
159 ZLIBTARGETS =
160 endif
161
162 #### Disable creation of the OpenSSL shared libraries. Also, disable support
163 # for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
164 #
165 SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
166
167 #### When using zlib, make sure that OpenSSL is configured to use the zlib
168 # that Fossil knows about (i.e. the one within the source tree).
169 #
170 ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174 #### The directories where the OpenSSL include and library files are located.
175 # The recommended usage here is to use the Sysinternals junction tool
176 # to create a hard link between an "openssl-1.x" sub-directory of the
177 # Fossil source code directory and the target OpenSSL source directory.
178 #
179 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
180 OPENSSLINCDIR = $(OPENSSLDIR)/include
181 OPENSSLLIBDIR = $(OPENSSLDIR)
182
183 #### Either the directory where the Tcl library is installed or the Tcl
184 # source code directory resides (depending on the value of the macro
185
--- win/Makefile.mingw.mistachkin
+++ win/Makefile.mingw.mistachkin
@@ -158,13 +158,13 @@
158 ZLIBCONFIG =
159 ZLIBTARGETS =
160 endif
161
162 #### Disable creation of the OpenSSL shared libraries. Also, disable support
163 # for SSLv3 (i.e. thereby forcing the use of TLS).
164 #
165 SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
166
167 #### When using zlib, make sure that OpenSSL is configured to use the zlib
168 # that Fossil knows about (i.e. the one within the source tree).
169 #
170 ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174 #### The directories where the OpenSSL include and library files are located.
175 # The recommended usage here is to use the Sysinternals junction tool
176 # to create a hard link between an "openssl-1.x" sub-directory of the
177 # Fossil source code directory and the target OpenSSL source directory.
178 #
179 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
180 OPENSSLINCDIR = $(OPENSSLDIR)/include
181 OPENSSLLIBDIR = $(OPENSSLDIR)
182
183 #### Either the directory where the Tcl library is installed or the Tcl
184 # source code directory resides (depending on the value of the macro
185
--- win/Makefile.mingw.mistachkin
+++ win/Makefile.mingw.mistachkin
@@ -158,13 +158,13 @@
158158
ZLIBCONFIG =
159159
ZLIBTARGETS =
160160
endif
161161
162162
#### Disable creation of the OpenSSL shared libraries. Also, disable support
163
-# for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
163
+# for SSLv3 (i.e. thereby forcing the use of TLS).
164164
#
165
-SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
165
+SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
166166
167167
#### When using zlib, make sure that OpenSSL is configured to use the zlib
168168
# that Fossil knows about (i.e. the one within the source tree).
169169
#
170170
ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174174
#### The directories where the OpenSSL include and library files are located.
175175
# The recommended usage here is to use the Sysinternals junction tool
176176
# to create a hard link between an "openssl-1.x" sub-directory of the
177177
# Fossil source code directory and the target OpenSSL source directory.
178178
#
179
-OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
179
+OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
180180
OPENSSLINCDIR = $(OPENSSLDIR)/include
181181
OPENSSLLIBDIR = $(OPENSSLDIR)
182182
183183
#### Either the directory where the Tcl library is installed or the Tcl
184184
# source code directory resides (depending on the value of the macro
185185
--- win/Makefile.mingw.mistachkin
+++ win/Makefile.mingw.mistachkin
@@ -158,13 +158,13 @@
158 ZLIBCONFIG =
159 ZLIBTARGETS =
160 endif
161
162 #### Disable creation of the OpenSSL shared libraries. Also, disable support
163 # for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS).
164 #
165 SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared
166
167 #### When using zlib, make sure that OpenSSL is configured to use the zlib
168 # that Fossil knows about (i.e. the one within the source tree).
169 #
170 ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174 #### The directories where the OpenSSL include and library files are located.
175 # The recommended usage here is to use the Sysinternals junction tool
176 # to create a hard link between an "openssl-1.x" sub-directory of the
177 # Fossil source code directory and the target OpenSSL source directory.
178 #
179 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2p
180 OPENSSLINCDIR = $(OPENSSLDIR)/include
181 OPENSSLLIBDIR = $(OPENSSLDIR)
182
183 #### Either the directory where the Tcl library is installed or the Tcl
184 # source code directory resides (depending on the value of the macro
185
--- win/Makefile.mingw.mistachkin
+++ win/Makefile.mingw.mistachkin
@@ -158,13 +158,13 @@
158 ZLIBCONFIG =
159 ZLIBTARGETS =
160 endif
161
162 #### Disable creation of the OpenSSL shared libraries. Also, disable support
163 # for SSLv3 (i.e. thereby forcing the use of TLS).
164 #
165 SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared
166
167 #### When using zlib, make sure that OpenSSL is configured to use the zlib
168 # that Fossil knows about (i.e. the one within the source tree).
169 #
170 ifndef FOSSIL_ENABLE_MINIZ
@@ -174,11 +174,11 @@
174 #### The directories where the OpenSSL include and library files are located.
175 # The recommended usage here is to use the Sysinternals junction tool
176 # to create a hard link between an "openssl-1.x" sub-directory of the
177 # Fossil source code directory and the target OpenSSL source directory.
178 #
179 OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1
180 OPENSSLINCDIR = $(OPENSSLDIR)/include
181 OPENSSLLIBDIR = $(OPENSSLDIR)
182
183 #### Either the directory where the Tcl library is installed or the Tcl
184 # source code directory resides (depending on the value of the macro
185
--- win/Makefile.msc
+++ win/Makefile.msc
@@ -98,11 +98,11 @@
9898
!ifndef USE_SEE
9999
USE_SEE = 0
100100
!endif
101101
102102
!if $(FOSSIL_ENABLE_SSL)!=0
103
-SSLDIR = $(B)\compat\openssl-1.0.2p
103
+SSLDIR = $(B)\compat\openssl-1.1.1
104104
SSLINCDIR = $(SSLDIR)\inc32
105105
!if $(FOSSIL_DYNAMIC_BUILD)!=0
106106
SSLLIBDIR = $(SSLDIR)\out32dll
107107
!else
108108
SSLLIBDIR = $(SSLDIR)\out32
@@ -110,11 +110,11 @@
110110
SSLLFLAGS = /nologo /opt:ref /debug
111111
SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
112112
!if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
113113
!message Using 'x64' platform for OpenSSL...
114114
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
115
-# SSLCONFIG = VC-WIN64A no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
115
+# SSLCONFIG = VC-WIN64A no-asm no-ssl3 no-weak-ssl-ciphers
116116
SSLCONFIG = VC-WIN64A no-asm
117117
!if $(FOSSIL_DYNAMIC_BUILD)!=0
118118
SSLCONFIG = $(SSLCONFIG) shared
119119
!else
120120
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -125,16 +125,16 @@
125125
!else
126126
SSLNMAKE = ms\nt.mak all
127127
!endif
128128
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
129129
!if $(FOSSIL_DYNAMIC_BUILD)==0
130
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
130
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
131131
!endif
132132
!elseif "$(PLATFORM)"=="ia64"
133133
!message Using 'ia64' platform for OpenSSL...
134134
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
135
-# SSLCONFIG = VC-WIN64I no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
135
+# SSLCONFIG = VC-WIN64I no-asm no-ssl3 no-weak-ssl-ciphers
136136
SSLCONFIG = VC-WIN64I no-asm
137137
!if $(FOSSIL_DYNAMIC_BUILD)!=0
138138
SSLCONFIG = $(SSLCONFIG) shared
139139
!else
140140
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -145,16 +145,16 @@
145145
!else
146146
SSLNMAKE = ms\nt.mak all
147147
!endif
148148
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
149149
!if $(FOSSIL_DYNAMIC_BUILD)==0
150
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
150
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
151151
!endif
152152
!else
153153
!message Assuming 'x86' platform for OpenSSL...
154154
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
155
-# SSLCONFIG = VC-WIN32 no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
155
+# SSLCONFIG = VC-WIN32 no-asm no-ssl3 no-weak-ssl-ciphers
156156
SSLCONFIG = VC-WIN32 no-asm
157157
!if $(FOSSIL_DYNAMIC_BUILD)!=0
158158
SSLCONFIG = $(SSLCONFIG) shared
159159
!else
160160
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -165,11 +165,11 @@
165165
!else
166166
SSLNMAKE = ms\nt.mak all
167167
!endif
168168
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
169169
!if $(FOSSIL_DYNAMIC_BUILD)==0
170
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
170
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
171171
!endif
172172
!endif
173173
!endif
174174
175175
!if $(FOSSIL_ENABLE_TCL)!=0
176176
--- win/Makefile.msc
+++ win/Makefile.msc
@@ -98,11 +98,11 @@
98 !ifndef USE_SEE
99 USE_SEE = 0
100 !endif
101
102 !if $(FOSSIL_ENABLE_SSL)!=0
103 SSLDIR = $(B)\compat\openssl-1.0.2p
104 SSLINCDIR = $(SSLDIR)\inc32
105 !if $(FOSSIL_DYNAMIC_BUILD)!=0
106 SSLLIBDIR = $(SSLDIR)\out32dll
107 !else
108 SSLLIBDIR = $(SSLDIR)\out32
@@ -110,11 +110,11 @@
110 SSLLFLAGS = /nologo /opt:ref /debug
111 SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
112 !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
113 !message Using 'x64' platform for OpenSSL...
114 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
115 # SSLCONFIG = VC-WIN64A no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
116 SSLCONFIG = VC-WIN64A no-asm
117 !if $(FOSSIL_DYNAMIC_BUILD)!=0
118 SSLCONFIG = $(SSLCONFIG) shared
119 !else
120 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -125,16 +125,16 @@
125 !else
126 SSLNMAKE = ms\nt.mak all
127 !endif
128 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
129 !if $(FOSSIL_DYNAMIC_BUILD)==0
130 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
131 !endif
132 !elseif "$(PLATFORM)"=="ia64"
133 !message Using 'ia64' platform for OpenSSL...
134 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
135 # SSLCONFIG = VC-WIN64I no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
136 SSLCONFIG = VC-WIN64I no-asm
137 !if $(FOSSIL_DYNAMIC_BUILD)!=0
138 SSLCONFIG = $(SSLCONFIG) shared
139 !else
140 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -145,16 +145,16 @@
145 !else
146 SSLNMAKE = ms\nt.mak all
147 !endif
148 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
149 !if $(FOSSIL_DYNAMIC_BUILD)==0
150 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
151 !endif
152 !else
153 !message Assuming 'x86' platform for OpenSSL...
154 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
155 # SSLCONFIG = VC-WIN32 no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
156 SSLCONFIG = VC-WIN32 no-asm
157 !if $(FOSSIL_DYNAMIC_BUILD)!=0
158 SSLCONFIG = $(SSLCONFIG) shared
159 !else
160 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -165,11 +165,11 @@
165 !else
166 SSLNMAKE = ms\nt.mak all
167 !endif
168 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
169 !if $(FOSSIL_DYNAMIC_BUILD)==0
170 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
171 !endif
172 !endif
173 !endif
174
175 !if $(FOSSIL_ENABLE_TCL)!=0
176
--- win/Makefile.msc
+++ win/Makefile.msc
@@ -98,11 +98,11 @@
98 !ifndef USE_SEE
99 USE_SEE = 0
100 !endif
101
102 !if $(FOSSIL_ENABLE_SSL)!=0
103 SSLDIR = $(B)\compat\openssl-1.1.1
104 SSLINCDIR = $(SSLDIR)\inc32
105 !if $(FOSSIL_DYNAMIC_BUILD)!=0
106 SSLLIBDIR = $(SSLDIR)\out32dll
107 !else
108 SSLLIBDIR = $(SSLDIR)\out32
@@ -110,11 +110,11 @@
110 SSLLFLAGS = /nologo /opt:ref /debug
111 SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
112 !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
113 !message Using 'x64' platform for OpenSSL...
114 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
115 # SSLCONFIG = VC-WIN64A no-asm no-ssl3 no-weak-ssl-ciphers
116 SSLCONFIG = VC-WIN64A no-asm
117 !if $(FOSSIL_DYNAMIC_BUILD)!=0
118 SSLCONFIG = $(SSLCONFIG) shared
119 !else
120 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -125,16 +125,16 @@
125 !else
126 SSLNMAKE = ms\nt.mak all
127 !endif
128 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
129 !if $(FOSSIL_DYNAMIC_BUILD)==0
130 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
131 !endif
132 !elseif "$(PLATFORM)"=="ia64"
133 !message Using 'ia64' platform for OpenSSL...
134 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
135 # SSLCONFIG = VC-WIN64I no-asm no-ssl3 no-weak-ssl-ciphers
136 SSLCONFIG = VC-WIN64I no-asm
137 !if $(FOSSIL_DYNAMIC_BUILD)!=0
138 SSLCONFIG = $(SSLCONFIG) shared
139 !else
140 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -145,16 +145,16 @@
145 !else
146 SSLNMAKE = ms\nt.mak all
147 !endif
148 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
149 !if $(FOSSIL_DYNAMIC_BUILD)==0
150 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
151 !endif
152 !else
153 !message Assuming 'x86' platform for OpenSSL...
154 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
155 # SSLCONFIG = VC-WIN32 no-asm no-ssl3 no-weak-ssl-ciphers
156 SSLCONFIG = VC-WIN32 no-asm
157 !if $(FOSSIL_DYNAMIC_BUILD)!=0
158 SSLCONFIG = $(SSLCONFIG) shared
159 !else
160 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -165,11 +165,11 @@
165 !else
166 SSLNMAKE = ms\nt.mak all
167 !endif
168 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
169 !if $(FOSSIL_DYNAMIC_BUILD)==0
170 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
171 !endif
172 !endif
173 !endif
174
175 !if $(FOSSIL_ENABLE_TCL)!=0
176
--- win/Makefile.msc
+++ win/Makefile.msc
@@ -98,11 +98,11 @@
9898
!ifndef USE_SEE
9999
USE_SEE = 0
100100
!endif
101101
102102
!if $(FOSSIL_ENABLE_SSL)!=0
103
-SSLDIR = $(B)\compat\openssl-1.0.2p
103
+SSLDIR = $(B)\compat\openssl-1.1.1
104104
SSLINCDIR = $(SSLDIR)\inc32
105105
!if $(FOSSIL_DYNAMIC_BUILD)!=0
106106
SSLLIBDIR = $(SSLDIR)\out32dll
107107
!else
108108
SSLLIBDIR = $(SSLDIR)\out32
@@ -110,11 +110,11 @@
110110
SSLLFLAGS = /nologo /opt:ref /debug
111111
SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
112112
!if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
113113
!message Using 'x64' platform for OpenSSL...
114114
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
115
-# SSLCONFIG = VC-WIN64A no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
115
+# SSLCONFIG = VC-WIN64A no-asm no-ssl3 no-weak-ssl-ciphers
116116
SSLCONFIG = VC-WIN64A no-asm
117117
!if $(FOSSIL_DYNAMIC_BUILD)!=0
118118
SSLCONFIG = $(SSLCONFIG) shared
119119
!else
120120
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -125,16 +125,16 @@
125125
!else
126126
SSLNMAKE = ms\nt.mak all
127127
!endif
128128
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
129129
!if $(FOSSIL_DYNAMIC_BUILD)==0
130
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
130
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
131131
!endif
132132
!elseif "$(PLATFORM)"=="ia64"
133133
!message Using 'ia64' platform for OpenSSL...
134134
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
135
-# SSLCONFIG = VC-WIN64I no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
135
+# SSLCONFIG = VC-WIN64I no-asm no-ssl3 no-weak-ssl-ciphers
136136
SSLCONFIG = VC-WIN64I no-asm
137137
!if $(FOSSIL_DYNAMIC_BUILD)!=0
138138
SSLCONFIG = $(SSLCONFIG) shared
139139
!else
140140
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -145,16 +145,16 @@
145145
!else
146146
SSLNMAKE = ms\nt.mak all
147147
!endif
148148
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
149149
!if $(FOSSIL_DYNAMIC_BUILD)==0
150
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
150
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
151151
!endif
152152
!else
153153
!message Assuming 'x86' platform for OpenSSL...
154154
# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
155
-# SSLCONFIG = VC-WIN32 no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
155
+# SSLCONFIG = VC-WIN32 no-asm no-ssl3 no-weak-ssl-ciphers
156156
SSLCONFIG = VC-WIN32 no-asm
157157
!if $(FOSSIL_DYNAMIC_BUILD)!=0
158158
SSLCONFIG = $(SSLCONFIG) shared
159159
!else
160160
SSLCONFIG = $(SSLCONFIG) no-shared
@@ -165,11 +165,11 @@
165165
!else
166166
SSLNMAKE = ms\nt.mak all
167167
!endif
168168
# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
169169
!if $(FOSSIL_DYNAMIC_BUILD)==0
170
-SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
170
+SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
171171
!endif
172172
!endif
173173
!endif
174174
175175
!if $(FOSSIL_ENABLE_TCL)!=0
176176
--- win/Makefile.msc
+++ win/Makefile.msc
@@ -98,11 +98,11 @@
98 !ifndef USE_SEE
99 USE_SEE = 0
100 !endif
101
102 !if $(FOSSIL_ENABLE_SSL)!=0
103 SSLDIR = $(B)\compat\openssl-1.0.2p
104 SSLINCDIR = $(SSLDIR)\inc32
105 !if $(FOSSIL_DYNAMIC_BUILD)!=0
106 SSLLIBDIR = $(SSLDIR)\out32dll
107 !else
108 SSLLIBDIR = $(SSLDIR)\out32
@@ -110,11 +110,11 @@
110 SSLLFLAGS = /nologo /opt:ref /debug
111 SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
112 !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
113 !message Using 'x64' platform for OpenSSL...
114 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
115 # SSLCONFIG = VC-WIN64A no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
116 SSLCONFIG = VC-WIN64A no-asm
117 !if $(FOSSIL_DYNAMIC_BUILD)!=0
118 SSLCONFIG = $(SSLCONFIG) shared
119 !else
120 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -125,16 +125,16 @@
125 !else
126 SSLNMAKE = ms\nt.mak all
127 !endif
128 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
129 !if $(FOSSIL_DYNAMIC_BUILD)==0
130 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
131 !endif
132 !elseif "$(PLATFORM)"=="ia64"
133 !message Using 'ia64' platform for OpenSSL...
134 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
135 # SSLCONFIG = VC-WIN64I no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
136 SSLCONFIG = VC-WIN64I no-asm
137 !if $(FOSSIL_DYNAMIC_BUILD)!=0
138 SSLCONFIG = $(SSLCONFIG) shared
139 !else
140 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -145,16 +145,16 @@
145 !else
146 SSLNMAKE = ms\nt.mak all
147 !endif
148 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
149 !if $(FOSSIL_DYNAMIC_BUILD)==0
150 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
151 !endif
152 !else
153 !message Assuming 'x86' platform for OpenSSL...
154 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
155 # SSLCONFIG = VC-WIN32 no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers
156 SSLCONFIG = VC-WIN32 no-asm
157 !if $(FOSSIL_DYNAMIC_BUILD)!=0
158 SSLCONFIG = $(SSLCONFIG) shared
159 !else
160 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -165,11 +165,11 @@
165 !else
166 SSLNMAKE = ms\nt.mak all
167 !endif
168 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
169 !if $(FOSSIL_DYNAMIC_BUILD)==0
170 SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
171 !endif
172 !endif
173 !endif
174
175 !if $(FOSSIL_ENABLE_TCL)!=0
176
--- win/Makefile.msc
+++ win/Makefile.msc
@@ -98,11 +98,11 @@
98 !ifndef USE_SEE
99 USE_SEE = 0
100 !endif
101
102 !if $(FOSSIL_ENABLE_SSL)!=0
103 SSLDIR = $(B)\compat\openssl-1.1.1
104 SSLINCDIR = $(SSLDIR)\inc32
105 !if $(FOSSIL_DYNAMIC_BUILD)!=0
106 SSLLIBDIR = $(SSLDIR)\out32dll
107 !else
108 SSLLIBDIR = $(SSLDIR)\out32
@@ -110,11 +110,11 @@
110 SSLLFLAGS = /nologo /opt:ref /debug
111 SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib
112 !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64"
113 !message Using 'x64' platform for OpenSSL...
114 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
115 # SSLCONFIG = VC-WIN64A no-asm no-ssl3 no-weak-ssl-ciphers
116 SSLCONFIG = VC-WIN64A no-asm
117 !if $(FOSSIL_DYNAMIC_BUILD)!=0
118 SSLCONFIG = $(SSLCONFIG) shared
119 !else
120 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -125,16 +125,16 @@
125 !else
126 SSLNMAKE = ms\nt.mak all
127 !endif
128 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
129 !if $(FOSSIL_DYNAMIC_BUILD)==0
130 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
131 !endif
132 !elseif "$(PLATFORM)"=="ia64"
133 !message Using 'ia64' platform for OpenSSL...
134 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
135 # SSLCONFIG = VC-WIN64I no-asm no-ssl3 no-weak-ssl-ciphers
136 SSLCONFIG = VC-WIN64I no-asm
137 !if $(FOSSIL_DYNAMIC_BUILD)!=0
138 SSLCONFIG = $(SSLCONFIG) shared
139 !else
140 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -145,16 +145,16 @@
145 !else
146 SSLNMAKE = ms\nt.mak all
147 !endif
148 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
149 !if $(FOSSIL_DYNAMIC_BUILD)==0
150 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
151 !endif
152 !else
153 !message Assuming 'x86' platform for OpenSSL...
154 # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build.
155 # SSLCONFIG = VC-WIN32 no-asm no-ssl3 no-weak-ssl-ciphers
156 SSLCONFIG = VC-WIN32 no-asm
157 !if $(FOSSIL_DYNAMIC_BUILD)!=0
158 SSLCONFIG = $(SSLCONFIG) shared
159 !else
160 SSLCONFIG = $(SSLCONFIG) no-shared
@@ -165,11 +165,11 @@
165 !else
166 SSLNMAKE = ms\nt.mak all
167 !endif
168 # BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds.
169 !if $(FOSSIL_DYNAMIC_BUILD)==0
170 SSLCFLAGS = -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS
171 !endif
172 !endif
173 !endif
174
175 !if $(FOSSIL_ENABLE_TCL)!=0
176
+1 -1
--- www/build.wiki
+++ www/build.wiki
@@ -136,11 +136,11 @@
136136
the optional <a href="https://www.openssl.org/">OpenSSL</a> support,
137137
first <a href="https://www.openssl.org/source/">download the official
138138
source code for OpenSSL</a> and extract it to an appropriately named
139139
"<b>openssl-X.Y.ZA</b>" subdirectory within the local
140140
[/tree?ci=trunk&name=compat | compat] directory (e.g.
141
-"<b>compat/openssl-1.0.2p</b>"), then make sure that some recent
141
+"<b>compat/openssl-1.1.1</b>"), then make sure that some recent
142142
<a href="http://www.perl.org/">Perl</a> binaries are installed locally,
143143
and finally run one of the following commands:
144144
<blockquote><pre>
145145
nmake /f Makefile.msc FOSSIL_ENABLE_SSL=1 FOSSIL_BUILD_SSL=1 PERLDIR=C:\full\path\to\Perl\bin
146146
</pre></blockquote>
147147
--- www/build.wiki
+++ www/build.wiki
@@ -136,11 +136,11 @@
136 the optional <a href="https://www.openssl.org/">OpenSSL</a> support,
137 first <a href="https://www.openssl.org/source/">download the official
138 source code for OpenSSL</a> and extract it to an appropriately named
139 "<b>openssl-X.Y.ZA</b>" subdirectory within the local
140 [/tree?ci=trunk&name=compat | compat] directory (e.g.
141 "<b>compat/openssl-1.0.2p</b>"), then make sure that some recent
142 <a href="http://www.perl.org/">Perl</a> binaries are installed locally,
143 and finally run one of the following commands:
144 <blockquote><pre>
145 nmake /f Makefile.msc FOSSIL_ENABLE_SSL=1 FOSSIL_BUILD_SSL=1 PERLDIR=C:\full\path\to\Perl\bin
146 </pre></blockquote>
147
--- www/build.wiki
+++ www/build.wiki
@@ -136,11 +136,11 @@
136 the optional <a href="https://www.openssl.org/">OpenSSL</a> support,
137 first <a href="https://www.openssl.org/source/">download the official
138 source code for OpenSSL</a> and extract it to an appropriately named
139 "<b>openssl-X.Y.ZA</b>" subdirectory within the local
140 [/tree?ci=trunk&name=compat | compat] directory (e.g.
141 "<b>compat/openssl-1.1.1</b>"), then make sure that some recent
142 <a href="http://www.perl.org/">Perl</a> binaries are installed locally,
143 and finally run one of the following commands:
144 <blockquote><pre>
145 nmake /f Makefile.msc FOSSIL_ENABLE_SSL=1 FOSSIL_BUILD_SSL=1 PERLDIR=C:\full\path\to\Perl\bin
146 </pre></blockquote>
147
+1 -1
--- www/build.wiki
+++ www/build.wiki
@@ -136,11 +136,11 @@
136136
the optional <a href="https://www.openssl.org/">OpenSSL</a> support,
137137
first <a href="https://www.openssl.org/source/">download the official
138138
source code for OpenSSL</a> and extract it to an appropriately named
139139
"<b>openssl-X.Y.ZA</b>" subdirectory within the local
140140
[/tree?ci=trunk&name=compat | compat] directory (e.g.
141
-"<b>compat/openssl-1.0.2p</b>"), then make sure that some recent
141
+"<b>compat/openssl-1.1.1</b>"), then make sure that some recent
142142
<a href="http://www.perl.org/">Perl</a> binaries are installed locally,
143143
and finally run one of the following commands:
144144
<blockquote><pre>
145145
nmake /f Makefile.msc FOSSIL_ENABLE_SSL=1 FOSSIL_BUILD_SSL=1 PERLDIR=C:\full\path\to\Perl\bin
146146
</pre></blockquote>
147147
--- www/build.wiki
+++ www/build.wiki
@@ -136,11 +136,11 @@
136 the optional <a href="https://www.openssl.org/">OpenSSL</a> support,
137 first <a href="https://www.openssl.org/source/">download the official
138 source code for OpenSSL</a> and extract it to an appropriately named
139 "<b>openssl-X.Y.ZA</b>" subdirectory within the local
140 [/tree?ci=trunk&name=compat | compat] directory (e.g.
141 "<b>compat/openssl-1.0.2p</b>"), then make sure that some recent
142 <a href="http://www.perl.org/">Perl</a> binaries are installed locally,
143 and finally run one of the following commands:
144 <blockquote><pre>
145 nmake /f Makefile.msc FOSSIL_ENABLE_SSL=1 FOSSIL_BUILD_SSL=1 PERLDIR=C:\full\path\to\Perl\bin
146 </pre></blockquote>
147
--- www/build.wiki
+++ www/build.wiki
@@ -136,11 +136,11 @@
136 the optional <a href="https://www.openssl.org/">OpenSSL</a> support,
137 first <a href="https://www.openssl.org/source/">download the official
138 source code for OpenSSL</a> and extract it to an appropriately named
139 "<b>openssl-X.Y.ZA</b>" subdirectory within the local
140 [/tree?ci=trunk&name=compat | compat] directory (e.g.
141 "<b>compat/openssl-1.1.1</b>"), then make sure that some recent
142 <a href="http://www.perl.org/">Perl</a> binaries are installed locally,
143 and finally run one of the following commands:
144 <blockquote><pre>
145 nmake /f Makefile.msc FOSSIL_ENABLE_SSL=1 FOSSIL_BUILD_SSL=1 PERLDIR=C:\full\path\to\Perl\bin
146 </pre></blockquote>
147

Keyboard Shortcuts

Open search /
Next entry (timeline) j
Previous entry (timeline) k
Open focused entry Enter
Show this help ?
Toggle theme Top nav button