Fossil SCM
Add configurations "enable-capieng" (use Windows Certificate Store) and "no-weak-ssl-ciphers" (disable RC4 support)
Commit
b5a11142ee080ccf2cf6025890916ad8063b9ede2f54b083580013a0376a8402
Parent
cbdbc0a0ceaba9f…
4 files changed
+4
-4
+2
-2
+5
-5
+4
-4
+4
-4
| --- src/makemake.tcl | ||
| +++ src/makemake.tcl | ||
| @@ -695,11 +695,11 @@ | ||
| 695 | 695 | endif |
| 696 | 696 | |
| 697 | 697 | #### Disable creation of the OpenSSL shared libraries. Also, disable support |
| 698 | 698 | # for SSLv3 (i.e. thereby forcing the use of TLS). |
| 699 | 699 | # |
| 700 | -SSLCONFIG += no-ssl3 no-shared | |
| 700 | +SSLCONFIG += no-ssl3 enable-capieng no-weak-ssl-ciphers no-shared | |
| 701 | 701 | |
| 702 | 702 | #### When using zlib, make sure that OpenSSL is configured to use the zlib |
| 703 | 703 | # that Fossil knows about (i.e. the one within the source tree). |
| 704 | 704 | # |
| 705 | 705 | ifndef FOSSIL_ENABLE_MINIZ |
| @@ -1577,11 +1577,11 @@ | ||
| 1577 | 1577 | SSLLFLAGS = /nologo /opt:ref /debug |
| 1578 | 1578 | SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib |
| 1579 | 1579 | !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64" |
| 1580 | 1580 | !message Using 'x64' platform for OpenSSL... |
| 1581 | 1581 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1582 | -# SSLCONFIG = VC-WIN64A no-asm no-ssl3 | |
| 1582 | +# SSLCONFIG = VC-WIN64A no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers | |
| 1583 | 1583 | SSLCONFIG = VC-WIN64A no-asm |
| 1584 | 1584 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1585 | 1585 | SSLCONFIG = $(SSLCONFIG) shared |
| 1586 | 1586 | !else |
| 1587 | 1587 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -1597,11 +1597,11 @@ | ||
| 1597 | 1597 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 1598 | 1598 | !endif |
| 1599 | 1599 | !elseif "$(PLATFORM)"=="ia64" |
| 1600 | 1600 | !message Using 'ia64' platform for OpenSSL... |
| 1601 | 1601 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1602 | -# SSLCONFIG = VC-WIN64I no-asm no-ssl3 | |
| 1602 | +# SSLCONFIG = VC-WIN64I no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers | |
| 1603 | 1603 | SSLCONFIG = VC-WIN64I no-asm |
| 1604 | 1604 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1605 | 1605 | SSLCONFIG = $(SSLCONFIG) shared |
| 1606 | 1606 | !else |
| 1607 | 1607 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -1617,11 +1617,11 @@ | ||
| 1617 | 1617 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 1618 | 1618 | !endif |
| 1619 | 1619 | !else |
| 1620 | 1620 | !message Assuming 'x86' platform for OpenSSL... |
| 1621 | 1621 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1622 | -# SSLCONFIG = VC-WIN32 no-asm no-ssl3 | |
| 1622 | +# SSLCONFIG = VC-WIN32 no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers | |
| 1623 | 1623 | SSLCONFIG = VC-WIN32 no-asm |
| 1624 | 1624 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1625 | 1625 | SSLCONFIG = $(SSLCONFIG) shared |
| 1626 | 1626 | !else |
| 1627 | 1627 | SSLCONFIG = $(SSLCONFIG) no-shared |
| 1628 | 1628 |
| --- src/makemake.tcl | |
| +++ src/makemake.tcl | |
| @@ -695,11 +695,11 @@ | |
| 695 | endif |
| 696 | |
| 697 | #### Disable creation of the OpenSSL shared libraries. Also, disable support |
| 698 | # for SSLv3 (i.e. thereby forcing the use of TLS). |
| 699 | # |
| 700 | SSLCONFIG += no-ssl3 no-shared |
| 701 | |
| 702 | #### When using zlib, make sure that OpenSSL is configured to use the zlib |
| 703 | # that Fossil knows about (i.e. the one within the source tree). |
| 704 | # |
| 705 | ifndef FOSSIL_ENABLE_MINIZ |
| @@ -1577,11 +1577,11 @@ | |
| 1577 | SSLLFLAGS = /nologo /opt:ref /debug |
| 1578 | SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib |
| 1579 | !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64" |
| 1580 | !message Using 'x64' platform for OpenSSL... |
| 1581 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1582 | # SSLCONFIG = VC-WIN64A no-asm no-ssl3 |
| 1583 | SSLCONFIG = VC-WIN64A no-asm |
| 1584 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1585 | SSLCONFIG = $(SSLCONFIG) shared |
| 1586 | !else |
| 1587 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -1597,11 +1597,11 @@ | |
| 1597 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 1598 | !endif |
| 1599 | !elseif "$(PLATFORM)"=="ia64" |
| 1600 | !message Using 'ia64' platform for OpenSSL... |
| 1601 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1602 | # SSLCONFIG = VC-WIN64I no-asm no-ssl3 |
| 1603 | SSLCONFIG = VC-WIN64I no-asm |
| 1604 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1605 | SSLCONFIG = $(SSLCONFIG) shared |
| 1606 | !else |
| 1607 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -1617,11 +1617,11 @@ | |
| 1617 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 1618 | !endif |
| 1619 | !else |
| 1620 | !message Assuming 'x86' platform for OpenSSL... |
| 1621 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1622 | # SSLCONFIG = VC-WIN32 no-asm no-ssl3 |
| 1623 | SSLCONFIG = VC-WIN32 no-asm |
| 1624 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1625 | SSLCONFIG = $(SSLCONFIG) shared |
| 1626 | !else |
| 1627 | SSLCONFIG = $(SSLCONFIG) no-shared |
| 1628 |
| --- src/makemake.tcl | |
| +++ src/makemake.tcl | |
| @@ -695,11 +695,11 @@ | |
| 695 | endif |
| 696 | |
| 697 | #### Disable creation of the OpenSSL shared libraries. Also, disable support |
| 698 | # for SSLv3 (i.e. thereby forcing the use of TLS). |
| 699 | # |
| 700 | SSLCONFIG += no-ssl3 enable-capieng no-weak-ssl-ciphers no-shared |
| 701 | |
| 702 | #### When using zlib, make sure that OpenSSL is configured to use the zlib |
| 703 | # that Fossil knows about (i.e. the one within the source tree). |
| 704 | # |
| 705 | ifndef FOSSIL_ENABLE_MINIZ |
| @@ -1577,11 +1577,11 @@ | |
| 1577 | SSLLFLAGS = /nologo /opt:ref /debug |
| 1578 | SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib |
| 1579 | !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64" |
| 1580 | !message Using 'x64' platform for OpenSSL... |
| 1581 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1582 | # SSLCONFIG = VC-WIN64A no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers |
| 1583 | SSLCONFIG = VC-WIN64A no-asm |
| 1584 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1585 | SSLCONFIG = $(SSLCONFIG) shared |
| 1586 | !else |
| 1587 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -1597,11 +1597,11 @@ | |
| 1597 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 1598 | !endif |
| 1599 | !elseif "$(PLATFORM)"=="ia64" |
| 1600 | !message Using 'ia64' platform for OpenSSL... |
| 1601 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1602 | # SSLCONFIG = VC-WIN64I no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers |
| 1603 | SSLCONFIG = VC-WIN64I no-asm |
| 1604 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1605 | SSLCONFIG = $(SSLCONFIG) shared |
| 1606 | !else |
| 1607 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -1617,11 +1617,11 @@ | |
| 1617 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 1618 | !endif |
| 1619 | !else |
| 1620 | !message Assuming 'x86' platform for OpenSSL... |
| 1621 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1622 | # SSLCONFIG = VC-WIN32 no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers |
| 1623 | SSLCONFIG = VC-WIN32 no-asm |
| 1624 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1625 | SSLCONFIG = $(SSLCONFIG) shared |
| 1626 | !else |
| 1627 | SSLCONFIG = $(SSLCONFIG) no-shared |
| 1628 |
+2
-2
| --- win/Makefile.mingw | ||
| +++ win/Makefile.mingw | ||
| @@ -160,11 +160,11 @@ | ||
| 160 | 160 | endif |
| 161 | 161 | |
| 162 | 162 | #### Disable creation of the OpenSSL shared libraries. Also, disable support |
| 163 | 163 | # for SSLv3 (i.e. thereby forcing the use of TLS). |
| 164 | 164 | # |
| 165 | -SSLCONFIG += no-ssl3 no-shared | |
| 165 | +SSLCONFIG += no-ssl3 enable-capieng no-weak-ssl-ciphers no-shared | |
| 166 | 166 | |
| 167 | 167 | #### When using zlib, make sure that OpenSSL is configured to use the zlib |
| 168 | 168 | # that Fossil knows about (i.e. the one within the source tree). |
| 169 | 169 | # |
| 170 | 170 | ifndef FOSSIL_ENABLE_MINIZ |
| @@ -174,11 +174,11 @@ | ||
| 174 | 174 | #### The directories where the OpenSSL include and library files are located. |
| 175 | 175 | # The recommended usage here is to use the Sysinternals junction tool |
| 176 | 176 | # to create a hard link between an "openssl-1.x" sub-directory of the |
| 177 | 177 | # Fossil source code directory and the target OpenSSL source directory. |
| 178 | 178 | # |
| 179 | -OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1-pre8 | |
| 179 | +OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1-pre9 | |
| 180 | 180 | OPENSSLINCDIR = $(OPENSSLDIR)/include |
| 181 | 181 | OPENSSLLIBDIR = $(OPENSSLDIR) |
| 182 | 182 | |
| 183 | 183 | #### Either the directory where the Tcl library is installed or the Tcl |
| 184 | 184 | # source code directory resides (depending on the value of the macro |
| 185 | 185 |
| --- win/Makefile.mingw | |
| +++ win/Makefile.mingw | |
| @@ -160,11 +160,11 @@ | |
| 160 | endif |
| 161 | |
| 162 | #### Disable creation of the OpenSSL shared libraries. Also, disable support |
| 163 | # for SSLv3 (i.e. thereby forcing the use of TLS). |
| 164 | # |
| 165 | SSLCONFIG += no-ssl3 no-shared |
| 166 | |
| 167 | #### When using zlib, make sure that OpenSSL is configured to use the zlib |
| 168 | # that Fossil knows about (i.e. the one within the source tree). |
| 169 | # |
| 170 | ifndef FOSSIL_ENABLE_MINIZ |
| @@ -174,11 +174,11 @@ | |
| 174 | #### The directories where the OpenSSL include and library files are located. |
| 175 | # The recommended usage here is to use the Sysinternals junction tool |
| 176 | # to create a hard link between an "openssl-1.x" sub-directory of the |
| 177 | # Fossil source code directory and the target OpenSSL source directory. |
| 178 | # |
| 179 | OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1-pre8 |
| 180 | OPENSSLINCDIR = $(OPENSSLDIR)/include |
| 181 | OPENSSLLIBDIR = $(OPENSSLDIR) |
| 182 | |
| 183 | #### Either the directory where the Tcl library is installed or the Tcl |
| 184 | # source code directory resides (depending on the value of the macro |
| 185 |
| --- win/Makefile.mingw | |
| +++ win/Makefile.mingw | |
| @@ -160,11 +160,11 @@ | |
| 160 | endif |
| 161 | |
| 162 | #### Disable creation of the OpenSSL shared libraries. Also, disable support |
| 163 | # for SSLv3 (i.e. thereby forcing the use of TLS). |
| 164 | # |
| 165 | SSLCONFIG += no-ssl3 enable-capieng no-weak-ssl-ciphers no-shared |
| 166 | |
| 167 | #### When using zlib, make sure that OpenSSL is configured to use the zlib |
| 168 | # that Fossil knows about (i.e. the one within the source tree). |
| 169 | # |
| 170 | ifndef FOSSIL_ENABLE_MINIZ |
| @@ -174,11 +174,11 @@ | |
| 174 | #### The directories where the OpenSSL include and library files are located. |
| 175 | # The recommended usage here is to use the Sysinternals junction tool |
| 176 | # to create a hard link between an "openssl-1.x" sub-directory of the |
| 177 | # Fossil source code directory and the target OpenSSL source directory. |
| 178 | # |
| 179 | OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1-pre9 |
| 180 | OPENSSLINCDIR = $(OPENSSLDIR)/include |
| 181 | OPENSSLLIBDIR = $(OPENSSLDIR) |
| 182 | |
| 183 | #### Either the directory where the Tcl library is installed or the Tcl |
| 184 | # source code directory resides (depending on the value of the macro |
| 185 |
+5
-5
| --- win/Makefile.mingw.mistachkin | ||
| +++ win/Makefile.mingw.mistachkin | ||
| @@ -17,14 +17,14 @@ | ||
| 17 | 17 | # |
| 18 | 18 | |
| 19 | 19 | #### Select one of MinGW, MinGW-w64 (32-bit) or MinGW-w64 (64-bit) compilers. |
| 20 | 20 | # By default, this is an empty string (i.e. use the native compiler). |
| 21 | 21 | # |
| 22 | -PREFIX = | |
| 22 | +# PREFIX = | |
| 23 | 23 | # PREFIX = mingw32- |
| 24 | 24 | # PREFIX = i686-pc-mingw32- |
| 25 | -# PREFIX = i686-w64-mingw32- | |
| 25 | +PREFIX = i686-w64-mingw32- | |
| 26 | 26 | # PREFIX = x86_64-w64-mingw32- |
| 27 | 27 | |
| 28 | 28 | #### The toplevel directory of the source tree. Fossil can be built |
| 29 | 29 | # in a directory that is separate from the source tree. Just change |
| 30 | 30 | # the following to point from the build directory to the src/ folder. |
| @@ -63,15 +63,15 @@ | ||
| 63 | 63 | FOSSIL_ENABLE_SSL = 1 |
| 64 | 64 | |
| 65 | 65 | #### Automatically build OpenSSL when building Fossil (causes rebuild |
| 66 | 66 | # issues when building incrementally). |
| 67 | 67 | # |
| 68 | -# FOSSIL_BUILD_SSL = 1 | |
| 68 | +FOSSIL_BUILD_SSL = 1 | |
| 69 | 69 | |
| 70 | 70 | #### Enable relative paths in external diff/gdiff |
| 71 | 71 | # |
| 72 | -# FOSSIL_ENABLE_EXEC_REL_PATHS = 1 | |
| 72 | +FOSSIL_ENABLE_EXEC_REL_PATHS = 1 | |
| 73 | 73 | |
| 74 | 74 | #### Enable legacy treatment of mv/rm (skip checkout files) |
| 75 | 75 | # |
| 76 | 76 | FOSSIL_ENABLE_LEGACY_MV_RM = 1 |
| 77 | 77 | |
| @@ -160,11 +160,11 @@ | ||
| 160 | 160 | endif |
| 161 | 161 | |
| 162 | 162 | #### Disable creation of the OpenSSL shared libraries. Also, disable support |
| 163 | 163 | # for SSLv3 (i.e. thereby forcing the use of TLS). |
| 164 | 164 | # |
| 165 | -SSLCONFIG += no-ssl3 no-shared | |
| 165 | +SSLCONFIG += no-ssl3 enable-capieng no-weak-ssl-ciphers no-shared | |
| 166 | 166 | |
| 167 | 167 | #### When using zlib, make sure that OpenSSL is configured to use the zlib |
| 168 | 168 | # that Fossil knows about (i.e. the one within the source tree). |
| 169 | 169 | # |
| 170 | 170 | ifndef FOSSIL_ENABLE_MINIZ |
| 171 | 171 |
| --- win/Makefile.mingw.mistachkin | |
| +++ win/Makefile.mingw.mistachkin | |
| @@ -17,14 +17,14 @@ | |
| 17 | # |
| 18 | |
| 19 | #### Select one of MinGW, MinGW-w64 (32-bit) or MinGW-w64 (64-bit) compilers. |
| 20 | # By default, this is an empty string (i.e. use the native compiler). |
| 21 | # |
| 22 | PREFIX = |
| 23 | # PREFIX = mingw32- |
| 24 | # PREFIX = i686-pc-mingw32- |
| 25 | # PREFIX = i686-w64-mingw32- |
| 26 | # PREFIX = x86_64-w64-mingw32- |
| 27 | |
| 28 | #### The toplevel directory of the source tree. Fossil can be built |
| 29 | # in a directory that is separate from the source tree. Just change |
| 30 | # the following to point from the build directory to the src/ folder. |
| @@ -63,15 +63,15 @@ | |
| 63 | FOSSIL_ENABLE_SSL = 1 |
| 64 | |
| 65 | #### Automatically build OpenSSL when building Fossil (causes rebuild |
| 66 | # issues when building incrementally). |
| 67 | # |
| 68 | # FOSSIL_BUILD_SSL = 1 |
| 69 | |
| 70 | #### Enable relative paths in external diff/gdiff |
| 71 | # |
| 72 | # FOSSIL_ENABLE_EXEC_REL_PATHS = 1 |
| 73 | |
| 74 | #### Enable legacy treatment of mv/rm (skip checkout files) |
| 75 | # |
| 76 | FOSSIL_ENABLE_LEGACY_MV_RM = 1 |
| 77 | |
| @@ -160,11 +160,11 @@ | |
| 160 | endif |
| 161 | |
| 162 | #### Disable creation of the OpenSSL shared libraries. Also, disable support |
| 163 | # for SSLv3 (i.e. thereby forcing the use of TLS). |
| 164 | # |
| 165 | SSLCONFIG += no-ssl3 no-shared |
| 166 | |
| 167 | #### When using zlib, make sure that OpenSSL is configured to use the zlib |
| 168 | # that Fossil knows about (i.e. the one within the source tree). |
| 169 | # |
| 170 | ifndef FOSSIL_ENABLE_MINIZ |
| 171 |
| --- win/Makefile.mingw.mistachkin | |
| +++ win/Makefile.mingw.mistachkin | |
| @@ -17,14 +17,14 @@ | |
| 17 | # |
| 18 | |
| 19 | #### Select one of MinGW, MinGW-w64 (32-bit) or MinGW-w64 (64-bit) compilers. |
| 20 | # By default, this is an empty string (i.e. use the native compiler). |
| 21 | # |
| 22 | # PREFIX = |
| 23 | # PREFIX = mingw32- |
| 24 | # PREFIX = i686-pc-mingw32- |
| 25 | PREFIX = i686-w64-mingw32- |
| 26 | # PREFIX = x86_64-w64-mingw32- |
| 27 | |
| 28 | #### The toplevel directory of the source tree. Fossil can be built |
| 29 | # in a directory that is separate from the source tree. Just change |
| 30 | # the following to point from the build directory to the src/ folder. |
| @@ -63,15 +63,15 @@ | |
| 63 | FOSSIL_ENABLE_SSL = 1 |
| 64 | |
| 65 | #### Automatically build OpenSSL when building Fossil (causes rebuild |
| 66 | # issues when building incrementally). |
| 67 | # |
| 68 | FOSSIL_BUILD_SSL = 1 |
| 69 | |
| 70 | #### Enable relative paths in external diff/gdiff |
| 71 | # |
| 72 | FOSSIL_ENABLE_EXEC_REL_PATHS = 1 |
| 73 | |
| 74 | #### Enable legacy treatment of mv/rm (skip checkout files) |
| 75 | # |
| 76 | FOSSIL_ENABLE_LEGACY_MV_RM = 1 |
| 77 | |
| @@ -160,11 +160,11 @@ | |
| 160 | endif |
| 161 | |
| 162 | #### Disable creation of the OpenSSL shared libraries. Also, disable support |
| 163 | # for SSLv3 (i.e. thereby forcing the use of TLS). |
| 164 | # |
| 165 | SSLCONFIG += no-ssl3 enable-capieng no-weak-ssl-ciphers no-shared |
| 166 | |
| 167 | #### When using zlib, make sure that OpenSSL is configured to use the zlib |
| 168 | # that Fossil knows about (i.e. the one within the source tree). |
| 169 | # |
| 170 | ifndef FOSSIL_ENABLE_MINIZ |
| 171 |
+4
-4
| --- win/Makefile.msc | ||
| +++ win/Makefile.msc | ||
| @@ -98,11 +98,11 @@ | ||
| 98 | 98 | !ifndef USE_SEE |
| 99 | 99 | USE_SEE = 0 |
| 100 | 100 | !endif |
| 101 | 101 | |
| 102 | 102 | !if $(FOSSIL_ENABLE_SSL)!=0 |
| 103 | -SSLDIR = $(B)\compat\openssl-1.1.1-pre8 | |
| 103 | +SSLDIR = $(B)\compat\openssl-1.1.1-pre9 | |
| 104 | 104 | SSLINCDIR = $(SSLDIR)\inc32 |
| 105 | 105 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 106 | 106 | SSLLIBDIR = $(SSLDIR)\out32dll |
| 107 | 107 | !else |
| 108 | 108 | SSLLIBDIR = $(SSLDIR)\out32 |
| @@ -110,11 +110,11 @@ | ||
| 110 | 110 | SSLLFLAGS = /nologo /opt:ref /debug |
| 111 | 111 | SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib |
| 112 | 112 | !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64" |
| 113 | 113 | !message Using 'x64' platform for OpenSSL... |
| 114 | 114 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 115 | -# SSLCONFIG = VC-WIN64A no-asm no-ssl3 | |
| 115 | +# SSLCONFIG = VC-WIN64A no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers | |
| 116 | 116 | SSLCONFIG = VC-WIN64A no-asm |
| 117 | 117 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 118 | 118 | SSLCONFIG = $(SSLCONFIG) shared |
| 119 | 119 | !else |
| 120 | 120 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -130,11 +130,11 @@ | ||
| 130 | 130 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 131 | 131 | !endif |
| 132 | 132 | !elseif "$(PLATFORM)"=="ia64" |
| 133 | 133 | !message Using 'ia64' platform for OpenSSL... |
| 134 | 134 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 135 | -# SSLCONFIG = VC-WIN64I no-asm no-ssl3 | |
| 135 | +# SSLCONFIG = VC-WIN64I no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers | |
| 136 | 136 | SSLCONFIG = VC-WIN64I no-asm |
| 137 | 137 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 138 | 138 | SSLCONFIG = $(SSLCONFIG) shared |
| 139 | 139 | !else |
| 140 | 140 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -150,11 +150,11 @@ | ||
| 150 | 150 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 151 | 151 | !endif |
| 152 | 152 | !else |
| 153 | 153 | !message Assuming 'x86' platform for OpenSSL... |
| 154 | 154 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 155 | -# SSLCONFIG = VC-WIN32 no-asm no-ssl3 | |
| 155 | +# SSLCONFIG = VC-WIN32 no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers | |
| 156 | 156 | SSLCONFIG = VC-WIN32 no-asm |
| 157 | 157 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 158 | 158 | SSLCONFIG = $(SSLCONFIG) shared |
| 159 | 159 | !else |
| 160 | 160 | SSLCONFIG = $(SSLCONFIG) no-shared |
| 161 | 161 |
| --- win/Makefile.msc | |
| +++ win/Makefile.msc | |
| @@ -98,11 +98,11 @@ | |
| 98 | !ifndef USE_SEE |
| 99 | USE_SEE = 0 |
| 100 | !endif |
| 101 | |
| 102 | !if $(FOSSIL_ENABLE_SSL)!=0 |
| 103 | SSLDIR = $(B)\compat\openssl-1.1.1-pre8 |
| 104 | SSLINCDIR = $(SSLDIR)\inc32 |
| 105 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 106 | SSLLIBDIR = $(SSLDIR)\out32dll |
| 107 | !else |
| 108 | SSLLIBDIR = $(SSLDIR)\out32 |
| @@ -110,11 +110,11 @@ | |
| 110 | SSLLFLAGS = /nologo /opt:ref /debug |
| 111 | SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib |
| 112 | !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64" |
| 113 | !message Using 'x64' platform for OpenSSL... |
| 114 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 115 | # SSLCONFIG = VC-WIN64A no-asm no-ssl3 |
| 116 | SSLCONFIG = VC-WIN64A no-asm |
| 117 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 118 | SSLCONFIG = $(SSLCONFIG) shared |
| 119 | !else |
| 120 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -130,11 +130,11 @@ | |
| 130 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 131 | !endif |
| 132 | !elseif "$(PLATFORM)"=="ia64" |
| 133 | !message Using 'ia64' platform for OpenSSL... |
| 134 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 135 | # SSLCONFIG = VC-WIN64I no-asm no-ssl3 |
| 136 | SSLCONFIG = VC-WIN64I no-asm |
| 137 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 138 | SSLCONFIG = $(SSLCONFIG) shared |
| 139 | !else |
| 140 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -150,11 +150,11 @@ | |
| 150 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 151 | !endif |
| 152 | !else |
| 153 | !message Assuming 'x86' platform for OpenSSL... |
| 154 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 155 | # SSLCONFIG = VC-WIN32 no-asm no-ssl3 |
| 156 | SSLCONFIG = VC-WIN32 no-asm |
| 157 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 158 | SSLCONFIG = $(SSLCONFIG) shared |
| 159 | !else |
| 160 | SSLCONFIG = $(SSLCONFIG) no-shared |
| 161 |
| --- win/Makefile.msc | |
| +++ win/Makefile.msc | |
| @@ -98,11 +98,11 @@ | |
| 98 | !ifndef USE_SEE |
| 99 | USE_SEE = 0 |
| 100 | !endif |
| 101 | |
| 102 | !if $(FOSSIL_ENABLE_SSL)!=0 |
| 103 | SSLDIR = $(B)\compat\openssl-1.1.1-pre9 |
| 104 | SSLINCDIR = $(SSLDIR)\inc32 |
| 105 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 106 | SSLLIBDIR = $(SSLDIR)\out32dll |
| 107 | !else |
| 108 | SSLLIBDIR = $(SSLDIR)\out32 |
| @@ -110,11 +110,11 @@ | |
| 110 | SSLLFLAGS = /nologo /opt:ref /debug |
| 111 | SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib |
| 112 | !if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64" |
| 113 | !message Using 'x64' platform for OpenSSL... |
| 114 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 115 | # SSLCONFIG = VC-WIN64A no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers |
| 116 | SSLCONFIG = VC-WIN64A no-asm |
| 117 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 118 | SSLCONFIG = $(SSLCONFIG) shared |
| 119 | !else |
| 120 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -130,11 +130,11 @@ | |
| 130 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 131 | !endif |
| 132 | !elseif "$(PLATFORM)"=="ia64" |
| 133 | !message Using 'ia64' platform for OpenSSL... |
| 134 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 135 | # SSLCONFIG = VC-WIN64I no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers |
| 136 | SSLCONFIG = VC-WIN64I no-asm |
| 137 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 138 | SSLCONFIG = $(SSLCONFIG) shared |
| 139 | !else |
| 140 | SSLCONFIG = $(SSLCONFIG) no-shared |
| @@ -150,11 +150,11 @@ | |
| 150 | SSLCFLAGS = -DOPENSSL_NO_SSL3 |
| 151 | !endif |
| 152 | !else |
| 153 | !message Assuming 'x86' platform for OpenSSL... |
| 154 | # BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 155 | # SSLCONFIG = VC-WIN32 no-asm no-ssl3 enable-capieng no-weak-ssl-ciphers |
| 156 | SSLCONFIG = VC-WIN32 no-asm |
| 157 | !if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 158 | SSLCONFIG = $(SSLCONFIG) shared |
| 159 | !else |
| 160 | SSLCONFIG = $(SSLCONFIG) no-shared |
| 161 |