| | @@ -695,13 +695,13 @@ |
| 695 | 695 | ZLIBCONFIG = |
| 696 | 696 | ZLIBTARGETS = |
| 697 | 697 | endif |
| 698 | 698 | |
| 699 | 699 | #### Disable creation of the OpenSSL shared libraries. Also, disable support |
| 700 | | -# for both SSLv2 and SSLv3 (i.e. thereby forcing the use of TLS). |
| 700 | +# for SSLv3 (i.e. thereby forcing the use of TLS). |
| 701 | 701 | # |
| 702 | | -SSLCONFIG += no-ssl2 no-ssl3 no-weak-ssl-ciphers no-shared |
| 702 | +SSLCONFIG += no-ssl3 no-weak-ssl-ciphers no-shared |
| 703 | 703 | |
| 704 | 704 | #### When using zlib, make sure that OpenSSL is configured to use the zlib |
| 705 | 705 | # that Fossil knows about (i.e. the one within the source tree). |
| 706 | 706 | # |
| 707 | 707 | ifndef FOSSIL_ENABLE_MINIZ |
| | @@ -711,11 +711,11 @@ |
| 711 | 711 | #### The directories where the OpenSSL include and library files are located. |
| 712 | 712 | # The recommended usage here is to use the Sysinternals junction tool |
| 713 | 713 | # to create a hard link between an "openssl-1.x" sub-directory of the |
| 714 | 714 | # Fossil source code directory and the target OpenSSL source directory. |
| 715 | 715 | # |
| 716 | | -OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.0.2r |
| 716 | +OPENSSLDIR = $(SRCDIR)/../compat/openssl-1.1.1b |
| 717 | 717 | OPENSSLINCDIR = $(OPENSSLDIR)/include |
| 718 | 718 | OPENSSLLIBDIR = $(OPENSSLDIR) |
| 719 | 719 | |
| 720 | 720 | #### Either the directory where the Tcl library is installed or the Tcl |
| 721 | 721 | # source code directory resides (depending on the value of the macro |
| | @@ -1567,78 +1567,42 @@ |
| 1567 | 1567 | !ifndef USE_SEE |
| 1568 | 1568 | USE_SEE = 0 |
| 1569 | 1569 | !endif |
| 1570 | 1570 | |
| 1571 | 1571 | !if $(FOSSIL_ENABLE_SSL)!=0 |
| 1572 | | -SSLDIR = $(B)\compat\openssl-1.0.2r |
| 1573 | | -SSLINCDIR = $(SSLDIR)\inc32 |
| 1574 | | -!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1575 | | -SSLLIBDIR = $(SSLDIR)\out32dll |
| 1576 | | -!else |
| 1577 | | -SSLLIBDIR = $(SSLDIR)\out32 |
| 1578 | | -!endif |
| 1579 | | -SSLLFLAGS = /nologo /opt:ref /debug |
| 1580 | | -SSLLIB = ssleay32.lib libeay32.lib user32.lib gdi32.lib crypt32.lib |
| 1581 | | -!if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64" |
| 1582 | | -!message Using 'x64' platform for OpenSSL... |
| 1583 | | -# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1584 | | -# SSLCONFIG = VC-WIN64A no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers |
| 1585 | | -SSLCONFIG = VC-WIN64A no-asm |
| 1586 | | -!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1587 | | -SSLCONFIG = $(SSLCONFIG) shared |
| 1588 | | -!else |
| 1589 | | -SSLCONFIG = $(SSLCONFIG) no-shared |
| 1590 | | -!endif |
| 1591 | | -SSLSETUP = ms\do_win64a.bat |
| 1592 | | -!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1593 | | -SSLNMAKE = ms\ntdll.mak all |
| 1594 | | -!else |
| 1595 | | -SSLNMAKE = ms\nt.mak all |
| 1596 | | -!endif |
| 1597 | | -# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds. |
| 1598 | | -!if $(FOSSIL_DYNAMIC_BUILD)==0 |
| 1599 | | -SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS |
| 1600 | | -!endif |
| 1601 | | -!elseif "$(PLATFORM)"=="ia64" |
| 1602 | | -!message Using 'ia64' platform for OpenSSL... |
| 1603 | | -# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1604 | | -# SSLCONFIG = VC-WIN64I no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers |
| 1605 | | -SSLCONFIG = VC-WIN64I no-asm |
| 1606 | | -!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1607 | | -SSLCONFIG = $(SSLCONFIG) shared |
| 1608 | | -!else |
| 1609 | | -SSLCONFIG = $(SSLCONFIG) no-shared |
| 1610 | | -!endif |
| 1611 | | -SSLSETUP = ms\do_win64i.bat |
| 1612 | | -!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1613 | | -SSLNMAKE = ms\ntdll.mak all |
| 1614 | | -!else |
| 1615 | | -SSLNMAKE = ms\nt.mak all |
| 1616 | | -!endif |
| 1617 | | -# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds. |
| 1618 | | -!if $(FOSSIL_DYNAMIC_BUILD)==0 |
| 1619 | | -SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS |
| 1620 | | -!endif |
| 1621 | | -!else |
| 1622 | | -!message Assuming 'x86' platform for OpenSSL... |
| 1623 | | -# BUGBUG (OpenSSL): Using "no-ssl*" here breaks the build. |
| 1624 | | -# SSLCONFIG = VC-WIN32 no-asm no-ssl2 no-ssl3 no-weak-ssl-ciphers |
| 1625 | | -SSLCONFIG = VC-WIN32 no-asm |
| 1626 | | -!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1627 | | -SSLCONFIG = $(SSLCONFIG) shared |
| 1628 | | -!else |
| 1629 | | -SSLCONFIG = $(SSLCONFIG) no-shared |
| 1630 | | -!endif |
| 1631 | | -SSLSETUP = ms\do_ms.bat |
| 1632 | | -!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1633 | | -SSLNMAKE = ms\ntdll.mak all |
| 1634 | | -!else |
| 1635 | | -SSLNMAKE = ms\nt.mak all |
| 1636 | | -!endif |
| 1637 | | -# BUGBUG (OpenSSL): Using "OPENSSL_NO_SSL*" here breaks dynamic builds. |
| 1638 | | -!if $(FOSSIL_DYNAMIC_BUILD)==0 |
| 1639 | | -SSLCFLAGS = -DOPENSSL_NO_SSL2 -DOPENSSL_NO_SSL3 -DOPENSSL_NO_WEAK_SSL_CIPHERS |
| 1572 | +SSLDIR = $(B)\compat\openssl-1.1.1b |
| 1573 | +SSLINCDIR = $(SSLDIR)\include |
| 1574 | +!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1575 | +SSLLIBDIR = $(SSLDIR) |
| 1576 | +!else |
| 1577 | +SSLLIBDIR = $(SSLDIR) |
| 1578 | +!endif |
| 1579 | +SSLLFLAGS = /nologo /opt:ref /debug |
| 1580 | +SSLLIB = libssl.lib libcrypto.lib user32.lib gdi32.lib crypt32.lib |
| 1581 | +!if "$(PLATFORM)"=="amd64" || "$(PLATFORM)"=="x64" |
| 1582 | +!message Using 'x64' platform for OpenSSL... |
| 1583 | +SSLCONFIG = VC-WIN64A no-asm no-ssl3 no-weak-ssl-ciphers |
| 1584 | +!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1585 | +SSLCONFIG = $(SSLCONFIG) shared |
| 1586 | +!else |
| 1587 | +SSLCONFIG = $(SSLCONFIG) no-shared |
| 1588 | +!endif |
| 1589 | +!elseif "$(PLATFORM)"=="ia64" |
| 1590 | +!message Using 'ia64' platform for OpenSSL... |
| 1591 | +SSLCONFIG = VC-WIN64I no-asm no-ssl3 no-weak-ssl-ciphers |
| 1592 | +!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1593 | +SSLCONFIG = $(SSLCONFIG) shared |
| 1594 | +!else |
| 1595 | +SSLCONFIG = $(SSLCONFIG) no-shared |
| 1596 | +!endif |
| 1597 | +!else |
| 1598 | +!message Assuming 'x86' platform for OpenSSL... |
| 1599 | +SSLCONFIG = VC-WIN32 no-asm no-ssl3 no-weak-ssl-ciphers |
| 1600 | +!if $(FOSSIL_DYNAMIC_BUILD)!=0 |
| 1601 | +SSLCONFIG = $(SSLCONFIG) shared |
| 1602 | +!else |
| 1603 | +SSLCONFIG = $(SSLCONFIG) no-shared |
| 1640 | 1604 | !endif |
| 1641 | 1605 | !endif |
| 1642 | 1606 | !endif |
| 1643 | 1607 | |
| 1644 | 1608 | !if $(FOSSIL_ENABLE_TCL)!=0 |
| | @@ -1857,15 +1821,14 @@ |
| 1857 | 1821 | @echo Building OpenSSL from "$(SSLDIR)"... |
| 1858 | 1822 | !if "$(PERLDIR)" != "" |
| 1859 | 1823 | @set PATH=$(PERLDIR);$(PATH) |
| 1860 | 1824 | !endif |
| 1861 | 1825 | @pushd "$(SSLDIR)" && $(PERL) Configure $(SSLCONFIG) && popd |
| 1862 | | - @pushd "$(SSLDIR)" && call $(SSLSETUP) && popd |
| 1863 | 1826 | !if $(FOSSIL_ENABLE_WINXP)!=0 |
| 1864 | | - @pushd "$(SSLDIR)" && $(MAKE) /f $(SSLNMAKE) "CC=cl $(SSLCFLAGS) $(XPCFLAGS)" "LFLAGS=$(SSLLFLAGS) $(XPLDFLAGS)" && popd |
| 1827 | + @pushd "$(SSLDIR)" && $(MAKE) "CC=cl $(XPCFLAGS)" "LFLAGS=$(XPLDFLAGS)" && popd |
| 1865 | 1828 | !else |
| 1866 | | - @pushd "$(SSLDIR)" && $(MAKE) /f $(SSLNMAKE) "CC=cl $(SSLCFLAGS)" && popd |
| 1829 | + @pushd "$(SSLDIR)" && $(MAKE) && popd |
| 1867 | 1830 | !endif |
| 1868 | 1831 | !endif |
| 1869 | 1832 | |
| 1870 | 1833 | !if $(FOSSIL_ENABLE_MINIZ)==0 |
| 1871 | 1834 | !if $(FOSSIL_BUILD_ZLIB)!=0 |
| 1872 | 1835 | |