Skip to content

[Security][3.4] bpo-29572: Update macOS installer build to OpenSSL 1.0.2k #3447

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
vstinner wants to merge 5 commits into from
Closed

[Security][3.4] bpo-29572: Update macOS installer build to OpenSSL 1.0.2k #3447

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
b89053a
Issue #26268: Update OS X 10.5+ installer build to use OpenSSL 1.0.2f.
ned-deily Feb 15, 2016
21dfaf0
Issue #26465: Update OS X installer build to use OpenSSL 1.0.2g.
ned-deily Mar 8, 2016
8a303b5
Issue #26930: Update OS X 32-bit-only installer builds to use OpenSSL…
ned-deily Jun 5, 2016
a2786df
Issue #28248: Update macOS installer build to use OpenSSL 1.0.2j.
ned-deily Oct 31, 2016
70116be
bpo-29572: Update macOS installer build to OpenSSL 1.0.2k (#457) (#2835)
ned-deily Jul 24, 2017
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
Issue #26268: Update OS X 10.5+ installer build to use OpenSSL 1.0.2f. 
(cherry picked from commit 203ce92)
  • Loading branch information
@ned-deily @vstinner
ned-deily authored and vstinner committed Sep 8, 2017
commit b89053ae2c0409549792ca74d0e584c84daa1b86
6 changes: 3 additions & 3 deletions Mac/BuildScript/build-installer.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -237,9 +237,9 @@ def library_recipes():

result.extend([
dict(
name="OpenSSL 1.0.2e",
url="https://www.openssl.org/source/openssl-1.0.2e.tar.gz",
checksum='5262bfa25b60ed9de9f28d5d52d77fc5',
name="OpenSSL 1.0.2f",
url="https://www.openssl.org/source/openssl-1.0.2f.tar.gz",
checksum='b3bf73f507172be9292ea2a8c28b659d',
patches=[
"openssl_sdk_makedepend.patch",
],
Expand Down
22 changes: 4 additions & 18 deletions Mac/BuildScript/openssl_sdk_makedepend.patch
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,18 +1,17 @@
# HG changeset patch
# Parent ff8a7557607cffd626997e57ed31c1012a3018aa
# Parent d377390f787c0739a3e89f669def72d7167e5108
# openssl_sdk_makedepend.patch
#
# using openssl 1.0.2e
# using openssl 1.0.2f
#
# - support building with an OS X SDK
# - allow "make depend" to use compilers with names other than "gcc"

diff Configure

diff --git a/Configure b/Configure
--- a/Configure
+++ b/Configure
@@ -635,12 +635,12 @@
@@ -638,12 +638,12 @@

##### MacOS X (a.k.a. Rhapsody or Darwin) setup
"rhapsody-ppc-cc","cc:-O3 -DB_ENDIAN::(unknown):MACOSX_RHAPSODY::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}::",
Expand All @@ -31,7 +30,7 @@ diff --git a/Configure b/Configure
"debug-darwin-ppc-cc","cc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -DB_ENDIAN -g -Wall -O::-D_REENTRANT:MACOSX::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${ppc32_asm}:osx32:dlfcn:darwin-shared:-fPIC:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
# iPhoneOS/iOS
"iphoneos-cross","llvm-gcc:-O3 -isysroot \$(CROSS_TOP)/SDKs/\$(CROSS_SDK) -fomit-frame-pointer -fno-common::-D_REENTRANT:iOS:-Wl,-search_paths_first%:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${no_asm}:dlfcn:darwin-shared:-fPIC -fno-common:-dynamiclib:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
@@ -1714,8 +1714,7 @@
@@ -1717,8 +1717,7 @@
s/^CC=.*$/CC= $cc/;
s/^AR=\s*ar/AR= $ar/;
s/^RANLIB=.*/RANLIB= $ranlib/;
Expand All @@ -41,16 +40,3 @@ diff --git a/Configure b/Configure
}
s/^CFLAG=.*$/CFLAG= $cflags/;
s/^DEPFLAG=.*$/DEPFLAG=$depflags/;
diff --git a/util/domd b/util/domd
--- a/util/domd
+++ b/util/domd
@@ -14,8 +14,7 @@
cp Makefile Makefile.save
# fake the presence of Kerberos
touch $TOP/krb5.h
-if ${MAKEDEPEND} --version 2>&1 | grep -q "clang" ||
- echo $MAKEDEPEND | grep -q "gcc"; then
+if true ; then
args=""
while [ $# -gt 0 ]; do
if [ "$1" != "--" ]; then args="$args $1"; fi
1 change: 1 addition & 0 deletions Misc/NEWS.d/next/Build/2017-09-07-19-26-26.bpo-26268.1Duz_M.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
Update OS X 10.5 installer to use OpenSSL 1.0.2f.