openssl: CWARNFLAGS, not COPTS, for -Wno-error=...

COPTS gets put too early, so these are cancelled out by -W flags
added later by bsd.sys.mk. (How did this ever work???)

openssl: Note that -Wno-error=char-subscripts likely masks real bugs.

openssl: Consolidate new CWARNFLAGS.clang stuff in Makefile.openssl.

centralize the warnings, try to fix clang

Make "shadow" warnings non-fatal for now (triggered by lots BN_* macros).

enable (and disable) warnings centrally

Adjust for 3.x

remove defines now defined in crypto/dso_conf.h

branches: 1.11.4; 1.11.6;
switch everyone to openssl.old

Remove -I line for no longer extant directory. The OpenSSL libraries
built here, unsurprisingly enough, still build and work exactly the
same.

openssl moved

XXX: This file does not really belong here.
Add ENGINESDIR define

apply patch supplied with OpenSSL Security Advisory [30 July 2002]

advisory 1: four potentially remotely-exploitable vulnerability in
SSL2/SSL3 code
advisory 2: ASN1 parser vulnerability (all SSL/TLS apps affected)

sync with 0.9.6d. shlib minor for libssl and libcrypto
is cranked for additional functions.

branches: 1.5.2;
always compile RSA into libcrypto.
MKCRYPTO disables the whole crypto tree, and in that case,
we will not have RSA (nor libcrypto) with us.

we always build idea/rc5 (dummy, though).

Change the USELESS_CRYPTO check to MKCRYPTO_{IDEA,RC5,RSA}.

branches: 1.2.2; 1.2.4;
Fixup the OpenSSL library builds.

Common OpenSSL Makefile goo, from cryptosrc-intl.

remove defines now defined in crypto/dso_conf.h

switch everyone to openssl.old

Remove -I line for no longer extant directory. The OpenSSL libraries
built here, unsurprisingly enough, still build and work exactly the
same.

openssl moved

XXX: This file does not really belong here.
Add ENGINESDIR define

apply patch supplied with OpenSSL Security Advisory [30 July 2002]

advisory 1: four potentially remotely-exploitable vulnerability in
SSL2/SSL3 code
advisory 2: ASN1 parser vulnerability (all SSL/TLS apps affected)

sync with 0.9.6d. shlib minor for libssl and libcrypto
is cranked for additional functions.

branches: 1.5.2;
always compile RSA into libcrypto.
MKCRYPTO disables the whole crypto tree, and in that case,
we will not have RSA (nor libcrypto) with us.

we always build idea/rc5 (dummy, though).

Change the USELESS_CRYPTO check to MKCRYPTO_{IDEA,RC5,RSA}.

branches: 1.2.2; 1.2.4;
Fixup the OpenSSL library builds.

Common OpenSSL Makefile goo, from cryptosrc-intl.

switch everyone to openssl.old

Remove -I line for no longer extant directory. The OpenSSL libraries
built here, unsurprisingly enough, still build and work exactly the
same.

openssl moved

XXX: This file does not really belong here.
Add ENGINESDIR define

apply patch supplied with OpenSSL Security Advisory [30 July 2002]

advisory 1: four potentially remotely-exploitable vulnerability in
SSL2/SSL3 code
advisory 2: ASN1 parser vulnerability (all SSL/TLS apps affected)

sync with 0.9.6d. shlib minor for libssl and libcrypto
is cranked for additional functions.

branches: 1.5.2;
always compile RSA into libcrypto.
MKCRYPTO disables the whole crypto tree, and in that case,
we will not have RSA (nor libcrypto) with us.

we always build idea/rc5 (dummy, though).

Change the USELESS_CRYPTO check to MKCRYPTO_{IDEA,RC5,RSA}.

branches: 1.2.2; 1.2.4;
Fixup the OpenSSL library builds.

Common OpenSSL Makefile goo, from cryptosrc-intl.

Remove -I line for no longer extant directory. The OpenSSL libraries
built here, unsurprisingly enough, still build and work exactly the
same.

openssl moved

XXX: This file does not really belong here.
Add ENGINESDIR define

apply patch supplied with OpenSSL Security Advisory [30 July 2002]

advisory 1: four potentially remotely-exploitable vulnerability in
SSL2/SSL3 code
advisory 2: ASN1 parser vulnerability (all SSL/TLS apps affected)

sync with 0.9.6d. shlib minor for libssl and libcrypto
is cranked for additional functions.

branches: 1.5.2;
always compile RSA into libcrypto.
MKCRYPTO disables the whole crypto tree, and in that case,
we will not have RSA (nor libcrypto) with us.

we always build idea/rc5 (dummy, though).

Change the USELESS_CRYPTO check to MKCRYPTO_{IDEA,RC5,RSA}.

branches: 1.2.2; 1.2.4;
Fixup the OpenSSL library builds.

Common OpenSSL Makefile goo, from cryptosrc-intl.

Fixup the OpenSSL library builds.

file Makefile.openssl was added on branch minoura-xpg4dl on 2000-06-16 06:16:38 +0000

Sync to version 1.7 (requested by itojun,he):
Update OpenSSL to version 0.9.6g. Includes major version bump for
libcrypto and all the dependent libraries.
(unapply 1.2.2.3, apply 1.6-1.7)

Pull up revision 1.7 (via patch, requested by itojun):
Apply point patch to add ASN.1 encoding and buffer overflow
checks.

pullup (approved by releng-1-5)

repair openssl on non-32bit arch. confirmed to work on alpha/i386/sparc64.
disable IDEA/RC5 by default. they will be built as separate library,
libcrypto_{idea,rc5}.

cvs update -j1.65 -j1.68 share/mk/bsd.README
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/rc2/rc2cfb64.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/rc5/rc5cfb64.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/idea/i_cfb64.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/rc2/rc2ofb64.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/rc5/rc5ofb64.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/idea/i_ofb64.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/rc2/rc2_ecb.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/rc5/rc5_ecb.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/idea/i_ecb.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/rc2/rc2_cbc.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/idea/i_cbc.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/rc5/rc5_enc.c
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/rc2/rc2speed.c
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/rc5/rc5speed.c
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/idea/idea_spd.c
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/des/des_opts.c
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/cast/castopts.c
cvs update -j1.1 -j1.2 crypto/dist/openssl/crypto/x509v3/tabtest.c
cvs update -j1.1 -j1.3 crypto/dist/openssl/crypto/bn/divtest.c
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/md5/md5_dgst.c
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/idea/i_skey.c
cvs update -j1.3 -j1.4 lib/libcrypto/rc5.inc
cvs update -j1.3 -j1.4 lib/libcrypto/idea.inc
cvs update -j1.5 -j1.8 lib/libcrypto/srcs.inc
cvs update -j1.63 -j1.64 lib/Makefile
cvs update -j1.5 -j1.7 usr.bin/openssl/Makefile
cvs update -j1.8 -j1.9 lib/libcrypto/Makefile
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/mdc2/mdc2.h
cvs update -j1.1.1.1 -j1.3 crypto/dist/openssl/crypto/rc2/rc2.h
cvs update -j1.1.1.2 -j1.3 crypto/dist/openssl/crypto/md2/md2.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/ssl/ssl3.h
cvs update -j1.1.1.2 -j1.3 crypto/dist/openssl/crypto/rc4/rc4.h
cvs update -j1.1.1.1 -j1.3 crypto/dist/openssl/crypto/rc5/rc5.h
cvs update -j1.1.1.2 -j1.3 crypto/dist/openssl/crypto/md5/md5.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/x509/x509.h
cvs update -j1.1.1.1 -j1.3 crypto/dist/openssl/crypto/idea/idea.h
cvs update -j1.1.1.2 -j1.3 crypto/dist/openssl/crypto/sha/sha.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/dsa/dsa.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/rsa/rsa.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/hmac/hmac.h
cvs update -j1.1.1.2 -j1.3 crypto/dist/openssl/crypto/ripemd/ripemd.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/opensslconf.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/dh/dh.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/lhash/lhash.h
cvs update -j1.1.1.2 -j1.3 crypto/dist/openssl/crypto/bf/blowfish.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/idea/idea_lcl.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/cast/cast_lcl.h
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/rc2/rc2_locl.h
cvs update -j1.1.1.1 -j1.2 crypto/dist/openssl/crypto/rc4/rc4_locl.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/rc5/rc5_locl.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/md5/md5_locl.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/sha/sha_locl.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/ripemd/rmd_locl.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/bf/bf_locl.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/ssl/ssl_locl.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/ssl/ssl.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/pem/pem.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/bn/bn.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/bio/bio.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/evp/evp.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/err/err.h
cvs update -j1.5 -j1.7 crypto/dist/openssl/crypto/des/des.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/e_os.h
cvs update -j1.1.1.1 -j1.3 crypto/dist/openssl/crypto/cast/cast.h
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/x509/x509_vfy.h
cvs update -j1.270 -j1.273 distrib/sets/lists/man/mi
cvs update -j1.274 -j1.275 distrib/sets/lists/man/mi
cvs update -j1.258 -j1.262 distrib/sets/lists/comp/mi
cvs update -j1.142 -j1.144 share/mk/bsd.own.mk
cvs update -j1.3 -j1.5 crypto/Makefile.openssl
cvs update -j1.1.1.2 -j1.2 crypto/dist/openssl/crypto/opensslconf.h.in

new files (tag added)
lib/libcrypto/man/*
lib/libcrypto/man.inc
lib/libcrypto_idea/Makefile
lib/libcrypto_rc5/Makefile
lib/libcrypto/rc5_skey_dummy.c
lib/libcrypto/rc5_enc_dummy.c
lib/libcrypto/i_cbc_dummy.c
lib/libcrypto/i_skey_dummy.c

Pull up rev. 1.3 (veego):
Change the USELESS_CRYPTO check to MKCRYPTO_{IDEA,RC5,RSA}.

Pull up revisions 1.6-1.7 (requested by itojun in ticket #607):
sync to head for openssl 0.9.6e