diff --git a/CHANGES.BabaSSL b/CHANGES.BabaSSL index 7f96b6915..5b8040437 100644 --- a/CHANGES.BabaSSL +++ b/CHANGES.BabaSSL @@ -5,32 +5,20 @@ This is a high-level summary of the most important changes. For a full list of changes, see the git commit log. - Changes between 8.1.2 and 8.1.3 [23 Jun 2020] + Changes with 8.1.3 [15 Jan 2021] *) Support more QUIC related APIs - Changes between 8.1.1 and 8.1.2 [22 Apr 2020] + *) Fix CVE-2020-1971 *) Fix CVE-2020-1967 - Changes between 8.1.0 and 8.1.1 [15 Apr 2020] - - *) Fix up memory leak problems - *) Give a default sm2-id for sm2 sign process which not set sm-id - Changes between 8.0.0 and 8.1.0 [25 Mar 2020] - *) Support BoringSSL QUIC API *) Fix up problems of CVE-2019-1551 - The Genesis of the BabaSSL project [26 Dec 2019] - - We fork this project from OpenSSL version 1.1.1d which is created by all - OpenSSL authors. The first release of BabaSSL is 8.0.0. BabaSSL 8.0.0 - provides the following features: - *) Support TLS1.3-GM ciphersuite, see https://datatracker.ietf.org/doc/draft-yang-tls-tls13-sm-suites/ for more information *) Support global session cache, asynchronous session lookup @@ -38,3 +26,5 @@ *) Support SM2 cert sign, SM2 speed testing for babassl/apps *) Support dynamic cipher, make EVP api compatible with lua ffi + + *) Fork from OpenSSL version 1.1.1d diff --git a/rpm/babassl-app.deps b/rpm/babassl-app.deps deleted file mode 100644 index 95fde7a28..000000000 --- a/rpm/babassl-app.deps +++ /dev/null @@ -1,2 +0,0 @@ -[deps] - gcc53 diff --git a/rpm/babassl-app.spec b/rpm/babassl-app.spec deleted file mode 100644 index 900d630ff..000000000 --- a/rpm/babassl-app.spec +++ /dev/null @@ -1,55 +0,0 @@ -%define debug_package %{nil} -%define __os_install_post %{nil} - -Name: babassl-app -Version:8.1.3 -Release: %(echo $RELEASE)%{?dist} -Packager: jinjiu -Summary: OpenSSL with many awesome features (fork from openssl-1.1.1) for app client -Group: System Environment/Libraries -License: BSD -Vendor: Alibaba.Inc -Url: git@gitlab.alipay-inc.com:afe/BabaSSL.git -Buildroot: %{_tmppath}/%{name}-%{version}-root - -%ifarch x86_64 -%define arch x86_64 -%else -%ifarch aarch64 -%define arch aarch64 -%endif -%endif - -%if 0%{?alios5} -BuildRequires: perl-5.16.3 -%endif - -%description -OpenSSL with many awesome features (fork from openssl-1.1.1). - -%build -cd ../../../ -export BUILD_ROOT=%{buildroot} -if [ -f Makefile]; then - make clean -fi - -CC=gcc ./Configure linux-%{arch} no-shared enable-threads enable-tls1_3 enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers no-keyless no-lurk no-evp-cipher-api-compat no-req-status no-status no-crypto-mdebug-count no-dynamic-ciphers no-optimize-chacha no-rsa-multi-prime-key-compat no-session-lookup no-session-reused-type no-global-session-cache no-verify-sni no-skip-scsv enable-ntls enable-sm2 --strict-warnings --release -fPIC --prefix=/usr/local/babassl-app -make %{?_smp_mflags} - -%install -cd ../../../ -rm -rf %{buildroot} -make install DESTDIR=%{buildroot} - -%files -%defattr(-,root,root,-) -/usr/local/babassl-app - -%clean -rm -rf %{buildroot} - -%changelog - -* Thu Mar 12 2020 jinjiu -- initial packaging - babassl-app diff --git a/rpm/babassl-cdn-debug.deps b/rpm/babassl-cdn-debug.deps deleted file mode 100644 index 95fde7a28..000000000 --- a/rpm/babassl-cdn-debug.deps +++ /dev/null @@ -1,2 +0,0 @@ -[deps] - gcc53 diff --git a/rpm/babassl-cdn-debug.spec b/rpm/babassl-cdn-debug.spec deleted file mode 100644 index fe670c4db..000000000 --- a/rpm/babassl-cdn-debug.spec +++ /dev/null @@ -1,55 +0,0 @@ -%define debug_package %{nil} -%define __os_install_post %{nil} - -Name: babassl-cdn-debug -Version:8.0.0 -Release: %(echo $RELEASE)%{?dist} -Packager: jinjiu -Summary: OpenSSL with many awesome features (fork from openssl-1.1.1) -Group: System Environment/Libraries -License: BSD -Vendor: Alibaba.Inc -Url: git@gitlab.alipay-inc.com:afe/BabaSSL.git -Buildroot: %{_tmppath}/%{name}-%{version}-root - -%ifarch x86_64 -%define arch x86_64 -%else -%ifarch aarch64 -%define arch aarch64 -%endif -%endif - -%if 0%{?alios5} -BuildRequires: perl-5.16.3 -%endif - -%description -OpenSSL with many awesome features (fork from openssl-1.1.1). - -%build -cd ../../../ -export BUILD_ROOT=%{buildroot} -if [ -f Makefile]; then - make clean -fi - -CC=gcc ./Configure debug-linux-%{arch} no-shared no-threads enable-tls1_3 enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers enable-keyless enable-lurk enable-evp-cipher-api-compat enable-dycert-ocsp enable-req-status enable-status enable-crypto-mdebug-count enable-dynamic-ciphers enable-optimize-chacha enable-rsa-multi-prime-key-compat enable-session-lookup enable-session-reused-type enable-global-session-cache enable-verify-sni enable-skip-scsv enable-ntls enable-sm2 --strict-warnings --debug -fPIC --prefix=/usr/local/babassl-cdn-debug -make %{?_smp_mflags} - -%install -cd ../../../ -rm -rf %{buildroot} -make install DESTDIR=%{buildroot} - -%files -%defattr(-,root,root,-) -/usr/local/babassl-cdn-debug - -%clean -rm -rf %{buildroot} - -%changelog - -* Sat Nov 30 2019 jinjiu -- initial packaging - babassl-cdn-debug diff --git a/rpm/babassl-cdn.deps b/rpm/babassl-cdn.deps deleted file mode 100644 index 95fde7a28..000000000 --- a/rpm/babassl-cdn.deps +++ /dev/null @@ -1,2 +0,0 @@ -[deps] - gcc53 diff --git a/rpm/babassl-cdn.spec b/rpm/babassl-cdn.spec deleted file mode 100644 index f64d59b3b..000000000 --- a/rpm/babassl-cdn.spec +++ /dev/null @@ -1,55 +0,0 @@ -%define debug_package %{nil} -%define __os_install_post %{nil} - -Name: babassl-cdn -Version:8.0.0 -Release: %(echo $RELEASE)%{?dist} -Packager: jinjiu -Summary: OpenSSL with many awesome features (fork from openssl-1.1.1) -Group: System Environment/Libraries -License: BSD -Vendor: Alibaba.Inc -Url: git@gitlab.alipay-inc.com:afe/BabaSSL.git -Buildroot: %{_tmppath}/%{name}-%{version}-root - -%ifarch x86_64 -%define arch x86_64 -%else -%ifarch aarch64 -%define arch aarch64 -%endif -%endif - -%if 0%{?alios5} -BuildRequires: perl-5.16.3 -%endif - -%description -OpenSSL with many awesome features (fork from openssl-1.1.1). - -%build -cd ../../../ -export BUILD_ROOT=%{buildroot} -if [ -f Makefile]; then - make clean -fi - -CC=gcc ./Configure linux-%{arch} no-shared no-threads enable-tls1_3 enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers enable-keyless enable-lurk enable-evp-cipher-api-compat enable-dycert-ocsp enable-req-status enable-status enable-crypto-mdebug-count enable-dynamic-ciphers enable-optimize-chacha enable-rsa-multi-prime-key-compat enable-session-lookup enable-session-reused-type enable-global-session-cache enable-verify-sni enable-skip-scsv enable-ntls enable-sm2 enable-sm3 enable-sm4 --strict-warnings --release -fPIC --prefix=/usr/local/babassl-cdn -make %{?_smp_mflags} - -%install -cd ../../../ -rm -rf %{buildroot} -make install DESTDIR=%{buildroot} - -%files -%defattr(-,root,root,-) -/usr/local/babassl-cdn - -%clean -rm -rf %{buildroot} - -%changelog - -* Sat Nov 30 2019 jinjiu -- initial packaging - babassl-cdn diff --git a/rpm/babassl-debug.deps b/rpm/babassl-debug.deps deleted file mode 100644 index 95fde7a28..000000000 --- a/rpm/babassl-debug.deps +++ /dev/null @@ -1,2 +0,0 @@ -[deps] - gcc53 diff --git a/rpm/babassl-debug.spec b/rpm/babassl-debug.spec deleted file mode 100644 index 3c960be4d..000000000 --- a/rpm/babassl-debug.spec +++ /dev/null @@ -1,55 +0,0 @@ -%define debug_package %{nil} -%define __os_install_post %{nil} - -Name: babassl-debug -Version:8.1.3 -Release: %(echo $RELEASE)%{?dist} -Packager: jinjiu -Summary: OpenSSL with many awesome features (fork from openssl-1.1.1) -Group: System Environment/Libraries -License: BSD -Vendor: Alibaba.Inc -Url: git@gitlab.alipay-inc.com:afe/BabaSSL.git -Buildroot: %{_tmppath}/%{name}-%{version}-root - -%ifarch x86_64 -%define arch x86_64 -%else -%ifarch aarch64 -%define arch aarch64 -%endif -%endif - -%if 0%{?alios5} -BuildRequires: perl-5.16.3 -%endif - -%description -OpenSSL with many awesome features (fork from openssl-1.1.1). - -%build -cd ../../../ -export BUILD_ROOT=%{buildroot} -if [ -f Makefile]; then - make clean -fi - -CC=gcc ./Configure debug-linux-%{arch} no-shared no-threads enable-tls1_3 enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers enable-keyless enable-lurk enable-evp-cipher-api-compat enable-req-status enable-status enable-crypto-mdebug-count enable-dynamic-ciphers enable-optimize-chacha enable-rsa-multi-prime-key-compat enable-session-lookup enable-session-reused-type enable-global-session-cache enable-verify-sni enable-skip-scsv enable-ntls enable-sm2 --strict-warnings --debug -fPIC --prefix=/usr/local/babassl-debug -make %{?_smp_mflags} - -%install -cd ../../../ -rm -rf %{buildroot} -make install DESTDIR=%{buildroot} - -%files -%defattr(-,root,root,-) -/usr/local/babassl-debug - -%clean -rm -rf %{buildroot} - -%changelog - -* Sat Nov 30 2019 jinjiu -- initial packaging - babassl-debug diff --git a/rpm/babassl-share.deps b/rpm/babassl-share.deps deleted file mode 100644 index 95fde7a28..000000000 --- a/rpm/babassl-share.deps +++ /dev/null @@ -1,2 +0,0 @@ -[deps] - gcc53 diff --git a/rpm/babassl-share.spec b/rpm/babassl-share.spec deleted file mode 100644 index f9999910d..000000000 --- a/rpm/babassl-share.spec +++ /dev/null @@ -1,55 +0,0 @@ -%define debug_package %{nil} -%define __os_install_post %{nil} - -Name: babassl-share -Version:8.1.3 -Release: %(echo $RELEASE)%{?dist} -Packager: jinjiu -Summary: OpenSSL with many awesome features (fork from openssl-1.1.1) -Group: System Environment/Libraries -License: BSD -Vendor: Alibaba.Inc -Url: git@gitlab.alipay-inc.com:afe/BabaSSL.git -Buildroot: %{_tmppath}/%{name}-%{version}-root - -%ifarch x86_64 -%define arch x86_64 -%else -%ifarch aarch64 -%define arch aarch64 -%endif -%endif - -%if 0%{?alios5} -BuildRequires: perl-5.16.3 -%endif - -%description -OpenSSL with many awesome features (fork from openssl-1.1.1). - -%build -cd ../../../ -export BUILD_ROOT=%{buildroot} -if [ -f Makefile]; then - make clean -fi - -CC=gcc ./Configure linux-%{arch} enable-shared no-hw no-hw-padlock no-static-engine enable-dynamic-engine enable-dynamic-engine enable-tls1_3 enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers enable-keyless enable-lurk enable-evp-cipher-api-compat enable-req-status enable-status enable-crypto-mdebug-count enable-dynamic-ciphers enable-optimize-chacha enable-rsa-multi-prime-key-compat enable-session-lookup enable-session-reused-type enable-global-session-cache enable-verify-sni enable-skip-scsv enable-ntls enable-sm2 --strict-warnings --release -fPIC --prefix=/usr/local/babassl-share -Wl,-rpath,/usr/local/babassl-share/lib -make %{?_smp_mflags} - -%install -cd ../../../ -rm -rf %{buildroot} -make install DESTDIR=%{buildroot} - -%files -%defattr(-,root,root,-) -/usr/local/babassl-share - -%clean -rm -rf %{buildroot} - -%changelog - -* Thu Mar 12 2020 jinjiu -- initial packaging - babassl-share diff --git a/rpm/babassl.deps b/rpm/babassl.deps deleted file mode 100644 index 95fde7a28..000000000 --- a/rpm/babassl.deps +++ /dev/null @@ -1,2 +0,0 @@ -[deps] - gcc53 diff --git a/rpm/babassl.spec b/rpm/babassl.spec deleted file mode 100644 index 7de3ba287..000000000 --- a/rpm/babassl.spec +++ /dev/null @@ -1,55 +0,0 @@ -%define debug_package %{nil} -%define __os_install_post %{nil} - -Name: babassl -Version:8.1.3 -Release: %(echo $RELEASE)%{?dist} -Packager: jinjiu -Summary: OpenSSL with many awesome features (fork from openssl-1.1.1) -Group: System Environment/Libraries -License: BSD -Vendor: Alibaba.Inc -Url: git@gitlab.alipay-inc.com:afe/BabaSSL.git -Buildroot: %{_tmppath}/%{name}-%{version}-root - -%ifarch x86_64 -%define arch x86_64 -%else -%ifarch aarch64 -%define arch aarch64 -%endif -%endif - -%if 0%{?alios5} -BuildRequires: perl-5.16.3 -%endif - -%description -OpenSSL with many awesome features (fork from openssl-1.1.1). - -%build -cd ../../../ -export BUILD_ROOT=%{buildroot} -if [ -f Makefile]; then - make clean -fi - -CC=gcc ./Configure linux-%{arch} no-shared no-threads enable-tls1_3 enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers enable-keyless enable-lurk enable-evp-cipher-api-compat enable-req-status enable-status enable-crypto-mdebug-count enable-dynamic-ciphers enable-optimize-chacha enable-rsa-multi-prime-key-compat enable-session-lookup enable-session-reused-type enable-global-session-cache enable-verify-sni enable-skip-scsv enable-ntls enable-sm2 --strict-warnings --release -fPIC --prefix=/usr/local/babassl -make %{?_smp_mflags} - -%install -cd ../../../ -rm -rf %{buildroot} -make install DESTDIR=%{buildroot} - -%files -%defattr(-,root,root,-) -/usr/local/babassl - -%clean -rm -rf %{buildroot} - -%changelog - -* Sat Nov 30 2019 jinjiu -- initial packaging - babassl