Page MenuHomeFreeBSD

OpenSSL: use the upstream provided version.map files for the fips/legacy providers
Needs ReviewPublic

Authored by ngie on Sun, Apr 21, 4:35 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Apr 30, 2:48 PM
Unknown Object (File)
Tue, Apr 30, 2:47 PM
Unknown Object (File)
Tue, Apr 30, 2:47 PM
Unknown Object (File)
Sat, Apr 27, 4:36 PM
Unknown Object (File)
Sat, Apr 27, 1:28 AM
Unknown Object (File)
Fri, Apr 26, 3:58 PM
Unknown Object (File)
Fri, Apr 26, 3:50 PM
Unknown Object (File)
Fri, Apr 26, 3:50 PM

Details

Summary

This change introduces a static copy of the fips and legacy linker version maps
generated by the OpenSSL 3.0.13 build process.

This partly unbreaks the fips and legacy providers by not exposing
unnecessary symbols from the fips/legacy provider shared objects shared with
other providers (base, default) and libcrypto.

Test Plan
  • make tinderbox passed on universe14a.freebsd.org.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

ngie requested review of this revision.Sun, Apr 21, 4:35 PM
ngie edited the test plan for this revision. (Show Details)
ngie added reviewers: cy, emaste.
ngie added a subscriber: pierre-yves.peneau_lirmm.fr.
This revision was not accepted when it landed; it landed in state Needs Review.Sun, Apr 21, 4:59 PM
This revision was automatically updated to reflect the committed changes.
ngie reopened this revision.EditedSun, Apr 21, 5:00 PM

I accidentally pushed this to main (and have subsequently reverted it). I've really become used to git push.default nothing thanks to being bitten so much at work and forgot that my local forks don't use this config by default :(..