aboutsummaryrefslogtreecommitdiffstats
path: root/INSTALL
Commit message (Collapse)AuthorAgeFilesLines
* drop some no-longer-relevant TODO(TLS1.3) entriesBenjamin Kaduk2017-06-121-2/+3
| | | | | | | | | | | | | | We prevent compression both when the server is parsing the ClientHello and when the client is constructing the ClientHello. A 1.3 ServerHello has no way to hand us back a compression method, and we already check that the server does not try to give us back a compression method that we did not request, so these checks seem sufficient. Weaken the INSTALL note slightly, as we do now expect to interoperate with other implementations. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3131)
* Fix typo in INSTALL filePaul Yang2017-05-171-1/+1
| | | | | | | | | | | recocognised -> recognised CLA: trivial Signed-off-by: Paul Yang <paulyang.inf@gmail.com> Reviewed-by: Andy Polyakov <appro@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3470)
* INSTALL: Remind people to read more if they added configuration optionsRichard Levitte2017-05-151-0/+5
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3469)
* INSTALL: clarify a bit more how Configure treats "unknown" optionsRichard Levitte2017-05-151-10/+15
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3468)
* Make the TLSv1.3 downgrade mechanism a configurable optionMatt Caswell2017-03-241-0/+10
| | | | | | | Make it disabled by default. When TLSv1.3 is out of draft we can remove this option and have it enabled all the time. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3022)
* Document how to select / deselect test group numbersRichard Levitte2017-03-101-1/+20
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2892)
* Add NOTES.UNIX, with a description on how to deal with runpathsRichard Levitte2017-03-021-0/+1
| | | | | | [skip ci] Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2818)
* Add support for parameterized SipHashTodd Short2017-02-011-2/+3
| | | | | | | | | | | The core SipHash supports either 8 or 16-byte output and a configurable number of rounds. The default behavior, as added to EVP, is to use 16-byte output and 2,4 rounds, which matches the behavior of most implementations. There is an EVP_PKEY_CTRL that can control the output size. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2216)
* INSTALL: clarify 386 and no-sse2 options.Andy Polyakov2016-11-251-19/+25
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Make it possible to disable building and running testsRichard Levitte2016-11-151-0/+3
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1514)
* Remove heartbeat supportRichard Levitte2016-11-131-3/+0
| | | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1669)
* INSTALL: small typoRichard Levitte2016-11-081-1/+1
| | | | | | libssl, not libddl. Reviewed-by: Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1871)
* Missed a mention of RTRich Salz2016-11-041-11/+8
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1849)
* Add documentation on the BoringSSL test suite integrationMatt Caswell2016-11-041-1/+2
| | | | | | | Added the file README.external which describes how to build and run OpenSSL to use the BoringSSL test suite. Also updated INSTALL to point to it. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Control building of ossl_shim through ConfigureMatt Caswell2016-11-041-0/+6
| | | | | | | Don't build ossl_shim by default. Switch it on through enable-external-tests. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Update Configure to know about tls1_3Matt Caswell2016-11-021-0/+6
| | | | | | | | | | | Also we disable TLS1.3 by default (use enable-tls1_3 to re-enable). This is because this is a WIP and will not be interoperable with any other TLS1.3 implementation. Finally, we fix some tests that started failing when TLS1.3 was disabled by default. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Revert "Disable MDC2 by default."Rich Salz2016-11-011-2/+2
| | | | | | | This reverts commit ca1574cec20589885000d039eed3a9375fb29a0d. Not suitabled for a minor release as it breaks the ABI. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Disable MDC2 by default.Rich Salz2016-10-311-2/+2
| | | | | Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Wordsmith INSTALLBenjamin Kaduk2016-10-291-2/+2
| | | | | | | | Make it clear that the OPENSSL_LOCAL_CONFIG_DIR settings take precedence over the in-tree configs. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1798)
* Add some notes on shared library names on different platformsRichard Levitte2016-10-251-2/+27
| | | | | | This is overdue since the addition of the unified build system Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1767)
* Update INSTALL about no-md5 removalFdaSilvaYY2016-09-191-4/+3
| | | | | | | | | no-rsa is no longer an option since 7ec8de1 Fix a typo about poly1305 Reviewed-by: Andy Polyakov <appro@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1582)
* Configure: impose ^X on whole build procedure.Andy Polyakov2016-09-131-0/+3
| | | | | | | | | | Traditionally Configure passed $ENV{PERL} to Makefile. But this resulted in ambiguilty as Configure script could be executed by interpreter different from one executing remaining scripts. Since we separate compile- and run-time interpreters with HASHBANGPERL variable, there is no reason to segment the build procedure. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Document the enhanced tests specificationRichard Levitte2016-09-011-0/+35
| | | | Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Revert "INSTALL: add information on option no-fuzz-test"Richard Levitte2016-09-011-5/+0
| | | | | | This reverts commit 7f9ae88817ddf0aac5c6bd95d9a5af1c54ed5bbf. Reviewed-by: Emilia Käsper <emilia@openssl.org>
* INSTALL: add information on option no-fuzz-testRichard Levitte2016-08-311-0/+5
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* INSTALL: add information on the environment variable BUILDFILERichard Levitte2016-08-311-0/+7
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* INSTALL: clarify OPENSSL_LOCAL_CONFIG_DIRRichard Levitte2016-08-311-6/+12
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add a note about a perl issue on VMS and how to work around itRichard Levitte2016-08-061-2/+2
| | | | | | | | | I bug in perl's File::Spec->canonpath() was uncovered. There's nothing we can do about it (except re-implementing canonpath()), except working around the problem (a directory rename) and reporting the issue to the perl module developers. Reviewed-by: Rich Salz <rsalz@openssl.org>
* INSTALL: Make the use of [, ], { and } consistent and explain itRichard Levitte2016-08-031-19/+73
| | | | | | | | | | | | The diverse notations used in INSTALL are not as self explanatory as we might imagine, so let's attempt a consistent notation for mandatory and optional pieces of a command line, and to explain the meaning of each notation. This does away with the bash notation used in one spot, as it isn't universally understood and will only confuse the unknowing more. Reviewed-by: Rich Salz <rsalz@openssl.org>
* INSTALL: Add missing details on VMS installation resultsRichard Levitte2016-08-031-4/+8
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Some minor tweaks to the fuzzing docsMatt Caswell2016-08-011-5/+5
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* INSTALL: clarify --cross-compile-prefix.Andy Polyakov2016-07-161-4/+19
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* perl: Separate compile-time environment from runtime environmentRichard Levitte2016-07-041-1/+8
| | | | | | | | | | | | | Make it possible to have a separate and different perl command string for installable scripts than we use when building, with the environment variable HASHBANGPERL. Its value default to the same as the environment PERL if it's defined, otherwise '/usr/bin/env perl'. Note: this is only relevant for Unix-like environments. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Andy Polyakov <appro@openssl.org> Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* Spelling... and more spellingFdaSilvaYY2016-06-221-4/+4
| | | | | Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1245)
* Update INSTALL instructionsMatt Caswell2016-06-031-23/+191
| | | | | | | Fill out the INSTALL instructions with more information on Configure arguments, environment variables and Makefile targets. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Build the 'openssl rehash' command on VMS version 8.3 and upRichard Levitte2016-06-021-0/+3
| | | | | | | Include a note in INSTALL that tests must be run from an unprivileged process. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add a warning about using enable-crypto-mdebug-backtraceRichard Levitte2016-06-021-0/+7
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Slight cleanup of the collection of READMEs, INSTALLs and NOTESRichard Levitte2016-05-231-6/+7
| | | | | | | | README is a fairly independent document, and so is INSTALL. NOTES are merely addendums to INSTALL. Therefore , INSTALL.DJGPP and README.PERL get renamed to NOTES.DJGPP and NOTES.PERL. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove INSTALL.WCE and refs to it.Rich Salz2016-05-231-3/+2
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* VMS: support VERBOSE and V in descrip.mmsRichard Levitte2016-05-091-2/+1
| | | | | | | | | With Unixly Makefiles as well as with nmake, make variables are transferred to the shell running the commands as envinronment variables. This principle doesn't apply with MMS, so we must explicitely define VERBOSE as commands when it's needed. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Recognise VERBOSE and V as well as HARNESS_VERBOSEDr. Stephen Henson2016-05-091-5/+4
| | | | | | PR#4462 Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove the never-functional no-sctBenjamin Kaduk2016-04-261-3/+0
| | | | | | | | | | | | It was added as part of 2df84dd3299ff25fa078ca7ffbdeaac65b361feb but has never actually been used for anything; presumably it was a typo for one of SCTP or CT. This removes the last '??' entry from INSTALL. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* NOTES files will contain more requirements, make that explicitRichard Levitte2016-04-181-2/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Make "shared" builds the defaultMatt Caswell2016-04-141-13/+9
| | | | | | | In most cases we expect that people will be using shared libraries not static ones, therefore we make that the default. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Update INSTALL file based on feedbackMatt Caswell2016-04-131-3/+4
| | | | | | Update the config options documentation based on feedback. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Update the INSTALL instructions with lots of optionsMatt Caswell2016-04-131-36/+226
| | | | | | | There were a lot of options missing from INSTALL. This adds descriptions for them. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Adjust some default installation directoriesRichard Levitte2016-03-241-4/+4
| | | | | | | | | - on VMS, SYS$COMMON:[SSL] is already used as installation directory by HP SSL, so we make our default for --openssldir SYS$COMMON:[OPENSSL-COMMON] instead. - Updated notes on default installation dirs fir Unix and Windows Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove Netware and OS/2Rich Salz2016-03-171-6/+4
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add install targets for WindowsRichard Levitte2016-03-171-1/+8
| | | | | | | | | | | | | | | | | | | | | | On Windows, we set INSTALLTOP to default as follows: VC-WIN32: PREFIX: %ProgramFiles(x86)%\OpenSSL OPENSSLDIR: %CommonProgramFiles(x86)%\SSL VC-WIN64*: PREFIX: %ProgramW6432%\OpenSSL OPENSSLDIR: %CommonProgramW6432%\SSL Should those environment variables be missing, the following is used as fallback: PREFIX: %ProgramFiles%\OpenSSL OPENSSLDIR: %CommonProgramFiles%\SSL Reviewed-by: Andy Polyakov <appro@openssl.org>
* More tweaks to the installation instructionsMatt Caswell2016-03-111-93/+94
| | | | | | | A few things were out of date and a few things were missing. Also some formatting updates. Reviewed-by: Richard Levitte <levitte@openssl.org>