src-test/secure, branch main

caroot: update bundle

2020-12-11T18:14:43Z

Summary: - One (1) added - Ten (10) removed MFC after: 3 days

Merge OpenSSL 1.1.1i.

2020-12-09T02:05:14Z

Replace literal uses of /usr/local in C sources with _PATH_LOCALBASE

2020-10-27T11:29:11Z

Literal references to /usr/local exist in a large number of files in the FreeBSD base system. Many are in contributed software, in configuration files, or in the documentation, but 19 uses have been identified in C source files or headers outside the contrib and sys/contrib directories. This commit makes it possible to set _PATH_LOCALBASE in paths.h to use a different prefix for locally installed software. In order to avoid changes to openssh source files, LOCALBASE is passed to the build via Makefiles under src/secure. While _PATH_LOCALBASE could have been used here, there is precedent in the construction of the path used to a xauth program which depends on the LOCALBASE value passed on the compiler command line to select a non-default directory. This could be changed in a later commit to make the openssh build consistently use _PATH_LOCALBASE. It is considered out-of-scope for this commit. Reviewed by: imp MFC after: 1 month Differential Revision: https://reviews.freebsd.org/D26942

Move generated OpenSSL assembly routines into the kernel sources.

2020-10-20T17:00:43Z

Merge OpenSSL 1.1.1h.

2020-09-22T16:18:31Z

caroot: update base store

2020-09-19T01:59:17Z

Count: - Two (2) removed - Three (3) added MFC after: 3 days

build: provide a default WARNS for all in-tree builds

2020-09-18T17:17:46Z

The current default is provided in various Makefile.inc in some top-level directories and covers a good portion of the tree, but doesn't cover parts of the build a little deeper (e.g. libcasper). Provide a default in src.sys.mk and set WARNS to it in bsd.sys.mk if that variable is defined. This lets us relatively cleanly provide a default WARNS no matter where you're building in the src tree without breaking things outside of the tree. Crunchgen has been updated as a bootstrap tool to work on this change because it needs r365605 at a minimum to succeed. The cleanup necessary to successfully walk over this change on WITHOUT_CLEAN builds has been added. There is a supplemental project to this to list all of the warnings that are encountered when the environment has WARNS=6 NO_WERROR=yes: https://warns.kevans.dev -- this project will hopefully eventually go away in favor of CI doing a much better job than it. Reviewed by: emaste, brooks, ngie (all earlier version) Reviewed by: emaste, arichardson (depend-cleanup.sh change) Differential Revision: https://reviews.freebsd.org/D26455

caroot: properly remove old distrusted roots

2020-09-02T12:57:34Z

The proper procedure was not followed in r364943; all of these that were deleted should have instead been moved over to the blacklist so that certctl can DTRT. Users must still `certctl rehash` after this, but this should generally be done by one of mergemaster/etcupdate/freebsd-update/pkgbase already; note that freebsd-update doesn't come into play for this particular update, as these have not yet made it into a release. Future work (after svn -> git) will likely change the script that updatecert invokes to facilitate the process, rather than trusting that kevans or whomever updates in the future will remember. Reported by: Helge Oldach MFC after: 3 days

carrot: update bundle

2020-08-29T02:46:25Z

Stats: - Seven (7) removed - Four (4) added MFC after: 3 days

Regen X86 assembly files after r364822.

2020-08-26T16:56:44Z