mirror/curl
2
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2024-12-09 06:30:06 +08:00
Code Issues Packages Projects Releases Wiki Activity
dee1700ce6
curl/projects/wolfssl_options.h

225 lines
4.9 KiB
C
Raw Normal View History

build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
/*
By default wolfSSL has a very conservative configuration that can result in
connections to servers failing due to certificate or algorithm problems.
To remedy this issue for libcurl I've generated this options file that
build-wolfssl will copy to the wolfSSL include directories and will result in
maximum compatibility.
build-wolfssl: Sync config with wolfSSL 3.11 wolfSSL configure script relevant changes from 3.10 to 3.11: - Async threading support added; disabled by default without async crypto, which continues to be disabled by default. wolfSSL configure script relevant changes from 3.11 to 3.11.1 (beta): - TLS 1.3 beta support added; disabled by default. For experimenting I put in a comment block the defines needed to enable TLS 1.3 support (ie the equivalent of --enable-tls13).
2017-05-31 13:40:39 +08:00
These are the configure options that were used to build wolfSSL v3.11.0 in
build-wolfssl: Sync config with wolfSSL 3.10 wolfSSL configure script relevant changes from 3.9 to 3.10: - DES3 no longer enabled by default - Shamir no longer enabled by default - Extended master secret enabled by default - RSA and ECC timing protections enabled by default For backwards compatibility I enabled DES3 and ECC shamir config options (ie no change from 3.9), and the other changes are included.
2016-12-25 02:49:25 +08:00
mingw and generate the options in this file:
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
C_EXTRA_FLAGS="\
-Wno-attributes \
-Wno-unused-but-set-variable \
-DFP_MAX_BITS=16384 \
-DTFM_TIMING_RESISTANT \
-DWOLFSSL_STATIC_DH \
-DWOLFSSL_STATIC_RSA \
" \
./configure --prefix=/usr/local \
build-wolfssl: Sync config with wolfSSL 3.10 wolfSSL configure script relevant changes from 3.9 to 3.10: - DES3 no longer enabled by default - Shamir no longer enabled by default - Extended master secret enabled by default - RSA and ECC timing protections enabled by default For backwards compatibility I enabled DES3 and ECC shamir config options (ie no change from 3.9), and the other changes are included.
2016-12-25 02:49:25 +08:00
--disable-jobserver \
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
--enable-aesgcm \
--enable-alpn \
--enable-certgen \
build-wolfssl: Sync config with wolfSSL 3.10 wolfSSL configure script relevant changes from 3.9 to 3.10: - DES3 no longer enabled by default - Shamir no longer enabled by default - Extended master secret enabled by default - RSA and ECC timing protections enabled by default For backwards compatibility I enabled DES3 and ECC shamir config options (ie no change from 3.9), and the other changes are included.
2016-12-25 02:49:25 +08:00
--enable-des3 \
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
--enable-dh \
--enable-dsa \
--enable-ecc \
build-wolfssl: Sync config with wolfSSL 3.10 wolfSSL configure script relevant changes from 3.9 to 3.10: - DES3 no longer enabled by default - Shamir no longer enabled by default - Extended master secret enabled by default - RSA and ECC timing protections enabled by default For backwards compatibility I enabled DES3 and ECC shamir config options (ie no change from 3.9), and the other changes are included.
2016-12-25 02:49:25 +08:00
--enable-eccshamir \
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
--enable-fastmath \
--enable-opensslextra \
--enable-ripemd \
--enable-sessioncerts \
--enable-sha512 \
--enable-sni \
--enable-sslv3 \
wolfssl: Use ECC supported curves extension https://github.com/wolfSSL/wolfssl/issues/366
2016-03-30 07:06:55 +08:00
--enable-supportedcurves \
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
--enable-testcert \
> config.out 2>&1
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
Two generated options HAVE_THREAD_LS and _POSIX_THREADS were removed since they
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
are inapplicable for our Visual Studio build. Currently thread local storage is
only used by the Fixed Point cache ECC which we're not enabling. However even
if we later may decide to enable the cache it will fallback on mutexes when
thread local storage is not available. wolfSSL is using __declspec(thread) to
create the thread local storage and that could be a problem for LoadLibrary.
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
Regarding the options that were added via C_EXTRA_FLAGS:
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
FP_MAX_BITS=16384
spelling fixes Detected using the `codespell` tool (version 1.13.0). Also secure and fix an URL.
2018-06-03 20:14:45 +08:00
https://web.archive.org/web/20150218183550/www.yassl.com/forums/topic423-cacertorgs-ca-cert-verify-failed-but-withdisablefastmath-it-works.html
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
"Since root.crt uses a 4096-bit RSA key, you'll need to increase the fastmath
buffer size. You can do this using the define:
FP_MAX_BITS and setting it to 8192."
TFM_TIMING_RESISTANT
https://wolfssl.com/wolfSSL/Docs-wolfssl-manual-2-building-wolfssl.html
From section 2.4.5 Increasing Performance, USE_FAST_MATH:
"Because the stack memory usage can be larger when using fastmath, we recommend
defining TFM_TIMING_RESISTANT as well when using this option."
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
WOLFSSL_STATIC_DH: Allow TLS_ECDH_ ciphers
WOLFSSL_STATIC_RSA: Allow TLS_RSA_ ciphers
https://github.com/wolfSSL/wolfssl/blob/v3.6.6/README.md#note-1
Static key cipher suites are deprecated and disabled by default since v3.6.6.
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
*/
/* wolfssl options.h
* generated from configure options
*
* Copyright (C) 2006-2015 wolfSSL Inc.
*
* This file is part of wolfSSL. (formerly known as CyaSSL)
*
*/
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
#ifndef WOLFSSL_OPTIONS_H
#define WOLFSSL_OPTIONS_H
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
#ifdef __cplusplus
extern "C" {
#endif
#undef FP_MAX_BITS
#define FP_MAX_BITS 16384
#undef TFM_TIMING_RESISTANT
#define TFM_TIMING_RESISTANT
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
#undef WOLFSSL_STATIC_DH
#define WOLFSSL_STATIC_DH
#undef WOLFSSL_STATIC_RSA
#define WOLFSSL_STATIC_RSA
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
#undef OPENSSL_EXTRA
#define OPENSSL_EXTRA
build-wolfssl: Sync config with wolfSSL 3.11 wolfSSL configure script relevant changes from 3.10 to 3.11: - Async threading support added; disabled by default without async crypto, which continues to be disabled by default. wolfSSL configure script relevant changes from 3.11 to 3.11.1 (beta): - TLS 1.3 beta support added; disabled by default. For experimenting I put in a comment block the defines needed to enable TLS 1.3 support (ie the equivalent of --enable-tls13).
2017-05-31 13:40:39 +08:00
/*
The commented out defines below are the equivalent of --enable-tls13.
Uncomment them to build wolfSSL with TLS 1.3 support as of v3.11.1-tls13-beta.
This is for experimenting only, afaict TLS 1.3 support doesn't appear to be
functioning correctly yet. https://github.com/wolfSSL/wolfssl/pull/943
#undef WC_RSA_PSS
#define WC_RSA_PSS
#undef WOLFSSL_TLS13
#define WOLFSSL_TLS13
#undef HAVE_TLS_EXTENSIONS
#define HAVE_TLS_EXTENSIONS
#undef HAVE_FFDHE_2048
#define HAVE_FFDHE_2048
#undef HAVE_HKDF
#define HAVE_HKDF
*/
build-wolfssl: Sync config with wolfSSL 3.10 wolfSSL configure script relevant changes from 3.9 to 3.10: - DES3 no longer enabled by default - Shamir no longer enabled by default - Extended master secret enabled by default - RSA and ECC timing protections enabled by default For backwards compatibility I enabled DES3 and ECC shamir config options (ie no change from 3.9), and the other changes are included.
2016-12-25 02:49:25 +08:00
#undef TFM_TIMING_RESISTANT
#define TFM_TIMING_RESISTANT
#undef ECC_TIMING_RESISTANT
#define ECC_TIMING_RESISTANT
#undef WC_RSA_BLINDING
#define WC_RSA_BLINDING
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
#undef HAVE_AESGCM
#define HAVE_AESGCM
#undef WOLFSSL_RIPEMD
#define WOLFSSL_RIPEMD
#undef WOLFSSL_SHA512
#define WOLFSSL_SHA512
#undef WOLFSSL_SHA384
#define WOLFSSL_SHA384
#undef SESSION_CERTS
#define SESSION_CERTS
#undef WOLFSSL_CERT_GEN
#define WOLFSSL_CERT_GEN
#undef HAVE_ECC
#define HAVE_ECC
#undef TFM_ECC256
#define TFM_ECC256
#undef ECC_SHAMIR
#define ECC_SHAMIR
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
#undef WOLFSSL_ALLOW_SSLV3
#define WOLFSSL_ALLOW_SSLV3
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
#undef NO_RC4
#define NO_RC4
#undef NO_HC128
#define NO_HC128
#undef NO_RABBIT
#define NO_RABBIT
#undef HAVE_POLY1305
#define HAVE_POLY1305
#undef HAVE_ONE_TIME_AUTH
#define HAVE_ONE_TIME_AUTH
#undef HAVE_CHACHA
#define HAVE_CHACHA
#undef HAVE_HASHDRBG
#define HAVE_HASHDRBG
#undef HAVE_TLS_EXTENSIONS
#define HAVE_TLS_EXTENSIONS
#undef HAVE_SNI
#define HAVE_SNI
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
#undef HAVE_TLS_EXTENSIONS
#define HAVE_TLS_EXTENSIONS
#undef HAVE_ALPN
#define HAVE_ALPN
#undef HAVE_TLS_EXTENSIONS
#define HAVE_TLS_EXTENSIONS
wolfssl: Use ECC supported curves extension https://github.com/wolfSSL/wolfssl/issues/366
2016-03-30 07:06:55 +08:00
#undef HAVE_SUPPORTED_CURVES
#define HAVE_SUPPORTED_CURVES
build-wolfssl: Sync config with wolfSSL 3.10 wolfSSL configure script relevant changes from 3.9 to 3.10: - DES3 no longer enabled by default - Shamir no longer enabled by default - Extended master secret enabled by default - RSA and ECC timing protections enabled by default For backwards compatibility I enabled DES3 and ECC shamir config options (ie no change from 3.9), and the other changes are included.
2016-12-25 02:49:25 +08:00
#undef HAVE_EXTENDED_MASTER
#define HAVE_EXTENDED_MASTER
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
#undef WOLFSSL_TEST_CERT
#define WOLFSSL_TEST_CERT
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
#undef NO_PSK
#define NO_PSK
#undef NO_MD4
#define NO_MD4
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
#undef USE_FAST_MATH
#define USE_FAST_MATH
build-wolfssl: Sync config with wolfSSL 3.11 wolfSSL configure script relevant changes from 3.10 to 3.11: - Async threading support added; disabled by default without async crypto, which continues to be disabled by default. wolfSSL configure script relevant changes from 3.11 to 3.11.1 (beta): - TLS 1.3 beta support added; disabled by default. For experimenting I put in a comment block the defines needed to enable TLS 1.3 support (ie the equivalent of --enable-tls13).
2017-05-31 13:40:39 +08:00
#undef WC_NO_ASYNC_THREADING
#define WC_NO_ASYNC_THREADING
build: Added wolfSSL build script for Visual Studio projects Added the wolfSSL build script, based on build-openssl.bat, as well as the property sheet and header file required for the upcoming additions to the Visual Studio project files.
2015-08-06 14:08:58 +08:00
#ifdef __cplusplus
}
#endif
build-wolfssl: Allow a broader range of ciphers (Visual Studio) This is an update to the build-time options used to build wolfSSL in Visual Studio for greater compatibility, and make it behave similar to the way OpenSSL 1.0.2 behaves. Starting in wolfSSL v3.6.6 static ciphers and SSLv3 are disabled by default at build time, but we can use both. - Enable static cipher suites TLS_ECDH_ and TLS_RSA_. - Enable SSLv3 hello. Though in libcurl we disable it by default at runtime, we make it available so the user can manually select it if necessary.
2016-03-30 06:50:12 +08:00
#endif /* WOLFSSL_OPTIONS_H */
Reference in New Issue Copy Permalink