mbox

[Openvpn-devel,0/2] Disable OpenSSL config autoload in Windows

Message ID 20210617061027.140-1-lstipakov@gmail.com
Headers show

Message

Lev Stipakov June 16, 2021, 8:10 p.m. UTC
From: Lev Stipakov <lev@openvpn.net>

These two patches prevent OpenSSL from loading
config from a user-writable location, which may
pose a security risk.

Lev Stipakov (2):
  crypto_openssl.c: disable explicit initialization on Windows
  contrib/vcpkg-ports: add openssl port with --no-autoload-config option
    set

 contrib/vcpkg-ports/openssl/portfile.cmake    |  25 ++
 .../vcpkg-ports/openssl/unix/CMakeLists.txt   | 280 ++++++++++++++++++
 .../vcpkg-ports/openssl/unix/portfile.cmake   |  49 +++
 .../openssl/unix/remove-deps.cmake            |   7 +
 .../openssl/unix/vcpkg-cmake-wrapper.cmake    |  18 ++
 contrib/vcpkg-ports/openssl/usage             |   4 +
 .../openssl/uwp/EnableUWPSupport.patch        | 170 +++++++++++
 .../vcpkg-ports/openssl/uwp/make-openssl.bat  |  16 +
 .../vcpkg-ports/openssl/uwp/portfile.cmake    | 156 ++++++++++
 contrib/vcpkg-ports/openssl/vcpkg.json        |   7 +
 .../openssl/windows/portfile.cmake            | 174 +++++++++++
 .../openssl/windows/vcpkg-cmake-wrapper.cmake |  10 +
 src/openvpn/crypto_openssl.c                  |   2 +
 13 files changed, 918 insertions(+)
 create mode 100644 contrib/vcpkg-ports/openssl/portfile.cmake
 create mode 100644 contrib/vcpkg-ports/openssl/unix/CMakeLists.txt
 create mode 100644 contrib/vcpkg-ports/openssl/unix/portfile.cmake
 create mode 100644 contrib/vcpkg-ports/openssl/unix/remove-deps.cmake
 create mode 100644 contrib/vcpkg-ports/openssl/unix/vcpkg-cmake-wrapper.cmake
 create mode 100644 contrib/vcpkg-ports/openssl/usage
 create mode 100644 contrib/vcpkg-ports/openssl/uwp/EnableUWPSupport.patch
 create mode 100644 contrib/vcpkg-ports/openssl/uwp/make-openssl.bat
 create mode 100644 contrib/vcpkg-ports/openssl/uwp/portfile.cmake
 create mode 100644 contrib/vcpkg-ports/openssl/vcpkg.json
 create mode 100644 contrib/vcpkg-ports/openssl/windows/portfile.cmake
 create mode 100644 contrib/vcpkg-ports/openssl/windows/vcpkg-cmake-wrapper.cmake