mirror of
https://github.com/opnsense/src.git
synced 2026-02-28 12:20:54 -05:00
aa906e2a49
This merges upstream patches from OpenSSL's master branch to add KTLS infrastructure for TLS 1.0-1.3 including both RX and TX offload and SSL_sendfile support on both Linux and FreeBSD. Note that TLS 1.3 only supports TX offload. A new WITH/WITHOUT_OPENSSL_KTLS determines if OpenSSL is built with KTLS support. It defaults to enabled on amd64 and disabled on all other architectures. Reviewed by: jkim (earlier version) Approved by: secteam Obtained from: OpenSSL (patches from master) MFC after: 1 week Relnotes: yes Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D28273
44 lines
1,012 B
Makefile
44 lines
1,012 B
Makefile
# $FreeBSD$
|
|
|
|
.include <src.opts.mk>
|
|
|
|
LIB= ssl
|
|
SHLIB_MAJOR= 111
|
|
VERSION_MAP= ${.CURDIR}/Version.map
|
|
|
|
NO_LINT=
|
|
|
|
.include "../libcrypto/Makefile.inc"
|
|
|
|
SRCS= bio_ssl.c d1_lib.c d1_msg.c d1_srtp.c methods.c packet.c pqueue.c
|
|
SRCS+= s3_cbc.c s3_enc.c s3_lib.c s3_msg.c ssl_asn1.c ssl_cert.c ssl_ciph.c
|
|
SRCS+= ssl_conf.c ssl_err.c ssl_init.c ssl_lib.c ssl_mcnf.c ssl_rsa.c
|
|
SRCS+= ssl_sess.c ssl_stat.c ssl_txt.c t1_enc.c t1_lib.c tls_srp.c
|
|
SRCS+= tls13_enc.c
|
|
|
|
# record
|
|
SRCS+= dtls1_bitmap.c rec_layer_d1.c rec_layer_s3.c ssl3_buffer.c
|
|
SRCS+= ssl3_record.c ssl3_record_tls13.c
|
|
|
|
# statem
|
|
SRCS+= extensions.c extensions_clnt.c extensions_cust.c extensions_srvr.c
|
|
SRCS+= statem.c statem_clnt.c statem_dtls.c statem_lib.c statem_srvr.c
|
|
|
|
.if ${MK_OPENSSL_KTLS} != "no"
|
|
SRCS+= ktls.c
|
|
.endif
|
|
|
|
SRCS+= dummy_abi.c
|
|
|
|
LIBADD= crypto
|
|
|
|
CFLAGS+= -I${LCRYPTO_SRC}/ssl
|
|
CFLAGS+= -I${.OBJDIR:H}/libcrypto
|
|
|
|
.include <bsd.lib.mk>
|
|
|
|
PICFLAG+= -DOPENSSL_PIC
|
|
|
|
.PATH: ${LCRYPTO_SRC}/ssl \
|
|
${LCRYPTO_SRC}/ssl/record \
|
|
${LCRYPTO_SRC}/ssl/statem
|