mirror of
https://github.com/NLnetLabs/unbound.git
synced 2025-12-22 15:50:59 -05:00
- ECDSA support (RFC 6605) by default. Use --disable-ecdsa for older
openssl. git-svn-id: file:///svn/unbound/trunk@2661 be551aaa-1e26-0410-a405-d3ace91eadb9
This commit is contained in:
parent
d71a1ba0c2
commit
53a448ffae
3 changed files with 13 additions and 11 deletions
18
configure
vendored
18
configure
vendored
|
|
@ -1447,7 +1447,7 @@ Optional Features:
|
||||||
purposes
|
purposes
|
||||||
--disable-sha2 Disable SHA256 and SHA512 RRSIG support
|
--disable-sha2 Disable SHA256 and SHA512 RRSIG support
|
||||||
--disable-gost Disable GOST support
|
--disable-gost Disable GOST support
|
||||||
--enable-ecdsa Enable ECDSA support, experimental
|
--disable-ecdsa Disable ECDSA support
|
||||||
--enable-static-exe enable to compile executables statically against
|
--enable-static-exe enable to compile executables statically against
|
||||||
event, ldns libs, for debug purposes
|
event, ldns libs, for debug purposes
|
||||||
--enable-lock-checks enable to check lock and unlock calls, for debug
|
--enable-lock-checks enable to check lock and unlock calls, for debug
|
||||||
|
|
@ -16622,19 +16622,21 @@ fi
|
||||||
|
|
||||||
use_ecdsa="no"
|
use_ecdsa="no"
|
||||||
case "$enable_ecdsa" in
|
case "$enable_ecdsa" in
|
||||||
yes)
|
no)
|
||||||
|
;;
|
||||||
|
*)
|
||||||
ac_fn_c_check_func "$LINENO" "ECDSA_sign" "ac_cv_func_ECDSA_sign"
|
ac_fn_c_check_func "$LINENO" "ECDSA_sign" "ac_cv_func_ECDSA_sign"
|
||||||
if test "x$ac_cv_func_ECDSA_sign" = xyes; then :
|
if test "x$ac_cv_func_ECDSA_sign" = xyes; then :
|
||||||
|
|
||||||
else
|
else
|
||||||
as_fn_error $? "OpenSSL does not support ECDSA" "$LINENO" 5
|
as_fn_error $? "OpenSSL does not support ECDSA: please upgrade or rerun with --disable-ecdsa" "$LINENO" 5
|
||||||
fi
|
fi
|
||||||
|
|
||||||
ac_fn_c_check_func "$LINENO" "SHA384_Init" "ac_cv_func_SHA384_Init"
|
ac_fn_c_check_func "$LINENO" "SHA384_Init" "ac_cv_func_SHA384_Init"
|
||||||
if test "x$ac_cv_func_SHA384_Init" = xyes; then :
|
if test "x$ac_cv_func_SHA384_Init" = xyes; then :
|
||||||
|
|
||||||
else
|
else
|
||||||
as_fn_error $? "OpenSSL does not support SHA384" "$LINENO" 5
|
as_fn_error $? "OpenSSL does not support SHA384: please upgrade or rerun with --disable-ecdsa" "$LINENO" 5
|
||||||
fi
|
fi
|
||||||
|
|
||||||
ac_fn_c_check_decl "$LINENO" "NID_X9_62_prime256v1" "ac_cv_have_decl_NID_X9_62_prime256v1" "$ac_includes_default
|
ac_fn_c_check_decl "$LINENO" "NID_X9_62_prime256v1" "ac_cv_have_decl_NID_X9_62_prime256v1" "$ac_includes_default
|
||||||
|
|
@ -16653,7 +16655,7 @@ _ACEOF
|
||||||
if test $ac_have_decl = 1; then :
|
if test $ac_have_decl = 1; then :
|
||||||
|
|
||||||
else
|
else
|
||||||
as_fn_error $? "OpenSSL does not support the ECDSA curves" "$LINENO" 5
|
as_fn_error $? "OpenSSL does not support the ECDSA curves: please upgrade or rerun with --disable-ecdsa" "$LINENO" 5
|
||||||
fi
|
fi
|
||||||
ac_fn_c_check_decl "$LINENO" "NID_secp384r1" "ac_cv_have_decl_NID_secp384r1" "$ac_includes_default
|
ac_fn_c_check_decl "$LINENO" "NID_secp384r1" "ac_cv_have_decl_NID_secp384r1" "$ac_includes_default
|
||||||
#include <openssl/evp.h>
|
#include <openssl/evp.h>
|
||||||
|
|
@ -16671,7 +16673,7 @@ _ACEOF
|
||||||
if test $ac_have_decl = 1; then :
|
if test $ac_have_decl = 1; then :
|
||||||
|
|
||||||
else
|
else
|
||||||
as_fn_error $? "OpenSSL does not support the ECDSA curves" "$LINENO" 5
|
as_fn_error $? "OpenSSL does not support the ECDSA curves: please upgrade or rerun with --disable-ecdsa" "$LINENO" 5
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# see if OPENSSL 1.0.0 or later (has EVP MD and Verify independency)
|
# see if OPENSSL 1.0.0 or later (has EVP MD and Verify independency)
|
||||||
|
|
@ -16697,10 +16699,6 @@ _ACEOF
|
||||||
|
|
||||||
use_ecdsa="yes"
|
use_ecdsa="yes"
|
||||||
;;
|
;;
|
||||||
no)
|
|
||||||
;;
|
|
||||||
*)
|
|
||||||
;;
|
|
||||||
esac
|
esac
|
||||||
|
|
||||||
# check for libevent
|
# check for libevent
|
||||||
|
|
|
||||||
|
|
@ -660,7 +660,7 @@ case "$enable_gost" in
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
|
|
||||||
AC_ARG_ENABLE(ecdsa, AC_HELP_STRING([--enable-ecdsa], [Enable ECDSA support]))
|
AC_ARG_ENABLE(ecdsa, AC_HELP_STRING([--disable-ecdsa], [Disable ECDSA support]))
|
||||||
use_ecdsa="no"
|
use_ecdsa="no"
|
||||||
case "$enable_ecdsa" in
|
case "$enable_ecdsa" in
|
||||||
no)
|
no)
|
||||||
|
|
|
||||||
|
|
@ -1,3 +1,7 @@
|
||||||
|
13 April 2012: Wouter
|
||||||
|
- ECDSA support (RFC 6605) by default. Use --disable-ecdsa for older
|
||||||
|
openssl.
|
||||||
|
|
||||||
10 April 2012: Wouter
|
10 April 2012: Wouter
|
||||||
- Applied patch from Daisuke HIGASHI for rrset-roundrobin and
|
- Applied patch from Daisuke HIGASHI for rrset-roundrobin and
|
||||||
minimal-responses features.
|
minimal-responses features.
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue