lighttpd
/
lighttpd1.4
2
0
Fork 0
Code Issues Releases Wiki Activity
lighttpd1.4/src/sys-crypto.h

44 lines
739 B
C
Raw Normal View History

[TLS] sys-crypto.h abstraction (add the header)
2018-09-26 12:23:36 +00:00
#ifndef LI_SYS_CRYPTO_H
#define LI_SYS_CRYPTO_H
#include "first.h"
#if defined HAVE_LIBSSL && defined HAVE_OPENSSL_SSL_H
[multiple] ./configure --with-nettle to use Nettle ./configure --with-nettle to use Nettle crypto lib for algorithms, instead of OpenSSL or wolfSSL. Note: Nettle does not provide TLS. x-ref: "How to use SHA-256 without OpenSSL?" https://redmine.lighttpd.net/boards/2/topics/8903
2020-02-25 05:39:23 +00:00
#define USE_LIB_CRYPTO
[TLS] sys-crypto.h abstraction (add the header)
2018-09-26 12:23:36 +00:00
#define USE_OPENSSL_CRYPTO
#endif
[mod_openssl] add support for wolfSSL requires wolfSSL library version 3.15.3 or later https://www.wolfssl.com/ https://github.com/wolfSSL/wolfssl (thx dgarske) x-ref: "Adds support for building Lighttpd with wolfSSL" https://github.com/lighttpd/lighttpd1.4/pull/92
2018-10-08 00:07:03 +00:00
#ifdef HAVE_WOLFSSL_SSL_H
[multiple] ./configure --with-nettle to use Nettle ./configure --with-nettle to use Nettle crypto lib for algorithms, instead of OpenSSL or wolfSSL. Note: Nettle does not provide TLS. x-ref: "How to use SHA-256 without OpenSSL?" https://redmine.lighttpd.net/boards/2/topics/8903
2020-02-25 05:39:23 +00:00
#define USE_LIB_CRYPTO
[mod_openssl] prefer some WolfSSL native APIs Prefer some WolfSSL native APIs when building with WolfSSL. However, some functionality in WolfSSL is available only through the WolfSSL compatibility layer for OpenSSL, so the effort to create a native mod_wolfssl halted here.
2020-07-03 19:08:51 +00:00
#define USE_WOLFSSL_CRYPTO
[mod_wolfssl] standalone module standalone module forked from mod_openssl
2020-09-09 06:52:34 +00:00
#endif
[mod_openssl] add support for wolfSSL requires wolfSSL library version 3.15.3 or later https://www.wolfssl.com/ https://github.com/wolfSSL/wolfssl (thx dgarske) x-ref: "Adds support for building Lighttpd with wolfSSL" https://github.com/lighttpd/lighttpd1.4/pull/92
2018-10-08 00:07:03 +00:00
[mod_mbedtls] mbedTLS option for TLS (experimental) mod_mbedtls supports most ssl.* config options supported by mod_openssl thx Ward Willats for the initial discussion and attempt in the comments https://redmine.lighttpd.net/boards/3/topics/7029
2020-03-19 03:21:19 +00:00
#ifdef HAVE_LIBMBEDCRYPTO
#define USE_LIB_CRYPTO
#define USE_MBEDTLS_CRYPTO
#endif
[mod_nss] NSS option for TLS (fixes #1218) (experimental) WARNING: EXPERIMENTAL code sketch; mod_nss is INCOMPLETE and UNTESTED mod_nss supports most ssl.* config options supported by mod_openssl x-ref: "alternate ssl backend" https://redmine.lighttpd.net/issues/1218
2020-06-29 03:43:16 +00:00
#ifdef HAVE_NSS3_NSS_H
[multiple] use NSS crypto if no other crypto avail use NSS crypto if no other crypto avail, but NSS crypto is available "NSS crypto support" is not included in tests/LightyTest.pm:has_crypto() due to NSS libraries (freebl3) lacking public export for HMAC funcs
2020-10-13 12:26:05 +00:00
#define USE_LIB_CRYPTO
[mod_nss] NSS option for TLS (fixes #1218) (experimental) WARNING: EXPERIMENTAL code sketch; mod_nss is INCOMPLETE and UNTESTED mod_nss supports most ssl.* config options supported by mod_openssl x-ref: "alternate ssl backend" https://redmine.lighttpd.net/issues/1218
2020-06-29 03:43:16 +00:00
#define USE_NSS_CRYPTO
#endif
[build] detect nss3/nss.h or nss/nss.h for NSS
2020-10-27 20:40:08 +00:00
#ifdef HAVE_NSS_NSS_H
#define USE_LIB_CRYPTO
#define USE_NSS_CRYPTO
#endif
[mod_nss] NSS option for TLS (fixes #1218) (experimental) WARNING: EXPERIMENTAL code sketch; mod_nss is INCOMPLETE and UNTESTED mod_nss supports most ssl.* config options supported by mod_openssl x-ref: "alternate ssl backend" https://redmine.lighttpd.net/issues/1218
2020-06-29 03:43:16 +00:00
[multiple] ./configure --with-nettle to use Nettle ./configure --with-nettle to use Nettle crypto lib for algorithms, instead of OpenSSL or wolfSSL. Note: Nettle does not provide TLS. x-ref: "How to use SHA-256 without OpenSSL?" https://redmine.lighttpd.net/boards/2/topics/8903
2020-02-25 05:39:23 +00:00
#ifdef HAVE_NETTLE_NETTLE_TYPES_H
#define USE_LIB_CRYPTO
#define USE_NETTLE_CRYPTO
#endif
[mod_gnutls] GnuTLS option for TLS (fixes #109) (experimental) mod_gnutls supports most ssl.* config options supported by mod_openssl x-ref: "GnuTLS support for the mod_ssl" https://redmine.lighttpd.net/issues/109
2020-05-14 06:03:14 +00:00
#ifdef HAVE_GNUTLS_CRYPTO_H
#define USE_LIB_CRYPTO
#define USE_GNUTLS_CRYPTO
#endif
[build] WITHOUT_LIB_CRYPTO option in code (not (yet?) an end-user option in the build system) (If extended to build system, build system should also unset CRYPTO_LIB) If WITHOUT_LIB_CRYPTO is defined in sys-crypto.h, then non-TLS modules will have access to MD5() and SHA1() built with lighttpd (algo_md5.[ch] and algo_sha1.[ch]), but not to other message digest algorithms. As of this commit, this affects only mod_secdownload with SHA256 digest and mod_auth* modules using HTTP Digest Auth with digest=SHA-256, which is not currently well-supported by client browers (besides Opera)
2020-10-27 20:47:33 +00:00
#ifdef WITHOUT_LIB_CRYPTO
#undef USE_LIB_CRYPTO
#endif
[TLS] sys-crypto.h abstraction (add the header)
2018-09-26 12:23:36 +00:00
#endif