Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL bugfixes. #681

Merged
merged 4 commits into from
Jul 25, 2024
Merged

Conversation

Apprentice-Alchemist
Copy link
Contributor

  • get rid of the brew uninstall hack, it doesn't seem to be needed anymore
  • only define MSG_NOSIGNAL if it is actually undefined
  • Use SecTrustCopyAnchorCertificates to get root certs on macOS instead of the deprecated keychain apis.
  • Initialize PSA crypto when it is present (in mbedtls 3.6 TLS 1.3 support is turned on by default which uses PSA crypto)

The partially fixes the macOS HTTPS failures encountered in HaxeFoundation/haxe#11638.

tobil4sk pushed a commit to tobil4sk/neko that referenced this pull request Jul 2, 2024
In mbedtls 3.6 TLS 1.3 support is turned on by default which uses PSA crypto

See HaxeFoundation/hashlink#681
tobil4sk pushed a commit to tobil4sk/neko that referenced this pull request Jul 2, 2024
In mbedtls 3.6 TLS 1.3 support is turned on by default which uses PSA crypto

See HaxeFoundation/hashlink#681
tobil4sk pushed a commit to tobil4sk/neko that referenced this pull request Jul 3, 2024
In mbedtls 3.6 TLS 1.3 support is turned on by default which uses PSA crypto

See HaxeFoundation/hashlink#681
Simn pushed a commit to HaxeFoundation/neko that referenced this pull request Jul 3, 2024
* [ssl] Add mbedtls 3 compatibility

This means that mbedtls 3 is supported for dynamic builds

* [ci] Use mbedtls3 for dynamic mac build

* [cmake] Update to mbedtls 3.6 for static builds

Use MBEDTLS_USER_CONFIG_FILE instead of patching the sources.

* [ssl] Initialize PSA crypto when it is present.

In mbedtls 3.6 TLS 1.3 support is turned on by default which uses PSA crypto

See HaxeFoundation/hashlink#681

* [ci] Build on ubuntu bionic instead of xenial

Xenial went EoL in 2021, and we cannot build new mbedtls versions on it.

* [ssl] Fix mbedtls compilation errors on windows

* [ssl] Link bcrypt on windows

* [ssl] Define mbedtls config file when compiling ssl.c

---------

Co-authored-by: Apprentice-Alchemist <[email protected]>
@Simn
Copy link
Member

Simn commented Jul 25, 2024

@yuxiaomao Could you check if this works for you guys? If so I'd like to see this merged because there are some related open Haxe issues.

@yuxiaomao
Copy link
Collaborator

It's very Mac specific so I can't really understand it :x. But as I can't find any problem in the code and build on both CI / local machines seems fine, let's merge it.

@yuxiaomao yuxiaomao merged commit 54e97e3 into HaxeFoundation:master Jul 25, 2024
9 checks passed
@Apprentice-Alchemist Apprentice-Alchemist deleted the ssl-fixes-2 branch July 25, 2024 18:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants