* Following the example set in634bdfb16d, the tlsdns netmgr module now uses libuv and SSL primitives directly, rather than opening a TLS socket which opens a TCP socket, as the previous model was difficult to debug. Closes #2335. * Remove the netmgr tls layer (we will have to re-add it for DoH) * Add isc_tls API to wrap the OpenSSL SSL_CTX object into libisc library; move the OpenSSL initialization/deinitialization from dstapi needed for OpenSSL 1.0.x to the isc_tls_{initialize,destroy}() * Add couple of new shims needed for OpenSSL 1.0.x * When LibreSSL is used, require at least version 2.7.0 that has the best OpenSSL 1.1.x compatibility and auto init/deinit * Enforce OpenSSL 1.1.x usage on Windows (cherry picked from commite493e04c0f)
37 lines
946 B
Makefile
37 lines
946 B
Makefile
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
srcdir = @srcdir@
|
|
VPATH = @srcdir@
|
|
top_srcdir = @top_srcdir@
|
|
|
|
CINCLUDES = -I${srcdir}/include \
|
|
-I${srcdir}/../unix/include \
|
|
-I${srcdir}/../pthreads/include \
|
|
-I../include \
|
|
-I${srcdir}/../include \
|
|
-I${srcdir}/.. \
|
|
${OPENSSL_CFLAGS} \
|
|
${JSON_C_CFLAGS} \
|
|
${LIBUV_CFLAGS} \
|
|
${LIBXML2_CFLAGS}
|
|
|
|
CDEFINES =
|
|
CWARNINGS =
|
|
|
|
# Alphabetically
|
|
OBJS = netmgr.@O@ tcp.@O@ udp.@O@ tcpdns.@O@ tlsdns.@O@ uverr2result.@O@ uv-compat.@O@
|
|
|
|
# Alphabetically
|
|
SRCS = netmgr.c tcp.c udp.c tcpdns.c tlsdns.c uverr2result.c uv-compat.c
|
|
|
|
TARGETS = ${OBJS}
|
|
|
|
@BIND9_MAKE_RULES@
|