Commit Graph

54 Commits (v0.0.9.1)
 

Author SHA1 Message Date
JeremyRand 5092869f92
Bump safetlsa to 0.0.2 5 years ago
JeremyRand 1f7022a23f
Merge #50: Set project versions for ncdns 0.0.9
e753303 Set project versions for ncdns 0.0.9 (JeremyRand)

Pull request description:

  This is expected to be the last PR prior to the ncdns-repro v0.0.9 tag.
5 years ago
JeremyRand e753303a04
Set project versions for ncdns 0.0.9 5 years ago
JeremyRand ba8309c028
Merge #49: Bump ncdns version (use-ca in generate_nmc_cert)
566cce8 Bump ncdns version (JeremyRand)
1781112 Add x509-signature-splice project (JeremyRand)

Pull request description:

  This PR bumps the version of ncdns to add support for name-constrained CA's in `generate_nmc_cert`.
5 years ago
JeremyRand 566cce8e44
Bump ncdns version
This adds name-constrained CA support to generate_nmc_cert.
5 years ago
JeremyRand 1781112c69
Add x509-signature-splice project
This is needed in order to bump the ncdns version.
5 years ago
JeremyRand 56810ffdf9
Merge #48: Bump ncp11 version
6fb2fad Bump ncp11 version (JeremyRand)

Pull request description:

  Fixes ncp11 build failures on linux and osx targets.
5 years ago
JeremyRand 0d4afb97fe
Merge #47: Makefile: also build the non-ncdns projects
1930f40 Makefile: also build the non-ncdns projects (JeremyRand)

Pull request description:

  This is a temporary kludge until we port over Tor's `release` project.
5 years ago
JeremyRand 6fb2fadff7
Bump ncp11 version
Fixes ncp11 build failures on linux and osx targets.
5 years ago
JeremyRand 1930f40ebe
Makefile: also build the non-ncdns projects
This is a temporary kludge until we port over Tor's "release" project.
5 years ago
JeremyRand 5756a709b4
Merge #37: dnssec-hsts-native: Add JSON manifest to output
c6727cb dnssec-hsts-native: Add JSON manifest to output (JeremyRand)

Pull request description:

  The JSON manifest file is needed in order to use dnssec-hsts-native with Firefox; not sure why I forgot to add it here originally.
5 years ago
JeremyRand 732585f87e
Merge #28: Add ncp11 project and its dependencies
a503c1b Add ncp11 project (JeremyRand)
6f34bbd Add namecoin/pkcs11mod project (JeremyRand)
0ee2b0e Add miekg/pkcs11 project (JeremyRand)

Pull request description:

  Fixes https://github.com/namecoin/ncdns-repro/issues/10 .  Fixes https://github.com/namecoin/ncdns-repro/issues/16 .

  ~~Only tested on GNU/Linux targets.  Windows definitely won't work yet due to an ncp11/pkcs11mod bug that's out of scope for this PR.~~  GNU/Linux and Windows now both work.  macOS is untested.

  TODO:

  - [x] Merge https://github.com/namecoin/ncdns-repro/pull/23 first (this PR will then need a rebase).
  - [x] Finalize the commits marked (WIP).
5 years ago
JeremyRand c6727cb87b
dnssec-hsts-native: Add JSON manifest to output 5 years ago
JeremyRand a503c1b067
Add ncp11 project 5 years ago
JeremyRand 6f34bbdb0d
Add namecoin/pkcs11mod project 5 years ago
JeremyRand 0ee2b0edf5
Add miekg/pkcs11 project 5 years ago
JeremyRand b23fd76972
Merge #34: Add ncprop279 project
022071b Add ncprop279 (JeremyRand)
0857ed4 Bump ncdns version (JeremyRand)
158b258 Add tlsrestrictnss (JeremyRand)
e9177f8 Add crosssignnameconstraint (JeremyRand)

Pull request description:

  Fixes https://github.com/namecoin/ncdns-repro/issues/5
  Fixes https://github.com/namecoin/ncdns-repro/issues/7
  Fixes https://github.com/namecoin/ncdns-repro/issues/9
  Fixes https://github.com/namecoin/ncdns-repro/issues/35
5 years ago
JeremyRand fe722c596e
Merge #33: Add electrum-nmc project
f26c120 Add electrum-nmc project (JeremyRand)

Pull request description:

  Fixes https://github.com/namecoin/ncdns-repro/issues/30
5 years ago
JeremyRand ab70ab5a4d
Merge #29: Add certdehydrate-dane-rest-api and its dependencies
7584c1a qlib: fix Windows builds (JeremyRand)
1c189b4 Add certdehydrate-dane-rest-api project (JeremyRand)
8a41d47 Add safetlsa project (JeremyRand)
283a28c Support building ncdns as library (JeremyRand)
734abf0 Add crosssign project (JeremyRand)

Pull request description:

  Fixes https://github.com/namecoin/ncdns-repro/issues/11 .  Fixes https://github.com/namecoin/ncdns-repro/issues/13 .  Fixes https://github.com/namecoin/ncdns-repro/issues/17 .

  Only tested on GNU/Linux x86_64 target.  Other targets are likely to work fine.

  TODO:

  - [x] Merge https://github.com/namecoin/ncdns-repro/pull/27 first (this PR will then need a rebase).
5 years ago
JeremyRand 022071b2b5
Add ncprop279
Fixes https://github.com/namecoin/ncdns-repro/issues/35
5 years ago
JeremyRand 0857ed471e
Bump ncdns version
The new version is necessary because ncprop279 needs the RPC timeout
feature that was added recently to ncdns.
5 years ago
JeremyRand 158b2589c3
Add tlsrestrictnss
Fixes https://github.com/namecoin/ncdns-repro/issues/7
Fixes https://github.com/namecoin/ncdns-repro/issues/9
5 years ago
JeremyRand e9177f8f9a
Add crosssignnameconstraint
Fixes https://github.com/namecoin/ncdns-repro/issues/5
5 years ago
JeremyRand f26c120c41
Add electrum-nmc project
Fixes https://github.com/namecoin/ncdns-repro/issues/30
5 years ago
JeremyRand 7584c1a3aa
qlib: fix Windows builds 5 years ago
JeremyRand 1c189b49d9
Add certdehydrate-dane-rest-api project 5 years ago
JeremyRand 8a41d47a65
Add safetlsa project 5 years ago
JeremyRand 283a28cd2d
Support building ncdns as library 5 years ago
JeremyRand 734abf0658
Add crosssign project 5 years ago
JeremyRand 821b785d2d
Merge #27: Add DNSSEC-HSTS
c70a5f9 Add dnssec-hsts-native project (JeremyRand)
bfdaeb9 Add qlib project (JeremyRand)
848ae23 Add dnssec-hsts project (JeremyRand)

Pull request description:

  This PR adds DNSSEC-HSTS (both the WebExtensions and native components).  It also adds qlib since it's a dependency of DNSSEC-HSTS.  qexe is considered out of scope for this PR.

  Fixes https://github.com/namecoin/ncdns-repro/issues/14
5 years ago
JeremyRand 662c801026
Merge #26: Update hashlist to latest upstream versions
6950a35 Update hashlist to latest upstream versions (JeremyRand)

Pull request description:
5 years ago
JeremyRand 8ffc0cbc60
Merge #23: Fix macOS builds
e0bca81 Fix macOS builds (JeremyRand)

Pull request description:

  This PR fixes the build errors for the `release-osx-x86_64` target.
5 years ago
JeremyRand c70a5f9ee7
Add dnssec-hsts-native project 5 years ago
JeremyRand bfdaeb9a38
Add qlib project 5 years ago
JeremyRand 848ae23a8e
Add dnssec-hsts project 5 years ago
JeremyRand 6950a35ae4
Update hashlist to latest upstream versions
Doesn't update the following due to changed dependencies:

* mattn/go-isatty
5 years ago
JeremyRand e0bca81528
Fix macOS builds 5 years ago
JeremyRand 24b2b81dbb
Merge #22: Fix windows builds
404153a Fix windows builds (JeremyRand)

Pull request description:

  This PR fixes the build errors for the `release-windows-x86_64` target.  I haven't yet tested the `release-windows-i686` target, but it's likely to benefit from these fixes too.
5 years ago
JeremyRand 404153a56c
Fix windows builds 5 years ago
JeremyRand 62a1a8075f
Merge #21: ncdns: Fix linux/386 builds
c964910 ncdns: Fix linux/386 builds (JeremyRand)

Pull request description:

  Refs https://github.com/namecoin/ncdns-repro/issues/2#issuecomment-488030654
5 years ago
JeremyRand bf517abc88
Merge #20: Use Tor's binutils/gcc (not Wheezy's) for Go projects that use cgo
ce2790a Use Tor's binutils/gcc (not Wheezy's) for Go projects that use cgo (JeremyRand)

Pull request description:

  This should improve reproducibility, and it might also fix whatever bugs might be caused by the ancient Wheezy binutils/gcc.
5 years ago
JeremyRand a7d88a5fc8
Merge #18: Shrink diff against upstream Tor as much as possible
0993230 Bring rbm.conf closer to upstream (JeremyRand)
8b8029d Bring Makefile closer to upstream (JeremyRand)
9596bba Add tools/clean-old symlink (JeremyRand)
385ff12 Bring .gitignore closer to upstream (JeremyRand)
d6add12 Add symlink from rbm to tor-browser-build/rbm (JeremyRand)
838080b Remove our rbm submodule (JeremyRand)
fdf931e Pull latest tor-browser-build (JeremyRand)
3da6339 Pull latest rbm (JeremyRand)

Pull request description:

  This PR eliminates most of the diff between ncdns-repro and upstream tor-browser-build.  It wasn't feasible to properly audit most of the diff, and upstream has substantially better QA resources than we do.  If any parts of the diff were actually required for ncdns, I suggest either submitting them as follow-up PR's here (with comments explaining why they're needed), or else submitting them upstream to Tor.

  I can confirm that `make release-linux-x86_64` produces a working binary (modulo cgo issues that I'll file separately) with this PR applied.  I haven't tried any of the other targets.
5 years ago
JeremyRand c964910b6e
ncdns: Fix linux/386 builds 5 years ago
JeremyRand ce2790aa4b
Use Tor's binutils/gcc (not Wheezy's) for Go projects that use cgo
This should improve reproducibility.
5 years ago
JeremyRand 099323061e
Bring rbm.conf closer to upstream 5 years ago
JeremyRand 8b8029df41
Bring Makefile closer to upstream 5 years ago
JeremyRand 9596bbab53
Add tools/clean-old symlink 5 years ago
JeremyRand 385ff1226b
Bring .gitignore closer to upstream 5 years ago
JeremyRand d6add12b37
Add symlink from rbm to tor-browser-build/rbm
This replaces the rbm submodule that was deleted in the previous commit.
5 years ago
JeremyRand 838080b936
Remove our rbm submodule
Next commit will replace it with a symlink to tor-browser-build's
subdirectory
5 years ago