mirror of
https://github.com/git/git
synced 2024-08-28 12:09:19 +00:00
![]() When the sha1collisiondetection library was added and made the default in [1] the interaction with APPLE_COMMON_CRYPTO added in [2] and [3] seems to have been missed. On modern OSX and Darwin we are able to use Apple's CommonCrypto both for SHA-1, and as a generic (but partial) OpenSSL replacement. This left OSX and Darwin without protection against the SHAttered attack when building Git in its default configuration. Let's also use sha1collisiondetection on OSX, to do so we'll need to split up the "APPLE_COMMON_CRYPTO" flag into that flag and a new "APPLE_COMMON_CRYPTO_SHA1". Because of this we can stop conflating whether we want to use Apple's CommonCrypto at all, and whether we want to use it for SHA-1. This makes the CI recipe added in [4] simpler. 1. |
||
---|---|---|
.. | ||
config | ||
util | ||
check-directional-formatting.bash | ||
install-dependencies.sh | ||
install-docker-dependencies.sh | ||
lib.sh | ||
make-test-artifacts.sh | ||
mount-fileshare.sh | ||
print-test-failures.sh | ||
run-build-and-tests.sh | ||
run-docker-build.sh | ||
run-docker.sh | ||
run-static-analysis.sh | ||
run-test-slice.sh | ||
test-documentation.sh |