Commit graph

7 commits

Author SHA1 Message Date
Alan Parra 623f8c17c9
chore: Bump OpenSSL to 3.0.9 (#27109)
Keep up with security releases.

https://github.com/openssl/openssl/releases/tag/openssl-3.0.9
2023-05-30 14:43:29 +00:00
Alan Parra ac0abe7951
chore: Bump libfido2 from 1.12.0 to 1.13.0 (#23926)
* chore: Bump libfido2 from 1.12.0 to 1.13.0

* Bump OpenSSL on Dockerfile-multiarch
2023-03-31 21:04:01 +00:00
Alan Parra efd790b5f0
Migrate to OpenSSL 3.0 (#23810)
* Use OpenSSL 3.0.x (buildbox)

* Use OpenSSL 3.0.x (buildbox-centos7)

* Use OpenSSL 3.0.x (macOS)
2023-03-31 15:51:13 +00:00
Alan Parra bb5f828cd8
Bump OpenSSL and libcbor (#21420)
* Bump libcbor to v0.10.2

* https://github.com/PJK/libcbor/releases/tag/v0.10.2

* Bump OpenSSL to 1.1.1t

* https://github.com/openssl/openssl/blob/OpenSSL_1_1_1t/CHANGES
2023-02-07 18:58:54 +00:00
Alan Parra 9b99a4831c
Update libfido2 to 1.12.0 (#16732)
Update libfido2 to the latest release.

Centos7 builds require a newer toolchain: [-Wimplicit-fallthrough][1] is the
first hurdle for the old toolchain, but there are more after it.

Release notes: https://developers.yubico.com/libfido2/Release_Notes.html.

[1]: 659a02679f/CMakeLists.txt (L281)
2022-09-28 14:13:25 +00:00
Alan Parra 7567c5502d
Build tsh with static libfido2 for macOS (#13001)
Add a script to build libfido2 (and its dependencies) on macOS and enable FIDO2
static builds.

I decided to build all dependencies instead of pulling from Homebrew for a few
reasons:

1. There is no libcbor.a in a brew package
2. This captures library versions within the Teleport source code, allowing us
   to build binaries against different versions of libfido2 (and its
   dependencies).

I've also bumped libfido2 to 1.11.0. I've been running it locally and we are
still pre-release, so it seems like a good time to do it.
(See https://developers.yubico.com/libfido2/Release_Notes.html.)

#9160

* Build libfido2 and dependencies for macOS
* Build tsh with static fido2 on Drone
* Bump libfido2 versions in all builds
* Attempt to appease linters
* Use temp dirs inside LIB_CACHE
* Move LIB_CACHE outside of HOME

HOME is reassigned in macOS builders, but we want a "stable" cache
directory. /tmp is used by build-package.sh and build-pkg-tsh.sh.

* Rename script to build-fido2-macos.sh
* Regenerate Drone files
2022-05-31 14:50:56 +00:00
Alan Parra af3488211c
Reinstate FIDO2 builds for amd64/Centos7 and use pkg-config (#12093)
Reinstates Linux/amd64 and Centos7/amd64 builds using libfido2, now hidden
behind an explicit FIDO2 flag (similarly to FIPS).

This PR pulls in gravitational/go-libfido2#4 and adds the required pkg-config
setup so we can perform both dynamic (mostly testing) and static (tsh) builds.
Additionally, pkg-config is now the gateway for whether we run libfido2-related
tests (which should always happen in CI).

#9160

* Re-enable libfido2 builds for amd64 and Centos7
* Use pkg-config to build tsh with libfido2
* Install Centos7 libudev-zero to /usr/local/lib64
* Update gravitational/go-libfido2
* Remove /usr/local/lib from Centos PKG_CONFIG_PATH
2022-04-28 16:32:02 +00:00