[openssl-commits] [openssl] OpenSSL_1_1_0-stable update

[Andy Polyakov]

The branch OpenSSL_1_1_0-stable has been updated
       via  db610cb29cd2658c4feb60f4899856f0ac5e9dab (commit)
      from  df6b5e29ffea2d5a3e08de92fb765fdb21c7a21e (commit)


- Log -----------------------------------------------------------------
commit db610cb29cd2658c4feb60f4899856f0ac5e9dab
Author: Andy Polyakov <appro at openssl.org>
Date:   Wed Sep 21 22:05:12 2016 +0200

    CHANGES: mention removal of solaris-x86-cc.
    
    Reviewed-by: Rich Salz <rsalz at openssl.org>

-----------------------------------------------------------------------

Summary of changes:
 CHANGES | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/CHANGES b/CHANGES
index 8b0e21f..9fc7bfb 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,7 +4,14 @@
 
  Changes between 1.1.0 and 1.1.0a [xx XXX xxxx]
 
-  *)
+  *) solaris-x86-cc, i.e. 32-bit configuration with vendor compiler,
+     had to be removed. Primary reason is that vendor assembler can't
+     assemble our modules with -KPIC flag. As result it, assembly
+     support, was not even available as option. But its lack means
+     lack of side-channel resistant code, which is incompatible with
+     security by todays standards. Fortunately gcc is readily available
+     prepackaged option, which we firmly point at...
+     [Andy Polyakov]
 
  Changes between 1.0.2h and 1.1.0  [25 Aug 2016]