buildroot/package/openssl, branch 2015.11

Revert "openssl: enable parallel build and installation"

2015-11-23T17:32:25+00:00

This reverts commit 55e4ec054c21b9164e10c323a5f0afff1deb1d67. There are still build failures in parallel builds: http://autobuild.buildroot.org/results/9a0/9a0fc1064010a658155e6a18ec72e0e3c58ec7f6/ http://autobuild.buildroot.org/results/c28/c28064f383da1f577bd9227d004f1939daf4579f/ http://autobuild.buildroot.org/results/218/2180b9d900b27103acc92a2932f7ffa560b04831/ and so on... Signed-off-by: "Yann E. MORIN" Cc: Ryan Barnett Cc: Thomas Petazzoni Cc: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

openssl: change sed expression delimiter

2015-09-23T21:27:42+00:00

Switch from : to # since CFLAGS can include :'s spilled in from BR2_TARGET_OPTIMIZATION, for example: BR2_TARGET_OPTIMIZATION="-Wl,-rpath,/lib:/usr/lib" would cause the sed expression to fail thus breaking the build. Changed all of the SEDs to # for consistency. Signed-off-by: Gustavo Zacarias Reviewed-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

openssl: enable parallel build and installation

2015-09-16T20:20:52+00:00

This is a patch that is originally based on a patch Thomas P. submitted for an earlier version of this package. I have adopted this patch to use the latest available Gentoo parallel patch. I have also seen about a minute improvement on my build times of openssl. Part of Thomas P's original message: On my build server, the current build of OpenSSL takes 1 minutes and 20 seconds. With this commit applied, enabling parallel build and installation, the build only takes 28 seconds. All the patches are downloaded from Gentoo. There is apparently some interest in upstream OpenSSL to enable parallel build, see for example commit https://github.com/openssl/openssl/commit/c3f22253b139793ff3b91ff7e6969e180cf06815. This commit is not part of any OpenSSL release, but we can hope that the problem will resolved in the future. Signed-off-by: Ryan Barnett CC: Thomas Petazzoni CC: Gustavo Zacarias CC: Arnout Vandecappelle Signed-off-by: Thomas Petazzoni

openssl: use git formatted patches

2015-09-16T20:20:30+00:00

Using Git formatted patches makes it easier to adjust the patches when needed. [Thomas: remove patch numbering.] Signed-off-by: Ryan Barnett CC: Thomas Petazzoni CC: Gustavo Zacarias CC: Arnout Vandecappelle Signed-off-by: Thomas Petazzoni

openssl: security bump to version 1.0.2d

2015-07-09T20:03:05+00:00

Fixes CVE-2015-1793 - Alternative chains certificate forgery. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

openssl: drop !static dependency from OPENSSL_BIN option

2015-07-09T06:55:16+00:00

The dependency doesn't make sense now that the option only controls if the built binary gets installed into the target or not, so drop it. Signed-off-by: Peter Korsgaard

openssl: fix static build

2015-07-09T06:54:00+00:00

If configured with no-dso, the openssl binary still gets linked with -ldl, while libdl is not available for static-only builds. The OpenSSL framework does not support automatically dropping -ldl with no-dso, so -ldl has to be removed from Makefile after calling ./Configure as explained in PROBLEMS. Fixes http://autobuild.buildroot.org/results/cbb35f2582f1cfeb3d11cb4952a80784ff660baf [Peter: add reference to PROBLEMS file] Signed-off-by: Benoît Thébaudeau Signed-off-by: Peter Korsgaard

openssl: always build apps

2015-07-06T15:09:45+00:00

Now that building the openssl binary without MMU is supported, the only reason left for not building apps if the openssl binary is disabled is to save build time. Moreover, the commit 720893b62510438237b9923d744dd079ddb4f67d "openssl: disable apps for NOMMU", which added this behavior, had a side effect: the scripts from apps (CA.pl, CA.sh and tsget) and the default configuration file (openssl.cnf) were no longer installed, which is not advertized by the BR2_PACKAGE_OPENSSL_BIN option. CA.pl and CA.sh use the openssl binary, so not installing them without the latter makes sense. But tsget does not use the openssl binary, and openssl.cnf can be used by libcrypto, so it is preferable to handle BR2_PACKAGE_OPENSSL_BIN like before the commit mentioned above, i.e. to always build and install apps and to just remove the openssl binary afterwards if needed. This is what the current commit does, but installing only the helper scripts having their dependencies (perl or the openssl binary) satisfied. The help text is updated accordingly. Signed-off-by: Benoît Thébaudeau Signed-off-by: Thomas Petazzoni

openssl: support building the binary without MMU

2015-06-30T14:44:12+00:00

The commit 720893b62510438237b9923d744dd079ddb4f67d "openssl: disable apps for NOMMU" prevented the openssl binary from being built without MMU in order to fix a build failure without fork(). However, openssl is designed to support the lack of fork() with -DHAVE_FORK=0, so allow the openssl binary to be enabled without MMU thanks to this option. Signed-off-by: Benoît Thébaudeau Signed-off-by: Thomas Petazzoni

openssl: bump to version 1.0.2c

2015-06-12T20:16:11+00:00

Fixes HMAC ABI breakage from 1.0.2b Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni