buildroot/package/openssl, branch 2017.11.2

openssl: disable libressl on uClibc noMMU

2017-11-06T14:17:45+00:00

uClibc doesn't implement __register_atfork() on noMMU systems, causing a build failure of libressl. Since openssl is available as an alternative on such platforms, we just disable libressl on uClibc/noMMU systems. Fixes: /home/thomas/projets/buildroot/output/build/libressl-2.5.5/crypto/.libs/libcrypto.a(arc4random.o): In function `_rs_init.part.1': arc4random.c:(.text+0x74): undefined reference to `__register_atfork' collect2: error: ld returned 1 exit status This build issue is not visible in the autobuilders, because libressl is only selectable through a choice, which isn't randomized by the autobuilder logic. Signed-off-by: Thomas Petazzoni Signed-off-by: Peter Korsgaard

openssl: unconditionally define BR2_PACKAGE_PROVIDES_HOST_OPENSSL

2017-10-22T12:04:48+00:00

Fixes: http://autobuild.buildroot.net/results/207/207d0ca1fe5328e675246c851fcb0d5685f8c0bd/ http://autobuild.buildroot.net/results/546/546a56d6dd39e5e9ecfe25fd36a00510e6c0c45b/ host-openssl may be used without openssl being enabled for the target, so move BR2_PACKAGE_PROVIDES_HOST_OPENSSL outside the BR2_PACKAGE_OPENSSL conditional. While we're at it, add a comment explaining what this magic config symbol does. Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni

openssl: add libressl as a provider

2017-10-21T19:28:13+00:00

At this point, libressl can be added to the openssl virtual package. - Remove the entry package/libressl/Config.in from package/Config.in - Remove the file: package/libressl/Config.in - Add libressl entry to package/openssl/Config.in Signed-off-by: Adam Duskett Signed-off-by: Thomas Petazzoni

openssl: introduce BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL

2017-10-21T19:28:13+00:00

Some packages that use openssl are not compatible with libressl, only with the real openssl (known as libopenssl in Buildroot). So before we add libressl as a provider for the openssl virtual package, we introduce a BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL hidden option that packages incompatible with LibreSSL will be able to select. This will allow packages that need OpenSSL to continue using "select", without having to change to using "depends on" dependencies. Signed-off-by: Thomas Petazzoni

openssl: new virtual package

2017-10-21T19:28:13+00:00

To ease the transition to having both OpenSSL and LibreSSL, there has to be a new virtual package introduced to handle both. Instead of making a libssl, and adding OpenSSL and libressl to that package, it will be far easier to move openssl to libopenssl and to make OpenSSL a virtual package. This offers a few advantages: - BR2_PACKAGE_OPENSSL is still a visible symbol with no dependencies. - It does not require a huge patch to convert every instance of OpenSSL -> libssl) - Users will be able to update without ever having to select anything new. - LibreSSL can be added at a later date to the virtual package. Signed-off-by: Adam Duskett [Thomas: define BR2_PACKAGE_PROVIDES_HOST_OPENSSL to the value "host-libopenssl" as we always want to use the original OpenSSL for the host variant.] Signed-off-by: Thomas Petazzoni

generic packages: use $(HOST_DIR) instead of $(HOST_DIR)/usr as prefix

2017-07-05T13:19:02+00:00

Remove the redundant usr/ component of the HOST_DIR paths. Since a previous commit added a symlink from $(HOST_DIR)/usr to $(HOST_DIR), everything keeps on working. This is a mechanical change with git grep -l '\$(HOST_DIR)/usr' | xargs sed -i 's%$prefix\|PREFIX$=$"\?$\$(HOST_DIR)/usr%\1=\2$(HOST_DIR)%g' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

package/openssl: bump verstion to 1.0.2l

2017-05-28T12:55:59+00:00

According to https://www.openssl.org/news/newslog.html this release does not contain security fixes. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

openssl: security bump to version 1.0.2k

2017-01-26T21:34:36+00:00

Fixes: CVE-2017-3731 - Truncated packet could crash via OOB read. CVE-2017-3732 - BN_mod_exp may produce incorrect results on x86_64 CVE-2016-7055 - Montgomery multiplication may produce incorrect results Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssl: use $(HOST_MAKE_ENV) when calling $(MAKE)

2016-10-22T13:19:24+00:00

Signed-off-by: Gustavo Zacarias Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

openssl: use $(TARGET_MAKE_ENV) when calling $(MAKE)

2016-10-15T12:16:54+00:00

Signed-off-by: Gustavo Zacarias Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni