NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
d06dca38bb
kumquat-buildroot/package/libopenssl/Config.in

136 lines
3.2 KiB
Plaintext
Raw Normal View History

package/libopenssl: move options Since e3159cad71 (package/libopenssl: move target arch selection to Config.in), we have a Config.in that contains a few options to configure libopenssl (openSSL, the original). As such, it makes sense to move the remaining options there too. We also move the condition there, mimicking what is done for the external toolchains' options too. Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Cc: Matt Weber <matthew.weber@rockwellcollins.com> Acked-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-12-30 21:36:14 +01:00
if BR2_PACKAGE_LIBOPENSSL
package/libopenssl: move target arch selection to Config.in The logic to select the proper OpenSSL target arch in libopenssl.mk is not easy to read, so let's move it to Config.in where we have some nice constructs for that kind of value selection. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 11:24:17 +01:00
# 4xx PowerPC cores seem to have trouble with openssl's ASM
# optimizations
config BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH_LINUX_PPC
bool
default y if BR2_powerpc
depends on !BR2_powerpc_401
depends on !BR2_powerpc_403
depends on !BR2_powerpc_405
depends on !BR2_powerpc_405fp
depends on !BR2_powerpc_440
depends on !BR2_powerpc_440fp
config BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH
string
# Doesn't work for thumb-only (Cortex-M?)
default "linux-armv4" if BR2_ARM_CPU_HAS_ARM
default "linux-aarch64" if BR2_aarch64
default "linux-ppc" if BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH_LINUX_PPC
default "linux-ppc64" if BR2_powerpc64
default "linux-ppc64le" if BR2_powerpc64le
package/libopenssl: make use of linux-x86 for i386 Tested with: BR2_x86_pentium4=y BR2_TOOLCHAIN_EXTERNAL=y BR2_TOOLCHAIN_EXTERNAL_DOWNLOAD=y BR2_TOOLCHAIN_EXTERNAL_URL="http://autobuild.buildroot.org/toolchains/tarballs/br-i386-pentium4-full-2019.05.1.tar.bz2" BR2_TOOLCHAIN_EXTERNAL_GCC_7=y BR2_TOOLCHAIN_EXTERNAL_HEADERS_4_4=y BR2_TOOLCHAIN_EXTERNAL_LOCALE=y BR2_TOOLCHAIN_EXTERNAL_CXX=y BR2_INIT_NONE=y BR2_SYSTEM_BIN_SH_NONE=y BR2_PACKAGE_OPENSSL=y Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 11:24:19 +01:00
default "linux-x86" if BR2_i386
package/libopenssl: move target arch selection to Config.in The logic to select the proper OpenSSL target arch in libopenssl.mk is not easy to read, so let's move it to Config.in where we have some nice constructs for that kind of value selection. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 11:24:17 +01:00
default "linux-x86_64" if BR2_x86_64
# no-asm is needed with generic architectures such as
package/libopenssl: make use of linux-generic64 for 64-bit archs It was tested with: BR2_mips64el=y BR2_MIPS_NABI64=y BR2_TOOLCHAIN_EXTERNAL=y BR2_TOOLCHAIN_EXTERNAL_DOWNLOAD=y BR2_TOOLCHAIN_EXTERNAL_URL="http://autobuild.buildroot.org/toolchains/tarballs/br-mips64-n64-full-2019.05.1.tar.bz2" BR2_TOOLCHAIN_EXTERNAL_GCC_5=y BR2_TOOLCHAIN_EXTERNAL_HEADERS_5_1=y BR2_TOOLCHAIN_EXTERNAL_LOCALE=y BR2_TOOLCHAIN_EXTERNAL_CXX=y BR2_INIT_NONE=y BR2_SYSTEM_BIN_SH_NONE=y BR2_PACKAGE_OPENSSL=y Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 11:24:18 +01:00
# linux-generic{32,64}, see
package/libopenssl: move target arch selection to Config.in The logic to select the proper OpenSSL target arch in libopenssl.mk is not easy to read, so let's move it to Config.in where we have some nice constructs for that kind of value selection. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 11:24:17 +01:00
# https://github.com/openssl/openssl/issues/9839
package/libopenssl: fix target architecture for MIPS64n32 Commit 1ebb35ee5fb7bd5e6278a84ac2c18aa0a38056fb changed the libopenssl target architecture to 'linux-generic64' for 64-bit archs based on BR2_ARCH_IS_64. However, MIPS64n32 has BR2_ARCH_IS_64 set, but is a 32-bit ABI. On such board, libopenssl needs to be configured with linux-generic32 to function properly. One symptom of this problem is that ssh-keygen hangs on key generation, waiting for more random bits. See [1] for the discussion with openssl upstream. Thanks to Ronny Meeus for investigating the issue and kudos to the openssl community for their responsive and helpful interaction! Reported-by: Ronny Meeus <ronny.meeus@nokia.com> Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> [1] https://mta.openssl.org/pipermail/openssl-users/2020-June/012565.html Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-06-19 08:50:33 +02:00
default "linux-generic64 no-asm" if BR2_ARCH_IS_64 && !BR2_MIPS_NABI32
package/libopenssl: move target arch selection to Config.in The logic to select the proper OpenSSL target arch in libopenssl.mk is not easy to read, so let's move it to Config.in where we have some nice constructs for that kind of value selection. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 11:24:17 +01:00
default "linux-generic32 no-asm"
package/libopenssl: move options Since e3159cad71 (package/libopenssl: move target arch selection to Config.in), we have a Config.in that contains a few options to configure libopenssl (openSSL, the original). As such, it makes sense to move the remaining options there too. We also move the condition there, mimicking what is done for the external toolchains' options too. Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Cc: Matt Weber <matthew.weber@rockwellcollins.com> Acked-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-12-30 21:36:14 +01:00
config BR2_PACKAGE_LIBOPENSSL_BIN
bool "openssl binary"
help
Install the openssl binary and the associated helper scripts
to the target file system. This is a command line tool for
doing various cryptographic stuff.
config BR2_PACKAGE_LIBOPENSSL_ENGINES
bool "openssl additional engines"
help
Install additional encryption engine libraries.
package/libopenssl: add option to enable some features Openssl implements lot of algorithms that are not required in some emdedded devices and cyphers known as weak. Secure embedded systems shall disable unused algorithms (and weak algo) in order to be certified. This patch allows to select weak algorithms and mecanims to enable such as md5. To ensure backward compatibility, all items are selected by default. Signed-off-by: Erwan GAUTRON <erwan.gautron@bertin.fr> [yann.morin.1998@free.fr: - drop help texts that just repeat the prompts - fix check-package ] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-05-11 15:21:33 +02:00
config BR2_PACKAGE_LIBOPENSSL_ENABLE_CHACHA
bool "enable CHACHA"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC2
bool "enable RC2"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC4
bool "enable RC4"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD2
bool "enable MD2"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD4
bool "enable MD4"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_MDC2
bool "enable MDC2"
default y
package.libopenssl: fix enabling/disabling mdc2 Commit 3dbc86f09897 (openssl: bump version, enable mdc2+camellia+tlsext) form 2010-06-03, forced the build of mdc2. Commit a83d41867c8d (package/libopenssl: add option to enable some features) added an option to explicitly disable mdc2, but forgot to amend the existing enabling option. It appears that, like most (all?) openssl config options, mdc2 ends up enabled unless explicitly disabled. Additionally, mdc2 depends on DES, so without DES, mdc2 gets disabled. So, drop the explicit enabling option, and make mdc2 select DES. Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: "GAUTRON, Erwan" <erwan.gautron@bertin.fr> Cc: "Weber, Matthew L Collins" <Matthew.Weber@collins.com> Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2022-11-05 17:55:24 +01:00
select BR2_PACKAGE_LIBOPENSSL_ENABLE_DES
package/libopenssl: add option to enable some features Openssl implements lot of algorithms that are not required in some emdedded devices and cyphers known as weak. Secure embedded systems shall disable unused algorithms (and weak algo) in order to be certified. This patch allows to select weak algorithms and mecanims to enable such as md5. To ensure backward compatibility, all items are selected by default. Signed-off-by: Erwan GAUTRON <erwan.gautron@bertin.fr> [yann.morin.1998@free.fr: - drop help texts that just repeat the prompts - fix check-package ] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-05-11 15:21:33 +02:00
config BR2_PACKAGE_LIBOPENSSL_ENABLE_BLAKE2
bool "enable BLAKE2"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_IDEA
bool "enable IDEA"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_SEED
bool "enable SEED"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_DES
bool "enable DES"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_RMD160
bool "enable RMD160"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_WHIRLPOOL
bool "enable WHIRLPOOL"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_BLOWFISH
bool "enable BLOWFISH"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL
bool "enable SSL"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL2
bool "enable SSL2"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL3
bool "enable SSL3"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_WEAK_SSL
bool "enable WEAK_SSL"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_PSK
bool "enable mode PSK"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_CAST
bool "enable mode CAST"
default y
config BR2_PACKAGE_LIBOPENSSL_UNSECURE
bool "enable unit test, debug, backtrace"
default y
help
Enable unit-test crypto-mdebug-backtrace
crypto-mdebug autoerrinit mode.
config BR2_PACKAGE_LIBOPENSSL_DYNAMIC_ENGINE
bool "enable dynamic engine"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_COMP
bool "enable compression"
default y
package/libopenssl: move options Since e3159cad71 (package/libopenssl: move target arch selection to Config.in), we have a Config.in that contains a few options to configure libopenssl (openSSL, the original). As such, it makes sense to move the remaining options there too. We also move the condition there, mimicking what is done for the external toolchains' options too. Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Cc: Matt Weber <matthew.weber@rockwellcollins.com> Acked-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-12-30 21:36:14 +01:00
endif # BR2_PACKAGE_LIBOPENSSL
Reference in New Issue Copy Permalink