NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
de17165fd5
kumquat-buildroot/package/libnss/libnss.mk

178 lines
5.3 KiB
Makefile
Raw Normal View History

Normalize separator size to 80 Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-06-06 01:53:30 +02:00
################################################################################
package: add libnss NSS is the Network Security Services library developed as part of the Mozilla project. It provides similar functions to OpenSSL but allows MPL, GPL and LGPL licensing. [Peter: fix target install] Signed-off-by: Will Newton <will.newton@imgtec.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-07-08 15:19:16 +02:00
#
# libnss
#
Normalize separator size to 80 Signed-off-by: Alexandre Belloni <alexandre.belloni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-06-06 01:53:30 +02:00
################################################################################
libnss: bump to version 3.14.3 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2013-05-13 08:40:56 +02:00
package/libnss: bump version to 3.84 Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2022-10-13 19:24:33 +02:00
LIBNSS_VERSION = 3.84
package: add libnss NSS is the Network Security Services library developed as part of the Mozilla project. It provides similar functions to OpenSSL but allows MPL, GPL and LGPL licensing. [Peter: fix target install] Signed-off-by: Will Newton <will.newton@imgtec.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-07-08 15:19:16 +02:00
LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz
package: unification of use $(subst [._-], [._-], $(<PKG>_VERSION)) macro Currently, there are five packages which use 'subst' macro to change their version. * Three of them (ebtables, icu, perl) use this macro "in place" : EBTABLES_SITE = http://downloads.sourceforge.net/project/ebtables/ebtables/ebtables-$(subst .,-,$(EBTABLES_VERSION)) ICU_SOURCE = icu4c-$(subst .,_,$(ICU_VERSION))-src.tgz PERL_CROSS_OLD_POD = perl$(subst .,,$(PERL_CROSS_BASE_VERSION))delta.pod PERL_CROSS_NEW_POD = perl$(subst .,,$(PERL_VERSION))delta.pod * Two of them (boost, libnss) use an additional variable : BOOST_FILE_VERSION = $(subst .,_,$(BOOST_VERSION)) BOOST_SOURCE = boost_$(BOOST_FILE_VERSION).tar.bz2 LIBNSS_SITE_VERSION = $(subst .,_,$(LIBNSS_VERSION)) LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(LIBNSS_SITE_VERSION)_RTM/src * Additionally two packages (duma, rings) doesn't use it at all : DUMA_VERSION = 2_5_15 DUMA_SITE = http://downloads.sourceforge.net/project/duma/duma/2.5.15 RINGS_VERSION_MAJOR = 1.3.0 RINGS_SUBDIR = rings-v_1_3_0 This commit makes changes to use 'subst' macro "in place", in all of them. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-01-14 11:30:58 +01:00
LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(subst .,_,$(LIBNSS_VERSION))_RTM/src
libnss: security bump to version 3.16.1 Fixes: CVE-2014-1492 - The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate. CVE-2014-1491 - Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value. CVE-2014-1490 - Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket. CVE-2013-1740 - The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-06-18 16:46:20 +02:00
LIBNSS_DISTDIR = dist
package: add libnss NSS is the Network Security Services library developed as part of the Mozilla project. It provides similar functions to OpenSSL but allows MPL, GPL and LGPL licensing. [Peter: fix target install] Signed-off-by: Will Newton <will.newton@imgtec.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-07-08 15:19:16 +02:00
LIBNSS_INSTALL_STAGING = YES
LIBNSS_DEPENDENCIES = libnspr sqlite zlib
package: use SPDX short identifier for MPL family licenses We want to use SPDX identifier for license string as much as possible. SPDX short identifier for MPLv1.0/MPLv1.1/MPLv2.0 is MPL-1.0/MPL-1.1/ MPL-2.0. This change is done using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/MPLv([1-2]\.[0-1])/MPL-\1/g' Signed-off-by: Rahul Bedarkar <rahulbedarkar89@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-03-30 15:43:42 +02:00
LIBNSS_LICENSE = MPL-2.0
libnss: security bump to version 3.16.1 Fixes: CVE-2014-1492 - The cert_TestHostName function in lib/certdb/certdb.c in the certificate-checking implementation in Mozilla Network Security Services (NSS) before 3.16 accepts a wildcard character that is embedded in an internationalized domain name's U-label, which might allow man-in-the-middle attackers to spoof SSL servers via a crafted certificate. CVE-2014-1491 - Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, does not properly restrict public values in Diffie-Hellman key exchanges, which makes it easier for remote attackers to bypass cryptographic protection mechanisms in ticket handling by leveraging use of a certain value. CVE-2014-1490 - Race condition in libssl in Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, SeaMonkey before 2.24, and other products, allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via vectors involving a resumption handshake that triggers incorrect replacement of a session ticket. CVE-2013-1740 - The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to spoof SSL servers by using an arbitrary X.509 certificate during certain handshake traffic. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-06-18 16:46:20 +02:00
LIBNSS_LICENSE_FILES = nss/COPYING
package/libnss: add CPE variables cpe:2.3:a:mozilla:nss is a valid CPE identifier for this package: https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=cpe%3A2.3%3Aa%3Amozilla%3Anss Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2021-12-03 21:44:17 +01:00
LIBNSS_CPE_ID_VENDOR = mozilla
LIBNSS_CPE_ID_PRODUCT = nss
package: add libnss NSS is the Network Security Services library developed as part of the Mozilla project. It provides similar functions to OpenSSL but allows MPL, GPL and LGPL licensing. [Peter: fix target install] Signed-off-by: Will Newton <will.newton@imgtec.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-07-08 15:19:16 +02:00
package/libnss: fix build failure with make version 4.3 Make 4.3 is buggy and when parallel building host-libnss/libnss we end up with a failure thrown by make itself. So let's work-around this by don't parallel build the package if Make version is 4.3. Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-01 22:09:52 +01:00
# Don't parallel build if make version = 4.3
ifneq ($(filter $(RUNNING_MAKE_VERSION),4.3),)
LIBNSS_MAKE = $(MAKE1)
else
LIBNSS_MAKE = $(MAKE)
endif
package/libnss: re-enable package on microblaze With Microblaze Gcc version < 8.x the build hangs due to bug 85862: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85862 To avoid this, the libnss package has a !BR2_TOOLCHAIN_HAS_GCC_BUG_85862 dependency. However, gcc bug 85862 only triggers when optimization is enabled, so we can work around the issue by passing -O0, which is what we do in other Buildroot packages to work around this bug. Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-06-26 14:58:55 +02:00
LIBNSS_CFLAGS = $(TARGET_CFLAGS)
ifeq ($(BR2_TOOLCHAIN_HAS_GCC_BUG_85862),y)
LIBNSS_CFLAGS += -O0
endif
package/libnss: use correct CFLAGS and LDFLAGS Currently libnss is configured with BUILD_OPT=1 and due to that that it doesn't take into account Buildroot TARGET_CFLAGS nor TARGET_LDFLAGS resulting in pre-chosen optimizations and debugging symbols being used. We can't pass TARGET_CFLAGS through CFLAGS or similar otherwise other internal libnss one will be overwritten (i.e. -fPIC), so we prefer to append TARGET_CFLAGS at the end of Linux.mk as well as TARGET_LDFLAGS according to internal libnss Makefile system's names. And obviously remove BUILD_OPT=1 from BUILD_VARS. This reveals hidden bugs when building with -Os due to bogus uninitialized warnings from gcc turned into errors because of -Werror, so we explicitly pass NSS_ENABLE_WERROR=0 to avoid the use of -Werror. Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com> [Thomas: drop the libnss patches, and pass NSS_ENABLE_WERROR instead] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-07-29 16:26:10 +02:00
# Need to pass down TARGET_CFLAGS and TARGET_LDFLAGS
define LIBNSS_FIXUP_LINUX_MK
package/libnss: re-enable package on microblaze With Microblaze Gcc version < 8.x the build hangs due to bug 85862: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85862 To avoid this, the libnss package has a !BR2_TOOLCHAIN_HAS_GCC_BUG_85862 dependency. However, gcc bug 85862 only triggers when optimization is enabled, so we can work around the issue by passing -O0, which is what we do in other Buildroot packages to work around this bug. Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-06-26 14:58:55 +02:00
echo 'OS_CFLAGS += $(LIBNSS_CFLAGS)' >> $(@D)/nss/coreconf/Linux.mk
package/libnss: use correct CFLAGS and LDFLAGS Currently libnss is configured with BUILD_OPT=1 and due to that that it doesn't take into account Buildroot TARGET_CFLAGS nor TARGET_LDFLAGS resulting in pre-chosen optimizations and debugging symbols being used. We can't pass TARGET_CFLAGS through CFLAGS or similar otherwise other internal libnss one will be overwritten (i.e. -fPIC), so we prefer to append TARGET_CFLAGS at the end of Linux.mk as well as TARGET_LDFLAGS according to internal libnss Makefile system's names. And obviously remove BUILD_OPT=1 from BUILD_VARS. This reveals hidden bugs when building with -Os due to bogus uninitialized warnings from gcc turned into errors because of -Werror, so we explicitly pass NSS_ENABLE_WERROR=0 to avoid the use of -Werror. Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com> [Thomas: drop the libnss patches, and pass NSS_ENABLE_WERROR instead] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-07-29 16:26:10 +02:00
echo 'LDFLAGS += $(TARGET_LDFLAGS)' >> $(@D)/nss/coreconf/Linux.mk
endef
LIBNSS_PRE_CONFIGURE_HOOKS += LIBNSS_FIXUP_LINUX_MK
libnss: workaround for microblaze ld bug Add a workaround for a microblaze specific ld bug to avoid segfault. Fixes: http://autobuild.buildroot.net/results/638a65453879777a0d5bdb29231034cd261b41c0 [Peter: rename to LIBNSS_DROP_GC_SECTIONS for clarity] Signed-off-by: Waldemar Brodkorb <wbx@openadk.org> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-02-18 22:40:02 +01:00
# --gc-sections triggers binutils ld segfault
# https://sourceware.org/bugzilla/show_bug.cgi?id=21180
ifeq ($(BR2_microblaze),y)
define LIBNSS_DROP_GC_SECTIONS
sed -i 's:-Wl,--gc-sections::g' $(@D)/nss/coreconf/Linux.mk
endef
LIBNSS_PRE_CONFIGURE_HOOKS += LIBNSS_DROP_GC_SECTIONS
endif
package: indentation cleanup Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-12-30 08:36:23 +01:00
LIBNSS_BUILD_VARS = \
MOZILLA_CLIENT=1 \
NSPR_INCLUDE_DIR=$(STAGING_DIR)/usr/include/nspr \
NSPR_LIB_DIR=$(STAGING_DIR)/usr/lib \
NS_USE_GCC=1 \
libnss: bump to version 3.21 Disable gtests since they require C++ support. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-11-20 19:47:20 +01:00
NSS_DISABLE_GTESTS=1 \
package: indentation cleanup Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-12-30 08:36:23 +01:00
NSS_USE_SYSTEM_SQLITE=1 \
NATIVE_CC="$(HOSTCC)" \
OS_ARCH="Linux" \
OS_RELEASE="2.6" \
package/libnss: fix build failure on PowerPC, PowerPC64 libnss expects OS_TEST to be set to ppc, ppc64, or ppc64le instead of the usual values defined by Buildroot, respectively powerpc, powerpc64, or powerpc64le. This fixes the inconsistencies where functions would be prototyped and called, but no implementation would be provided, causing link issues. Define all the variants (of which the existing aarch64be) in Kconfig. The latest default uses the usual architecture names as defined by Buildroot, BR2_ARCH. Additionally, libnss makes use of Altivec intrinsics which are only available starting with gcc 8, not gcc 5, so we patch it to fix that condition. Fixes: http://autobuild.buildroot.org/results/579/57928e6cf69d584b430a1d9a99156c57f29b692f/ Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> [yann.morin.1998@free.fr: - move the arch setting to kconfig (like recently done in e3159cad71) - add the build failure - add pointer to upstream bug report and patch sybmission - reformat and reword commit log ] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-01-01 17:58:11 +01:00
OS_TEST=$(BR2_PACKAGE_LIBNSS_ARCH) \
package/libnss: use correct CFLAGS and LDFLAGS Currently libnss is configured with BUILD_OPT=1 and due to that that it doesn't take into account Buildroot TARGET_CFLAGS nor TARGET_LDFLAGS resulting in pre-chosen optimizations and debugging symbols being used. We can't pass TARGET_CFLAGS through CFLAGS or similar otherwise other internal libnss one will be overwritten (i.e. -fPIC), so we prefer to append TARGET_CFLAGS at the end of Linux.mk as well as TARGET_LDFLAGS according to internal libnss Makefile system's names. And obviously remove BUILD_OPT=1 from BUILD_VARS. This reveals hidden bugs when building with -Os due to bogus uninitialized warnings from gcc turned into errors because of -Werror, so we explicitly pass NSS_ENABLE_WERROR=0 to avoid the use of -Werror. Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com> [Thomas: drop the libnss patches, and pass NSS_ENABLE_WERROR instead] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-07-29 16:26:10 +02:00
NSS_ENABLE_WERROR=0
package: add libnss NSS is the Network Security Services library developed as part of the Mozilla project. It provides similar functions to OpenSSL but allows MPL, GPL and LGPL licensing. [Peter: fix target install] Signed-off-by: Will Newton <will.newton@imgtec.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-07-08 15:19:16 +02:00
package/libnss: fix powerpc altivec build failure NSS_DISABLE_ALTIVEC variable has been introduced into libnss so let's use it to prevent Altivec build failure on PowerPc by passing NSS_DISABLE_ALTIVEC=1 if BR2_POWERPC_CPU_HAS_ALTIVEC is not 'y'. Fixes: http://autobuild.buildroot.net/results/957/957cec911bcd68a18418ad02f13e7e3001521c59/ http://autobuild.buildroot.net/results/6a1/6a1578619a477e1605fe152070f004b662f1d839/ Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2020-02-08 11:39:00 +01:00
ifeq ($(BR2_POWERPC_CPU_HAS_ALTIVEC),)
# Disable Altivec if not supported
LIBNSS_BUILD_VARS += NSS_DISABLE_ALTIVEC=1
endif
package/libnss: fix build on powerpc Set NSS_DISABLE_CRYPTO_VSX which is available since version 3.64 and https://github.com/nss-dev/nss/commit/9dab43371d4d924419523e18ba84f02804880533 to avoid the following build failure on powerpc: cc1: warning: '-mvsx' requires hardware floating point cc1: error: '-mno-vsx' turns off '-mcrypto' Passing this option on non-powerpc is harmless. Fixes: - http://autobuild.buildroot.org/results/6bedb5b658f6c9c16c26c73a524a995e5e84fcc8 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Joel Stanley <joel@jms.id.au> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2022-04-07 02:56:07 +02:00
ifeq ($(BR2_POWERPC_CPU_HAS_VSX),)
# Disable VSX if not supported
LIBNSS_BUILD_VARS += NSS_DISABLE_CRYPTO_VSX=1
endif
package/libnss: bump version to 3.51 Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.51_release_notes Remove upstreamed patch but add another patch to allow disable Neon acceleration while building gcm on Arm32. This patch adds NSS_DISABLE_GCM_ARM32_NEON variable that is set to 1 if BR2_ARM_CPU_HAS_NEON is not set to y. Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-03-12 19:06:29 +01:00
ifeq ($(BR2_ARM_CPU_HAS_NEON),)
package/libnss: fix build failure due to patch not applicable Current 0001 patch has been committed into buildroot before being upstreamed. Now that it's been upstreamed it changed a little, so this makes patch 0002(based on upstream version of patch 0001) impossible to apply causing build failure while applying patches. So let's update patch 0001 with upstream one. Fixes: http://autobuild.buildroot.net/results/c8a/c8a6776a3e9cec1dc67862e4972e3ca8f4562a50/ Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-04-05 19:11:44 +02:00
# Disable arm32-neon if neon is not supported
LIBNSS_BUILD_VARS += NSS_DISABLE_ARM32_NEON=1
package/libnss: bump version to 3.51 Release notes: https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.51_release_notes Remove upstreamed patch but add another patch to allow disable Neon acceleration while building gcm on Arm32. This patch adds NSS_DISABLE_GCM_ARM32_NEON variable that is set to 1 if BR2_ARM_CPU_HAS_NEON is not set to y. Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-03-12 19:06:29 +01:00
endif
libnss: fix 64-bit build On some architectures (found on x86_64, but probably others too), libnss builds with -m32 unless it is configured for 64-bit build. So force 64-bit build on 64-bit architectures. Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-07-11 00:30:36 +02:00
ifeq ($(BR2_ARCH_IS_64),y)
libnss: Enable for MIPS64 n32 platforms After talking with upstream we concluded that MIPS64 n32 is treated as a 32-bit architecture by libnss because it has 32-bit pointers, so USE_64=1 should not be set in that case. Upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1010730 WRT: http://git.buildroot.net/buildroot/commit/?id=73e6ae0fe6a69f88183ae33401f2314088b5f799 Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-05-22 14:30:46 +02:00
# MIPS64 n32 is treated as a 32-bit architecture by libnss.
# See: https://bugzilla.mozilla.org/show_bug.cgi?id=1010730
ifeq ($(BR2_MIPS_NABI32),)
libnss: fix 64-bit build On some architectures (found on x86_64, but probably others too), libnss builds with -m32 unless it is configured for 64-bit build. So force 64-bit build on 64-bit architectures. Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-07-11 00:30:36 +02:00
LIBNSS_BUILD_VARS += USE_64=1
endif
libnss: Enable for MIPS64 n32 platforms After talking with upstream we concluded that MIPS64 n32 is treated as a 32-bit architecture by libnss because it has 32-bit pointers, so USE_64=1 should not be set in that case. Upstream bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1010730 WRT: http://git.buildroot.net/buildroot/commit/?id=73e6ae0fe6a69f88183ae33401f2314088b5f799 Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-05-22 14:30:46 +02:00
endif
libnss: fix 64-bit build On some architectures (found on x86_64, but probably others too), libnss builds with -m32 unless it is configured for 64-bit build. So force 64-bit build on 64-bit architectures. Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-07-11 00:30:36 +02:00
package: add libnss NSS is the Network Security Services library developed as part of the Mozilla project. It provides similar functions to OpenSSL but allows MPL, GPL and LGPL licensing. [Peter: fix target install] Signed-off-by: Will Newton <will.newton@imgtec.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-07-08 15:19:16 +02:00
define LIBNSS_BUILD_CMDS
package/libnss: fix build failure with make version 4.3 Make 4.3 is buggy and when parallel building host-libnss/libnss we end up with a failure thrown by make itself. So let's work-around this by don't parallel build the package if Make version is 4.3. Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-01 22:09:52 +01:00
$(TARGET_CONFIGURE_OPTS) $(LIBNSS_MAKE) -C $(@D)/nss coreconf \
package: indentation cleanup Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-10-27 09:25:28 +01:00
SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
DIST=$(@D)/$(LIBNSS_DISTDIR) \
CHECKLOC= \
$(LIBNSS_BUILD_VARS)
package/libnss: fix build failure with make version 4.3 Make 4.3 is buggy and when parallel building host-libnss/libnss we end up with a failure thrown by make itself. So let's work-around this by don't parallel build the package if Make version is 4.3. Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-01 22:09:52 +01:00
$(TARGET_CONFIGURE_OPTS) $(LIBNSS_MAKE) -C $(@D)/nss lib/dbm all \
package: indentation cleanup Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-10-27 09:25:28 +01:00
SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
DIST=$(@D)/$(LIBNSS_DISTDIR) \
CHECKLOC= \
package/libnss: fix build failure on Aarch64 host for powerpc64 target When building on Aarch64 host for powerpc64 we get this error: gcc: error: unrecognized command-line option '-m64' This happens because we don't have the flexibility to override the LDFLAGS when linking nsinstall host tool that is built in libnss. Also libnss uses the same LDFLAGS it uses for target and that is not correct. So let's add a patch to add NATIVE_LDFLAGS variable to override LFDFLAGS when building nsinstall utility and set it to HOST_LDFLAGS in libnss.mk Fixes: http://autobuild.buildroot.net/results/67500395f19aa698b98404cde8d20463e55504bf/ Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Tested-by: James Hilliard <james.hilliard1@gmail.com> [yann.morin.1998@free.fr: add upstream link in patch itself] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-05-25 00:07:34 +02:00
$(LIBNSS_BUILD_VARS) \
NATIVE_FLAGS="$(HOST_CFLAGS) -DLINUX" \
NATIVE_LDFLAGS="$(HOST_LDFLAGS)"
package: add libnss NSS is the Network Security Services library developed as part of the Mozilla project. It provides similar functions to OpenSSL but allows MPL, GPL and LGPL licensing. [Peter: fix target install] Signed-off-by: Will Newton <will.newton@imgtec.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-07-08 15:19:16 +02:00
endef
define LIBNSS_INSTALL_STAGING_CMDS
$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
$(INSTALL) -m 755 -d $(STAGING_DIR)/usr/include/nss
$(INSTALL) -m 644 -t $(STAGING_DIR)/usr/include/nss \
$(@D)/$(LIBNSS_DISTDIR)/public/nss/*
$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
$(@D)/$(LIBNSS_DISTDIR)/lib/*.a
package/libnss: also install a pkg-config file Some packages use pkg-config to check for libnss. Add our own .pc file (vampirised from Debian). Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-08-21 19:07:04 +02:00
$(INSTALL) -D -m 0644 $(TOPDIR)/package/libnss/nss.pc.in \
$(STAGING_DIR)/usr/lib/pkgconfig/nss.pc
$(SED) 's/@VERSION@/$(LIBNSS_VERSION)/g;' \
$(STAGING_DIR)/usr/lib/pkgconfig/nss.pc
package: add libnss NSS is the Network Security Services library developed as part of the Mozilla project. It provides similar functions to OpenSSL but allows MPL, GPL and LGPL licensing. [Peter: fix target install] Signed-off-by: Will Newton <will.newton@imgtec.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-07-08 15:19:16 +02:00
endef
define LIBNSS_INSTALL_TARGET_CMDS
$(INSTALL) -m 755 -t $(TARGET_DIR)/usr/lib/ \
$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
$(INSTALL) -m 755 -d $(TARGET_DIR)/usr/include/nss
$(INSTALL) -m 644 -t $(TARGET_DIR)/usr/include/nss \
$(@D)/$(LIBNSS_DISTDIR)/public/nss/*
$(INSTALL) -m 755 -t $(TARGET_DIR)/usr/lib/ \
$(@D)/$(LIBNSS_DISTDIR)/lib/*.a
package/libnss: also install a pkg-config file Some packages use pkg-config to check for libnss. Add our own .pc file (vampirised from Debian). Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-08-21 19:07:04 +02:00
$(INSTALL) -D -m 0644 $(TOPDIR)/package/libnss/nss.pc.in \
$(TARGET_DIR)/usr/lib/pkgconfig/nss.pc
package/libnss: install certutil tool on target certutil is a command-line utility for managing keys and certificate in both NSS databases and other NSS tokens. Signed-off-by: Julien Floret <julien.floret@6wind.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-09-04 13:35:01 +02:00
$(INSTALL) -D -m 755 $(@D)/$(LIBNSS_DISTDIR)/bin/certutil \
$(TARGET_DIR)/usr/bin/certutil
package/libnss: also install a pkg-config file Some packages use pkg-config to check for libnss. Add our own .pc file (vampirised from Debian). Signed-off-by: "Yann E. MORIN" <yann.morin.1998@free.fr> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-08-21 19:07:04 +02:00
$(SED) 's/@VERSION@/$(LIBNSS_VERSION)/g;' \
$(TARGET_DIR)/usr/lib/pkgconfig/nss.pc
package: add libnss NSS is the Network Security Services library developed as part of the Mozilla project. It provides similar functions to OpenSSL but allows MPL, GPL and LGPL licensing. [Peter: fix target install] Signed-off-by: Will Newton <will.newton@imgtec.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
2011-07-08 15:19:16 +02:00
endef
package: add libnss host package Signed-off-by: Gaël PORTAY <gael.portay@savoirfairelinux.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2018-03-15 20:50:52 +01:00
HOST_LIBNSS_BUILD_VARS = \
MOZILLA_CLIENT=1 \
NSPR_INCLUDE_DIR=$(HOST_DIR)/include/nspr \
NSPR_LIB_DIR=$(HOST_DIR)/lib \
NS_USE_GCC=1 \
NSS_DISABLE_GTESTS=1 \
NSS_USE_SYSTEM_SQLITE=1 \
SQLITE_INCLUDE_DIR=$(HOST_DIR)/include \
ZLIB_INCLUDE_DIR=$(HOST_DIR)/include \
package/libnss: use correct CFLAGS and LDFLAGS Currently libnss is configured with BUILD_OPT=1 and due to that that it doesn't take into account Buildroot TARGET_CFLAGS nor TARGET_LDFLAGS resulting in pre-chosen optimizations and debugging symbols being used. We can't pass TARGET_CFLAGS through CFLAGS or similar otherwise other internal libnss one will be overwritten (i.e. -fPIC), so we prefer to append TARGET_CFLAGS at the end of Linux.mk as well as TARGET_LDFLAGS according to internal libnss Makefile system's names. And obviously remove BUILD_OPT=1 from BUILD_VARS. This reveals hidden bugs when building with -Os due to bogus uninitialized warnings from gcc turned into errors because of -Werror, so we explicitly pass NSS_ENABLE_WERROR=0 to avoid the use of -Werror. Signed-off-by: Giulio Benetti <giulio.benetti@micronovasrl.com> [Thomas: drop the libnss patches, and pass NSS_ENABLE_WERROR instead] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2019-07-29 16:26:10 +02:00
NSS_ENABLE_WERROR=0
package: add libnss host package Signed-off-by: Gaël PORTAY <gael.portay@savoirfairelinux.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2018-03-15 20:50:52 +01:00
HOST_LIBNSS_DEPENDENCIES = host-libnspr host-sqlite host-zlib
ifneq ($(filter %64,$(HOSTARCH)),)
HOST_LIBNSS_BUILD_VARS += USE_64=1
endif
define HOST_LIBNSS_BUILD_CMDS
package/libnss: fix build failure with make version 4.3 Make 4.3 is buggy and when parallel building host-libnss/libnss we end up with a failure thrown by make itself. So let's work-around this by don't parallel build the package if Make version is 4.3. Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-01 22:09:52 +01:00
$(HOST_CONFIGURE_OPTS) $(LIBNSS_MAKE) -C $(@D)/nss coreconf \
package: add libnss host package Signed-off-by: Gaël PORTAY <gael.portay@savoirfairelinux.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2018-03-15 20:50:52 +01:00
SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
DIST=$(@D)/$(LIBNSS_DISTDIR) \
CHECKLOC= \
$(HOST_LIBNSS_BUILD_VARS)
package/libnss: fix build failure with make version 4.3 Make 4.3 is buggy and when parallel building host-libnss/libnss we end up with a failure thrown by make itself. So let's work-around this by don't parallel build the package if Make version is 4.3. Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2022-01-01 22:09:52 +01:00
$(HOST_CONFIGURE_OPTS) $(LIBNSS_MAKE) -C $(@D)/nss lib/dbm all \
package: add libnss host package Signed-off-by: Gaël PORTAY <gael.portay@savoirfairelinux.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2018-03-15 20:50:52 +01:00
SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
DIST=$(@D)/$(LIBNSS_DISTDIR) \
CHECKLOC= \
$(HOST_LIBNSS_BUILD_VARS)
endef
define HOST_LIBNSS_INSTALL_CMDS
$(INSTALL) -m 755 -t $(HOST_DIR)/lib/ \
$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
$(INSTALL) -m 755 -d $(HOST_DIR)/include/nss
$(INSTALL) -m 644 -t $(HOST_DIR)/include/nss \
$(@D)/$(LIBNSS_DISTDIR)/public/nss/*
$(INSTALL) -m 755 -t $(HOST_DIR)/lib/ \
$(@D)/$(LIBNSS_DISTDIR)/lib/*.a
$(INSTALL) -D -m 0644 $(TOPDIR)/package/libnss/nss.pc.in \
$(HOST_DIR)/lib/pkgconfig/nss.pc
$(SED) 's/@VERSION@/$(LIBNSS_VERSION)/g;' \
$(HOST_DIR)/lib/pkgconfig/nss.pc
$(SED) '/^prefix/s,=.*,=$(HOST_DIR),g;' \
$(HOST_DIR)/lib/pkgconfig/nss.pc
endef
all packages: rename XXXTARGETS to xxx-package Also remove the redundant $(call ...). This is a purely mechanical change, performed with find package linux toolchain boot -name \*.mk | \ xargs sed -i -e 's/$(eval $(call GENTARGETS))/$(eval $(generic-package))/' \ -e 's/$(eval $(call AUTOTARGETS))/$(eval $(autotools-package))/' \ -e 's/$(eval $(call CMAKETARGETS))/$(eval $(cmake-package))/' Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2012-07-03 00:07:32 +02:00
$(eval $(generic-package))
package: add libnss host package Signed-off-by: Gaël PORTAY <gael.portay@savoirfairelinux.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
2018-03-15 20:50:52 +01:00
$(eval $(host-generic-package))
Reference in New Issue Copy Permalink