NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/libldns: enable dane-verify for OpenSSL

Browse Source 
Since the bump of libopenssl to 1.1.x support for offline DANE
verification can be enabled.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
This commit is contained in:
Bernd Kuhls 2022-02-05 18:40:46 +01:00 committed by Arnout Vandecappelle (Essensium/Mind)
parent f219cface0
commit 39aa793c0f
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
package/libldns/libldns.mk
View File

@ -13,11 +13,9 @@ LIBLDNS_CPE_ID_VENDOR = nlnetlabs
LIBLDNS_CPE_ID_PRODUCT = ldns
LIBLDNS_INSTALL_STAGING = YES
LIBLDNS_DEPENDENCIES = openssl
# --disable-dane-verify can be removed after openssl bump to 1.1.x
LIBLDNS_CONF_OPTS = \
--with-ssl=$(STAGING_DIR)/usr \
--enable-dane \
--disable-dane-verify \
--enable-ecdsa \
--enable-gost \
--enable-sha2 \
@ -26,6 +24,12 @@ LIBLDNS_CONF_OPTS = \
--without-pyldns \
--without-pyldnsx
ifeq ($(BR2_PACKAGE_LIBOPENSSL),y)
LIBLDNS_CONF_OPTS += --enable-dane-verify
else
LIBLDNS_CONF_OPTS += --disable-dane-verify
endif
ifeq ($(BR2_STATIC_LIBS),y)
LIBLDNS_DEPENDENCIES += host-pkgconf
# missing -lz breaks configure, add it using pkgconf