From 39aa793c0f6605586ad522267f97a33428f7de85 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sat, 5 Feb 2022 18:40:46 +0100 Subject: [PATCH] package/libldns: enable dane-verify for OpenSSL Since the bump of libopenssl to 1.1.x support for offline DANE verification can be enabled. Signed-off-by: Bernd Kuhls Signed-off-by: Arnout Vandecappelle (Essensium/Mind) --- package/libldns/libldns.mk | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/package/libldns/libldns.mk b/package/libldns/libldns.mk index 7deca978da..86e7c0eafc 100644 --- a/package/libldns/libldns.mk +++ b/package/libldns/libldns.mk @@ -13,11 +13,9 @@ LIBLDNS_CPE_ID_VENDOR = nlnetlabs LIBLDNS_CPE_ID_PRODUCT = ldns LIBLDNS_INSTALL_STAGING = YES LIBLDNS_DEPENDENCIES = openssl -# --disable-dane-verify can be removed after openssl bump to 1.1.x LIBLDNS_CONF_OPTS = \ --with-ssl=$(STAGING_DIR)/usr \ --enable-dane \ - --disable-dane-verify \ --enable-ecdsa \ --enable-gost \ --enable-sha2 \ @@ -26,6 +24,12 @@ LIBLDNS_CONF_OPTS = \ --without-pyldns \ --without-pyldnsx +ifeq ($(BR2_PACKAGE_LIBOPENSSL),y) +LIBLDNS_CONF_OPTS += --enable-dane-verify +else +LIBLDNS_CONF_OPTS += --disable-dane-verify +endif + ifeq ($(BR2_STATIC_LIBS),y) LIBLDNS_DEPENDENCIES += host-pkgconf # missing -lz breaks configure, add it using pkgconf