From 984ec386096513c5b3fcfbc4f77f3dbe1ef9d35d Mon Sep 17 00:00:00 2001 From: Gustavo Zacarias Date: Wed, 9 Dec 2015 15:30:23 -0300 Subject: [PATCH] netsnmp: enable tsm + DTLSUDP/TLSTCP with openssl Otherwise the openssl support is basically unused. net-snmp provides a stripped-down openssl implementation that can be used to enable tsm/DTLSUDP/TLSTCP but given it's security track record it's best to rely on the external one, it also saves space. usm is the user validation module, it's default on, however when passing --with-security-modules we must keep it otherwise it won't be. Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni --- package/netsnmp/netsnmp.mk | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/package/netsnmp/netsnmp.mk b/package/netsnmp/netsnmp.mk index 6eff5e3016..fb7217964e 100644 --- a/package/netsnmp/netsnmp.mk +++ b/package/netsnmp/netsnmp.mk @@ -49,7 +49,9 @@ endif ifeq ($(BR2_PACKAGE_OPENSSL),y) NETSNMP_DEPENDENCIES += openssl NETSNMP_CONF_OPTS += \ - --with-openssl=$(STAGING_DIR)/usr/include/openssl + --with-openssl=$(STAGING_DIR)/usr/include/openssl \ + --with-security-modules="tsm,usm" \ + --with-transports="DTLSUDP,TLSTCP" ifeq ($(BR2_STATIC_LIBS),y) # openssl uses zlib, so we need to explicitly link with it when static NETSNMP_CONF_ENV += LIBS=-lz