453ca1d6ad
Mitigate a flush+reload side-channel attack on RSA secret keys dubbed "Sliding right into disaster". For details see <https://eprint.iacr.org/2017/627>. [CVE-2017-7526] Switch to https site for better firewall compatibility and security. Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
71 lines
1.6 KiB
Makefile
71 lines
1.6 KiB
Makefile
################################################################################
|
|
#
|
|
# gnupg
|
|
#
|
|
################################################################################
|
|
|
|
GNUPG_VERSION = 1.4.22
|
|
GNUPG_SOURCE = gnupg-$(GNUPG_VERSION).tar.bz2
|
|
GNUPG_SITE = https://gnupg.org/ftp/gcrypt/gnupg
|
|
GNUPG_LICENSE = GPL-3.0+
|
|
GNUPG_LICENSE_FILES = COPYING
|
|
GNUPG_DEPENDENCIES = zlib ncurses $(if $(BR2_PACKAGE_LIBICONV),libiconv)
|
|
GNUPG_CONF_ENV = ac_cv_sys_symbol_underscore=no
|
|
GNUPG_CONF_OPTS = \
|
|
--disable-rpath \
|
|
--enable-minimal \
|
|
--disable-regex \
|
|
--enable-sha256 \
|
|
--enable-sha512
|
|
|
|
# gnupg doesn't support assembly for coldfire
|
|
ifeq ($(BR2_m68k_cf),y)
|
|
GNUPG_CONF_OPTS += --disable-asm
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_BZIP2),y)
|
|
GNUPG_CONF_OPTS += --enable-bzip2
|
|
GNUPG_DEPENDENCIES += bzip2
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBCURL),y)
|
|
GNUPG_CONF_ENV += ac_cv_path__libcurl_config=$(STAGING_DIR)/usr/bin/curl-config
|
|
GNUPG_DEPENDENCIES += libcurl
|
|
else
|
|
GNUPG_CONF_OPTS += --without-libcurl
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_READLINE),y)
|
|
GNUPG_DEPENDENCIES += readline
|
|
else
|
|
GNUPG_CONF_OPTS += --without-readline
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_GNUPG_AES),y)
|
|
GNUPG_CONF_OPTS += --enable-aes
|
|
else
|
|
GNUPG_CONF_OPTS += --disable-aes
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_GNUPG_RSA),y)
|
|
GNUPG_CONF_OPTS += --enable-rsa
|
|
else
|
|
GNUPG_CONF_OPTS += --disable-rsa
|
|
endif
|
|
|
|
ifneq ($(BR2_PACKAGE_GNUPG_GPGV),y)
|
|
define GNUPG_REMOVE_GPGV
|
|
rm -f $(TARGET_DIR)/usr/bin/gpgv
|
|
endef
|
|
GNUPG_POST_INSTALL_TARGET_HOOKS += GNUPG_REMOVE_GPGV
|
|
endif
|
|
|
|
ifneq ($(BR2_PACKAGE_GNUPG_GPGSPLIT),y)
|
|
define GNUPG_REMOVE_GPGSPLIT
|
|
rm -f $(TARGET_DIR)/usr/bin/gpgsplit
|
|
endef
|
|
GNUPG_POST_INSTALL_TARGET_HOOKS += GNUPG_REMOVE_GPGSPLIT
|
|
endif
|
|
|
|
$(eval $(autotools-package))
|