ExternalVendorCode/openwrt
1
0
Fork 0
mirror of https://github.com/openwrt/openwrt.git synced 2024-12-27 17:18:59 +00:00
Code Issues Actions 9 Packages Projects Releases Wiki Activity
6676875579
openwrt/package/libs/wolfssl/Makefile

128 lines
4.0 KiB
Makefile
Raw Normal View History

add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
#
libs/wolfssl: bump to version 3.12.0 ; add myself as maintainer Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-25 13:22:36 +00:00
# Copyright (C) 2006-2017 OpenWrt.org
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
cyassl: version bump to 3.4.6 This patch introduces a new build error into coova-chilli, but coova-chilli already fails to build even without it anyway. CyaSSL is now called wolfSSL, and all the API's have been renamed, and backward-compatibility headers added. Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 46167
2015-07-03 23:20:01 +00:00
PKG_NAME:=wolfssl
wolfssl: update to 4.8.1-stable Changes from 4.7.0: Fix one high (OCSP verification issue) and two low vulnerabilities Improve compatibility layer Other improvements and fixes For detailed changes refer to https://github.com/wolfSSL/wolfssl/releases Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2021-09-05 20:08:35 +00:00
PKG_VERSION:=4.8.1-stable
wolfssl: remove --enable-sha512 configure switch It's the default anyway and this just looks confusing, as if it wasn't. Switch to AUTORELEASE while at it. The binary size is unchanged. Signed-off-by: Andre Heider <a.heider@gmail.com>
2021-10-02 08:40:00 +00:00
PKG_RELEASE:=$(AUTORELEASE)
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
wolfssl: update to 3.15.7, fix Makefile This includes a fix for a medium-level potential cache attack with a variant of Bleichenbacher’s attack. Patches were refreshed. Increased FP_MAX_BITS to allow 4096-bit RSA keys. Fixed poly1305 build option, and some Makefile updates. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:39:59 +00:00
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
wolfssl: update to version 3.14.4 Use download from github archive corresponding to v3.14.4 tag because the project's website apparently only offers 3.14.0-stable release downloads. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-05-23 21:26:41 +00:00
PKG_SOURCE_URL:=https://github.com/wolfSSL/wolfssl/archive/v$(PKG_VERSION)
wolfssl: update to 4.8.1-stable Changes from 4.7.0: Fix one high (OCSP verification issue) and two low vulnerabilities Improve compatibility layer Other improvements and fixes For detailed changes refer to https://github.com/wolfSSL/wolfssl/releases Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2021-09-05 20:08:35 +00:00
PKG_HASH:=50db45f348f47e00c93dd244c24108220120cb3cc9d01434789229c32937c444
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
wolfssl: use libtool patch for PKG_ABI_VERSION Makes it unnecessary to patch .so files after build Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-02-15 17:46:59 +00:00
PKG_FIXUP:=libtool libtool-abiver
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
PKG_INSTALL:=1
cyassl: update to wolfssl version 3.10.0 This fixes a low level security vulnerability. Deactivate MIPS16 support, crypto code gets much slower with MIPS16. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-01-09 22:56:05 +00:00
PKG_USE_MIPS16:=0
From: Joseph Roback <openwrt-devel@roback.cc> 26 Makefile patches for enabling parallel builds. Tested on Linux (8-core) and Darwin (12-core), individually and from clean build_root. The first set is from trunk, the second is from feeds/packages. Signed-off-by: Joe Roback <joe@roback.cc> SVN-Revision: 22965
2010-09-07 10:00:34 +00:00
PKG_BUILD_PARALLEL:=1
wolfssl: update to 3.15.7, fix Makefile This includes a fix for a medium-level potential cache attack with a variant of Bleichenbacher’s attack. Patches were refreshed. Increased FP_MAX_BITS to allow 4096-bit RSA keys. Fixed poly1305 build option, and some Makefile updates. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:39:59 +00:00
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=LICENSING COPYING
wolfssl: update to 4.0.0-stable Removed options that can't be turned off because we're building with --enable-stunnel, some of which affect hostapd's Config.in. Adjusted the title of OCSP option, as OCSP itself can't be turned off, only the stapling part is selectable. Mark options turned on when wpad support is selected. Add building options for TLS 1.0, and TLS 1.3. Add hardware crypto support, which due to a bug, only works when CCM support is turned off. Reorganized option conditionals in Makefile. Add Eneas U de Queiroz as maintainer. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:40:00 +00:00
PKG_MAINTAINER:=Eneas U de Queiroz <cotequeiroz@gmail.com>
wolfssl: update to 3.15.7, fix Makefile This includes a fix for a medium-level potential cache attack with a variant of Bleichenbacher’s attack. Patches were refreshed. Increased FP_MAX_BITS to allow 4096-bit RSA keys. Fixed poly1305 build option, and some Makefile updates. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:39:59 +00:00
PKG_CPE_ID:=cpe:/a:wolfssl:wolfssl
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
wolfssl: add PKG_CONFIG_DEPENDS symbols This change will trigger rebuild on buildbots in case of changed config symbols, like in the case of hostapd selecting some wolfssl symbols lately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-05-25 18:35:46 +00:00
PKG_CONFIG_DEPENDS:=\
wolfssl: bump to 4.1.0-stable Always build AES-GCM support. Unnecessary patches were removed. This includes two vulnerability fixes: CVE-2019-11873: a potential buffer overflow case with the TLSv1.3 PSK extension parsing. CVE-2019-13628 (currently assigned-only): potential leak of nonce sizes when performing ECDSA signing operations. The leak is considered to be difficult to exploit but it could potentially be used maliciously to perform a lattice based timing attack. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-08-05 14:47:58 +00:00
CONFIG_WOLFSSL_HAS_AES_CCM CONFIG_WOLFSSL_HAS_AFALG \
CONFIG_WOLFSSL_HAS_ARC4 CONFIG_WOLFSSL_HAS_CHACHA_POLY \
CONFIG_WOLFSSL_HAS_DEVCRYPTO_AES CONFIG_WOLFSSL_HAS_DEVCRYPTO_FULL \
CONFIG_WOLFSSL_HAS_DH CONFIG_WOLFSSL_HAS_DTLS \
CONFIG_WOLFSSL_HAS_ECC25519 CONFIG_WOLFSSL_HAS_OCSP \
CONFIG_WOLFSSL_HAS_SESSION_TICKET CONFIG_WOLFSSL_HAS_TLSV10 \
wolfssl: add support for OpenVPN Support for wolfSSL has been upstreamed to the master OpenVPN branch in f6dca235ae560597a0763f0c98fcc9130b80ccf4, so we can use wolfSSL directly in OpenVPN. So no more needed differnt SSL engine for OpenVPN in systems based on wolfSSL library Compiled && tested on ramips/mt7620, ramips/mt7621 Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2021-05-05 15:23:19 +00:00
CONFIG_WOLFSSL_HAS_TLSV13 CONFIG_WOLFSSL_HAS_WPAS CONFIG_WOLFSSL_HAS_CERTGEN \
CONFIG_WOLFSSL_HAS_OPENVPN
wolfssl: add PKG_CONFIG_DEPENDS symbols This change will trigger rebuild on buildbots in case of changed config symbols, like in the case of hostapd selecting some wolfssl symbols lately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-05-25 18:35:46 +00:00
wolfssl: use dynamic ABI_VERSION depending on the configuration and package version Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-02-12 10:36:47 +00:00
PKG_ABI_VERSION=$(patsubst %-stable,%,$(PKG_VERSION)).$(call version_abbrev,$(call confvar,$(PKG_CONFIG_DEPENDS)))
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
include $(INCLUDE_DIR)/package.mk
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
define Package/libwolfssl
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
SECTION:=libs
SUBMENU:=SSL
CATEGORY:=Libraries
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
TITLE:=wolfSSL library
cyassl: update to wolfssl 3.6.0 Upstream wolfssl already has better checks to detect broken ssl v2 ClientHellos, we can remove our hack. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 46168
2015-07-03 23:20:36 +00:00
URL:=http://www.wolfssl.com/
cyassl: make CyaSSL/WolfSSL more configurable The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
2016-08-20 10:52:42 +00:00
MENU:=1
libs/wolfssl: add libcysassl to PROVIDES field (for backwards compat) Until other packages from feeds decide to rename the dependency of `+libcyassl` to `+libwolfssl`, this allows for a bit of backwards compatibility with those packages. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-25 11:25:28 +00:00
PROVIDES:=libcyassl
wolfssl: update to 4.0.0-stable Removed options that can't be turned off because we're building with --enable-stunnel, some of which affect hostapd's Config.in. Adjusted the title of OCSP option, as OCSP itself can't be turned off, only the stapling part is selectable. Mark options turned on when wpad support is selected. Add building options for TLS 1.0, and TLS 1.3. Add hardware crypto support, which due to a bug, only works when CCM support is turned off. Reorganized option conditionals in Makefile. Add Eneas U de Queiroz as maintainer. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:40:00 +00:00
DEPENDS:=+WOLFSSL_HAS_DEVCRYPTO:kmod-cryptodev +WOLFSSL_HAS_AFALG:kmod-crypto-user
wolfssl: use dynamic ABI_VERSION depending on the configuration and package version Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-02-12 10:36:47 +00:00
ABI_VERSION:=$(PKG_ABI_VERSION)
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
endef
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
define Package/libwolfssl/description
wolfSSL (formerly CyaSSL) is an SSL library optimized for small
footprint, both on disk and for memory use.
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
endef
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
define Package/libwolfssl/config
cyassl: make CyaSSL/WolfSSL more configurable The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
2016-08-20 10:52:42 +00:00
source "$(SOURCE)/Config.in"
endef
wolfssl: build with WOLFSSL_ALT_CERT_CHAINS "Alternate certification chains, as oppossed to requiring full chain validataion. Certificate validation behavior is relaxed, similar to openssl and browsers. Only the peer certificate must validate to a trusted certificate. Without this, all certificates sent by a peer must be used in the trust chain or the connection will be rejected." This fixes e.g. uclient-fetch and curl connecting to servers using a Let's Encrypt certificate which are cross-signed by the now expired DST Root CA X3, see [0]. This is the recommended solution from upstream [1]. The binary size increases by ~12.3kb: 1236160 staging_dir/target-mipsel_24kc_musl/usr/lib/libwolfssl.so.4.8.1.39c36f2f 1248704 staging_dir/target-mipsel_24kc_musl/usr/lib/libwolfssl.so.4.8.1.39c36f2f [0] https://github.com/openwrt/packages/issues/16674 [1] https://github.com/wolfSSL/wolfssl/issues/4443#issuecomment-934926793 Signed-off-by: Andre Heider <a.heider@gmail.com> [bump PKG_RELEASE] Signed-off-by: David Bauer <mail@david-bauer.net>
2021-10-06 08:54:48 +00:00
TARGET_CFLAGS += \
$(FPIC) \
-fomit-frame-pointer \
-flto \
-DFP_MAX_BITS=8192 \
-DWOLFSSL_ALT_CERT_CHAINS
wolfssl: Activate link time optimization (LTO) The ipk sizes for mips_24Kc change like this: old: libwolfssl24_4.5.0-stable-1_mips_24kc.ipk 391.545 new: libwolfssl24_4.5.0-stable-2_mips_24kc.ipk 387.439 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2020-09-01 12:50:52 +00:00
TARGET_LDFLAGS += -flto
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
libs/cyassl: re-enable the stunnel flag This partially reverts commit 15734b023b7e04d12d258ea28bfb5e6e735f10b7. --enable-stunnel was actually important and properly described in commit 9b118cde898e. Removing it broke ustream-cyassl Signed-off-by: Felix Fietkau <nbd@nbd.name>
2016-12-20 09:39:20 +00:00
# --enable-stunnel needed for OpenSSL API compatibility bits
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
CONFIGURE_ARGS += \
wolfssl: always build with --enable-reproducible-build This gates out anything that might introduce semantically frivolous jitter, maximizing chance of identical object files. The binary size shrinks by 8kb: 1244352 staging_dir/target-mipsel_24kc_musl/usr/lib/libwolfssl.so.4.8.1.39c36f2f 1236160 staging_dir/target-mipsel_24kc_musl/usr/lib/libwolfssl.so.4.8.1.39c36f2f Signed-off-by: Andre Heider <a.heider@gmail.com>
2021-10-02 08:50:49 +00:00
--enable-reproducible-build \
wolfssl: add lighty support, skip crypttests Tnis adds the --enable-lighty option to configure, enabling the minimum API needed to run lighttpd, in the packages feed. Size increase is about 120 bytes for arm_cortex-a9_vfpv3-d16. While at it, speed up build by disabling crypt bench/test. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-12-07 02:43:47 +00:00
--enable-lighty \
wolfssl: compile with --enable-opensslall This enables all OpenSSL API available. It is required to avoid some silent failures, such as when performing client certificate validation. Package size increases from 356.6K to 374.7K for arm_cortex-a9_vfpv3-d16. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-12-07 02:43:48 +00:00
--enable-opensslall \
cyassl: add support for SSL_set_tlsext_host_name Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 45215
2015-04-01 10:42:28 +00:00
--enable-opensslextra \
--enable-sni \
libs/cyassl: re-enable the stunnel flag This partially reverts commit 15734b023b7e04d12d258ea28bfb5e6e735f10b7. --enable-stunnel was actually important and properly described in commit 9b118cde898e. Removing it broke ustream-cyassl Signed-off-by: Felix Fietkau <nbd@nbd.name>
2016-12-20 09:39:20 +00:00
--enable-stunnel \
wolfssl: add lighty support, skip crypttests Tnis adds the --enable-lighty option to configure, enabling the minimum API needed to run lighttpd, in the packages feed. Size increase is about 120 bytes for arm_cortex-a9_vfpv3-d16. While at it, speed up build by disabling crypt bench/test. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-12-07 02:43:47 +00:00
--disable-crypttests \
wolfssl: fix options and add support for wpa_supplicant features Some options' default values have been changed upstream, others were accidentally inverted (CONFIG_WOLFSSL_HAS_DES3). Also add options needed to build hostapd/wpa_supplicant against wolfssl. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-04-28 18:55:51 +00:00
--disable-examples \
wolfssl: bump to 4.1.0-stable Always build AES-GCM support. Unnecessary patches were removed. This includes two vulnerability fixes: CVE-2019-11873: a potential buffer overflow case with the TLSv1.3 PSK extension parsing. CVE-2019-13628 (currently assigned-only): potential leak of nonce sizes when performing ECDSA signing operations. The leak is considered to be difficult to exploit but it could potentially be used maliciously to perform a lattice based timing attack. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-08-05 14:47:58 +00:00
--disable-jobserver \
wolfssl: update to 4.0.0-stable Removed options that can't be turned off because we're building with --enable-stunnel, some of which affect hostapd's Config.in. Adjusted the title of OCSP option, as OCSP itself can't be turned off, only the stapling part is selectable. Mark options turned on when wpad support is selected. Add building options for TLS 1.0, and TLS 1.3. Add hardware crypto support, which due to a bug, only works when CCM support is turned off. Reorganized option conditionals in Makefile. Add Eneas U de Queiroz as maintainer. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:40:00 +00:00
--$(if $(CONFIG_IPV6),enable,disable)-ipv6 \
--$(if $(CONFIG_WOLFSSL_HAS_AES_CCM),enable,disable)-aesccm \
wolfssl: add certgen config option The option allows to generate certificates. Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-08-29 08:20:18 +00:00
--$(if $(CONFIG_WOLFSSL_HAS_CERTGEN),enable,disable)-certgen \
wolfssl: update to 4.0.0-stable Removed options that can't be turned off because we're building with --enable-stunnel, some of which affect hostapd's Config.in. Adjusted the title of OCSP option, as OCSP itself can't be turned off, only the stapling part is selectable. Mark options turned on when wpad support is selected. Add building options for TLS 1.0, and TLS 1.3. Add hardware crypto support, which due to a bug, only works when CCM support is turned off. Reorganized option conditionals in Makefile. Add Eneas U de Queiroz as maintainer. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:40:00 +00:00
--$(if $(CONFIG_WOLFSSL_HAS_CHACHA_POLY),enable,disable)-chacha \
--$(if $(CONFIG_WOLFSSL_HAS_CHACHA_POLY),enable,disable)-poly1305 \
--$(if $(CONFIG_WOLFSSL_HAS_DH),enable,disable)-dh \
--$(if $(CONFIG_WOLFSSL_HAS_ARC4),enable,disable)-arc4 \
--$(if $(CONFIG_WOLFSSL_HAS_TLSV10),enable,disable)-tlsv10 \
--$(if $(CONFIG_WOLFSSL_HAS_TLSV13),enable,disable)-tls13 \
--$(if $(CONFIG_WOLFSSL_HAS_SESSION_TICKET),enable,disable)-session-ticket \
--$(if $(CONFIG_WOLFSSL_HAS_DTLS),enable,disable)-dtls \
--$(if $(CONFIG_WOLFSSL_HAS_ECC25519),enable,disable)-curve25519 \
--$(if $(CONFIG_WOLFSSL_HAS_AFALG),enable,disable)-afalg \
wolfssl: add support for OpenVPN Support for wolfSSL has been upstreamed to the master OpenVPN branch in f6dca235ae560597a0763f0c98fcc9130b80ccf4, so we can use wolfSSL directly in OpenVPN. So no more needed differnt SSL engine for OpenVPN in systems based on wolfSSL library Compiled && tested on ramips/mt7620, ramips/mt7621 Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2021-05-05 15:23:19 +00:00
--$(if $(CONFIG_WOLFSSL_HAS_OPENVPN),enable,disable)-openvpn \
wolfssl: allow building with hw-crytpo and AES-CCM Hardware acceleration was disabled when AES-CCM was selected as a workaround for a build failure. This applies a couple of upstream patches fixing this. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-09-12 20:00:00 +00:00
--enable-devcrypto=$(if $(CONFIG_WOLFSSL_HAS_DEVCRYPTO_CBC),cbc\
,$(if $(CONFIG_WOLFSSL_HAS_DEVCRYPTO_AES),aes\
,$(if $(CONFIG_WOLFSSL_HAS_DEVCRYPTO_FULL),yes,no)))
cyassl: make CyaSSL/WolfSSL more configurable The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
2016-08-20 10:52:42 +00:00
wolfssl: fix options and add support for wpa_supplicant features Some options' default values have been changed upstream, others were accidentally inverted (CONFIG_WOLFSSL_HAS_DES3). Also add options needed to build hostapd/wpa_supplicant against wolfssl. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-04-28 18:55:51 +00:00
ifeq ($(CONFIG_WOLFSSL_HAS_OCSP),y)
CONFIGURE_ARGS += \
--enable-ocsp --enable-ocspstapling --enable-ocspstapling2
endif
ifeq ($(CONFIG_WOLFSSL_HAS_WPAS),y)
CONFIGURE_ARGS += \
wolfssl: remove --enable-sha512 configure switch It's the default anyway and this just looks confusing, as if it wasn't. Switch to AUTORELEASE while at it. The binary size is unchanged. Signed-off-by: Andre Heider <a.heider@gmail.com>
2021-10-02 08:40:00 +00:00
--enable-wpas --enable-fortress --enable-fastmath
wolfssl: fix options and add support for wpa_supplicant features Some options' default values have been changed upstream, others were accidentally inverted (CONFIG_WOLFSSL_HAS_DES3). Also add options needed to build hostapd/wpa_supplicant against wolfssl. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-04-28 18:55:51 +00:00
endif
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
define Build/InstallDev
cyassl: make CyaSSL/WolfSSL more configurable The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
2016-08-20 10:52:42 +00:00
$(INSTALL_DIR) $(1)/usr/include $(1)/usr/lib/pkgconfig
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/include/* $(1)/usr/include/
$(INSTALL_DIR) $(1)/usr/lib
cyassl: version bump to 3.4.6 This patch introduces a new build error into coova-chilli, but coova-chilli already fails to build even without it anyway. CyaSSL is now called wolfSSL, and all the API's have been renamed, and backward-compatibility headers added. Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 46167
2015-07-03 23:20:01 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/libwolfssl.{so*,la} $(1)/usr/lib/
ln -s libwolfssl.so $(1)/usr/lib/libcyassl.so
ln -s libwolfssl.la $(1)/usr/lib/libcyassl.la
cyassl: make CyaSSL/WolfSSL more configurable The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
2016-08-20 10:52:42 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/*.pc $(1)/usr/lib/pkgconfig
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
endef
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
define Package/libwolfssl/install
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
$(INSTALL_DIR) $(1)/usr/lib
treewide: revise library packaging - Annotate versionless libraries (such as libubox, libuci etc.) with a fixed ABI_VERSION resembling the source date of the last incompatible change - Annotate packages shipping versioned library objects with ABI_VERSION - Stop shipping unversioned library symlinks for packages with ABI_VERSION Ref: https://openwrt.org/docs/guide-developer/package-policies#shared_libraries Ref: https://github.com/KanjiMonster/maintainer-tools/blob/master/check-abi-versions.pl Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-01-22 18:17:32 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/libwolfssl.so.* $(1)/usr/lib/
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
endef
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
$(eval $(call BuildPackage,libwolfssl))
Reference in New Issue Copy Permalink