ExternalVendorCode/openwrt
1
0
Fork 0
mirror of https://github.com/openwrt/openwrt.git synced 2024-12-23 15:32:33 +00:00
Code Issues Actions 7 Packages Projects Releases Wiki Activity
6d76f1c733
openwrt/package/utils/px5g-mbedtls/Makefile

70 lines
1.7 KiB
Makefile
Raw Normal View History

add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
#
treewide: replace jow@openwrt.org with jo@mein.io Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-06-07 09:42:32 +00:00
# Copyright (C) 2010-2015 Jo-Philipp Wich <jo@mein.io>
add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
px5g: rename to px5g-mbedtls Two versions of `px5g` exists without sharing code. For clarification rename the previously existing MbedTLS based version to `px5g-mbedtls` to exists next to `px5g-wolfssl`. Rename code file of MbedTLS from `px5g.c` to `px5g-mbedtls.c`. Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-08-30 07:37:29 +00:00
PKG_NAME:=px5g-mbedtls
px5g-mbedtls: Fix permission of private key Store the private key with read and write permission for the user only and not with read permissions for everyone. This converts the write_file() function from fopen() to open() because open allows to specify the permission mask of the newly created file. It also adds and fixes some existing error handling. OpenSSL does this in the same way already. With this change it looks like this: root@OpenWrt:/# ls -al /etc/uhttpd.crt /etc/uhttpd.key -rw-r--r-- 1 root root 519 Nov 6 22:58 /etc/uhttpd.crt -rw------- 1 root root 121 Nov 6 22:58 /etc/uhttpd.key Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2023-11-05 22:05:24 +00:00
PKG_RELEASE:=10
px5g: add license tag show the license for this package in opkg Signed-off-by: Florian Eckert <Eckert.Florian@googlemail.com>
2016-05-31 10:57:22 +00:00
PKG_LICENSE:=LGPL-2.1
add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
treewide: replace PKG_USE_MIPS16:=0 with PKG_BUILD_FLAGS:=no-mips16 Keep backwards compatibility via PKG_USE_MIPS16 for now, as this is used in all package feeds. Signed-off-by: Andre Heider <a.heider@gmail.com>
2023-02-02 19:02:25 +00:00
PKG_BUILD_FLAGS:=no-mips16
add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
px5g: replace px5g-standalone with a statically linked variant of px5g-mbedtls px5g-standalone only supports SHA1 for certificates, which is strongly deprecated. The new px5g-standalone is about 27k bigger (compressed), and has identical behavior to px5g-mbedtls (it uses SHA256). Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-02-21 13:24:32 +00:00
PKG_MAINTAINER:=Jo-Philipp Wich <jo@mein.io>
add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
include $(INCLUDE_DIR)/package.mk
px5g: remove legacy polarssl support The old polarssl 1.3 branch is EOL since end of 2016, and the package for it will be removed soon. Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-01-09 13:28:43 +00:00
define Package/px5g-mbedtls
add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
SECTION:=utils
CATEGORY:=Utilities
px5g: move to Encryption submenu moved px5g to Encryption submenu of Utilities, in an effort to tidy up a bit the Utilities section of make menuconfig. Signed-off-by: Alberto Bursi <alberto.bursi@outlook.it>
2016-10-24 08:39:09 +00:00
SUBMENU:=Encryption
px5g: remove legacy polarssl support The old polarssl 1.3 branch is EOL since end of 2016, and the package for it will be removed soon. Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-01-09 13:28:43 +00:00
TITLE:=X.509 certificate generator (using mbedtls)
DEPENDS:=+libmbedtls
px5g: Create mbedtls variant px5g has been listed as a blocker for switching to new mbedtls as the default, therefore make and mbedtls variant of px5g so that an new mbedtls-only image can be created. Signed-off-by: Daniel Dickinson <lede@daniel.thecshore.com>
2016-06-23 01:12:16 +00:00
PROVIDES:=px5g
px5g: replace px5g-standalone with a statically linked variant of px5g-mbedtls px5g-standalone only supports SHA1 for certificates, which is strongly deprecated. The new px5g-standalone is about 27k bigger (compressed), and has identical behavior to px5g-mbedtls (it uses SHA256). Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-02-21 13:24:32 +00:00
VARIANT:=mbedtls
add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
endef
px5g: remove legacy polarssl support The old polarssl 1.3 branch is EOL since end of 2016, and the package for it will be removed soon. Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-01-09 13:28:43 +00:00
define Package/px5g-mbedtls/description
add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
Px5g is a tiny standalone X.509 certificate generator.
It suitable to create key files and certificates in DER
and PEM format for use with stunnel, uhttpd and others.
endef
px5g: replace px5g-standalone with a statically linked variant of px5g-mbedtls px5g-standalone only supports SHA1 for certificates, which is strongly deprecated. The new px5g-standalone is about 27k bigger (compressed), and has identical behavior to px5g-mbedtls (it uses SHA256). Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-02-21 13:24:32 +00:00
define Package/px5g-standalone
SECTION:=utils
CATEGORY:=Utilities
SUBMENU:=Encryption
TITLE:=X.509 certificate generator (standalone)
VARIANT:=standalone
endef
Package/px5g-standalone/description = $(Package/px5g-mbedtls/description)
add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
define Build/Prepare
mkdir -p $(PKG_BUILD_DIR)
px5g: rename the old package to px5g-standalone, add a new one that links against polarssl Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 40000
2014-03-21 15:55:23 +00:00
endef
px5g: Fix TARGET_LDFLAGS and add TARGET_CPPFLAGS Make sure we pass down TARGET_CPPFLAGS to let toolchains with no default search paths to find the mbdetls headers, and override TARGET_LDFLAGS to include libraries we are linking against. Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
2017-02-12 22:07:36 +00:00
TARGET_LDFLAGS += -lmbedtls -lmbedx509 -lmbedcrypto
px5g: Create mbedtls variant px5g has been listed as a blocker for switching to new mbedtls as the default, therefore make and mbedtls variant of px5g so that an new mbedtls-only image can be created. Signed-off-by: Daniel Dickinson <lede@daniel.thecshore.com>
2016-06-23 01:12:16 +00:00
px5g: replace px5g-standalone with a statically linked variant of px5g-mbedtls px5g-standalone only supports SHA1 for certificates, which is strongly deprecated. The new px5g-standalone is about 27k bigger (compressed), and has identical behavior to px5g-mbedtls (it uses SHA256). Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-02-21 13:24:32 +00:00
ifeq ($(BUILD_VARIANT),standalone)
TARGET_LDFLAGS := -Wl,-Bstatic $(TARGET_LDFLAGS) -Wl,-Bdynamic
endif
px5g: support EC keys This adds an 'eckey' command to generate an EC key, with an optional curve name argument, with P-256 as default. For the 'selfsigned' command, it adds an 'ec' algorithm argument to the '-newkey' option, and a '-pkeyopt ec_paramgen_curve:<curvename>' option, mirroring the way openssl specifies the curve name. Notice that curve names are not necessarily the same in mbedtls and openssl. In particular, secp256r1 works for mbedtls, but openssl uses prime256v1 instead. px5g uses mbedtls, but short NIST curve names P-256 and P-384 are specifically supported. Package size increased by about 900 bytes (arm). Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-08-05 18:34:38 +00:00
TARGET_CFLAGS += -Wl,--gc-sections -Wall -Werror
px5g: replace px5g-standalone with a statically linked variant of px5g-mbedtls px5g-standalone only supports SHA1 for certificates, which is strongly deprecated. The new px5g-standalone is about 27k bigger (compressed), and has identical behavior to px5g-mbedtls (it uses SHA256). Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-02-21 13:24:32 +00:00
px5g: rename the old package to px5g-standalone, add a new one that links against polarssl Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 40000
2014-03-21 15:55:23 +00:00
define Build/Compile
px5g: rename to px5g-mbedtls Two versions of `px5g` exists without sharing code. For clarification rename the previously existing MbedTLS based version to `px5g-mbedtls` to exists next to `px5g-wolfssl`. Rename code file of MbedTLS from `px5g.c` to `px5g-mbedtls.c`. Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-08-30 07:37:29 +00:00
$(TARGET_CC) $(TARGET_CPPFLAGS) $(TARGET_CFLAGS) -o $(PKG_BUILD_DIR)/px5g px5g-mbedtls.c $(TARGET_LDFLAGS)
add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
endef
px5g: remove legacy polarssl support The old polarssl 1.3 branch is EOL since end of 2016, and the package for it will be removed soon. Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-01-09 13:28:43 +00:00
define Package/px5g-mbedtls/install
add px5g (moved from LuCI trunk) SVN-Revision: 20429
2010-03-25 15:46:39 +00:00
$(INSTALL_DIR) $(1)/usr/sbin
$(INSTALL_BIN) $(PKG_BUILD_DIR)/px5g $(1)/usr/sbin/px5g
endef
px5g: replace px5g-standalone with a statically linked variant of px5g-mbedtls px5g-standalone only supports SHA1 for certificates, which is strongly deprecated. The new px5g-standalone is about 27k bigger (compressed), and has identical behavior to px5g-mbedtls (it uses SHA256). Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-02-21 13:24:32 +00:00
Package/px5g-standalone/install = $(Package/px5g-mbedtls/install)
px5g: Create mbedtls variant px5g has been listed as a blocker for switching to new mbedtls as the default, therefore make and mbedtls variant of px5g so that an new mbedtls-only image can be created. Signed-off-by: Daniel Dickinson <lede@daniel.thecshore.com>
2016-06-23 01:12:16 +00:00
$(eval $(call BuildPackage,px5g-mbedtls))
px5g: replace px5g-standalone with a statically linked variant of px5g-mbedtls px5g-standalone only supports SHA1 for certificates, which is strongly deprecated. The new px5g-standalone is about 27k bigger (compressed), and has identical behavior to px5g-mbedtls (it uses SHA256). Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-02-21 13:24:32 +00:00
$(eval $(call BuildPackage,px5g-standalone))
Reference in New Issue Copy Permalink