ExternalVendorCode/openwrt
1
0
Fork 0
mirror of https://github.com/openwrt/openwrt.git synced 2025-02-22 10:01:03 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

openssl: refresh patches

Browse Source 
Tidy up some patch fuzz.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
This commit is contained in:
Kevin Darbyshire-Bryant 2021-03-26 08:58:07 +00:00
parent 9390e20dba
commit e27ef2da0d
11 changed files with 2498 additions and 180 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
package/libs/openssl/patches/100-Configure-afalg-support.patch
View File

@ -8,11 +8,9 @@ version to disable building the AFALG engine on openwrt targets.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
diff --git a/Configure b/Configure
index 5a699836f3..74d057c219 100755
--- a/Configure --- a/Configure
+++ b/Configure +++ b/Configure
@@ -1545,7 +1545,9 @@ unless ($disabled{"crypto-mdebug-backtrace"}) @@ -1545,7 +1545,9 @@ unless ($disabled{"crypto-mdebug-backtra
unless ($disabled{afalgeng}) { unless ($disabled{afalgeng}) {
$config{afalgeng}=""; $config{afalgeng}="";

3
package/libs/openssl/patches/110-openwrt_targets.patch
View File

@ -7,9 +7,6 @@ Targets are named: linux-$(CONFIG_ARCH)-openwrt
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
diff --git a/Configurations/25-openwrt.conf b/Configurations/25-openwrt.conf
new file mode 100644
index 0000000000..86a86d31e4
--- /dev/null --- /dev/null
+++ b/Configurations/25-openwrt.conf +++ b/Configurations/25-openwrt.conf
@@ -0,0 +1,48 @@ @@ -0,0 +1,48 @@

4
package/libs/openssl/patches/120-strip-cflags-from-binary.patch
View File

@ -8,11 +8,9 @@ OpenSSL_version(OPENSSL_CFLAGS), or running openssl version -a
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
diff --git a/crypto/build.info b/crypto/build.info
index 2c619c62e8..893128345a 100644
--- a/crypto/build.info --- a/crypto/build.info
+++ b/crypto/build.info +++ b/crypto/build.info
@@ -10,7 +10,7 @@ EXTRA= ../ms/uplink-x86.pl ../ms/uplink.c ../ms/applink.c \ @@ -10,7 +10,7 @@ EXTRA= ../ms/uplink-x86.pl ../ms/uplink
ppccpuid.pl pariscid.pl alphacpuid.pl arm64cpuid.pl armv4cpuid.pl ppccpuid.pl pariscid.pl alphacpuid.pl arm64cpuid.pl armv4cpuid.pl
DEPEND[cversion.o]=buildinf.h DEPEND[cversion.o]=buildinf.h

4
package/libs/openssl/patches/130-dont-build-tests-fuzz.patch
View File

@ -7,11 +7,9 @@ This shortens build time.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
diff --git a/Configure b/Configure
index 74d057c219..5813e9f8fe 100755
--- a/Configure --- a/Configure
+++ b/Configure +++ b/Configure
@@ -318,7 +318,7 @@ my $auto_threads=1; # enable threads automatically? true by default @@ -318,7 +318,7 @@ my $auto_threads=1; # enable threads
my $default_ranlib; my $default_ranlib;
# Top level directories to build # Top level directories to build

8
package/libs/openssl/patches/140-allow-prefer-chacha20.patch
View File

@ -14,8 +14,6 @@ when the client has it on top of its ciphersuite preference.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
diff --git a/include/openssl/ssl.h b/include/openssl/ssl.h
index 6724ccf2d2..96d959427e 100644
--- a/include/openssl/ssl.h --- a/include/openssl/ssl.h
+++ b/include/openssl/ssl.h +++ b/include/openssl/ssl.h
@@ -173,9 +173,15 @@ extern "C" { @@ -173,9 +173,15 @@ extern "C" {
@ -37,11 +35,9 @@ index 6724ccf2d2..96d959427e 100644
# else # else
# define TLS_DEFAULT_CIPHERSUITES "TLS_AES_256_GCM_SHA384:" \ # define TLS_DEFAULT_CIPHERSUITES "TLS_AES_256_GCM_SHA384:" \
"TLS_AES_128_GCM_SHA256" "TLS_AES_128_GCM_SHA256"
diff --git a/ssl/ssl_ciph.c b/ssl/ssl_ciph.c
index 27a1b2ec68..7039811323 100644
--- a/ssl/ssl_ciph.c --- a/ssl/ssl_ciph.c
+++ b/ssl/ssl_ciph.c +++ b/ssl/ssl_ciph.c
@@ -1467,11 +1467,29 @@ STACK_OF(SSL_CIPHER) *ssl_create_cipher_list(const SSL_METHOD *ssl_method, @@ -1467,11 +1467,29 @@ STACK_OF(SSL_CIPHER) *ssl_create_cipher_
ssl_cipher_apply_rule(0, SSL_kECDHE, 0, 0, 0, 0, 0, CIPHER_DEL, -1, &head, ssl_cipher_apply_rule(0, SSL_kECDHE, 0, 0, 0, 0, 0, CIPHER_DEL, -1, &head,
&tail); &tail);
@ -71,7 +67,7 @@ index 27a1b2ec68..7039811323 100644
/* /*
* ...and generally, our preferred cipher is AES. * ...and generally, our preferred cipher is AES.
@@ -1527,7 +1545,7 @@ STACK_OF(SSL_CIPHER) *ssl_create_cipher_list(const SSL_METHOD *ssl_method, @@ -1527,7 +1545,7 @@ STACK_OF(SSL_CIPHER) *ssl_create_cipher_
* Within each group, ciphers remain sorted by strength and previous * Within each group, ciphers remain sorted by strength and previous
* preference, i.e., * preference, i.e.,
* 1) ECDHE > DHE * 1) ECDHE > DHE

6
package/libs/openssl/patches/400-eng_devcrypto-save-ioctl-if-EVP_MD_.FLAG_ONESHOT.patch
View File

@ -14,8 +14,6 @@ Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7585) (Merged from https://github.com/openssl/openssl/pull/7585)
diff --git a/crypto/engine/eng_devcrypto.c b/crypto/engine/eng_devcrypto.c
index a727c6f646..a2c9a966f7 100644
--- a/crypto/engine/eng_devcrypto.c --- a/crypto/engine/eng_devcrypto.c
+++ b/crypto/engine/eng_devcrypto.c +++ b/crypto/engine/eng_devcrypto.c
@@ -461,6 +461,7 @@ struct digest_ctx { @@ -461,6 +461,7 @@ struct digest_ctx {
@ -26,7 +24,7 @@ index a727c6f646..a2c9a966f7 100644
}; };
static const struct digest_data_st { static const struct digest_data_st {
@@ -564,12 +565,15 @@ static int digest_update(EVP_MD_CTX *ctx, const void *data, size_t count) @@ -564,12 +565,15 @@ static int digest_update(EVP_MD_CTX *ctx
if (digest_ctx == NULL) if (digest_ctx == NULL)
return 0; return 0;
@ -46,7 +44,7 @@ index a727c6f646..a2c9a966f7 100644
} }
static int digest_final(EVP_MD_CTX *ctx, unsigned char *md) static int digest_final(EVP_MD_CTX *ctx, unsigned char *md)
@@ -579,7 +583,10 @@ static int digest_final(EVP_MD_CTX *ctx, unsigned char *md) @@ -579,7 +583,10 @@ static int digest_final(EVP_MD_CTX *ctx,
if (md == NULL || digest_ctx == NULL) if (md == NULL || digest_ctx == NULL)
return 0; return 0;

21
package/libs/openssl/patches/410-eng_devcrypto-add-configuration-options.patch
View File

@ -13,8 +13,6 @@ Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7585) (Merged from https://github.com/openssl/openssl/pull/7585)
diff --git a/crypto/engine/eng_devcrypto.c b/crypto/engine/eng_devcrypto.c
index a2c9a966f7..5ec38ca8f3 100644
--- a/crypto/engine/eng_devcrypto.c --- a/crypto/engine/eng_devcrypto.c
+++ b/crypto/engine/eng_devcrypto.c +++ b/crypto/engine/eng_devcrypto.c
@@ -16,6 +16,7 @@ @@ -16,6 +16,7 @@
@ -80,7 +78,7 @@ index a2c9a966f7..5ec38ca8f3 100644
/* /*
* Code further down must make sure that only NIDs in the table above * Code further down must make sure that only NIDs in the table above
@@ -333,19 +367,40 @@ static int cipher_cleanup(EVP_CIPHER_CTX *ctx) @@ -333,19 +367,40 @@ static int cipher_cleanup(EVP_CIPHER_CTX
} }
/* /*
@ -186,7 +184,7 @@ index a2c9a966f7..5ec38ca8f3 100644
static const EVP_CIPHER *get_cipher_method(int nid) static const EVP_CIPHER *get_cipher_method(int nid)
{ {
size_t i = get_cipher_data_index(nid); size_t i = get_cipher_data_index(nid);
@@ -438,6 +520,36 @@ static int devcrypto_ciphers(ENGINE *e, const EVP_CIPHER **cipher, @@ -438,6 +520,36 @@ static int devcrypto_ciphers(ENGINE *e,
return *cipher != NULL; return *cipher != NULL;
} }
@ -247,7 +245,7 @@ index a2c9a966f7..5ec38ca8f3 100644
/* /*
* Code further down must make sure that only NIDs in the table above * Code further down must make sure that only NIDs in the table above
@@ -516,8 +637,8 @@ static const struct digest_data_st *get_digest_data(int nid) @@ -516,8 +637,8 @@ static const struct digest_data_st *get_
} }
/* /*
@ -258,7 +256,7 @@ index a2c9a966f7..5ec38ca8f3 100644
*/ */
static int digest_init(EVP_MD_CTX *ctx) static int digest_init(EVP_MD_CTX *ctx)
@@ -630,52 +751,94 @@ static int digest_cleanup(EVP_MD_CTX *ctx) @@ -630,52 +751,94 @@ static int digest_cleanup(EVP_MD_CTX *ct
return clean_devcrypto_session(&digest_ctx->sess); return clean_devcrypto_session(&digest_ctx->sess);
} }
@ -403,7 +401,7 @@ index a2c9a966f7..5ec38ca8f3 100644
} }
} }
@@ -739,8 +909,154 @@ static int devcrypto_digests(ENGINE *e, const EVP_MD **digest, @@ -739,7 +909,153 @@ static int devcrypto_digests(ENGINE *e,
return *digest != NULL; return *digest != NULL;
} }
@ -479,8 +477,8 @@ index a2c9a966f7..5ec38ca8f3 100644
+ "DIGESTS", + "DIGESTS",
+ "either ALL, NONE, or a comma-separated list of digests to enable [default=ALL]", + "either ALL, NONE, or a comma-separated list of digests to enable [default=ALL]",
+ ENGINE_CMD_FLAG_STRING}, + ENGINE_CMD_FLAG_STRING},
#endif +#endif
+
+ {0, NULL, NULL, 0} + {0, NULL, NULL, 0}
+}; +};
+ +
@ -504,7 +502,7 @@ index a2c9a966f7..5ec38ca8f3 100644
+ use_softdrivers = i; + use_softdrivers = i;
+#ifdef IMPLEMENT_DIGEST +#ifdef IMPLEMENT_DIGEST
+ rebuild_known_digest_nids(e); + rebuild_known_digest_nids(e);
+#endif #endif
+ rebuild_known_cipher_nids(e); + rebuild_known_cipher_nids(e);
+ return 1; + return 1;
+#endif /* CIOCGSESSINFO */ +#endif /* CIOCGSESSINFO */
@ -554,10 +552,9 @@ index a2c9a966f7..5ec38ca8f3 100644
+ } + }
+ return 0; + return 0;
+} +}
+
/****************************************************************************** /******************************************************************************
* *
* LOAD / UNLOAD
@@ -793,6 +1109,8 @@ void engine_load_devcrypto_int() @@ -793,6 +1109,8 @@ void engine_load_devcrypto_int()
if (!ENGINE_set_id(e, "devcrypto") if (!ENGINE_set_id(e, "devcrypto")

16
package/libs/openssl/patches/420-eng_devcrypto-add-command-to-dump-driver-info.patch
View File

@ -11,11 +11,9 @@ Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7585) (Merged from https://github.com/openssl/openssl/pull/7585)
diff --git a/crypto/engine/eng_devcrypto.c b/crypto/engine/eng_devcrypto.c
index 5ec38ca8f3..64dc6b891d 100644
--- a/crypto/engine/eng_devcrypto.c --- a/crypto/engine/eng_devcrypto.c
+++ b/crypto/engine/eng_devcrypto.c +++ b/crypto/engine/eng_devcrypto.c
@@ -50,16 +50,20 @@ static int use_softdrivers = DEVCRYPTO_DEFAULT_USE_SOFDTRIVERS; @@ -50,16 +50,20 @@ static int use_softdrivers = DEVCRYPTO_D
*/ */
struct driver_info_st { struct driver_info_st {
enum devcrypto_status_t { enum devcrypto_status_t {
@ -82,7 +80,7 @@ index 5ec38ca8f3..64dc6b891d 100644
#endif /* CIOCGSESSINFO */ #endif /* CIOCGSESSINFO */
} }
ioctl(cfd, CIOCFSESSION, &sess.ses); ioctl(cfd, CIOCFSESSION, &sess.ses);
@@ -505,8 +514,11 @@ static void destroy_all_cipher_methods(void) @@ -505,8 +514,11 @@ static void destroy_all_cipher_methods(v
{ {
size_t i; size_t i;
@ -95,7 +93,7 @@ index 5ec38ca8f3..64dc6b891d 100644
} }
static int devcrypto_ciphers(ENGINE *e, const EVP_CIPHER **cipher, static int devcrypto_ciphers(ENGINE *e, const EVP_CIPHER **cipher,
@@ -550,6 +562,40 @@ static int cryptodev_select_cipher_cb(const char *str, int len, void *usr) @@ -550,6 +562,40 @@ static int cryptodev_select_cipher_cb(co
return 1; return 1;
} }
@ -190,7 +188,7 @@ index 5ec38ca8f3..64dc6b891d 100644
EVP_MD_meth_free(known_digest_methods[i]); EVP_MD_meth_free(known_digest_methods[i]);
known_digest_methods[i] = NULL; known_digest_methods[i] = NULL;
goto finish; goto finish;
@@ -894,8 +945,11 @@ static void destroy_all_digest_methods(void) @@ -894,8 +945,11 @@ static void destroy_all_digest_methods(v
{ {
size_t i; size_t i;
@ -203,7 +201,7 @@ index 5ec38ca8f3..64dc6b891d 100644
} }
static int devcrypto_digests(ENGINE *e, const EVP_MD **digest, static int devcrypto_digests(ENGINE *e, const EVP_MD **digest,
@@ -939,6 +993,43 @@ static int cryptodev_select_digest_cb(const char *str, int len, void *usr) @@ -939,6 +993,43 @@ static int cryptodev_select_digest_cb(co
return 1; return 1;
} }
@ -247,7 +245,7 @@ index 5ec38ca8f3..64dc6b891d 100644
#endif #endif
/****************************************************************************** /******************************************************************************
@@ -983,6 +1074,11 @@ static const ENGINE_CMD_DEFN devcrypto_cmds[] = { @@ -983,6 +1074,11 @@ static const ENGINE_CMD_DEFN devcrypto_c
ENGINE_CMD_FLAG_STRING}, ENGINE_CMD_FLAG_STRING},
#endif #endif
@ -259,7 +257,7 @@ index 5ec38ca8f3..64dc6b891d 100644
{0, NULL, NULL, 0} {0, NULL, NULL, 0}
}; };
@@ -1051,6 +1147,13 @@ static int devcrypto_ctrl(ENGINE *e, int cmd, long i, void *p, void (*f) (void)) @@ -1051,6 +1147,13 @@ static int devcrypto_ctrl(ENGINE *e, int
return 1; return 1;
#endif /* IMPLEMENT_DIGEST */ #endif /* IMPLEMENT_DIGEST */

2604
package/libs/openssl/patches/430-e_devcrypto-make-the-dev-crypto-engine-dynamic.patch
View File

File diff suppressed because it is too large Load Diff

4
package/libs/openssl/patches/500-e_devcrypto-default-to-not-use-digests-in-engine.patch
View File

@ -19,8 +19,6 @@ turn them on if it is safe and fast enough.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
diff --git a/engines/e_devcrypto.c b/engines/e_devcrypto.c
index 3fcd81de7a..d25230d366 100644
--- a/engines/e_devcrypto.c --- a/engines/e_devcrypto.c
+++ b/engines/e_devcrypto.c +++ b/engines/e_devcrypto.c
@@ -852,7 +852,7 @@ static void prepare_digest_methods(void) @@ -852,7 +852,7 @@ static void prepare_digest_methods(void)
@ -32,7 +30,7 @@ index 3fcd81de7a..d25230d366 100644
/* /*
* Check that the digest is usable * Check that the digest is usable
@@ -1072,7 +1072,7 @@ static const ENGINE_CMD_DEFN devcrypto_cmds[] = { @@ -1072,7 +1072,7 @@ static const ENGINE_CMD_DEFN devcrypto_c
#ifdef IMPLEMENT_DIGEST #ifdef IMPLEMENT_DIGEST
{DEVCRYPTO_CMD_DIGESTS, {DEVCRYPTO_CMD_DIGESTS,
"DIGESTS", "DIGESTS",

4
package/libs/openssl/patches/510-e_devcrypto-ignore-error-when-closing-session.patch
View File

@ -8,11 +8,9 @@ session. It may have been closed by another process after a fork.
Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com> Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
diff --git a/engines/e_devcrypto.c b/engines/e_devcrypto.c
index d25230d366..f4570f1666 100644
--- a/engines/e_devcrypto.c --- a/engines/e_devcrypto.c
+++ b/engines/e_devcrypto.c +++ b/engines/e_devcrypto.c
@@ -195,9 +195,8 @@ static int cipher_init(EVP_CIPHER_CTX *ctx, const unsigned char *key, @@ -195,9 +195,8 @@ static int cipher_init(EVP_CIPHER_CTX *c
get_cipher_data(EVP_CIPHER_CTX_nid(ctx)); get_cipher_data(EVP_CIPHER_CTX_nid(ctx));
/* cleanup a previous session */ /* cleanup a previous session */