mirror of
https://github.com/openwrt/openwrt.git
synced 2025-01-07 22:38:55 +00:00
562894b39d
As wolfSSL is having hard time maintaining ABI compatibility between releases, we need to manually force rebuild of packages depending on libwolfssl and thus force their upgrade. Otherwise due to the ABI handling we would endup with possibly two libwolfssl libraries in the system, including the patched libwolfssl-5.5.1, but still have vulnerable services running using the vulnerable libwolfssl-5.4.0. So in order to propagate update of libwolfssl to latest stable release done in commitec8fb542ec("wolfssl: fix TLSv1.3 RCE in uhttpd by using 5.5.1-stable (CVE-2022-39173)") which fixes several remotely exploitable vulnerabilities, we need to bump PKG_RELEASE of all packages using wolfSSL library. Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commitf1b7e1434f)
58 lines
1.4 KiB
Makefile
58 lines
1.4 KiB
Makefile
# SPDX-License-Identifier: GPL-2.0-or-later
|
|
# Copyright (C) 2022 Eneas Ulir de Queiroz
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=uencrypt
|
|
PKG_RELEASE:=2
|
|
|
|
PKG_FLAGS:=nonshared
|
|
PKG_LICENSE:=GPL-2.0-or-later
|
|
PKG_MAINTAINER:=Eneas U de Queiroz <cotequeiroz@gmail.com>
|
|
PKG_CONFIG_DEPENDS:=\
|
|
CONFIG_UENCRYPT_OPENSSL \
|
|
CONFIG_UENCRYPT_WOLFSSL
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
include $(INCLUDE_DIR)/cmake.mk
|
|
|
|
CMAKE_INSTALL:=1
|
|
CMAKE_OPTIONS+=$(if $(CONFIG_UENCRYPT_WOLFSSL),-DUSE_WOLFSSL=1)
|
|
|
|
define Package/uencrypt
|
|
SECTION:=utils
|
|
CATEGORY:=Base system
|
|
TITLE:=Decryption utility for Arcadyan WG4xx223
|
|
DEPENDS:=@TARGET_ramips_mt7621 +UENCRYPT_WOLFSSL:libwolfssl +UENCRYPT_OPENSSL:libopenssl
|
|
endef
|
|
|
|
define Package/uencrypt/description
|
|
This is a small AES-128-CBC encrypton/decryption program.
|
|
Even though it can be used for regular encryption and
|
|
decryption operations using AES-128-CBC, it is included
|
|
here to unencrypt the configuration from mtd on Arcadyan
|
|
WG430223 and WG443223 routers.
|
|
endef
|
|
|
|
define Package/uencrypt/config
|
|
if PACKAGE_uencrypt
|
|
choice
|
|
prompt "Crypto provider"
|
|
default UENCRYPT_WOLFSSL
|
|
|
|
config UENCRYPT_OPENSSL
|
|
bool "OpenSSL"
|
|
|
|
config UENCRYPT_WOLFSSL
|
|
bool "wolfSSL"
|
|
endchoice
|
|
endif
|
|
endef
|
|
|
|
define Package/uencrypt/install
|
|
$(INSTALL_DIR) $(1)/usr/bin
|
|
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/uencrypt $(1)/usr/bin
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,uencrypt))
|