mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-30 10:39:04 +00:00
f609913b5c
This fixes the following security problems: * CVE-2018-0488: Risk of remote code execution when truncated HMAC is enabled * CVE-2018-0487: Risk of remote code execution when verifying RSASSA-PSS signatures This release is also ABI incompatible with the previous one, but it is API compatible. Some functions used by a lot of other software was renamed and the old function names are provided as a static inline now, but they are only active when deprecated functions are allowed, deactivate the removal of deprecated functions for now. Also increase the PKG_RELEASE version to force a rebuild and update of packages depending on mbedtls to handle the changed ABI. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
73 lines
1.9 KiB
Makefile
73 lines
1.9 KiB
Makefile
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=ustream-ssl
|
|
PKG_RELEASE:=3
|
|
|
|
PKG_SOURCE_PROTO:=git
|
|
PKG_SOURCE_URL=$(LEDE_GIT)/project/ustream-ssl.git
|
|
PKG_SOURCE_DATE:=2016-07-02
|
|
PKG_SOURCE_VERSION:=ec80adaa1b47f28d426fa19c692011ce60b992d6
|
|
PKG_MIRROR_HASH:=bfbad6b4e8c1e933f0bfaab43cbdd44a536c08128c3a779e6f2395a6a886aab7
|
|
CMAKE_INSTALL:=1
|
|
|
|
PKG_BUILD_DIR=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_SOURCE_SUBDIR)
|
|
|
|
PKG_LICENSE:=ISC
|
|
PKG_LICENSE_FILES:=
|
|
|
|
PKG_MAINTAINER:=Felix Fietkau <nbd@nbd.name>
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
include $(INCLUDE_DIR)/cmake.mk
|
|
|
|
define Package/libustream/default
|
|
SECTION:=libs
|
|
CATEGORY:=Libraries
|
|
TITLE:=ustream SSL Library
|
|
DEPENDS:=+libubox
|
|
ABI_VERSION:=$(PKG_VERSION)
|
|
endef
|
|
|
|
define Package/libustream-openssl
|
|
$(Package/libustream/default)
|
|
TITLE += (openssl)
|
|
DEPENDS += +PACKAGE_libustream-openssl:libopenssl
|
|
VARIANT:=openssl
|
|
endef
|
|
|
|
define Package/libustream-cyassl
|
|
$(Package/libustream/default)
|
|
TITLE += (cyassl)
|
|
DEPENDS += +PACKAGE_libustream-cyassl:libcyassl
|
|
VARIANT:=cyassl
|
|
endef
|
|
|
|
define Package/libustream-mbedtls
|
|
$(Package/libustream/default)
|
|
TITLE += (mbedtls)
|
|
DEPENDS += +libmbedtls
|
|
VARIANT:=mbedtls
|
|
DEFAULT_VARIANT:=1
|
|
endef
|
|
|
|
ifeq ($(BUILD_VARIANT),cyassl)
|
|
TARGET_CFLAGS += -I$(STAGING_DIR)/usr/include/cyassl -DHAVE_SNI
|
|
CMAKE_OPTIONS += -DCYASSL=on
|
|
endif
|
|
ifeq ($(BUILD_VARIANT),mbedtls)
|
|
CMAKE_OPTIONS += -DMBEDTLS=on
|
|
endif
|
|
|
|
define Package/libustream/default/install
|
|
$(INSTALL_DIR) $(1)/lib/
|
|
$(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libustream-ssl.so $(1)/lib/
|
|
endef
|
|
|
|
Package/libustream-openssl/install = $(Package/libustream/default/install)
|
|
Package/libustream-cyassl/install = $(Package/libustream/default/install)
|
|
Package/libustream-mbedtls/install = $(Package/libustream/default/install)
|
|
|
|
$(eval $(call BuildPackage,libustream-mbedtls))
|
|
$(eval $(call BuildPackage,libustream-cyassl))
|
|
$(eval $(call BuildPackage,libustream-openssl))
|