aboutsummaryrefslogtreecommitdiffstats
path: root/recipes/openssl
AgeCommit message (Collapse)Author
2011-02-25openssl.inc: Add linux-powerpc64 to the linux-powerpc caseTom Rini
Signed-off-by: Tom Rini <tom_rini@mentor.com>
2011-02-17openssl: Update from 1.0.0c to 1.0.0dTom Rini
Security fixes only so just bumping everyone that pinned up. Signed-off-by: Tom Rini <tom_rini@mentor.com>
2011-01-24openssl.inc: Simplify our check for a 'linux' OS.Tom Rini
Signed-off-by: Tom Rini <tom_rini@mentor.com>
2011-01-08ocf-linux: really fix depchains this timeKoen Kooi
Signed-off-by: Koen Kooi <koen@openembedded.org>
2011-01-08ocf-linux: fix up do_install task, fix depchainsKoen Kooi
Signed-off-by: Koen Kooi <koen@openembedded.org>
2011-01-07openssl: add support for OCF linux driversChase Maupin
* This patch adds support for openssl to use OCF linux drivers if they are available. * If the drivers are not available then openssl will default back to its own software implementation. * Only enabled for the target side version since it doesn't make much sense for the host system. * Bump the PR. Signed-off-by: Chase Maupin <Chase.Maupin@ti.com> Signed-off-by: Koen Kooi <koen@openembedded.org>
2011-01-07ocf-linux: add recipe to stage ocf linux headersChase Maupin
* This recipe is used to stage ocf linux headers in the proper usr/include/crypto directory structure expected by packages such as openssl. Signed-off-by: Chase Maupin <Chase.Maupin@ti.com> Signed-off-by: Koen Kooi <koen@openembedded.org>
2010-12-28openssl: update 1.0.0b to 1.0.0cRoman I Khimov
* fixes CVE-2010-4180 and CVE-2010-4252 * considered as safe upgrade Signed-off-by: Roman I Khimov <khimov@altell.ru> Acked-by: Khem Raj <raj.khem@gmail.com>
2010-12-19openssl: create package for openssl configuration filechase maupin
* Add the openssl-conf package to the list of packages to be created. This package contains the openssl.cnf file which is used by both the openssl executable in the openssl package and the libcrypto library. * This is to avoid messages like: WARNING: can't open config file: /usr/lib/ssl/openssl.cnf * When running "openssl req" to request and generate a certificate the command will fail without the openssl.cnf file being installed on the target system. * Made this package an RRECOMMENDS for libcrypto since: * libcrypto is a RDEPENDS for the openssl package * Users can specify a configuration file at another location so it is not stricly required and many commands will work without it (with warnings) * Bumped the PR Signed-off-by: Chase Maupin <Chase.Maupin@ti.com> Acked-by: Roman I Khimov <khimov@altell.ru> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2010-12-09openssl: allow to add configure options through EXTRA_OECONFAndreas Oberritter
Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Acked-by: Michael Smith <msmith@cbnco.com>
2010-12-02openssl.inc: Use cp -L, busybox cp doesn't support the long option.Graham Gower
Reported by andyzammy on IRC. | oe_libinstall: cd /home/rofl/Desktop/oe/angstrom-setup-scripts/build/tmp-angstrom_2008_1/work/i686-linux/openssl-native-1.0.0b-r13.1/openssl-1.0.0b | cp: unrecognized option '--dereference' | BusyBox v1.13.3 (Ubuntu 1:1.13.3-1ubuntu11) multi-call binary | | Usage: cp [OPTION]... SOURCE DEST | | Copy SOURCE to DEST, or multiple SOURCE(s) to DIRECTORY | | Options: | -a Same as -dpR | -d,-P Preserve links | -H,-L Dereference all symlinks (default) | -p Preserve file attributes if possible | -f Force overwrite | -i Prompt before overwrite | -R,-r Recurse directories | -l,-s Create (sym)links | | ERROR: Function do_install failed Signed-off-by: Graham Gower <graham.gower@gmail.com> Acked-by: Khem Raj <raj.khem@gmail.com>
2010-12-02openssl.inc: Fix build when DISTRO_FEATURES lacks largefile and/or ipv6.Graham Gower
mipsel-oe-linux-uclibc-gcc -march=mips32 -I.. -I../.. -I../../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -fexpensive-optimizations -fomit-frame-pointer -frename-registers -Os -Wall -isystem/mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include -c -o bss_file.o bss_file.c In file included from /mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/stdio.h:28:0, from bss_file.c:86: /mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/features.h:216:5: error: #error It appears you have defined _FILE_OFFSET_BITS=64. Unfortunately, uClibc was built without large file support enabled. In file included from /mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/stdio.h:72:0, from bss_file.c:86: /mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/bits/uClibc_stdio.h:61:2: error: #error Sorry... uClibc was built without large file support! In file included from bss_file.c:86:0: /mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/stdio.h:83:26: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'fpos_t' In file included from bss_file.c:86:0: /mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/stdio.h:719:12: error: expected declaration specifiers or '...' before 'fpos_t' /mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/stdio.h:721:12: error: expected ';', ',' or ')' before '*' token make[2]: *** [bss_file.o] Error 1 mipsel-oe-linux-uclibc-gcc -march=mips32 -I.. -I../.. -I../../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -fexpensive-optimizations -fomit-frame-pointer -frename-registers -Os -Wall -isystem/mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include -c -o bss_dgram.o bss_dgram.c bss_dgram.c: In function 'dgram_ctrl': bss_dgram.c:433:18: error: 'IPV6_PMTUDISC_DO' undeclared (first use in this function) bss_dgram.c:433:18: note: each undeclared identifier is reported only once for each function it appears in bss_dgram.c:434:48: error: 'IPV6_MTU_DISCOVER' undeclared (first use in this function) bss_dgram.c:474:48: error: 'IPV6_MTU' undeclared (first use in this function) make[2]: *** [bss_dgram.o] Error 1 Signed-off-by: Graham Gower <graham.gower@gmail.com> Acked-by: Khem Raj <raj.khem@gmail.com>
2010-11-20openssl: Add mips64{el}-linux target awarenessKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2010-11-20openssl: update 1.0.0a to 1.0.0bRoman I Khimov
* fixes CVE-2010-3864 * considered as safe upgrade Signed-off-by: Roman I Khimov <khimov@altell.ru> Acked-by: Khem Raj <raj.khem@gmail.com> Acked-by: Martin Jansa <Martin.Jansa@gmail.com>
2010-11-19openssl.inc: Update powerpc logicTom Rini
We 'spe' needs similar tests to 'eabi'. Signed-off-by: Tom Rini <tom_rini@mentor.com>
2010-11-14openssl: fix sh equality operatorAndreas Oberritter
Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Acked-by: Michael Smith <msmith@cbnco.com>
2010-10-21openssl: kill version script for darwinChris Larson
This might not be the ideal solution, but it does get openssl-native to build on a darwin machine. Signed-off-by: Chris Larson <chris_larson@mentor.com>
2010-10-21openssl: add i386-darwin to known buildhostsJason Kridner
Signed-off-by: Jason Kridner <jkridner@beagleboard.org> Signed-off-by: Chris Larson <chris_larson@mentor.com>
2010-09-14openssl 1.0.0a: fix CVE-2010-2939Roman I Khimov
0.9.8 is also affected, please try the same patch if using that. Signed-off-by: Roman I Khimov <khimov@altell.ru>
2010-08-29openssl: move cnf file to -misc making different libcrypto versions parallel ↵Koen Kooi
installable
2010-08-17openssl: update 1.0.0 to 1.0.0aRoman I Khimov
* exactly one fix (CVE-2010-1633), considered as safe upgrade Signed-off-by: Roman I Khimov <khimov@altell.ru> Acked-by: Martin Jansa <Martin.Jansa@gmail.com>
2010-08-16openssl 0.9.8g; removed (0.9.8m stays)Frans Meulenbroeks
Signed-off-by: Frans Meulenbroeks <fransmeulenbroeks@gmail.com>
2010-08-16Revert "openssl: removed old 0.9.8 versions; these have security ↵Frans Meulenbroeks
vulnerabilities" This reverts commit a0a7a2710d0ea14ac41015e9b8f99fc8b4c687b3. Missed the DEFAULT_PREFERENCE = "-1" on the 1.0 recipe.
2010-08-15openssl: removed old 0.9.8 versions; these have security vulnerabilitiesFrans Meulenbroeks
Signed-off-by: Frans Meulenbroeks <fransmeulenbroeks@gmail.com>
2010-08-06openssl: removed old 0.9.7 versionsFrans Meulenbroeks
Signed-off-by: Frans Meulenbroeks <fransmeulenbroeks@gmail.com>
2010-07-26Siteinfo cleanup v2Chris Larson
- Don't supply site files for native. - Split up the site information, so we don't need to add every single combination of os and architecture to the siteinfo.bbclass. - Drop the ${FILE_DIRNAME}/site-<bits> stuff, there are other ways to do it. - SITEINFO_ENDIANESS -> SITEINFO_ENDIANNESS. Signed-off-by: Chris Larson <clarson@kergoth.com>
2010-07-26Revert "Siteinfo cleanup"Chris Larson
Will revisit. This reverts commit 87dc166bade8722af4076c8644cac6a0a437826f.
2010-07-26Siteinfo cleanupChris Larson
- Don't supply site files for native - Split up the site information, so we don't need to add every single combination of os and architecture to the siteinfo.bbclass - Instead of specifically looking for '${FILE_DIRNAME}/site-${PV}/<sitefile>', leverage FILESPATH. Now it searches the paths in both BBPATH and FILESPATH for "site/<sitefile>". - SITEINFO_ENDIANESS -> SITEINFO_ENDIANNESS Signed-off-by: Chris Larson <clarson@kergoth.com>
2010-05-26openssl_1.0.0.bb: Update configure target patch to have correct number of ↵Khem Raj
colons (Bug 5429) * Use linux-uclibcebi for target OS on ARM uclibc. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2010-05-25Make the do_patch apply=yes param implicit if extension is .diff/.patchChris Larson
For .diff/.patch you need to apply manually, you can specify apply=no. Signed-off-by: Chris Larson <chris_larson@mentor.com> Acked-by: Denys Dmytriyenko <denis@denix.org> Acked-by: Khem Raj <raj.khem@gmail.com>
2010-05-25Rename url params patch=<ignored>/pnum=<n> to apply={yes,no}/striplevel=<n>Chris Larson
I think this makes the behavior rather more clear. Signed-off-by: Chris Larson <chris_larson@mentor.com> Acked-by: Denys Dmytriyenko <denis@denix.org> Acked-by: Khem Raj <raj.khem@gmail.com>
2010-05-03openssl 1.0.0: fix patches with config-stringsRoman I Khimov
openssl 1.0.0 has more fields in config-strings, so Configure patches forward-ported from previous openssl versions needed further adjustments to build for more targets (initially tested only on i686 and x86_64). Clean up useless date output in patches (somehow crawled in via quilt) along the way. Signed-off-by: Roman I Khimov <khimov@altell.ru>
2010-04-12recipes: move checksums to recipes from checksums.iniMartin Jansa
* fetch all *.bb with patched utils.bbclass appending all checksums found only in checksums.ini to recipe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2010-03-31openssl: add version 1.0.0Roman I Khimov
* DEFAULT_PREFERENCE = "-1", since it might break apps * enable engines build (and package those separately) Signed-off-by: Roman I Khimov <khimov@altell.ru>
2010-03-30openssl: deal with unpackaged /usr/lib/ssl filesRoman I Khimov
Config file is accessed directly from libcrypto, so belongs to libcrypto package. openssl-misc is a new package that contains CA management scripts. Signed-off-by: Roman I Khimov <khimov@altell.ru> Acked-by: Holger Hans Peter Freyther <zecke@selfish.org> Acked-by: Khem Raj <raj.khem@gmail.com>
2010-03-29openssl-native 0.9.8m: fix stagingKoen Kooi
2010-03-28openssl: convert to new style stagingKoen Kooi
2010-03-19Don't inherit siteinfo in base.bbclassChris Larson
Acked-by: Richard Purdie <rpurdie@linux.intel.com> Acked-by: Marcin Juszkiewicz <marcin@juszkiewicz.com.pl> Signed-off-by: Chris Larson <chris_larson@mentor.com>
2010-03-09opensll: Upgrade to version 0.9.8mHolger Hans Peter Freyther
* Upgrade both openssl and openssl-native to 0.9.8m * Upgrade the Makefile and Config changes * Switch to checksums inside the recipe
2009-12-03openssl-native_0.9.8j.bb : set the noexec bit for stacksGraeme Gregory
This is needed to stop tripping up security protections on Fedora 12 and probably other selinux using distros
2009-10-10classes: Use linux-gnuspe instead of non existing linux-speKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2009-10-10conf: Decosmetize TARGET_OSKhem Raj
* This patch reverts the cosmetic change which used linux-gnu instead of linux Signed-off-by: Khem Raj <raj.khem@gmail.com> Tested-by: Holger Freyther <zecke@selfish.org>
2009-09-26openssl.inc: Deal with HOST_OS=linux-gnu during configure.Leon Woestenberg
Signed-off-by: Leon Woestenberg <leon@sidebranch.com>
2009-09-03OpenEmbedded: Switch to using linux-uclibceabi and linux-gnu for TARGET_OSKhem Raj
* Bump the ABI_LAYOUT. Build from scratch will be needed. * Replace using TARGET_OS from linux->linux-gnu. * Replace using linux-uclibcgnueabi->linux-uclibceabi. * Add 'eabi' to DISTRO_FEATURES (only for minimal and micro). * Use eabi and BASE_PACKAGE_ARCH to compute real TARGET_OS. * Fix the micro conf to get console image building. * Fix the linux-uclibcgnueabi overrides in all recipes. Signed-off-by: Khem Raj <raj.khem@gmail.com> Acked-by: Phill Blundell <pb@reciva.com> Acked-by: Michael 'Mickey' Lauer <mickey@vanille-media.de>
2009-09-01openssl.inc: fix packaging on x86_64; use INC_PRMichael Smith
openssl's makefile always installs to ${prefix}/lib, even if libdir is ${prefix}/lib64. Move some files around to make it fit. Signed-off-by: Michael Smith <msmith@cbnco.com>
2009-08-19openssl: Add linux-gnuspe-powerpc to openssl.inc target list.Leon Woestenberg
2009-06-23openssl: add support for compilation on Via C3 host.Rolf Leggewie
Many thanks to Phil Blundell.
2009-06-13openssl: avoid empty PREFIX since this causes Configure to do the wrong thingPhil Blundell
2009-04-03openssl-native: removed FILESPATH setting which is not neededMarcin Juszkiewicz
2009-04-02openssl-0.9.8j: add patch to use LDFLAGS (fixes QA error)Jeremy Lainé