Age | Commit message (Collapse) | Author |
|
Signed-off-by: Tom Rini <tom_rini@mentor.com>
|
|
Security fixes only so just bumping everyone that pinned up.
Signed-off-by: Tom Rini <tom_rini@mentor.com>
|
|
Signed-off-by: Tom Rini <tom_rini@mentor.com>
|
|
Signed-off-by: Koen Kooi <koen@openembedded.org>
|
|
Signed-off-by: Koen Kooi <koen@openembedded.org>
|
|
* This patch adds support for openssl to use OCF linux drivers
if they are available.
* If the drivers are not available then openssl will
default back to its own software implementation.
* Only enabled for the target side version since it doesn't
make much sense for the host system.
* Bump the PR.
Signed-off-by: Chase Maupin <Chase.Maupin@ti.com>
Signed-off-by: Koen Kooi <koen@openembedded.org>
|
|
* This recipe is used to stage ocf linux headers in the proper
usr/include/crypto directory structure expected by packages
such as openssl.
Signed-off-by: Chase Maupin <Chase.Maupin@ti.com>
Signed-off-by: Koen Kooi <koen@openembedded.org>
|
|
* fixes CVE-2010-4180 and CVE-2010-4252
* considered as safe upgrade
Signed-off-by: Roman I Khimov <khimov@altell.ru>
Acked-by: Khem Raj <raj.khem@gmail.com>
|
|
* Add the openssl-conf package to the list of packages to
be created. This package contains the openssl.cnf file
which is used by both the openssl executable in the
openssl package and the libcrypto library.
* This is to avoid messages like:
WARNING: can't open config file: /usr/lib/ssl/openssl.cnf
* When running "openssl req" to request and generate a certificate
the command will fail without the openssl.cnf file being
installed on the target system.
* Made this package an RRECOMMENDS for libcrypto since:
* libcrypto is a RDEPENDS for the openssl package
* Users can specify a configuration file at another
location so it is not stricly required and many
commands will work without it (with warnings)
* Bumped the PR
Signed-off-by: Chase Maupin <Chase.Maupin@ti.com>
Acked-by: Roman I Khimov <khimov@altell.ru>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Acked-by: Michael Smith <msmith@cbnco.com>
|
|
Reported by andyzammy on IRC.
| oe_libinstall: cd /home/rofl/Desktop/oe/angstrom-setup-scripts/build/tmp-angstrom_2008_1/work/i686-linux/openssl-native-1.0.0b-r13.1/openssl-1.0.0b
| cp: unrecognized option '--dereference'
| BusyBox v1.13.3 (Ubuntu 1:1.13.3-1ubuntu11) multi-call binary
|
| Usage: cp [OPTION]... SOURCE DEST
|
| Copy SOURCE to DEST, or multiple SOURCE(s) to DIRECTORY
|
| Options:
| -a Same as -dpR
| -d,-P Preserve links
| -H,-L Dereference all symlinks (default)
| -p Preserve file attributes if possible
| -f Force overwrite
| -i Prompt before overwrite
| -R,-r Recurse directories
| -l,-s Create (sym)links
|
| ERROR: Function do_install failed
Signed-off-by: Graham Gower <graham.gower@gmail.com>
Acked-by: Khem Raj <raj.khem@gmail.com>
|
|
mipsel-oe-linux-uclibc-gcc -march=mips32 -I.. -I../.. -I../../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -fexpensive-optimizations -fomit-frame-pointer -frename-registers -Os -Wall -isystem/mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include -c -o bss_file.o bss_file.c
In file included from /mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/stdio.h:28:0,
from bss_file.c:86:
/mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/features.h:216:5: error: #error It appears you have defined _FILE_OFFSET_BITS=64. Unfortunately, uClibc was built without large file support enabled.
In file included from /mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/stdio.h:72:0,
from bss_file.c:86:
/mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/bits/uClibc_stdio.h:61:2: error: #error Sorry... uClibc was built without large file support!
In file included from bss_file.c:86:0:
/mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/stdio.h:83:26: error: expected '=', ',', ';', 'asm' or '__attribute__' before 'fpos_t'
In file included from bss_file.c:86:0:
/mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/stdio.h:719:12: error: expected declaration specifiers or '...' before 'fpos_t'
/mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include/stdio.h:721:12: error: expected ';', ',' or ')' before '*' token
make[2]: *** [bss_file.o] Error 1
mipsel-oe-linux-uclibc-gcc -march=mips32 -I.. -I../.. -I../../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -fexpensive-optimizations -fomit-frame-pointer -frename-registers -Os -Wall -isystem/mnt/oe/tmp/sysroots/mipsel-oe-linux-uclibc/include -c -o bss_dgram.o bss_dgram.c
bss_dgram.c: In function 'dgram_ctrl':
bss_dgram.c:433:18: error: 'IPV6_PMTUDISC_DO' undeclared (first use in this function)
bss_dgram.c:433:18: note: each undeclared identifier is reported only once for each function it appears in
bss_dgram.c:434:48: error: 'IPV6_MTU_DISCOVER' undeclared (first use in this function)
bss_dgram.c:474:48: error: 'IPV6_MTU' undeclared (first use in this function)
make[2]: *** [bss_dgram.o] Error 1
Signed-off-by: Graham Gower <graham.gower@gmail.com>
Acked-by: Khem Raj <raj.khem@gmail.com>
|
|
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
* fixes CVE-2010-3864
* considered as safe upgrade
Signed-off-by: Roman I Khimov <khimov@altell.ru>
Acked-by: Khem Raj <raj.khem@gmail.com>
Acked-by: Martin Jansa <Martin.Jansa@gmail.com>
|
|
We 'spe' needs similar tests to 'eabi'.
Signed-off-by: Tom Rini <tom_rini@mentor.com>
|
|
Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Acked-by: Michael Smith <msmith@cbnco.com>
|
|
This might not be the ideal solution, but it does get openssl-native to build
on a darwin machine.
Signed-off-by: Chris Larson <chris_larson@mentor.com>
|
|
Signed-off-by: Jason Kridner <jkridner@beagleboard.org>
Signed-off-by: Chris Larson <chris_larson@mentor.com>
|
|
0.9.8 is also affected, please try the same patch if using that.
Signed-off-by: Roman I Khimov <khimov@altell.ru>
|
|
installable
|
|
* exactly one fix (CVE-2010-1633), considered as safe upgrade
Signed-off-by: Roman I Khimov <khimov@altell.ru>
Acked-by: Martin Jansa <Martin.Jansa@gmail.com>
|
|
Signed-off-by: Frans Meulenbroeks <fransmeulenbroeks@gmail.com>
|
|
vulnerabilities"
This reverts commit a0a7a2710d0ea14ac41015e9b8f99fc8b4c687b3.
Missed the DEFAULT_PREFERENCE = "-1" on the 1.0 recipe.
|
|
Signed-off-by: Frans Meulenbroeks <fransmeulenbroeks@gmail.com>
|
|
Signed-off-by: Frans Meulenbroeks <fransmeulenbroeks@gmail.com>
|
|
- Don't supply site files for native.
- Split up the site information, so we don't need to add every single
combination of os and architecture to the siteinfo.bbclass.
- Drop the ${FILE_DIRNAME}/site-<bits> stuff, there are other ways to do it.
- SITEINFO_ENDIANESS -> SITEINFO_ENDIANNESS.
Signed-off-by: Chris Larson <clarson@kergoth.com>
|
|
Will revisit.
This reverts commit 87dc166bade8722af4076c8644cac6a0a437826f.
|
|
- Don't supply site files for native
- Split up the site information, so we don't need to add every single
combination of os and architecture to the siteinfo.bbclass
- Instead of specifically looking for '${FILE_DIRNAME}/site-${PV}/<sitefile>',
leverage FILESPATH. Now it searches the paths in both BBPATH and FILESPATH
for "site/<sitefile>".
- SITEINFO_ENDIANESS -> SITEINFO_ENDIANNESS
Signed-off-by: Chris Larson <clarson@kergoth.com>
|
|
colons (Bug 5429)
* Use linux-uclibcebi for target OS on ARM uclibc.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
For .diff/.patch you need to apply manually, you can specify apply=no.
Signed-off-by: Chris Larson <chris_larson@mentor.com>
Acked-by: Denys Dmytriyenko <denis@denix.org>
Acked-by: Khem Raj <raj.khem@gmail.com>
|
|
I think this makes the behavior rather more clear.
Signed-off-by: Chris Larson <chris_larson@mentor.com>
Acked-by: Denys Dmytriyenko <denis@denix.org>
Acked-by: Khem Raj <raj.khem@gmail.com>
|
|
openssl 1.0.0 has more fields in config-strings, so Configure patches
forward-ported from previous openssl versions needed further adjustments to
build for more targets (initially tested only on i686 and x86_64).
Clean up useless date output in patches (somehow crawled in via quilt)
along the way.
Signed-off-by: Roman I Khimov <khimov@altell.ru>
|
|
* fetch all *.bb with patched utils.bbclass appending all checksums
found only in checksums.ini to recipe
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
|
|
* DEFAULT_PREFERENCE = "-1", since it might break apps
* enable engines build (and package those separately)
Signed-off-by: Roman I Khimov <khimov@altell.ru>
|
|
Config file is accessed directly from libcrypto, so belongs to
libcrypto package.
openssl-misc is a new package that contains CA management scripts.
Signed-off-by: Roman I Khimov <khimov@altell.ru>
Acked-by: Holger Hans Peter Freyther <zecke@selfish.org>
Acked-by: Khem Raj <raj.khem@gmail.com>
|
|
|
|
|
|
Acked-by: Richard Purdie <rpurdie@linux.intel.com>
Acked-by: Marcin Juszkiewicz <marcin@juszkiewicz.com.pl>
Signed-off-by: Chris Larson <chris_larson@mentor.com>
|
|
* Upgrade both openssl and openssl-native to 0.9.8m
* Upgrade the Makefile and Config changes
* Switch to checksums inside the recipe
|
|
This is needed to stop tripping up security protections on Fedora 12 and
probably other selinux using distros
|
|
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
|
* This patch reverts the cosmetic change which used linux-gnu instead of linux
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Tested-by: Holger Freyther <zecke@selfish.org>
|
|
Signed-off-by: Leon Woestenberg <leon@sidebranch.com>
|
|
* Bump the ABI_LAYOUT. Build from scratch will be needed.
* Replace using TARGET_OS from linux->linux-gnu.
* Replace using linux-uclibcgnueabi->linux-uclibceabi.
* Add 'eabi' to DISTRO_FEATURES (only for minimal and micro).
* Use eabi and BASE_PACKAGE_ARCH to compute real TARGET_OS.
* Fix the micro conf to get console image building.
* Fix the linux-uclibcgnueabi overrides in all recipes.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Acked-by: Phill Blundell <pb@reciva.com>
Acked-by: Michael 'Mickey' Lauer <mickey@vanille-media.de>
|
|
openssl's makefile always installs to ${prefix}/lib, even if
libdir is ${prefix}/lib64. Move some files around to make it fit.
Signed-off-by: Michael Smith <msmith@cbnco.com>
|
|
|
|
Many thanks to Phil Blundell.
|
|
|
|
|
|
|