aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-support/nghttp2/nghttp2
AgeCommit message (Collapse)Author
2021-03-16nghttp2: Add fix for CVE-2020-11080Rahul Taya
Added below two patches to fix CVE-2020-11080: 1. CVE-2020-11080-1.patch 2. CVE-2020-11080-2.patch Signed-off-by: Rahul Taya <Rahul.Taya@kpit.com> [Refreshed patches to apply] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2019-11-07nghttp2: build more of this & fix packagingAndré Draszik
nghttp2 also provides http client, server, and proxy. Add the necessary DEPENDS and build flags to enable those. They are all packaged into individual packages, with 'nghttp2' being a meta-package now and pulling in all of the above three applications. The shared library itself (the only part that this recipe had been building so far), is also being split into its own package, meaning existing users shouldn't be affected, as nobody should have an RDEPENDS on 'nghttp2' at the moment (due to bitbake's shlibs dependency tracking). The deflatehd and inflatehd binaries have been completely dropped, as they are (header) test applications for HTTP/2. Debian doesn't ship them either. The python script fetch-ocsp-response is (only) needed by the proxy, and itself calls out to openssl. We can easily make this python3 using a simple patch, though. Minor additional fixes: * sort DEPENDS alphabetically * drop python-dir, this is implied by pythonnative * inherit manpages so as to benefit from man-db processing (note that manpages are not generated here, we just want the automatic update of the package index caches) We need to add a PACKAGECONFIG, as manpages.bbclass requires it to be present, even though nghttp2 unconditionally installs them Signed-off-by: André Draszik <git@andred.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>