mirrors/buildroot
0
0
Fork 0
mirror of https://git.busybox.net/buildroot.git synced 2024-11-23 13:33:28 +08:00
Code Issues Packages Projects Releases Wiki Activity
master
buildroot/package/libopenssl/Config.in

233 lines
6.2 KiB
Plaintext
Raw Permalink Normal View History

package/libopenssl: move options Since e3159cad71 (package/libopenssl: move target arch selection to Config.in), we have a Config.in that contains a few options to configure libopenssl (openSSL, the original). As such, it makes sense to move the remaining options there too. We also move the condition there, mimicking what is done for the external toolchains' options too. Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Cc: Matt Weber <matthew.weber@rockwellcollins.com> Acked-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-12-31 04:36:14 +08:00
if BR2_PACKAGE_LIBOPENSSL
package/libopenssl: move target arch selection to Config.in The logic to select the proper OpenSSL target arch in libopenssl.mk is not easy to read, so let's move it to Config.in where we have some nice constructs for that kind of value selection. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 18:24:17 +08:00
# 4xx PowerPC cores seem to have trouble with openssl's ASM
# optimizations
config BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH_LINUX_PPC
bool
default y if BR2_powerpc
depends on !BR2_powerpc_401
depends on !BR2_powerpc_403
depends on !BR2_powerpc_405
depends on !BR2_powerpc_405fp
depends on !BR2_powerpc_440
depends on !BR2_powerpc_440fp
config BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH
string
# Doesn't work for thumb-only (Cortex-M?)
default "linux-armv4" if BR2_ARM_CPU_HAS_ARM
default "linux-aarch64" if BR2_aarch64
default "linux-ppc" if BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH_LINUX_PPC
default "linux-ppc64" if BR2_powerpc64
default "linux-ppc64le" if BR2_powerpc64le
package/libopenssl: fix libatomic dependency for x86 builds Fixes: autobuild.buildroot.net/results/ba9/ba926fc27cf3d97274729b3ec1cadb3229bd3af3/ Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2023-07-28 23:19:03 +08:00
default "linux-x86" if BR2_i386 && !BR2_TOOLCHAIN_HAS_LIBATOMIC
default "linux-x86-latomic" if BR2_i386 && BR2_TOOLCHAIN_HAS_LIBATOMIC
package/libopenssl: move target arch selection to Config.in The logic to select the proper OpenSSL target arch in libopenssl.mk is not easy to read, so let's move it to Config.in where we have some nice constructs for that kind of value selection. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 18:24:17 +08:00
default "linux-x86_64" if BR2_x86_64
package/libopenssl: use riscv-specific configure target Adds BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH for riscv32 and riscv64. Otherwise, riscv targets fall back to the linux-generic libopenssl configs. This exacerbates the issue partially addressed in openssl/openssl#22871 which causes build failures. Fixes a mispelling in upstream causing 0builds for riscv32 to fail when linking. Signed-off-by: Grant Nichol <me@grantnichol.com> [yann.morin.1998@free.fr: squash the two commits together] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-12-23 15:07:30 +08:00
default "linux64-riscv64" if BR2_riscv && BR2_ARCH_IS_64
default "linux32-riscv32" if BR2_riscv && !BR2_ARCH_IS_64
package/libopenssl: fix s390x build Use linux64-s390x configure target to fix the following s390x build failure raised since bump to version 3.2.0 in commit 973b1eba5a4ee72f040bd471b147267e36be73ad and https://github.com/openssl/openssl/commit/79040cf29e011c21789563d74da626b7465a0540: /home/buildroot/autobuild/instance-3/output-1/host/lib/gcc/s390x-buildroot-linux-gnu/13.2.0/../../../../s390x-buildroot-linux-gnu/bin/ld: libcrypto.a(libcrypto-lib-dh_key.o): in function `dh_bn_mod_exp': dh_key.c:(.text+0x3c8): undefined reference to `s390x_mod_exp' /home/buildroot/autobuild/instance-3/output-1/host/lib/gcc/s390x-buildroot-linux-gnu/13.2.0/../../../../s390x-buildroot-linux-gnu/bin/ld: libcrypto.a(libcrypto-lib-rsa_ossl.o): in function `rsa_ossl_s390x_mod_exp': rsa_ossl.c:(.text+0xd2c): undefined reference to `s390x_crt' Fixes: - http://autobuild.buildroot.org/results/77c5e13127de67a69782f138aa28c8b0ad951941 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2024-01-03 00:32:48 +08:00
default "linux64-s390x" if BR2_s390x
package/libopenssl: move target arch selection to Config.in The logic to select the proper OpenSSL target arch in libopenssl.mk is not easy to read, so let's move it to Config.in where we have some nice constructs for that kind of value selection. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 18:24:17 +08:00
# no-asm is needed with generic architectures such as
package/libopenssl: make use of linux-generic64 for 64-bit archs It was tested with: BR2_mips64el=y BR2_MIPS_NABI64=y BR2_TOOLCHAIN_EXTERNAL=y BR2_TOOLCHAIN_EXTERNAL_DOWNLOAD=y BR2_TOOLCHAIN_EXTERNAL_URL="http://autobuild.buildroot.org/toolchains/tarballs/br-mips64-n64-full-2019.05.1.tar.bz2" BR2_TOOLCHAIN_EXTERNAL_GCC_5=y BR2_TOOLCHAIN_EXTERNAL_HEADERS_5_1=y BR2_TOOLCHAIN_EXTERNAL_LOCALE=y BR2_TOOLCHAIN_EXTERNAL_CXX=y BR2_INIT_NONE=y BR2_SYSTEM_BIN_SH_NONE=y BR2_PACKAGE_OPENSSL=y Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 18:24:18 +08:00
# linux-generic{32,64}, see
package/libopenssl: move target arch selection to Config.in The logic to select the proper OpenSSL target arch in libopenssl.mk is not easy to read, so let's move it to Config.in where we have some nice constructs for that kind of value selection. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 18:24:17 +08:00
# https://github.com/openssl/openssl/issues/9839
package/libopenssl: fix target architecture for MIPS64n32 Commit 1ebb35ee5fb7bd5e6278a84ac2c18aa0a38056fb changed the libopenssl target architecture to 'linux-generic64' for 64-bit archs based on BR2_ARCH_IS_64. However, MIPS64n32 has BR2_ARCH_IS_64 set, but is a 32-bit ABI. On such board, libopenssl needs to be configured with linux-generic32 to function properly. One symptom of this problem is that ssh-keygen hangs on key generation, waiting for more random bits. See [1] for the discussion with openssl upstream. Thanks to Ronny Meeus for investigating the issue and kudos to the openssl community for their responsive and helpful interaction! Reported-by: Ronny Meeus <ronny.meeus@nokia.com> Signed-off-by: Thomas De Schampheleire <thomas.de_schampheleire@nokia.com> [1] https://mta.openssl.org/pipermail/openssl-users/2020-June/012565.html Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2020-06-19 14:50:33 +08:00
default "linux-generic64 no-asm" if BR2_ARCH_IS_64 && !BR2_MIPS_NABI32
package/libopenssl: update configure option for libatomic Without this patch openssl adds -latomic twice to Libs.private in libcrypto.pc: cat output/per-package/opensc/host/arceb-buildroot-linux-uclibc/sysroot/usr/lib/pkgconfig/libcrypto.pc | grep atomic Libs.private: -ldl -pthread -latomic -latomic Instead of passing -latomic to Configure we use the target arch "linux-latomic" which is provided by upstream since version 3.0.0 especially for libatomic handling: https://github.com/openssl/openssl/commit/535130c39d33df41b6a7d14302a93ffaa10ebc46 https://github.com/openssl/openssl/commit/cdf2986a70d92668d882eb29737225f1aaafd0f1 To be noted: the build still fails for both bootlin-armv7m-uclibc and bootlin-m68k-5208-uclibc, but this is not a regression due to this patch, and is tracked as #15709. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2023-07-26 02:50:04 +08:00
default "linux-latomic no-asm" if BR2_TOOLCHAIN_HAS_LIBATOMIC
package/libopenssl: move target arch selection to Config.in The logic to select the proper OpenSSL target arch in libopenssl.mk is not easy to read, so let's move it to Config.in where we have some nice constructs for that kind of value selection. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-10-27 18:24:17 +08:00
default "linux-generic32 no-asm"
package/libopenssl: move options Since e3159cad71 (package/libopenssl: move target arch selection to Config.in), we have a Config.in that contains a few options to configure libopenssl (openSSL, the original). As such, it makes sense to move the remaining options there too. We also move the condition there, mimicking what is done for the external toolchains' options too. Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Cc: Matt Weber <matthew.weber@rockwellcollins.com> Acked-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-12-31 04:36:14 +08:00
config BR2_PACKAGE_LIBOPENSSL_BIN
bool "openssl binary"
help
Install the openssl binary and the associated helper scripts
to the target file system. This is a command line tool for
doing various cryptographic stuff.
config BR2_PACKAGE_LIBOPENSSL_ENGINES
bool "openssl additional engines"
help
Install additional encryption engine libraries.
package/libopenssl: add option to enable some features Openssl implements lot of algorithms that are not required in some emdedded devices and cyphers known as weak. Secure embedded systems shall disable unused algorithms (and weak algo) in order to be certified. This patch allows to select weak algorithms and mecanims to enable such as md5. To ensure backward compatibility, all items are selected by default. Signed-off-by: Erwan GAUTRON <erwan.gautron@bertin.fr> [yann.morin.1998@free.fr: - drop help texts that just repeat the prompts - fix check-package ] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-05-11 21:21:33 +08:00
config BR2_PACKAGE_LIBOPENSSL_ENABLE_CHACHA
bool "enable CHACHA"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC2
bool "enable RC2"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC4
bool "enable RC4"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD2
bool "enable MD2"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD4
bool "enable MD4"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_MDC2
bool "enable MDC2"
default y
package.libopenssl: fix enabling/disabling mdc2 Commit 3dbc86f09897 (openssl: bump version, enable mdc2+camellia+tlsext) form 2010-06-03, forced the build of mdc2. Commit a83d41867c8d (package/libopenssl: add option to enable some features) added an option to explicitly disable mdc2, but forgot to amend the existing enabling option. It appears that, like most (all?) openssl config options, mdc2 ends up enabled unless explicitly disabled. Additionally, mdc2 depends on DES, so without DES, mdc2 gets disabled. So, drop the explicit enabling option, and make mdc2 select DES. Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: "GAUTRON, Erwan" <erwan.gautron@bertin.fr> Cc: "Weber, Matthew L Collins" <Matthew.Weber@collins.com> Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
2022-11-06 00:55:24 +08:00
select BR2_PACKAGE_LIBOPENSSL_ENABLE_DES
package/libopenssl: add option to enable some features Openssl implements lot of algorithms that are not required in some emdedded devices and cyphers known as weak. Secure embedded systems shall disable unused algorithms (and weak algo) in order to be certified. This patch allows to select weak algorithms and mecanims to enable such as md5. To ensure backward compatibility, all items are selected by default. Signed-off-by: Erwan GAUTRON <erwan.gautron@bertin.fr> [yann.morin.1998@free.fr: - drop help texts that just repeat the prompts - fix check-package ] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2020-05-11 21:21:33 +08:00
config BR2_PACKAGE_LIBOPENSSL_ENABLE_BLAKE2
bool "enable BLAKE2"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_IDEA
bool "enable IDEA"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_SEED
bool "enable SEED"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_DES
bool "enable DES"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_RMD160
bool "enable RMD160"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_WHIRLPOOL
bool "enable WHIRLPOOL"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_BLOWFISH
bool "enable BLOWFISH"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL
bool "enable SSL"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL3
bool "enable SSL3"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_WEAK_SSL
bool "enable WEAK_SSL"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_PSK
bool "enable mode PSK"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_CAST
bool "enable mode CAST"
default y
config BR2_PACKAGE_LIBOPENSSL_UNSECURE
bool "enable unit test, debug, backtrace"
default y
help
Enable unit-test crypto-mdebug-backtrace
crypto-mdebug autoerrinit mode.
config BR2_PACKAGE_LIBOPENSSL_DYNAMIC_ENGINE
bool "enable dynamic engine"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_COMP
bool "enable compression"
default y
package/libopenssl: add new configuration options The transition from version 1.1 to 3.0.9, and subsequently to 3.3.1, added new compilation options. This led to a significant increase in the size of the library. These options allow user to disable these features to obtain a smaller library size. To ensure backward compatibility, all items are selected by default. Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2024-07-09 01:08:56 +08:00
config BR2_PACKAGE_LIBOPENSSL_ENABLE_ARGON2
bool "enable ARGON2"
default y
config BR2_PACKAGE_LIBOPENSSL_ENABLE_CACHED_FETCH
bool "enable cached fetch"
default y
help
Cache algorithms when they are fetched from a provider.
Normally, a provider indicates if the algorithms it supplies
can be cached or not. Using this option will reduce run-time
memory usage but it also introduces a significant performance
penalty. This option is primarily designed to help with
detecting incorrect reference counting.
config BR2_PACKAGE_LIBOPENSSL_ENABLE_CMP
bool "enable CMP"
default y
help
Build support for Certificate Management Protocol (CMP) and
Certificate Request Message Format (CRMF).
config BR2_PACKAGE_LIBOPENSSL_ENABLE_THREAD_POOL
bool "enable thread pool"
default y
depends on BR2_TOOLCHAIN_HAS_THREADS
help
Build with thread pool functionality. If enabled, OpenSSL
algorithms may use the thread pool to perform parallel
computation. This option in itself does not enable OpenSSL
to spawn new threads. Currently the only supported thread
pool mechanism is the default thread pool.
config BR2_PACKAGE_LIBOPENSSL_ENABLE_ECX
bool "enable ECX"
default y
help
Build with ECX support. Disabling this option can be used
to disable support for X25519, X448, and EdDSA.
config BR2_PACKAGE_LIBOPENSSL_ENABLE_LOADER_ENGINE
bool "enable 'loader_attic' engine"
default y
depends on BR2_PACKAGE_LIBOPENSSL_DYNAMIC_ENGINE
help
Build with 'loader_attic' engine support, which is meant
just for internal OpenSSL testing purposes and supports
loading keys, parameters, certificates, and CRLs from files.
When this engine is used, files with such credentials are
read via this engine.
config BR2_PACKAGE_LIBOPENSSL_ENABLE_PADLOCK_ENGINE
bool "enable padlock engine"
default y
help
Build the padlock engine.
config BR2_PACKAGE_LIBOPENSSL_ENABLE_MODULE
bool "enable modules"
default y
help
Build modules.
config BR2_PACKAGE_LIBOPENSSL_ENABLE_QUIC
bool "enable QUIC"
default y
help
Build with QUIC support.
config BR2_PACKAGE_LIBOPENSSL_SECURE_MEMORY
bool "enable secure memory"
default y
help
Build with secure memory support.
config BR2_PACKAGE_LIBOPENSSL_ENABLE_SIV
bool "enable SIV"
default y
help
Build with RFC5297 AES-SIV support.
config BR2_PACKAGE_LIBOPENSSL_ENABLE_SM2_PRECOMP_TABLE
bool "enable SM2 precomputed table"
default y
depends on BR2_aarch64
help
Enable using the SM2 precomputed table. Disabling this option
makes the library smaller.
config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL_TRACE
bool "enable SSL trace"
default y
help
Build with SSL Trace support. Disabling this option may
provide a small reduction in libssl binary size.
package/libopenssl: move options Since e3159cad71 (package/libopenssl: move target arch selection to Config.in), we have a Config.in that contains a few options to configure libopenssl (openSSL, the original). As such, it makes sense to move the remaining options there too. We also move the condition there, mimicking what is done for the external toolchains' options too. Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr> Cc: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Cc: Matt Weber <matthew.weber@rockwellcollins.com> Acked-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
2019-12-31 04:36:14 +08:00
endif # BR2_PACKAGE_LIBOPENSSL
Reference in New Issue Copy Permalink