mirror of
https://github.com/OpenVPN/openvpn.git
synced 2024-12-18 05:54:02 +08:00
208c03ea14
MBEDTLS_VERSION, OPENSSL_VERSION were defined twice - in both .travis.yml and .travis/build-deps.sh files, the last one defined OPENSSL_VERSION via nonexistent OPENSSL_VERION variable, which lead us to use openssl-1.0.1 instead of openssl-1.0.2, I removed variable definition from build-deps.sh "cache: [ apt: true ]" is not a travis supported option, it was introduced by mistake, I removed it LD_LIBRARY_PATH was defined for the entire test run, it includes custom openssl build, which was picked by "wget", so "wget" could not verify SSL cert at https://www.openssl.org sometimes. We do not want wget to pick our custom LD_LIBRARY_PATH, so I moved that variable to "script" section LD_LIBRARY_PATH was defined for both linux and osx environments, for the second DYLD_LIBRARY_PATH must be defined instead v2: Upgrade openssl, mbedtls to the most recent versions v3: DYLD_LIBRARY_PATH was defined via LD_LIBRARY_PATH by mistake Acked-by: Selva Nair <selva.nair@gmail.com> Message-Id: <1485673091-7600-1-git-send-email-chipitsine@gmail.com> URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg13983.html Signed-off-by: David Sommerseth <davids@openvpn.net>
84 lines
2.2 KiB
Bash
Executable File
84 lines
2.2 KiB
Bash
Executable File
#!/bin/sh
|
|
set -eux
|
|
|
|
# Set defaults
|
|
PREFIX="${PREFIX:-${HOME}/opt}"
|
|
|
|
download_mbedtls () {
|
|
if [ ! -f "download-cache/mbedtls-${MBEDTLS_VERSION}-apache.tgz" ]; then
|
|
wget -P download-cache/ \
|
|
"https://tls.mbed.org/download/mbedtls-${MBEDTLS_VERSION}-apache.tgz"
|
|
fi
|
|
}
|
|
|
|
build_mbedtls () {
|
|
if [ "$(cat ${PREFIX}/.mbedtls-version)" != "${MBEDTLS_VERSION}" ]; then
|
|
tar zxf download-cache/mbedtls-${MBEDTLS_VERSION}-apache.tgz
|
|
(
|
|
cd "mbedtls-${MBEDTLS_VERSION}"
|
|
make
|
|
make install DESTDIR="${PREFIX}"
|
|
)
|
|
echo "${MBEDTLS_VERSION}" > "${PREFIX}/.mbedtls-version"
|
|
fi
|
|
}
|
|
|
|
download_openssl () {
|
|
if [ ! -f "download-cache/openssl-${OPENSSL_VERSION}.tar.gz" ]; then
|
|
wget -P download-cache/ \
|
|
"https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz"
|
|
fi
|
|
}
|
|
|
|
build_openssl_linux () {
|
|
tar zxf "download-cache/openssl-${OPENSSL_VERSION}.tar.gz"
|
|
(
|
|
cd "openssl-${OPENSSL_VERSION}/"
|
|
./config shared --openssldir="${PREFIX}" -DPURIFY
|
|
make all install_sw
|
|
)
|
|
}
|
|
|
|
build_openssl_osx () {
|
|
tar zxf "download-cache/openssl-${OPENSSL_VERSION}.tar.gz"
|
|
(
|
|
cd "openssl-${OPENSSL_VERSION}/"
|
|
./Configure darwin64-x86_64-cc shared \
|
|
--openssldir="${PREFIX}" -DPURIFY
|
|
make depend all install_sw
|
|
)
|
|
}
|
|
|
|
build_openssl () {
|
|
if [ "$(cat ${PREFIX}/.openssl-version)" != "${OPENSSL_VERSION}" ]; then
|
|
if [ "${TRAVIS_OS_NAME}" = "osx" ]; then
|
|
build_openssl_osx
|
|
elif [ "${TRAVIS_OS_NAME}" = "linux" ]; then
|
|
build_openssl_linux
|
|
fi
|
|
echo "${OPENSSL_VERSION}" > "${PREFIX}/.openssl-version"
|
|
fi
|
|
}
|
|
|
|
# Enable ccache
|
|
if [ "${TRAVIS_OS_NAME}" != "osx" ]; then
|
|
# ccache not available on osx, see:
|
|
# https://github.com/travis-ci/travis-ci/issues/5567
|
|
mkdir -p "${HOME}/bin"
|
|
ln -s "$(which ccache)" "${HOME}/bin/${CC}"
|
|
PATH="${HOME}/bin:${PATH}"
|
|
fi
|
|
|
|
# Download and build crypto lib
|
|
mkdir -p download-cache
|
|
if [ "${SSLLIB}" = "openssl" ]; then
|
|
download_openssl
|
|
build_openssl
|
|
elif [ "${SSLLIB}" = "mbedtls" ]; then
|
|
download_mbedtls
|
|
build_mbedtls
|
|
else
|
|
echo "Invalid crypto lib: ${SSLLIB}"
|
|
exit 1
|
|
fi
|