diff options
| author | Zoltán Böszörményi <zboszor@gmail.com> | 2022-03-02 10:27:36 +0100 |
|---|---|---|
| committer | Khem Raj <raj.khem@gmail.com> | 2022-03-03 08:50:19 -0800 |
| commit | f8a274732f3e315121b485e3629d3e14ee737aa9 (patch) | |
| tree | 1a7595ba9fd5c353200dff1241570409f8d899b3 /meta-oe | |
| parent | b49effc439cf8027ff42cb01655d394ca822a908 (diff) | |
| download | meta-openembedded-f8a274732f3e315121b485e3629d3e14ee737aa9.tar.gz | |
nodejs: Upgrade to 16.14.0
Remove two upstreamed patches.
Signed-off-by: Zoltán Böszörményi <zboszor@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'meta-oe')
| -rw-r--r-- | meta-oe/recipes-devtools/nodejs/nodejs/0001-crypto-fix-build-without-scrypt.patch | 38 | ||||
| -rw-r--r-- | meta-oe/recipes-devtools/nodejs/nodejs/0005-add-openssl-legacy-provider-option.patch | 165 | ||||
| -rw-r--r-- | meta-oe/recipes-devtools/nodejs/nodejs_16.14.0.bb (renamed from meta-oe/recipes-devtools/nodejs/nodejs_16.11.1.bb) | 6 |
3 files changed, 2 insertions, 207 deletions
diff --git a/meta-oe/recipes-devtools/nodejs/nodejs/0001-crypto-fix-build-without-scrypt.patch b/meta-oe/recipes-devtools/nodejs/nodejs/0001-crypto-fix-build-without-scrypt.patch deleted file mode 100644 index 3a2719af34..0000000000 --- a/meta-oe/recipes-devtools/nodejs/nodejs/0001-crypto-fix-build-without-scrypt.patch +++ /dev/null | |||
| @@ -1,38 +0,0 @@ | |||
| 1 | From 048203c97009c907ff3891f6ffa8f375fcf1045c Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Martin Jansa <Martin.Jansa@gmail.com> | ||
| 3 | Date: Tue, 26 Oct 2021 08:34:39 -0700 | ||
| 4 | Subject: [PATCH] crypto: fix build without scrypt | ||
| 5 | |||
| 6 | * add missing semicolon to fix: | ||
| 7 | In file included from ../src/node_crypto.h:47, | ||
| 8 | from ../src/node.cc:46: | ||
| 9 | ../src/crypto/crypto_scrypt.h:80:2: | ||
| 10 | error: expected ';' after struct definition | ||
| 11 | 80 | } | ||
| 12 | | ^ | ||
| 13 | | ; | ||
| 14 | |||
| 15 | and fix typo in the comment | ||
| 16 | |||
| 17 | Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> | ||
| 18 | Upstream-Status: Submitted [https://github.com/nodejs/node/pull/40613] | ||
| 19 | |||
| 20 | --- | ||
| 21 | src/crypto/crypto_scrypt.h | 4 ++-- | ||
| 22 | 1 file changed, 2 insertions(+), 2 deletions(-) | ||
| 23 | |||
| 24 | diff --git a/src/crypto/crypto_scrypt.h b/src/crypto/crypto_scrypt.h | ||
| 25 | index 4ca888e31d..3d185637f4 100644 | ||
| 26 | --- a/src/crypto/crypto_scrypt.h | ||
| 27 | +++ b/src/crypto/crypto_scrypt.h | ||
| 28 | @@ -77,8 +77,8 @@ struct ScryptJob { | ||
| 29 | static void Initialize( | ||
| 30 | Environment* env, | ||
| 31 | v8::Local<v8::Object> target) {} | ||
| 32 | -} | ||
| 33 | -#endif // !OPENSSL_NO_SCRIPT | ||
| 34 | +}; | ||
| 35 | +#endif // !OPENSSL_NO_SCRYPT | ||
| 36 | |||
| 37 | } // namespace crypto | ||
| 38 | } // namespace node | ||
diff --git a/meta-oe/recipes-devtools/nodejs/nodejs/0005-add-openssl-legacy-provider-option.patch b/meta-oe/recipes-devtools/nodejs/nodejs/0005-add-openssl-legacy-provider-option.patch deleted file mode 100644 index 2e66a02828..0000000000 --- a/meta-oe/recipes-devtools/nodejs/nodejs/0005-add-openssl-legacy-provider-option.patch +++ /dev/null | |||
| @@ -1,165 +0,0 @@ | |||
| 1 | From 86d1c0cc6a5dcf57e413a1cc1c29203e87cf9a14 Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Daniel Bevenius <daniel.bevenius@gmail.com> | ||
| 3 | Date: Sat, 16 Oct 2021 08:50:16 +0200 | ||
| 4 | Subject: [PATCH] src: add --openssl-legacy-provider option | ||
| 5 | |||
| 6 | This commit adds an option to Node.js named --openssl-legacy-provider | ||
| 7 | and if specified will load OpenSSL 3.0 Legacy provider. | ||
| 8 | |||
| 9 | $ ./node --help | ||
| 10 | ... | ||
| 11 | --openssl-legacy-provider enable OpenSSL 3.0 legacy provider | ||
| 12 | |||
| 13 | Example usage: | ||
| 14 | |||
| 15 | $ ./node --openssl-legacy-provider -p 'crypto.createHash("md4")' | ||
| 16 | Hash { | ||
| 17 | _options: undefined, | ||
| 18 | [Symbol(kHandle)]: Hash {}, | ||
| 19 | [Symbol(kState)]: { [Symbol(kFinalized)]: false } | ||
| 20 | } | ||
| 21 | |||
| 22 | Co-authored-by: Richard Lau <rlau@redhat.com> | ||
| 23 | |||
| 24 | Refs: https://github.com/nodejs/node/issues/40455 | ||
| 25 | --- | ||
| 26 | doc/api/cli.md | 10 ++++++++++ | ||
| 27 | src/crypto/crypto_util.cc | 10 ++++++++++ | ||
| 28 | src/node_options.cc | 10 ++++++++++ | ||
| 29 | src/node_options.h | 7 +++++++ | ||
| 30 | .../test-process-env-allowed-flags-are-documented.js | 5 +++++ | ||
| 31 | 5 files changed, 42 insertions(+) | ||
| 32 | |||
| 33 | diff --git a/doc/api/cli.md b/doc/api/cli.md | ||
| 34 | index 74057706bf8d..608b9cdeddf1 100644 | ||
| 35 | --- a/doc/api/cli.md | ||
| 36 | +++ b/doc/api/cli.md | ||
| 37 | @@ -652,6 +652,14 @@ Load an OpenSSL configuration file on startup. Among other uses, this can be | ||
| 38 | used to enable FIPS-compliant crypto if Node.js is built | ||
| 39 | against FIPS-enabled OpenSSL. | ||
| 40 | |||
| 41 | +### `--openssl-legacy-provider` | ||
| 42 | +<!-- YAML | ||
| 43 | +added: REPLACEME | ||
| 44 | +--> | ||
| 45 | + | ||
| 46 | +Enable OpenSSL 3.0 legacy provider. For more information please see | ||
| 47 | +[providers readme][]. | ||
| 48 | + | ||
| 49 | ### `--pending-deprecation` | ||
| 50 | <!-- YAML | ||
| 51 | added: v8.0.0 | ||
| 52 | @@ -1444,6 +1452,7 @@ Node.js options that are allowed are: | ||
| 53 | * `--no-warnings` | ||
| 54 | * `--node-memory-debug` | ||
| 55 | * `--openssl-config` | ||
| 56 | +* `--openssl-legacy-provider` | ||
| 57 | * `--pending-deprecation` | ||
| 58 | * `--policy-integrity` | ||
| 59 | * `--preserve-symlinks-main` | ||
| 60 | @@ -1814,6 +1823,7 @@ $ node --max-old-space-size=1536 index.js | ||
| 61 | [emit_warning]: process.md#process_process_emitwarning_warning_type_code_ctor | ||
| 62 | [jitless]: https://v8.dev/blog/jitless | ||
| 63 | [libuv threadpool documentation]: https://docs.libuv.org/en/latest/threadpool.html | ||
| 64 | +[providers readme]: https://github.com/openssl/openssl/blob/openssl-3.0.0/README-PROVIDERS.md | ||
| 65 | [remote code execution]: https://www.owasp.org/index.php/Code_Injection | ||
| 66 | [timezone IDs]: https://en.wikipedia.org/wiki/List_of_tz_database_time_zones | ||
| 67 | [ways that `TZ` is handled in other environments]: https://www.gnu.org/software/libc/manual/html_node/TZ-Variable.html | ||
| 68 | diff --git a/src/crypto/crypto_util.cc b/src/crypto/crypto_util.cc | ||
| 69 | index 7e0c8ba3eb60..796ea3025e41 100644 | ||
| 70 | --- a/src/crypto/crypto_util.cc | ||
| 71 | +++ b/src/crypto/crypto_util.cc | ||
| 72 | @@ -136,6 +136,16 @@ void InitCryptoOnce() { | ||
| 73 | } | ||
| 74 | #endif | ||
| 75 | |||
| 76 | +#if OPENSSL_VERSION_MAJOR >= 3 | ||
| 77 | + // --openssl-legacy-provider | ||
| 78 | + if (per_process::cli_options->openssl_legacy_provider) { | ||
| 79 | + OSSL_PROVIDER* legacy_provider = OSSL_PROVIDER_load(nullptr, "legacy"); | ||
| 80 | + if (legacy_provider == nullptr) { | ||
| 81 | + fprintf(stderr, "Unable to load legacy provider.\n"); | ||
| 82 | + } | ||
| 83 | + } | ||
| 84 | +#endif | ||
| 85 | + | ||
| 86 | OPENSSL_init_ssl(0, settings); | ||
| 87 | OPENSSL_INIT_free(settings); | ||
| 88 | settings = nullptr; | ||
| 89 | diff --git a/src/node_options.cc b/src/node_options.cc | ||
| 90 | index 00bdc6688a4c..3363860919a9 100644 | ||
| 91 | --- a/src/node_options.cc | ||
| 92 | +++ b/src/node_options.cc | ||
| 93 | @@ -4,6 +4,9 @@ | ||
| 94 | #include "env-inl.h" | ||
| 95 | #include "node_binding.h" | ||
| 96 | #include "node_internals.h" | ||
| 97 | +#if HAVE_OPENSSL | ||
| 98 | +#include "openssl/opensslv.h" | ||
| 99 | +#endif | ||
| 100 | |||
| 101 | #include <errno.h> | ||
| 102 | #include <sstream> | ||
| 103 | @@ -809,6 +812,13 @@ PerProcessOptionsParser::PerProcessOptionsParser( | ||
| 104 | &PerProcessOptions::secure_heap_min, | ||
| 105 | kAllowedInEnvironment); | ||
| 106 | #endif | ||
| 107 | +#if OPENSSL_VERSION_MAJOR >= 3 | ||
| 108 | + AddOption("--openssl-legacy-provider", | ||
| 109 | + "enable OpenSSL 3.0 legacy provider", | ||
| 110 | + &PerProcessOptions::openssl_legacy_provider, | ||
| 111 | + kAllowedInEnvironment); | ||
| 112 | + | ||
| 113 | +#endif // OPENSSL_VERSION_MAJOR | ||
| 114 | AddOption("--use-largepages", | ||
| 115 | "Map the Node.js static code to large pages. Options are " | ||
| 116 | "'off' (the default value, meaning do not map), " | ||
| 117 | diff --git a/src/node_options.h b/src/node_options.h | ||
| 118 | index fd772478d04d..1c0e018ab16f 100644 | ||
| 119 | --- a/src/node_options.h | ||
| 120 | +++ b/src/node_options.h | ||
| 121 | @@ -11,6 +11,10 @@ | ||
| 122 | #include "node_mutex.h" | ||
| 123 | #include "util.h" | ||
| 124 | |||
| 125 | +#if HAVE_OPENSSL | ||
| 126 | +#include "openssl/opensslv.h" | ||
| 127 | +#endif | ||
| 128 | + | ||
| 129 | namespace node { | ||
| 130 | |||
| 131 | class HostPort { | ||
| 132 | @@ -251,6 +255,9 @@ class PerProcessOptions : public Options { | ||
| 133 | bool enable_fips_crypto = false; | ||
| 134 | bool force_fips_crypto = false; | ||
| 135 | #endif | ||
| 136 | +#if OPENSSL_VERSION_MAJOR >= 3 | ||
| 137 | + bool openssl_legacy_provider = false; | ||
| 138 | +#endif | ||
| 139 | |||
| 140 | // Per-process because reports can be triggered outside a known V8 context. | ||
| 141 | bool report_on_fatalerror = false; | ||
| 142 | diff --git a/test/parallel/test-process-env-allowed-flags-are-documented.js b/test/parallel/test-process-env-allowed-flags-are-documented.js | ||
| 143 | index 64626b71f019..8a4e35997907 100644 | ||
| 144 | --- a/test/parallel/test-process-env-allowed-flags-are-documented.js | ||
| 145 | +++ b/test/parallel/test-process-env-allowed-flags-are-documented.js | ||
| 146 | @@ -40,6 +40,10 @@ for (const line of [...nodeOptionsLines, ...v8OptionsLines]) { | ||
| 147 | } | ||
| 148 | } | ||
| 149 | |||
| 150 | +if (!common.hasOpenSSL3) { | ||
| 151 | + documented.delete('--openssl-legacy-provider'); | ||
| 152 | +} | ||
| 153 | + | ||
| 154 | // Filter out options that are conditionally present. | ||
| 155 | const conditionalOpts = [ | ||
| 156 | { | ||
| 157 | @@ -47,6 +51,7 @@ const conditionalOpts = [ | ||
| 158 | filter: (opt) => { | ||
| 159 | return [ | ||
| 160 | '--openssl-config', | ||
| 161 | + common.hasOpenSSL3 ? '--openssl-legacy-provider' : '', | ||
| 162 | '--tls-cipher-list', | ||
| 163 | '--use-bundled-ca', | ||
| 164 | '--use-openssl-ca', | ||
| 165 | |||
diff --git a/meta-oe/recipes-devtools/nodejs/nodejs_16.11.1.bb b/meta-oe/recipes-devtools/nodejs/nodejs_16.14.0.bb index 7d8f08a385..9514ec499a 100644 --- a/meta-oe/recipes-devtools/nodejs/nodejs_16.11.1.bb +++ b/meta-oe/recipes-devtools/nodejs/nodejs_16.14.0.bb | |||
| @@ -1,7 +1,7 @@ | |||
| 1 | DESCRIPTION = "nodeJS Evented I/O for V8 JavaScript" | 1 | DESCRIPTION = "nodeJS Evented I/O for V8 JavaScript" |
| 2 | HOMEPAGE = "http://nodejs.org" | 2 | HOMEPAGE = "http://nodejs.org" |
| 3 | LICENSE = "MIT & ISC & BSD-2-Clause & BSD-3-Clause & Artistic-2.0" | 3 | LICENSE = "MIT & ISC & BSD-2-Clause & BSD-3-Clause & Artistic-2.0" |
| 4 | LIC_FILES_CHKSUM = "file://LICENSE;md5=12f6b053282af96a218353ae7aff7cd8" | 4 | LIC_FILES_CHKSUM = "file://LICENSE;md5=6ba5b21ac7a505195ca69344d3d7a94a" |
| 5 | 5 | ||
| 6 | DEPENDS = "openssl" | 6 | DEPENDS = "openssl" |
| 7 | DEPENDS:append:class-target = " qemu-native" | 7 | DEPENDS:append:class-target = " qemu-native" |
| @@ -20,12 +20,10 @@ SRC_URI = "http://nodejs.org/dist/v${PV}/node-v${PV}.tar.xz \ | |||
| 20 | file://0001-Disable-running-gyp-files-for-bundled-deps.patch \ | 20 | file://0001-Disable-running-gyp-files-for-bundled-deps.patch \ |
| 21 | file://0002-Install-both-binaries-and-use-libdir.patch \ | 21 | file://0002-Install-both-binaries-and-use-libdir.patch \ |
| 22 | file://0004-v8-don-t-override-ARM-CFLAGS.patch \ | 22 | file://0004-v8-don-t-override-ARM-CFLAGS.patch \ |
| 23 | file://0005-add-openssl-legacy-provider-option.patch \ | ||
| 24 | file://big-endian.patch \ | 23 | file://big-endian.patch \ |
| 25 | file://mips-less-memory.patch \ | 24 | file://mips-less-memory.patch \ |
| 26 | file://system-c-ares.patch \ | 25 | file://system-c-ares.patch \ |
| 27 | file://0001-liftoff-Correct-function-signatures.patch \ | 26 | file://0001-liftoff-Correct-function-signatures.patch \ |
| 28 | file://0001-crypto-fix-build-without-scrypt.patch \ | ||
| 29 | " | 27 | " |
| 30 | SRC_URI:append:class-target = " \ | 28 | SRC_URI:append:class-target = " \ |
| 31 | file://0002-Using-native-binaries.patch \ | 29 | file://0002-Using-native-binaries.patch \ |
| @@ -36,7 +34,7 @@ SRC_URI:append:toolchain-clang:x86 = " \ | |||
| 36 | SRC_URI:append:toolchain-clang:powerpc64le = " \ | 34 | SRC_URI:append:toolchain-clang:powerpc64le = " \ |
| 37 | file://0001-ppc64-Do-not-use-mminimal-toc-with-clang.patch \ | 35 | file://0001-ppc64-Do-not-use-mminimal-toc-with-clang.patch \ |
| 38 | " | 36 | " |
| 39 | SRC_URI[sha256sum] = "67587f4de25e30a9cc0b51a6033eca3bc82d7b4e0d79bb84a265e88f76ab6278" | 37 | SRC_URI[sha256sum] = "05eb64193e391fa8a2c159c0f60c171824715165f80c67fcab9dbc944e30c623" |
| 40 | 38 | ||
| 41 | S = "${WORKDIR}/node-v${PV}" | 39 | S = "${WORKDIR}/node-v${PV}" |
| 42 | 40 | ||
