linux/poky.git/meta/recipes-connectivity/openssl/openssl10, branch master

openssl: Remove openssl10

2019-05-15T16:53:29+00:00

OpenSSL 1.0 has been replaced by 1.1, and it would be harder to security-support after the upstream EOL at the end of 2019. (From OE-Core rev: 0f7ffcaa18db7bc27f30c994aafbb9f4f8b2ae7e) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

openssl10: Fix mutliple include assumptions for des.h in opensslconf.h

2019-03-03T15:38:13+00:00

The fix is heavily based on Khem's previous fix for bn.h/BN_LLONG breakage: https://git.openembedded.org/openembedded-core/commit/?id=f787b0bb9b0626ddbf2ac94cb206c76716a3773d (From OE-Core rev: 914e1520bf9c45e14bce9993c9131a2c0702b9c9) Signed-off-by: Denys Dmytriyenko Cc: Khem Raj Signed-off-by: Richard Purdie

openssl10: Fix mutliple include assumptions for bn.h in opensslconf.h

2019-02-08T10:57:19+00:00

After adding #pragma once to wrapper header ( opensslconf.h ) this latent issue got to bite us, where it expect bn.h to be including openssl.h to define BN_* defines, which is fragile. This patch removes the contraints for nested includes for bn.h (From OE-Core rev: f787b0bb9b0626ddbf2ac94cb206c76716a3773d) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

openssl10: update to 1.0.2q

2018-11-23T23:35:18+00:00

(From OE-Core rev: 03149ca307282c22dd9ceb6fe3224bf586b03f6d) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

openssl: fix CVE-2018-0734 for both 1.0.2p and 1.1.1

2018-11-07T23:08:54+00:00

Backport patches to fix CVE-2018-0734 for both openssl 1.0.2p and 1.1.1 versions. (From OE-Core rev: 9d5c6a87eb72a8b8b8d417126a831565982ca9a6) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie

openssl10: fix compile error for debian-mips64

2018-09-20T12:41:32+00:00

Current configuration for debian-mips64 is not correct, 'SIXTY_FOUR_BIT_LONG' need to be specified. otherwise, it will cause other recipe like crda compile failed since use default THIRTY_TWO_BIT mode. (From OE-Core rev: 68f82ceb289149885eb0b04547cb4f79a680183b) Signed-off-by: Changqing Li Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

openssl: rename openssl 1.0.x to openssl10 and make openssl 1.1.x the default version

2018-09-04T10:03:56+00:00

I believe the time has come to do this: openssl 1.0 upstream support stops at the end of 2019, and we do not want a situation where a supported YP release contains an unsupported version of a critical security component. Openssl 1.0 can still be utilized by depending on 'openssl10' recipe. (From OE-Core rev: 876466145f2da93757ba3f92177d0f959f5fe975) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

openssl10: rename back to openssl and make it the default via PREFERRED_VERSION

2017-08-19T21:15:39+00:00

openssl 1.1 broke 3rd party layers a lot more than was expected; let's flip the switch at the start of next development cycle. Add a PROVIDES = "openssl10" to openssl 1.0 recipe; any dependency that is not compatible with 1.1 should use that in its DEPENDS, as the 1.0 recipe will later be renamed back to openssl10. This does not always work: http://lists.openembedded.org/pipermail/openembedded-core/2017-August/140957.html but for many recipes it does. (From OE-Core rev: 5585103c195104e85ed7ac1455bef91b2e88a04d) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

openssl: add a 1.1 version

2017-08-13T08:27:38+00:00

Existing openssl 1.0 recipe is renamed to openssl10; it will continue to be provided for as long as upstream supports it (and there are still several recipes which do not work with openssl 1.1 due to API differences). A few files (such as openssl binary) are no longer installed by openssl 1.0, because they clash with openssl 1.1. (From OE-Core rev: da1183f9fa5e06fbe66b5b31eb3313d5d35d11e3) Signed-off-by: Alexander Kanavin Signed-off-by: Ross Burton Signed-off-by: Richard Purdie