linux/poky.git/meta/recipes-connectivity/openssl/openssl_1.1.1.bb, branch master

openssl: update to 1.1.1a

2018-11-27T22:13:11+00:00

(From OE-Core rev: eec95f90093a6aa1d8be145e351fc9df4abef172) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

openssl: don't disable the AFALG engine based on host kernel

2018-11-23T23:35:18+00:00

Whether the AFALG engine (use of hardware crypto via AF_ALG) is enable or disable depends on whether the host kernel is 4.1 or above, which has no bearing on whether the target system supports it. Remove the complicated logic and simply enable/disable as requested. (From OE-Core rev: 4b6c566c0540fe8e560d0feeb9c765c0eb6e5182) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

openssl: output the configure data in do_configure

2018-11-23T23:35:18+00:00

To aid debugging configure, dump the configdata in do_configure. (From OE-Core rev: a385e6c47663854a375d061033efc856361f3dba) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

openssl-1.1.1: remove build path from version info

2018-11-14T11:14:39+00:00

The openssl build system generates buildinf.h containing the full compiler command line used to compile objects. This breaks reproducibility, as the compile command is baked into libcrypto, where it is used when running `openssl version -f`. Add stripped build variables for the compiler and cflags lines, and use those when generating buildinfo.h. This is based on a similar patch for older openssl versions: https://patchwork.openembedded.org/patch/147229/ (From OE-Core rev: cbc9b743a711f07c04cf9f5b2fc3f83da6d28913) Signed-off-by: Martin Hundebøll Signed-off-by: Richard Purdie

openssl: fix CVE-2018-0735 for 1.1.1

2018-11-07T23:08:54+00:00

Backport patch to fix CVE-2018-0735 for openssl 1.1.1. (From OE-Core rev: 78e751e33d3ec4394d96391e737cc39cad960ebe) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie

openssl: fix CVE-2018-0734 for both 1.0.2p and 1.1.1

2018-11-07T23:08:54+00:00

Backport patches to fix CVE-2018-0734 for both openssl 1.0.2p and 1.1.1 versions. (From OE-Core rev: 9d5c6a87eb72a8b8b8d417126a831565982ca9a6) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie

openssl: do an out-of-tree build

2018-10-20T21:40:16+00:00

OpenSSL supports out-of-tree builds so we should use them. This makes builds more reliable, and makes it easier to reduce the size of the ptest package. (From OE-Core rev: e028b4457781f60d8491a99a23011996fa913013) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

openssl: fix ptest

2018-10-20T21:40:16+00:00

Previously the ptest installation was simply a copy of the entire build tree, which is terribly ugly. Instead copy just the pieces we need, symlink to /usr as appropriate, and add missing dependencies. Remove PRIVATE_LIBS as we don't ship copies of the libraries now. Also remember to do 'set -x' in run-ptest, so if the tests fail the runner knows! [ YOCTO #12965 ] [ YOCTO #12967 ] (From OE-Core rev: 7831d2d3a1069b9d3a8d32e41f0a292e1add56ba) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

openssl: correct license comment

2018-10-16T19:35:43+00:00

The comment here stated that openssl is dual-licensed, but that would mean that either of the two licenses could be used which is *not* the case [1]. However LICENSE = "openssl" *is* correct because in OE that maps to a generic license file which includes both licenses, which makes sense because there isn't really any such thing as OpenSSL that would be covered by the "OpenSSL license" and not the "SSLeay license". Correct the comment to avoid any confusion. [1] https://www.openssl.org/source/license.html (From OE-Core rev: 6c821ce6ecae789320b31ec55c83907d6dd78359) Signed-off-by: Paul Eggleton Signed-off-by: Richard Purdie

openssl: use deterministic perl Text::Template module bundled by openssl source

2018-10-14T08:20:56+00:00

1. The building openssl requires to install perl Text::Template module(>=1.46), but Text::Template is a non core Perl module, openssl chooses to bundle Text::Template 1.46 into the source, for convenience. https://github.com/openssl/openssl/commit/8ff2af548303d311ce3591406111f77862875a60 2. While Text::Template < 1.46, the produced build files are gravely faulty. https://github.com/openssl/openssl/pull/6682 3. If host has installed Text::Template < 1.46 (such as CentOS-7.5 has Text:: Template 1.45). The mismatched old module was used although the right one in openssl source. So set PERL5LIB to use deterministic perl Text::Template module bundled by openssl source and ignore the one of host (From OE-Core rev: 5e7a75c226d4df0c066f04eaea014b8888c6bed2) Signed-off-by: Hongxu Jia Signed-off-by: Richard Purdie