linux/poky.git/meta/recipes-connectivity/openssl, branch yocto-3.3.2

openssl: update to 1.1.1k to fix CVE-2021-3450 and CVE-2021-3449

2021-03-28T21:28:27+00:00

Only security issues fixed in this release according to https://www.openssl.org/news/cl111.txt (From OE-Core rev: 557d956743ecf5e1d002ae0b2135b1307736b7c8) Signed-off-by: Mikko Rapeli Signed-off-by: Richard Purdie

openssl: Enable building for RISC-V 32-bit

2021-03-11T14:00:36+00:00

(From OE-Core rev: 22691df60abe22bafb83f391549ee9e5026cabef) Signed-off-by: Alistair Francis Signed-off-by: Richard Purdie

openssl: address ptest failures caused by perl 5.32.1

2021-03-02T14:15:33+00:00

For some reason the new perl no longer has . in list of directories searched in 'require', and so the file needs to be copied where perl can find it. (From OE-Core rev: 2ae879ddb72bd316e49a8200e99887dadb02b3dc) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

openssl: upgrade 1.1.1i -> 1.1.1j

2021-02-23T22:35:00+00:00

(From OE-Core rev: a67635ca2c7a016efcf450e4011f2032883e995d) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

openssl: re-enable whirlpool

2021-02-06T09:03:00+00:00

* it breaks KDE's qca and dependencies * it is not deprecated. Openssl 3.0 (currently alpha) will deprecate whirlpool [1] https://www.openssl.org/news/changelog.html#openssl-30 (From OE-Core rev: bc02baadeee477b10eceae62985af4f4c323506e) Signed-off-by: Andreas Müller Signed-off-by: Richard Purdie

openssl: set CVE_VERSION_SUFFIX

2021-02-03T21:45:49+00:00

(From OE-Core rev: 17df664a32a74f17baaef8c31ac23adec2d6255f) Signed-off-by: Lee Chee Yang Signed-off-by: Richard Purdie

openssl: Enable srp algorithm

2021-01-27T10:17:45+00:00

This is still needed by libest in meta-security (From OE-Core rev: 1242b04e97fbef3d926bcf706ac99a580109e58b) Signed-off-by: Armin Kuster Cc: Shachar Menashe Signed-off-by: Richard Purdie

openssl: Enable psk for qtbase

2021-01-12T17:44:17+00:00

TLS 1.3 implementation in qt5 uses psk so retain it for now (From OE-Core rev: ab2cc33331ee931e65a63a02cf034c1b8ee695ac) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

openssl: Enable rc4/rc2/bf/md4 algorithms

2021-01-12T17:44:16+00:00

They are still needed by several packages in meta-openembedded (From OE-Core rev: 52af41387f1c843e7677c0bb632b2b96f9793ebd) Signed-off-by: Khem Raj Cc: Shachar Menashe Signed-off-by: Richard Purdie

openssl: drop support for deprecated algorithms

2021-01-12T17:44:16+00:00

1. Drop support for many deprecated algorithms by default 2. Allow dropping support for TLS 1.0/1.1 via PACKAGECONFIG (From OE-Core rev: 304417a97db89d9ea4a41aa7c92b5a052896d63b) Signed-off-by: Shachar Menashe Signed-off-by: Richard Purdie