linux/poky.git/meta/recipes-connectivity/openssl, branch zeus-next2

openssl: Fix reproducibility issue

2020-02-11T23:05:13+00:00

There was a build architecture leaking into the target ptest which could vary depending upon host. Remove it as its cosmetic. [YOCTO #13770] (From OE-Core rev: 37db519eedb7eb5cd4f14d05f30f5d580aa7458d) (From OE-Core rev: c31c676319812e6fc036741db2ab8e16eccff723) (From OE-Core rev: 94113433887dab43d54f3a76b1e0aa1bacb0d086) Signed-off-by: Richard Purdie Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

openssl: Whitelist CVE-2019-0190

2019-12-31T10:37:23+00:00

This is only a problem with older Apache versions. (From OE-Core rev: 492d43296b15514ec72dfb15f37c6d2ab1fbbae3) (From OE-Core rev: 9c693dbc0107241613f6ff694046592057c9b377) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssl: fix CVE-2019-1551

2019-12-31T10:37:23+00:00

(From OE-Core rev: 7a8165e0d833bc64c824fa2aee2ddad21d866675) (From OE-Core rev: 2187dfb20b12b6de72c5515eca6877319734f752) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssl: make OPENSSL_ENGINES match install path

2019-10-29T09:08:18+00:00

Set OPENSSL_ENGINES to the path where engines are actually installed. (From OE-Core rev: 4aa5d551af3d0eb800c1640c98cbd591224726f8) Signed-off-by: George McCollister Signed-off-by: Ross Burton (cherry picked from commit 59565fec0b3f3e24eb01c03b671913599cd3134d) Signed-off-by: Armin Kuster Signed-off-by: Richard Purdie

openssl: Enable os option for with-rand-seed as well

2019-09-18T11:09:02+00:00

with openSSL 1.1.1d we start seeing errors like Error Generating Key 139979727451584:error:2406C06E:random number generator:RAND_DRBG_instantiate:error retrieving entropy:../openssl-1.1.1d/crypto/rand/drbg_lib.c:342: when using openssl from openssl-native on build hosts, this is due to limiting the random seed to devrandom, to support older hosts, since the option allows to have a comma separated list of methods to try, we can try the default first and if that fails then fallback to devrandom, this will ensure that it keeps working with build systems which dont support getrandom() (From OE-Core rev: 8b4edb8552b238680d8dcef565e830a8e28a223c) Signed-off-by: Khem Raj Cc: Adrian Bunk Cc: Alexander Kanavin Signed-off-by: Richard Purdie

openssl: Upgrade 1.1.1c -> 1.1.1d

2019-09-16T22:02:45+00:00

Backported patches removed. (From OE-Core rev: 24174c6dafefec4ff3bd79b3c871b17cbfa3e840) Signed-off-by: Adrian Bunk Signed-off-by: Richard Purdie

openssl: fix valgrind errors on v1.1.1c

2019-07-22T16:31:03+00:00

Running valgrind against code using Openssl v1.1.1c reports a large number of uninitialized memory errors. This fix from upstream solves this problem. (From OE-Core rev: 8081d645353ed934a0158329f2f36ea49d663e19) Signed-off-by: Laurent Bonnans Signed-off-by: Richard Purdie

openssl: set CVE vendor to openssl

2019-07-19T07:41:40+00:00

Differentiate it from openssl gem for Ruby. (From OE-Core rev: 2ec481b19d6c9c20ce6573de77ae89e576d6b8cb) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssl: fix multilib files conflict

2019-07-11T08:32:50+00:00

Inherit multilib_script to fix openssl multilib files conflict issue: | Error: Transaction check error: | file /usr/bin/c_rehash conflicts between attempted installs of | lib32-openssl-bin-1.1.1c-r0.core2_32 and openssl-bin-1.1.1c-r0.core2_64 (From OE-Core rev: 01e17130f68a2b96c852756ea3dabef4164bc114) Signed-off-by: Kai Kang Signed-off-by: Richard Purdie

openssl: Fix a build bug on aarch64BE.

2019-06-19T11:46:44+00:00

Fix bug as following on aarch64BE: Error: operand 1 must be an integer register -- `rev v31.16b,v31.16b' (From OE-Core rev: f29572f70a89fd88ab3898d334c126422b66755c) Signed-off-by: Lei Maohui Signed-off-by: Richard Purdie