summaryrefslogtreecommitdiffstats
path: root/package/openssl/openssl.mk
Commit message (Collapse)AuthorAgeFilesLines
* openssl: security bump to version 1.0.0iGustavo Zacarias2012-04-191-1/+1
| | | | | | | Fix for CVE-2012-2110 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: security bump to version 1.0.0hGustavo Zacarias2012-03-151-1/+1
| | | | | | | Bump to version 1.0.0h to fix CMS and S/MIME Bleichenbacher attack (CVE-2012-0884) Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: security bump to version 1.0.0gGustavo Zacarias2012-01-221-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: security bump to version 1.0.0fGustavo Zacarias2012-01-061-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package: remove useless arguments from GENTARGETSThomas Petazzoni2011-09-291-1/+1
| | | | | | | | | | Thanks to the pkgparentdir and pkgname functions, we can rewrite the GENTARGETS macro in a way that avoids the need for each package to repeat its name and the directory in which it is present. [Peter: pkgdir->pkgparentdir] Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: bump to 1.0.0eYegor Yefremov2011-09-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes between 1.0.0d and 1.0.0e [6 Sep 2011] *) Fix bug where CRLs with nextUpdate in the past are sometimes accepted by initialising X509_STORE_CTX properly. (CVE-2011-3207) [Kaspar Brand <ossl@velox.ch>] *) Fix SSL memory handling for (EC)DH ciphersuites, in particular for multi-threaded use of ECDH. (CVE-2011-3210) [Adam Langley (Google)] *) Fix x509_name_ex_d2i memory leak on bad inputs. [Bodo Moeller] *) Remove hard coded ecdsaWithSHA1 signature tests in ssl code and check signature public key algorithm by using OID xref utilities instead. Before this you could only use some ECC ciphersuites with SHA1 only. [Steve Henson] *) Add protection against ECDSA timing attacks as mentioned in the paper by Billy Bob Brumley and Nicola Tuveri, see: http://eprint.iacr.org/2011/232.pdf [Billy Bob Brumley and Nicola Tuveri] Signed-off-by: Yegor Yefremov <yegorslists@googlemail.com> Acked-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: fix compilation for i386Gustavo Zacarias2011-04-011-0/+5
| | | | | | | | | | | | Closes #3445. OpenSSL emits bswap instructions when building for i386 targets which unfortunately is only available on 486+ class processors. Since the normal workaround is detected at build time and we are cross compiling we need to specify this. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: fix libdir issueGustavo Zacarias2011-02-231-0/+1
| | | | | | | | | | | | | Closes #3205 OpenSSL's build system tries to be too wise for it's own good when guessing what libdir should be. This causes problems like the one reported in bug #3205 so just specify libdir to point to /lib (since it's prefixed it would finally be /usr/lib) since it should be present on 32 and 64 bit targets. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: security bump to 1.0.0dGustavo Zacarias2011-02-091-1/+1
| | | | | | | | | | CVE-2011-0014 http://www.openssl.org/news/secadv_20110208.txt OCSP stapling vulnerability in OpenSSL Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: add ocf supportGustavo Zacarias2011-01-171-1/+13
| | | | | | | | | | | | | | | | Enable OCF (cryptodev) support for openssl as an option. This requires a patched kernel to export hardware acceleration for openssl to use it. If you lack a patched kernel or support it won't break anything, it will simply fall back to the default software engine from openssl, you'll just have a slightly bigger libssl/libcrypto. Tested with 20100325 release + 20101223 patch from the mailing list. [Peter: slightly tweaked .mk] Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: security bump to version 1.0.0cGustavo Zacarias2010-12-111-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: security bump to version 1.0.0bGustavo Zacarias2010-11-191-1/+1
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: Bump to 1.0.0aGustavo Zacarias2010-10-181-6/+15
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* Remove code specific to removed architecturesThomas Petazzoni2010-08-311-3/+0
| | | | Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* openssl: don't override the CC passed at configure timeThomas Petazzoni2010-07-071-2/+2
| | | | Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* openssl: bump version, enable mdc2+camellia+tlsextGustavo Zacarias2010-06-061-2/+4
| | | | | | | Closes #1951 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: convert to the generic infrastructureThomas Petazzoni2010-05-021-34/+51
| | | | | | | | OpenSSL is not using the autotools as its build system. Therefore, we must use the generic infrastructure instead of the autotools one. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: bump versionGustavo Zacarias2010-03-311-1/+1
| | | | | | | Closes #1411 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: bump to 0.9.8l + security fixesGustavo Zacarias2009-11-151-1/+1
| | | | | | | Closes #703 Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: use generic support for avr32Peter Korsgaard2009-09-231-3/+0
| | | | | | | Upstream openssl doesn't have avr32 support, and we dropped the avr32 optimization patch some time ago. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: remove invalid quotes around x86_64Peter Korsgaard2009-07-291-1/+1
| | | | | | Thanks for Thomas for noticing. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* openssl: fix arch handlingPeter Korsgaard2009-07-291-4/+4
| | | | | | | | | Closes #497 Use ARCH instead of BR2_ARCH as BR2_ARCH won't match because of the surrounding quotes. Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
* package/openssl: fix uninstallPeter Korsgaard2009-04-281-0/+8
|
* package/openssl: STRIP_STRIP_ALL should be used for binariesPeter Korsgaard2009-04-281-1/+1
|
* package/openssl: also strip libraries with _OPENSSL_BIN is enabledPeter Korsgaard2009-04-281-3/+3
|
* package/openssl: make sure TARGET_CFLAGS are usedPeter Korsgaard2009-04-281-1/+3
| | | | | | | | And remove the unnedded c_rehash binary while we're at it. Patch by Gustavo Zacarias <gustavo@zacarias.com.br>, closes #307. Saves ~250k on PPC with default config (E.G. -Os)
* openssl: bump versionPeter Korsgaard2009-04-071-1/+1
| | | | | | | Patch by Gustavo Zacarias <gustavo@zacarias.com.ar>, closes #217 Fixes multiple security flaws - See http://www.openssl.org/news/secadv_20090325.txt for details.
* openssl: strip librariesPeter Korsgaard2009-03-151-0/+6
|
* openssl: misc fixesPeter Korsgaard2009-03-051-1/+1
| | | | | | | | | | Patch by Gustavo Zacarias <gustavo@zacarias.com.ar> Closes #151. * Avoid fips directory completely since it just installs source file cruft inlib * Point openssldir to a more friendly and common /etc/ssl rather than /usr/lib/ssl
* Bump version to 0.9.8jHamish Moffatt2009-02-241-1/+1
|
* openssl: fix architecture specified when configuring opensslHans-Christian Egtvedt2008-10-131-5/+13
| | | | | | | | | | | | | This patch will default to linux-generic32, unless a known optimized architecture is selected. As of today it will select optimized config for; avr32, ia64, powerpc and x86_64. This fixes bug #5344. Signed-off-by: Hans-Christian Egtvedt <hans-christian.egtvedt@atmel.com>
* openssl: fix compiling OpenSSL for i386 architectureHans-Christian Egtvedt2008-10-071-6/+1
| | | | | | | | This patch will use linux-generic32 for all i386 target architectures, which fixes bug #5274. Signed-off-by: Hans-Christian Egtvedt <hans-christian.egtvedt@atmel.com>
* openssl: convert to Makefile.autotools.in and bump version to 0.9.8gHans-Christian Egtvedt2008-09-241-89/+35
| | | | | | | | | | This patch converts building of OpenSSL to use Makefile.autotools.in and bumps the version to 0.9.8g. The patches are updated to reflect this version upgrade. A kconfig option for adding the OpenSSL engines is also added. Signed-off-by: Hans-Christian Egtvedt <hans-christian.egtvedt@atmel.com>
* openssl: re-revert r22644Peter Korsgaard2008-07-081-1/+0
| | | | | The build without CONFIG_UPDATE has now been verified on arm/armeb/avr32, so lets revert this for good.
* Revert patch which breaks AVR32 buildUlf Samuelsson2008-07-081-0/+1
|
* Don't $(CONFIG_UPDATE) openssl as it doesn't use autotools anywayHamish Moffatt2008-07-081-1/+0
|
* Fix bug [1899] Add table entry to allow openssl to build for AVR32, disabled ↵Ulf Samuelsson2008-07-051-0/+3
| | | | softfloat
* Update config.* of opensslUlf Samuelsson2008-07-051-0/+1
|
* buildroot: cleanup <package>-clean targets.Peter Korsgaard2008-03-271-3/+3
| | | | Based on input from Arndt Kritzner & Bernhard Fischer.
* - just use the strip binary to avoid confusing libtool (quotes)Bernhard Reutner-Fischer2007-10-011-2/+2
| | | | - use $(STRIPCMD) in packages to avoid clashes with $(STRIP)
* - global whitespace trimmingBernhard Reutner-Fischer2007-08-221-5/+5
|
* - semicolon touchup. No other changesBernhard Reutner-Fischer2007-08-221-6/+6
|
* Remove switches if sstrip is runUlf Samuelsson2007-08-211-2/+2
|
* Store openssl files in /usr/lib/sslUlf Samuelsson2007-08-131-1/+3
|
* Bump version of openssl, add threadsUlf Samuelsson2007-08-111-2/+2
|
* Use <package>_VERSION in all <package>.mk instead of <package>_VERUlf Samuelsson2007-07-111-3/+3
|
* - install some more stuff that goes into staging_dir into the proper place.Bernhard Reutner-Fischer2007-04-161-24/+31
| | | | First hunk of fixes for bug #1290
* - hit awk on steroids with a clue baitBernhard Reutner-Fischer2007-04-061-1/+2
|
* - add and use BR2_BZCAT config option.Bernhard Reutner-Fischer2006-11-171-1/+2
|
* fix i686 targets [again] bug 595Mike Frysinger2005-12-291-3/+3
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-05 04:14:09 +0000