[PATCH] curl: Disable crypto related features

[PATCH] curl: Disable crypto related features

[Cooper Jr., Franklin]

[-- Attachment #1.1: Type: text/plain, Size: 117 bytes --]



Regards,
Franklin Cooper Jr.
Texas Instruments
Application Engineer
fcooper@ti.com<mailto:fcooper@ti.com>


[-- Attachment #1.2: Type: text/html, Size: 2023 bytes --]

[-- Attachment #2: 0001-curl-Disable-crypto-related-features.patch --]
[-- Type: application/octet-stream, Size: 1672 bytes --]

From 5e13efa56b4df2d8f5d640e1d8c3587ac0bf3d5a Mon Sep 17 00:00:00 2001
From: Franklin S Cooper Jr <fcooper@ti.com>
Date: Tue, 31 Jul 2012 13:11:54 -0500
Subject: [PATCH] curl: Disable crypto related features

Signed-off-by: Franklin S Cooper Jr <fcooper@ti.com>
---
 .../recipes-support/curl/curl_7.24.0.bbappend      |   28 ++++++++++++++++++++
 1 files changed, 28 insertions(+), 0 deletions(-)
 create mode 100644 meta-arago-distro/recipes-support/curl/curl_7.24.0.bbappend

diff --git a/meta-arago-distro/recipes-support/curl/curl_7.24.0.bbappend b/meta-arago-distro/recipes-support/curl/curl_7.24.0.bbappend
new file mode 100644
index 0000000..b9d8ae5
--- /dev/null
+++ b/meta-arago-distro/recipes-support/curl/curl_7.24.0.bbappend
@@ -0,0 +1,28 @@
+PR_append = "-arago0"
+
+# Disable all crypt support in curl due to export restrictions
+# Explicitly set the below variables to be sure all crypto related
+# features are disabled
+
+EXTRA_OECONF = "\
+            --disable-ares \
+            --enable-cookies \
+            --disable-crypto-auth \
+            --enable-dict \
+            --enable-file \
+            --enable-ftp \
+            --enable-http \
+            --disable-ipv6 \
+            --without-libidn \	
+            --without-libssh2 \	
+            --with-random=/dev/urandom \
+            --without-ssl \   		
+            --enable-telnet \
+            --enable-tftp \
+            --with-zlib=${STAGING_LIBDIR}/../ \
+            ${CURLGNUTLS} \
+		    "
+CURLGNUTLS = "--without-gnutls"
+
+# Removing gnutls dependency since that feature has been disabled
+DEPENDS := "${@d.getVar('DEPENDS', True).replace('gnutls', '')}"
-- 
1.7.0.4

Re: [PATCH] curl: Disable crypto related features

[Denys Dmytriyenko]

On Wed, Aug 01, 2012 at 10:41:22PM +0000, Cooper Jr., Franklin wrote:

It's hard to comment on the patch when it's not inline...

> +# Disable all crypt support in curl due to export restrictions

We no longer have export restrictions on cryptography, why do we need to 
disable it completely?

-- 
Denys

Re: [PATCH] curl: Disable crypto related features

[Cooper Jr., Franklin]

My understanding was that we had export restrictions and need approval per software/library. If our current sdk still requires these setting disabled then I assume there isn't an exemption for this software package.

On Aug 7, 2012, at 9:28 PM, "Denys Dmytriyenko" <denis@denix.org> wrote:

> On Wed, Aug 01, 2012 at 10:41:22PM +0000, Cooper Jr., Franklin wrote:
> 
> It's hard to comment on the patch when it's not inline...
> 
>> +# Disable all crypt support in curl due to export restrictions
> 
> We no longer have export restrictions on cryptography, why do we need to 
> disable it completely?
> 
> -- 
> Denys

Re: [PATCH] curl: Disable crypto related features

[Maupin, Chase]

Denys,

I don't believe curl has a TSU exemption filed.

Sincerely,
Chase Maupin
Software Applications
ARM MPU
e-mail: chase.maupin@ti.com
phone: (214) 567-2950

For support:
Forums - http://community.ti.com/forums/
Wiki - http://wiki.davincidsp.com/ 


> -----Original Message-----
> From: meta-arago-bounces@arago-project.org [mailto:meta-arago-
> bounces@arago-project.org] On Behalf Of Denys Dmytriyenko
> Sent: Tuesday, August 07, 2012 9:29 PM
> To: Cooper Jr., Franklin
> Cc: meta-arago@arago-project.org
> Subject: Re: [meta-arago] [PATCH] curl: Disable crypto related
> features
> 
> On Wed, Aug 01, 2012 at 10:41:22PM +0000, Cooper Jr., Franklin
> wrote:
> 
> It's hard to comment on the patch when it's not inline...
> 
> > +# Disable all crypt support in curl due to export restrictions
> 
> We no longer have export restrictions on cryptography, why do we
> need to
> disable it completely?
> 
> --
> Denys
> _______________________________________________
> meta-arago mailing list
> meta-arago@arago-project.org
> http://arago-project.org/cgi-bin/mailman/listinfo/meta-arago

Re: [PATCH] curl: Disable crypto related features

[Cooper Jr., Franklin]

[-- Attachment #1: Type: text/plain, Size: 393 bytes --]

Please ignore this patch. I will be sending an updated inline version of this patch.

From: Cooper Jr., Franklin
Sent: Wednesday, August 01, 2012 5:41 PM
To: meta-arago@arago-project.org
Cc: Cooper Jr., Franklin
Subject: [PATCH] curl: Disable crypto related features



Regards,
Franklin Cooper Jr.
Texas Instruments
Application Engineer
fcooper@ti.com<mailto:fcooper@ti.com>


[-- Attachment #2: Type: text/html, Size: 3059 bytes --]

Re: [PATCH] curl: Disable crypto related features

[Denys Dmytriyenko]

On Mon, Aug 27, 2012 at 02:55:01PM +0000, Cooper Jr., Franklin wrote:
> Please ignore this patch. I will be sending an updated inline version of 
> this patch.

Franklin,

You might want to wait a little bit on this one - we'll do it differently.

-- 
Denys