From: Yann E. MORIN <yann.morin.1998@free.fr>
To: buildroot@busybox.net
Subject: [Buildroot] [PATCH 1/1] package/libopenssl: add option to enable some features
Date: Sun, 16 May 2021 19:09:55 +0200 [thread overview]
Message-ID: <20210516170955.GP2506@scaer> (raw)
In-Reply-To: <20200511132133.738039-1-erwan.gautron@bertin.fr>
Erwan, All,
Sorry for coming back so late on that one...
On 2020-05-11 15:21 +0200, Erwan GAUTRON spake thusly:
> From: "GAUTRON, Erwan" <erwan.gautron@bertin.fr>
>
> Openssl implements lot of algorithms that are not required in
> some emdedded devices and cyphers known as weak.
> Secure embedded systems shall disable unused algorithms (and weak algo)
> in order to be certified.
> This patch allows to select weak algorithms and mecanims to enable
> such as md5
> To ensure backward compatibility, all items are selected by default
>
> Signed-off-by: Erwan GAUTRON <erwan.gautron@bertin.fr>
I was pretty sure I had already seen that patch, and indeed I replied to
it, but that was to your July respin, while the three older attempts
were still available on patchowrk...
Because I was not sure I had already replied, I eventually applied this
iteration to the 'next' branch.
And then, when looking for the mail to reply to, I found my later
review...
My fault for taking so long to handle that patch. So...
Applied to next, thanks.
Regards,
Yann E. MORIN.
> ---
> package/libopenssl/Config.in | 147 +++++++++++++++++++++++++++++++
> package/libopenssl/libopenssl.mk | 24 +++++
> 2 files changed, 171 insertions(+)
>
> diff --git a/package/libopenssl/Config.in b/package/libopenssl/Config.in
> index 881518d1cb..184a365a46 100644
> --- a/package/libopenssl/Config.in
> +++ b/package/libopenssl/Config.in
> @@ -44,4 +44,151 @@ config BR2_PACKAGE_LIBOPENSSL_ENGINES
> help
> Install additional encryption engine libraries.
>
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_CHACHA
> + bool "enable CHACHA "
> + default y
> + help
> + Enable CHACHA cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC5
> + bool "enable RC5"
> + default y
> + help
> + Enable RC5 cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC2
> + bool "enable RC2"
> + default y
> + help
> + Enable RC2 cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC4
> + bool "enable RC4"
> + default y
> + help
> + Enable RC4 cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD2
> + bool "enable MD2"
> + default y
> + help
> + Enable MD2 cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD4
> + bool "enable MD4"
> + default y
> + help
> + Enable MD4 cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD5
> + bool "enable MD5"
> + default y
> + help
> + Enable MD5 cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_MDC2
> + bool "enable MDC2"
> + default y
> + help
> + Enable MDC2 cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_BLAKE2
> + bool "enable BLAKE2"
> + default y
> + help
> + Enable BLAKE2 cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_IDEA
> + bool "enable IDEA"
> + default y
> + help
> + Enable IDEA cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_SEED
> + bool "enable SEED"
> + default y
> + help
> + Enable SEED cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_DES
> + bool "enable DES"
> + default y
> + help
> + Enable DES cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_RMD160
> + bool "enable RMD160"
> + default y
> + help
> + Enable RMD160 cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_WHIRLPOOL
> + bool "enable WHIRLPOOL"
> + default y
> + help
> + Enable WHIRLPOOL cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_BLOWFISH
> + bool "enable BLOWFISH"
> + default y
> + help
> + Enable BLOWFISH cipher.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL
> + bool "enable SSL"
> + default y
> + help
> + Enable SSL mode.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL2
> + bool "enable SSL2"
> + default y
> + help
> + Enable SSL2 mode.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL3
> + bool "enable SSL3"
> + default y
> + help
> + Enable SSL3 mode.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_WEAK_SSL
> + bool "enable WEAK_SSL"
> + default y
> + help
> + Enable WEAK_SSL mode.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_PSK
> + bool "enable mode PSK"
> + default y
> + help
> + Enable PSK mode.
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_CAST
> + bool "enable mode CAST"
> + default y
> + help
> + Enable CAST mode.
> +
> +config BR2_PACKAGE_LIBOPENSSL_UNSECURE
> + bool "enable unit test, debug, backtrace"
> + default y
> + help
> + Enable unit-test crypto-mdebug-backtrace
> + crypto-mdebug autoerrinit mode.
> +
> +config BR2_PACKAGE_LIBOPENSSL_DYNAMIC_ENGINE
> + bool "enable dynamic engine"
> + default y
> + help
> + Enable dynamic engine.
> +
> +
> +config BR2_PACKAGE_LIBOPENSSL_ENABLE_COMP
> + bool "enable compression"
> + default y
> + help
> + Enable compression.
> +
> +
> endif # BR2_PACKAGE_LIBOPENSSL
> diff --git a/package/libopenssl/libopenssl.mk b/package/libopenssl/libopenssl.mk
> index a300458f85..ff9ae08d74 100644
> --- a/package/libopenssl/libopenssl.mk
> +++ b/package/libopenssl/libopenssl.mk
> @@ -86,6 +86,30 @@ define LIBOPENSSL_CONFIGURE_CMDS
> no-tests \
> no-fuzz-libfuzzer \
> no-fuzz-afl \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_CHACHA),,no-chacha) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_RC5),,no-rc5) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_RC2),,no-rc2) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_RC4),,no-rc4) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_MD2),,no-md2) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_MD4),,no-md4) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_MD5),,no-md5) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_MDC2),,no-mdc2) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_BLAKE2),,no-blake2) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_IDEA),,no-idea) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_SEED),,no-seed) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_DES),,no-des) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_RMD160),,no-rmd160) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_WHIRLPOOL),,no-whirlpool) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_BLOWFISH),,no-bf) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL),,no-ssl) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL2),,no-ssl2) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL3),,no-ssl3) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_WEAK_SSL),,no-weak-ssl-ciphers) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_PSK),,no-psk) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_CAST),,no-cast) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_UNSECURE),,no-unit-test no-crypto-mdebug-backtrace no-crypto-mdebug no-autoerrinit) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_DYNAMIC_ENGINE),,no-dynamic-engine ) \
> + $(if $(BR2_PACKAGE_LIBOPENSSL_ENABLE_COMP),,no-comp) \
> $(if $(BR2_STATIC_LIBS),zlib,zlib-dynamic) \
> )
> $(SED) "s#-march=[-a-z0-9] ##" -e "s#-mcpu=[-a-z0-9] ##g" $(@D)/Makefile
> --
> 2.25.1
>
> _______________________________________________
> buildroot mailing list
> buildroot at busybox.net
> http://lists.busybox.net/mailman/listinfo/buildroot
--
.-----------------.--------------------.------------------.--------------------.
| Yann E. MORIN | Real-Time Embedded | /"\ ASCII RIBBON | Erics' conspiracy: |
| +33 662 376 056 | Software Designer | \ / CAMPAIGN | ___ |
| +33 561 099 427 `------------.-------: X AGAINST | \e/ There is no |
| http://ymorin.is-a-geek.org/ | _/*\_ | / \ HTML MAIL | v conspiracy. |
'------------------------------^-------^------------------^--------------------'
next prev parent reply other threads:[~2021-05-16 17:09 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-05-11 13:21 [Buildroot] [PATCH 1/1] package/libopenssl: add option to enable some features Erwan GAUTRON
2021-05-16 17:09 ` Yann E. MORIN [this message]
2021-05-19 13:31 ` [Buildroot] [External] " Weber, Matthew L Collins
2021-05-19 14:17 ` Yann E. MORIN
-- strict thread matches above, loose matches on Subject: below --
2020-07-21 9:26 [Buildroot] " Erwan Gautron
2020-08-29 21:56 ` Yann E. MORIN
2020-05-11 11:28 [Buildroot] [PATCH 1/1] package/libopenssl: add option to disable unwanted features Erwan GAUTRON
2020-05-11 11:28 ` [Buildroot] [PATCH 1/1] package/libopenssl: add option to enable some features Erwan GAUTRON
2020-05-11 12:47 ` Thomas Petazzoni
2020-05-11 13:02 ` Erwan Gautron
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20210516170955.GP2506@scaer \
--to=yann.morin.1998@free.fr \
--cc=buildroot@busybox.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.