* [Buildroot] [PATCH v5 1/1] libressl: new package
@ 2017-07-06 14:40 Adam Duskett
2017-07-08 18:54 ` Peter Korsgaard
0 siblings, 1 reply; 2+ messages in thread
From: Adam Duskett @ 2017-07-06 14:40 UTC (permalink / raw)
To: buildroot
Libressl is a fork of openssl from OpenSSL in 2014. Its goal is to
modernize the OpenSSL codebase, improve security, and apply best
practice development processes.
Right now, libressl is API compatible with OpenSSL 1.0.1, but does not
yet include all new APIs from OpenSSL 1.0.2 and later.
Signed-off-by: Adam Duskett <aduskett@codeblue.com>
---
Changes v4 -> v5:
- Removed LIBRESSL_INSTALL_TARGET_CMDS from libressl.mk (Thomas)
Changes v3 -> v4:
- Removed libssl virtual package. (Arnout)
- Re-added Config.in (Arnout)
- Moved libressl to right before OpenSSL in package/config.in with
a explanation as to why it breaks alphabetical ordering. (Arnout)
- Added depends on !BR2_PACKAGE_OPENSSL in Config.in (Arnout)
- Changed capitalized letters to lowercase in libressl.mk (Arnout)
- Removed libssl specific syntax in Config.in and libressl.mk
- Added LIBRESSL_INSTALL_TARGET_CMDS in libressl.mk
Without this, all the header files and man-pages are installed to the
target filing system. This is undesired behavior. Instead, running
?install-exec? will only install the libraries to the target filing system.
Changes v2 -> v3:
- Moved this patch to the end of the series. (Thomas)
- Removed Config.in thanks to the new libssl. (Thomas)
- Dropped host-autotools-package for now. (Arnout)
Changes v1 -> v2:
- Changed from github to openbsd ftp. This is a all-in-one tarball
that negates having to use the POST_PATCH_HOOKS. (Thomas)
- Added 0001-remove-test-z-DESTDIR-from-ltmain.patch, this allows
ltmain.sh to be patched with buildroot-libtool-v2.4.patch, which
removes the need for a call to autogen.sh.
- Changed sha256sum to reflect new tarball.
- Changed Locally computed to openbsd ftp hash list in hash file. (Arnout)
- Added DEVELOPERS changes to this patch. (Thomas)
- Fixed formatting in commit message. (Thomas)
- Removed "and scripts" from Config.in (Arnout)
DEVELOPERS | 1 +
package/Config.in | 2 ++
.../0001-remove-test-z-DESTDIR-from-ltmain.patch | 28 ++++++++++++++++++++++
package/libressl/Config.in | 20 ++++++++++++++++
package/libressl/libressl.hash | 2 ++
package/libressl/libressl.mk | 20 ++++++++++++++++
6 files changed, 73 insertions(+)
create mode 100644 package/libressl/0001-remove-test-z-DESTDIR-from-ltmain.patch
create mode 100644 package/libressl/Config.in
create mode 100644 package/libressl/libressl.hash
create mode 100644 package/libressl/libressl.mk
diff --git a/DEVELOPERS b/DEVELOPERS
index c409f28..c997500 100644
--- a/DEVELOPERS
+++ b/DEVELOPERS
@@ -34,6 +34,7 @@ F: package/audit/
F: package/checkpolicy/
F: package/gstreamer1/gst1-vaapi/
F: package/janus-gateway/
+F: package/libressl/
F: package/libselinux/
F: package/libsemanage/
F: package/libsepol/
diff --git a/package/Config.in b/package/Config.in
index 46c78a0..4e5a7fe 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -988,6 +988,8 @@ menu "Crypto"
source "package/libuecc/Config.in"
source "package/mbedtls/Config.in"
source "package/nettle/Config.in"
+ #libressl is a openssl replacement.
+ source "package/libressl/Config.in"
source "package/openssl/Config.in"
source "package/rhash/Config.in"
source "package/tinydtls/Config.in"
diff --git a/package/libressl/0001-remove-test-z-DESTDIR-from-ltmain.patch b/package/libressl/0001-remove-test-z-DESTDIR-from-ltmain.patch
new file mode 100644
index 0000000..901a48c
--- /dev/null
+++ b/package/libressl/0001-remove-test-z-DESTDIR-from-ltmain.patch
@@ -0,0 +1,28 @@
+From 4317d43d74996ad7ec3270b1e786e91a19312309 Mon Sep 17 00:00:00 2001
+From: Adam Duskett <Adamduskett@outlook.com>
+Date: Sat, 24 Jun 2017 13:08:57 -0400
+Subject: [PATCH] remove test -z "$DESTDIR" from ltmain.sh.
+
+Without this patch, buildroot-libtool-v2.4.patch will fail to apply.
+
+Signed-off-by: Adam Duskett <Adamduskett@outlook.com>
+---
+ ltmain.sh | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/ltmain.sh b/ltmain.sh
+index 5d29bd6..6c90601 100644
+--- a/ltmain.sh
++++ b/ltmain.sh
+@@ -6658,7 +6658,7 @@ func_mode_link ()
+ *)
+ if test "$installed" = no; then
+ func_append notinst_deplibs " $lib"
+- test -z "$DESTDIR" && need_relink=yes
++ need_relink=yes
+ fi
+ ;;
+ esac
+--
+2.9.4
+
diff --git a/package/libressl/Config.in b/package/libressl/Config.in
new file mode 100644
index 0000000..0a1c9e2
--- /dev/null
+++ b/package/libressl/Config.in
@@ -0,0 +1,20 @@
+config BR2_PACKAGE_LIBRESSL
+ bool "libressl"
+ depends on !BR2_PACKAGE_OPENSSL
+ help
+ LibreSSL is a version of the TLS/crypto stack forked from
+ OpenSSL in 2014, with goals of modernizing the codebase,
+ improving security, and applying best practice development
+ processes.
+
+ http://www.libressl.org/
+
+if BR2_PACKAGE_LIBRESSL
+
+config BR2_PACKAGE_LIBRESSL_BIN
+ bool "openssl binary"
+ help
+ Install the openssl binary to the target file system. This is
+ a command line tool for doing various cryptographic stuff.
+
+endif
diff --git a/package/libressl/libressl.hash b/package/libressl/libressl.hash
new file mode 100644
index 0000000..9ffe964
--- /dev/null
+++ b/package/libressl/libressl.hash
@@ -0,0 +1,2 @@
+# From https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/SHA256
+sha256 107a5b522fbb8318d4c3be668075e5e607296f0a9255d71674caa94571336efa libressl-2.5.4.tar.gz
diff --git a/package/libressl/libressl.mk b/package/libressl/libressl.mk
new file mode 100644
index 0000000..6941447
--- /dev/null
+++ b/package/libressl/libressl.mk
@@ -0,0 +1,20 @@
+################################################################################
+#
+# libressl
+#
+################################################################################
+
+LIBRESSL_VERSION = 2.5.4
+LIBRESSL_SITE = https://ftp.openbsd.org/pub/OpenBSD/LibreSSL
+LIBRESSL_LICENSE = ISC (new additions), OpenSSL or SSLeay (original OpenSSL code)
+LIBRESSL_LICENSE_FILES = COPYING
+LIBRESSL_INSTALL_STAGING = YES
+
+ifeq ($(BR2_PACKAGE_LIBRESSL_BIN),)
+define LIBRESSL_REMOVE_BIN
+ $(RM) -f $(TARGET_DIR)/usr/bin/openssl
+endef
+LIBRESSL_POST_INSTALL_TARGET_HOOKS += LIBRESSL_REMOVE_BIN
+endif
+
+$(eval $(autotools-package))
--
2.9.4
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [Buildroot] [PATCH v5 1/1] libressl: new package
2017-07-06 14:40 [Buildroot] [PATCH v5 1/1] libressl: new package Adam Duskett
@ 2017-07-08 18:54 ` Peter Korsgaard
0 siblings, 0 replies; 2+ messages in thread
From: Peter Korsgaard @ 2017-07-08 18:54 UTC (permalink / raw)
To: buildroot
>>>>> "Adam" == Adam Duskett <aduskett@gmail.com> writes:
> Libressl is a fork of openssl from OpenSSL in 2014. Its goal is to
> modernize the OpenSSL codebase, improve security, and apply best
> practice development processes.
> Right now, libressl is API compatible with OpenSSL 1.0.1, but does not
> yet include all new APIs from OpenSSL 1.0.2 and later.
> Signed-off-by: Adam Duskett <aduskett@codeblue.com>
> ---
> Changes v4 -> v5:
> - Removed LIBRESSL_INSTALL_TARGET_CMDS from libressl.mk (Thomas)
> Changes v3 -> v4:
> - Removed libssl virtual package. (Arnout)
> - Re-added Config.in (Arnout)
> - Moved libressl to right before OpenSSL in package/config.in with
> a explanation as to why it breaks alphabetical ordering. (Arnout)
> - Added depends on !BR2_PACKAGE_OPENSSL in Config.in (Arnout)
> - Changed capitalized letters to lowercase in libressl.mk (Arnout)
> - Removed libssl specific syntax in Config.in and libressl.mk
> - Added LIBRESSL_INSTALL_TARGET_CMDS in libressl.mk
> Without this, all the header files and man-pages are installed to the
> target filing system. This is undesired behavior. Instead, running
> ?install-exec? will only install the libraries to the target filing system.
> Changes v2 -> v3:
> - Moved this patch to the end of the series. (Thomas)
> - Removed Config.in thanks to the new libssl. (Thomas)
> - Dropped host-autotools-package for now. (Arnout)
> Changes v1 -> v2:
> - Changed from github to openbsd ftp. This is a all-in-one tarball
> that negates having to use the POST_PATCH_HOOKS. (Thomas)
> - Added 0001-remove-test-z-DESTDIR-from-ltmain.patch, this allows
> ltmain.sh to be patched with buildroot-libtool-v2.4.patch, which
> removes the need for a call to autogen.sh.
> - Changed sha256sum to reflect new tarball.
> - Changed Locally computed to openbsd ftp hash list in hash file. (Arnout)
> - Added DEVELOPERS changes to this patch. (Thomas)
> - Fixed formatting in commit message. (Thomas)
> - Removed "and scripts" from Config.in (Arnout)
> DEVELOPERS | 1 +
> package/Config.in | 2 ++
> .../0001-remove-test-z-DESTDIR-from-ltmain.patch | 28 ++++++++++++++++++++++
> package/libressl/Config.in | 20 ++++++++++++++++
> package/libressl/libressl.hash | 2 ++
> package/libressl/libressl.mk | 20 ++++++++++++++++
> 6 files changed, 73 insertions(+)
> create mode 100644 package/libressl/0001-remove-test-z-DESTDIR-from-ltmain.patch
> create mode 100644 package/libressl/Config.in
> create mode 100644 package/libressl/libressl.hash
> create mode 100644 package/libressl/libressl.mk
> diff --git a/DEVELOPERS b/DEVELOPERS
> index c409f28..c997500 100644
> --- a/DEVELOPERS
> +++ b/DEVELOPERS
> @@ -34,6 +34,7 @@ F: package/audit/
> F: package/checkpolicy/
> F: package/gstreamer1/gst1-vaapi/
> F: package/janus-gateway/
> +F: package/libressl/
> F: package/libselinux/
> F: package/libsemanage/
> F: package/libsepol/
> diff --git a/package/Config.in b/package/Config.in
> index 46c78a0..4e5a7fe 100644
> --- a/package/Config.in
> +++ b/package/Config.in
> @@ -988,6 +988,8 @@ menu "Crypto"
> source "package/libuecc/Config.in"
> source "package/mbedtls/Config.in"
> source "package/nettle/Config.in"
> + #libressl is a openssl replacement.
> + source "package/libressl/Config.in"
> source "package/openssl/Config.in"
It would imho have been nicer to list libressl after openssl, but this
looks odd in menuconfig as it thinks it is a sub option of openssl
(because on the depends on), so I've left it there after adding a space
between '#' and 'libressl' and dropping the trailing dot.
Committed, thanks.
--
Bye, Peter Korsgaard
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2017-07-08 18:54 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2017-07-06 14:40 [Buildroot] [PATCH v5 1/1] libressl: new package Adam Duskett
2017-07-08 18:54 ` Peter Korsgaard
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox