[Buildroot] [PATCH] libnss: Add new package.

Buildroot Archive on lore.kernel.org
 help / color / mirror / Atom feed

* [Buildroot] [PATCH] libnss: Add new package.
@ 2011-07-07 12:08 Will Newton
  2011-07-07 20:32 ` Peter Korsgaard
  0 siblings, 1 reply; 12+ messages in thread
From: Will Newton @ 2011-07-07 12:08 UTC (permalink / raw)
  To: buildroot

NSS is the Network Security Services library developed as part of
the Mozilla project. It provides similar functions to OpenSSL but
allows MPL, GPL and LGPL licensing.

Signed-off-by: Will Newton <will.newton@imgtec.com>
---
 package/Config.in                  |    1 +
 package/libnss/Config.in           |   13 +++++++
 package/libnss/libnss-cross.patch  |   24 ++++++++++++++
 package/libnss/libnss-uclibc.patch |   14 ++++++++
 package/libnss/libnss.mk           |   62 ++++++++++++++++++++++++++++++++++++
 5 files changed, 114 insertions(+), 0 deletions(-)
 create mode 100644 package/libnss/Config.in
 create mode 100644 package/libnss/libnss-cross.patch
 create mode 100644 package/libnss/libnss-uclibc.patch
 create mode 100644 package/libnss/libnss.mk

diff --git a/package/Config.in b/package/Config.in
index 2a48d82..e8eb4c6 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -249,6 +249,7 @@ menu "Crypto"
 source "package/beecrypt/Config.in"
 source "package/libgcrypt/Config.in"
 source "package/libgpg-error/Config.in"
+source "package/libnss/Config.in"
 source "package/openssl/Config.in"
 endmenu

diff --git a/package/libnss/Config.in b/package/libnss/Config.in
new file mode 100644
index 0000000..12502c8
--- /dev/null
+++ b/package/libnss/Config.in
@@ -0,0 +1,13 @@
+config BR2_PACKAGE_LIBNSS
+	bool "libnss"
+	select BR2_PACKAGE_LIBNSPR
+	select BR2_PACKAGE_SQLITE
+	select BR2_PACKAGE_ZLIB
+	help
+	  Network Security Services (NSS) is a set of libraries designed
+	  to support development of security-enabled client and server
+	  applications. Applications built with NSS can support SSL v2
+	  and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME,
+	  and X.509 v3 certificates.
+
+	  http://www.mozilla.org/projects/security/pki/nss/
diff --git a/package/libnss/libnss-cross.patch
b/package/libnss/libnss-cross.patch
new file mode 100644
index 0000000..8d01d7c
--- /dev/null
+++ b/package/libnss/libnss-cross.patch
@@ -0,0 +1,24 @@
+
+This patch allows us to set a value for the cross compiler via
TARGETCC without setting
+CC on the command line. CC is used for host tools as well as cross
compiled code so we
+cannot define it on the command line without breaking the host tools build.
+
+--- libnss-3.12.9.old/mozilla/security/coreconf/Linux.mk	2011-03-01
10:31:21.517847183 +0000
++++ libnss-3.12.9/mozilla/security/coreconf/Linux.mk	2011-03-01
10:33:42.688648237 +0000
+@@ -46,9 +46,13 @@
+ 	IMPL_STRATEGY = _PTH
+ endif
+
+-CC			= gcc
+-CCC			= g++
+-RANLIB			= ranlib
++TARGETCC		= gcc
++TARGETCCC		= g++
++TARGETRANLIB		= ranlib
++
++CC			= $(TARGETCC)
++CCC			= $(TARGETCCC)
++RANLIB			= $(TARGETRANLIB)
+
+ DEFAULT_COMPILER = gcc
+
diff --git a/package/libnss/libnss-uclibc.patch
b/package/libnss/libnss-uclibc.patch
new file mode 100644
index 0000000..46b71b4
--- /dev/null
+++ b/package/libnss/libnss-uclibc.patch
@@ -0,0 +1,14 @@
+
+uCLibc does not support RTLD_NOLOAD.
+
+--- libnss-3.12.9.old/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
10:41:35.226450100 +0000
++++ libnss-3.12.9/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
10:42:14.628507934 +0000
+@@ -539,7 +539,7 @@
+  * fetch the library if it's loaded. For NSS it should already be loaded
+  */
+ #define freebl_getLibrary(libName)  \
+-    dlopen (libName, RTLD_LAZY|RTLD_NOLOAD)
++    dlopen (libName, RTLD_LAZY)
+
+ #define freebl_releaseLibrary(lib) \
+     if (lib) dlclose(lib)
diff --git a/package/libnss/libnss.mk b/package/libnss/libnss.mk
new file mode 100644
index 0000000..b530cc3
--- /dev/null
+++ b/package/libnss/libnss.mk
@@ -0,0 +1,62 @@
+#############################################################
+#
+# libnss
+#
+#############################################################
+LIBNSS_VERSION = 3.12.9
+LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz
+LIBNSS_SITE_VERSION = $(subst .,_,$(LIBNSS_VERSION))
+LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(LIBNSS_SITE_VERSION)_RTM/src/
+LIBNSS_SUBDIR = mozilla/security
+LIBNSS_DISTDIR = mozilla/dist
+LIBNSS_INSTALL_STAGING = YES
+LIBNSS_DEPENDENCIES = libnspr sqlite zlib
+
+LIBNSS_BUILD_VARS = MOZILLA_CLIENT=1 \
+		NSPR_INCLUDE_DIR=$(STAGING_DIR)/usr/include/nspr \
+		NSPR_LIB_DIR=$(STAGING_DIR)/usr/lib \
+		BUILD_OPT=1 \
+		NS_USE_GCC=1 \
+		OPTIMIZER="$(TARGET_CFLAGS)" \
+		NSS_USE_SYSTEM_SQLITE=1 \
+		NSS_ENABLE_ECC=1 \
+		NATIVE_CC="$(HOSTCC)" \
+		TARGETCC="$(TARGET_CC)" \
+		TARGETCCC="$(TARGET_CXX)" \
+		TARGETRANLIB="$(TARGET_RANLIB)" \
+		OS_ARCH="Linux" \
+		OS_RELEASE="2.6" \
+		OS_TEST="$(ARCH)"
+
+
+define LIBNSS_BUILD_CMDS
+	$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR)/nss build_coreconf build_dbm all \
+			SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
+			DIST=$(@D)/$(LIBNSS_DISTDIR) \
+			CHECKLOC= \
+			$(LIBNSS_BUILD_VARS)
+endef
+
+define LIBNSS_INSTALL_STAGING_CMDS
+	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
+	$(INSTALL) -m 755 -d $(STAGING_DIR)/usr/include/nss
+	$(INSTALL) -m 644 -t $(STAGING_DIR)/usr/include/nss \
+		$(@D)/$(LIBNSS_DISTDIR)/public/nss/*
+	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.a
+endef
+
+define LIBNSS_INSTALL_TARGET_CMDS
+	$(INSTALL) -m 755 -t $(TARGET_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
+endef
+
+define LIBNSS_CLEAN_CMDS
+	-$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR) clobber \
+					clobber_dbm \
+					clobber_coreconf \
+					BUILD_OPT=1
+endef
+
+$(eval $(call GENTARGETS,package,libnss))
-- 
1.7.3.4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-libnss-Add-new-package.patch
Type: text/x-patch
Size: 5668 bytes
Desc: not available
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20110707/aec25d73/attachment.bin>

^ permalink raw reply related	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
  2011-07-07 12:08 [Buildroot] [PATCH] libnss: Add new package Will Newton
@ 2011-07-07 20:32 ` Peter Korsgaard
  2011-07-08 13:25   ` Will Newton
  0 siblings, 1 reply; 12+ messages in thread
From: Peter Korsgaard @ 2011-07-07 20:32 UTC (permalink / raw)
  To: buildroot

>>>>> "Will" == Will Newton <will.newton@gmail.com> writes:

 Will> NSS is the Network Security Services library developed as part of
 Will> the Mozilla project. It provides similar functions to OpenSSL but
 Will> allows MPL, GPL and LGPL licensing.

Thanks, a few comments.

 Will> Signed-off-by: Will Newton <will.newton@imgtec.com>
 Will> ---
 Will>  package/Config.in                  |    1 +
 Will>  package/libnss/Config.in           |   13 +++++++
 Will>  package/libnss/libnss-cross.patch  |   24 ++++++++++++++
 Will>  package/libnss/libnss-uclibc.patch |   14 ++++++++
 Will>  package/libnss/libnss.mk           |   62 ++++++++++++++++++++++++++++++++++++
 Will>  5 files changed, 114 insertions(+), 0 deletions(-)
 Will>  create mode 100644 package/libnss/Config.in
 Will>  create mode 100644 package/libnss/libnss-cross.patch
 Will>  create mode 100644 package/libnss/libnss-uclibc.patch
 Will>  create mode 100644 package/libnss/libnss.mk

 Will> diff --git a/package/Config.in b/package/Config.in
 Will> index 2a48d82..e8eb4c6 100644
 Will> --- a/package/Config.in
 Will> +++ b/package/Config.in
 Will> @@ -249,6 +249,7 @@ menu "Crypto"
 Will>  source "package/beecrypt/Config.in"
 Will>  source "package/libgcrypt/Config.in"
 Will>  source "package/libgpg-error/Config.in"
 Will> +source "package/libnss/Config.in"
 Will>  source "package/openssl/Config.in"
 Will>  endmenu

 Will> diff --git a/package/libnss/Config.in b/package/libnss/Config.in
 Will> new file mode 100644
 Will> index 0000000..12502c8
 Will> --- /dev/null
 Will> +++ b/package/libnss/Config.in
 Will> @@ -0,0 +1,13 @@
 Will> +config BR2_PACKAGE_LIBNSS
 Will> +	bool "libnss"
 Will> +	select BR2_PACKAGE_LIBNSPR
 Will> +	select BR2_PACKAGE_SQLITE
 Will> +	select BR2_PACKAGE_ZLIB
 Will> +	help

nspr needs largefile support, so you need to depend on largefile support
(and show a warning if not available) like nspr does,


 Will> +	  Network Security Services (NSS) is a set of libraries designed
 Will> +	  to support development of security-enabled client and server
 Will> +	  applications. Applications built with NSS can support SSL v2
 Will> +	  and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME,
 Will> +	  and X.509 v3 certificates.
 Will> +
 Will> +	  http://www.mozilla.org/projects/security/pki/nss/
 Will> diff --git a/package/libnss/libnss-cross.patch
 Will> b/package/libnss/libnss-cross.patch
 Will> new file mode 100644
 Will> index 0000000..8d01d7c
 Will> --- /dev/null
 Will> +++ b/package/libnss/libnss-cross.patch
 Will> @@ -0,0 +1,24 @@
 Will> +
 Will> +This patch allows us to set a value for the cross compiler via
 Will> TARGETCC without setting
 Will> +CC on the command line. CC is used for host tools as well as cross
 Will> compiled code so we
 Will> +cannot define it on the command line without breaking the host tools build.
 Will> +

Please sign off (git-style) on patches so it is easy to see who the
author is. What is the upstream status of this patch?


Will> +--- libnss-3.12.9.old/mozilla/security/coreconf/Linux.mk	2011-03-01
 Will> 10:31:21.517847183 +0000
 Will> ++++ libnss-3.12.9/mozilla/security/coreconf/Linux.mk	2011-03-01
 Will> 10:33:42.688648237 +0000
 Will> +@@ -46,9 +46,13 @@
 Will> + 	IMPL_STRATEGY = _PTH
 Will> + endif
 Will> +
 Will> +-CC			= gcc
 Will> +-CCC			= g++
 Will> +-RANLIB			= ranlib
 Will> ++TARGETCC		= gcc
 Will> ++TARGETCCC		= g++
 Will> ++TARGETRANLIB		= ranlib
 Will> ++
 Will> ++CC			= $(TARGETCC)
 Will> ++CCC			= $(TARGETCCC)
 Will> ++RANLIB			= $(TARGETRANLIB)
 Will> +
 Will> + DEFAULT_COMPILER = gcc
 Will> +


 Will> diff --git a/package/libnss/libnss-uclibc.patch
 Will> b/package/libnss/libnss-uclibc.patch
 Will> new file mode 100644
 Will> index 0000000..46b71b4
 Will> --- /dev/null
 Will> +++ b/package/libnss/libnss-uclibc.patch
 Will> @@ -0,0 +1,14 @@
 Will> +
 Will> +uCLibc does not support RTLD_NOLOAD.

Signed-off-by and upstream status again, please. This is because of the
libdl check, right?

      if (!(flag & (RTLD_LAZY|RTLD_NOW))) {
                _dl_error_number = LD_BAD_HANDLE;
                return NULL;

It would be good to only drop NOLOAD for uClibc, and not E.G. if you're
using an external (e)glibc toolchain with something like:

#include <features.h>
#ifdef __UCLIBC__
/* uClibc dlopen errors on NOLOAD */
#undef RTLD_NOLOAD
#define RTLD_NOLOAD 0
#endif

 Will> +
 Will> +--- libnss-3.12.9.old/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
 Will> 10:41:35.226450100 +0000
 Will> ++++ libnss-3.12.9/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
 Will> 10:42:14.628507934 +0000
 Will> +@@ -539,7 +539,7 @@
 Will> +  * fetch the library if it's loaded. For NSS it should already be loaded
 Will> +  */
 Will> + #define freebl_getLibrary(libName)  \
 Will> +-    dlopen (libName, RTLD_LAZY|RTLD_NOLOAD)
 Will> ++    dlopen (libName, RTLD_LAZY)
 Will> +
 Will> + #define freebl_releaseLibrary(lib) \
 Will> +     if (lib) dlclose(lib)
 Will> diff --git a/package/libnss/libnss.mk b/package/libnss/libnss.mk
 Will> new file mode 100644
 Will> index 0000000..b530cc3
 Will> --- /dev/null
 Will> +++ b/package/libnss/libnss.mk
 Will> @@ -0,0 +1,62 @@
 Will> +#############################################################
 Will> +#
 Will> +# libnss
 Will> +#
 Will> +#############################################################
 Will> +LIBNSS_VERSION = 3.12.9
 Will> +LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz
 Will> +LIBNSS_SITE_VERSION = $(subst .,_,$(LIBNSS_VERSION))
 Will> +LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(LIBNSS_SITE_VERSION)_RTM/src/
 Will> +LIBNSS_SUBDIR = mozilla/security
 Will> +LIBNSS_DISTDIR = mozilla/dist
 Will> +LIBNSS_INSTALL_STAGING = YES
 Will> +LIBNSS_DEPENDENCIES = libnspr sqlite zlib
 Will> +
 Will> +LIBNSS_BUILD_VARS = MOZILLA_CLIENT=1 \
 Will> +		NSPR_INCLUDE_DIR=$(STAGING_DIR)/usr/include/nspr \
 Will> +		NSPR_LIB_DIR=$(STAGING_DIR)/usr/lib \
 Will> +		BUILD_OPT=1 \
 Will> +		NS_USE_GCC=1 \
 Will> +		OPTIMIZER="$(TARGET_CFLAGS)" \
 Will> +		NSS_USE_SYSTEM_SQLITE=1 \
 Will> +		NSS_ENABLE_ECC=1 \
 Will> +		NATIVE_CC="$(HOSTCC)" \
 Will> +		TARGETCC="$(TARGET_CC)" \
 Will> +		TARGETCCC="$(TARGET_CXX)" \
 Will> +		TARGETRANLIB="$(TARGET_RANLIB)" \
 Will> +		OS_ARCH="Linux" \
 Will> +		OS_RELEASE="2.6" \
 Will> +		OS_TEST="$(ARCH)"
 Will> +
 Will> +
 Will> +define LIBNSS_BUILD_CMDS
 Will> +	$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR)/nss build_coreconf build_dbm all \
 Will> +			SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
 Will> +			DIST=$(@D)/$(LIBNSS_DISTDIR) \
 Will> +			CHECKLOC= \
 Will> +			$(LIBNSS_BUILD_VARS)
 Will> +endef
 Will> +
 Will> +define LIBNSS_INSTALL_STAGING_CMDS
 Will> +	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
 Will> +		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
 Will> +	$(INSTALL) -m 755 -d $(STAGING_DIR)/usr/include/nss
 Will> +	$(INSTALL) -m 644 -t $(STAGING_DIR)/usr/include/nss \
 Will> +		$(@D)/$(LIBNSS_DISTDIR)/public/nss/*
 Will> +	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
 Will> +		$(@D)/$(LIBNSS_DISTDIR)/lib/*.a
 Will> +endef

No make install?

 Will> +
 Will> +define LIBNSS_INSTALL_TARGET_CMDS
 Will> +	$(INSTALL) -m 755 -t $(TARGET_DIR)/usr/lib/ \
 Will> +		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
 Will> +endef

target install should preferably also install development stuff like
headers / .a files for people wanting to do development on target. The
global target-finalize step will remove them again if not needed.

-- 
Bye, Peter Korsgaard

^ permalink raw reply	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
  2011-07-07 20:32 ` Peter Korsgaard
@ 2011-07-08 13:25   ` Will Newton
  0 siblings, 0 replies; 12+ messages in thread
From: Will Newton @ 2011-07-08 13:25 UTC (permalink / raw)
  To: buildroot

On Thu, Jul 7, 2011 at 9:32 PM, Peter Korsgaard <jacmet@uclibc.org> wrote:

Hi Peter,

>>>>>> "Will" == Will Newton <will.newton@gmail.com> writes:
>
> ?Will> NSS is the Network Security Services library developed as part of
> ?Will> the Mozilla project. It provides similar functions to OpenSSL but
> ?Will> allows MPL, GPL and LGPL licensing.
>
> Thanks, a few comments.

Thanks for the review!

> ?Will> + ? ? ? ? ?Network Security Services (NSS) is a set of libraries designed
> ?Will> + ? ? ? ? ?to support development of security-enabled client and server
> ?Will> + ? ? ? ? ?applications. Applications built with NSS can support SSL v2
> ?Will> + ? ? ? ? ?and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME,
> ?Will> + ? ? ? ? ?and X.509 v3 certificates.
> ?Will> +
> ?Will> + ? ? ? ? ?http://www.mozilla.org/projects/security/pki/nss/
> ?Will> diff --git a/package/libnss/libnss-cross.patch
> ?Will> b/package/libnss/libnss-cross.patch
> ?Will> new file mode 100644
> ?Will> index 0000000..8d01d7c
> ?Will> --- /dev/null
> ?Will> +++ b/package/libnss/libnss-cross.patch
> ?Will> @@ -0,0 +1,24 @@
> ?Will> +
> ?Will> +This patch allows us to set a value for the cross compiler via
> ?Will> TARGETCC without setting
> ?Will> +CC on the command line. CC is used for host tools as well as cross
> ?Will> compiled code so we
> ?Will> +cannot define it on the command line without breaking the host tools build.
> ?Will> +
>
> Please sign off (git-style) on patches so it is easy to see who the
> author is. What is the upstream status of this patch?

Neither of these patches has been upstreamed yet, but I'll make sure
it goes into their bug tracker.

> ?Will> diff --git a/package/libnss/libnss-uclibc.patch
> ?Will> b/package/libnss/libnss-uclibc.patch
> ?Will> new file mode 100644
> ?Will> index 0000000..46b71b4
> ?Will> --- /dev/null
> ?Will> +++ b/package/libnss/libnss-uclibc.patch
> ?Will> @@ -0,0 +1,14 @@
> ?Will> +
> ?Will> +uCLibc does not support RTLD_NOLOAD.
>
> Signed-off-by and upstream status again, please. This is because of the
> libdl check, right?
>
> ? ? ?if (!(flag & (RTLD_LAZY|RTLD_NOW))) {
> ? ? ? ? ? ? ? ?_dl_error_number = LD_BAD_HANDLE;
> ? ? ? ? ? ? ? ?return NULL;
>
> It would be good to only drop NOLOAD for uClibc, and not E.G. if you're
> using an external (e)glibc toolchain with something like:

It's actually because RTLD_NOLOAD is just not defined in uClibc. I
have redone the patch in a way that should be compatbile with glibc
etc.

> ?Will> +define LIBNSS_BUILD_CMDS
> ?Will> + ? ? ? ?$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR)/nss build_coreconf build_dbm all \
> ?Will> + ? ? ? ? ? ? ? ? ? ? ? ?SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
> ?Will> + ? ? ? ? ? ? ? ? ? ? ? ?DIST=$(@D)/$(LIBNSS_DISTDIR) \
> ?Will> + ? ? ? ? ? ? ? ? ? ? ? ?CHECKLOC= \
> ?Will> + ? ? ? ? ? ? ? ? ? ? ? ?$(LIBNSS_BUILD_VARS)
> ?Will> +endef
> ?Will> +
> ?Will> +define LIBNSS_INSTALL_STAGING_CMDS
> ?Will> + ? ? ? ?$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
> ?Will> + ? ? ? ? ? ? ? ?$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
> ?Will> + ? ? ? ?$(INSTALL) -m 755 -d $(STAGING_DIR)/usr/include/nss
> ?Will> + ? ? ? ?$(INSTALL) -m 644 -t $(STAGING_DIR)/usr/include/nss \
> ?Will> + ? ? ? ? ? ? ? ?$(@D)/$(LIBNSS_DISTDIR)/public/nss/*
> ?Will> + ? ? ? ?$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
> ?Will> + ? ? ? ? ? ? ? ?$(@D)/$(LIBNSS_DISTDIR)/lib/*.a
> ?Will> +endef
>
> No make install?

The build system is a little idiosyncratic. ;-)

I'll resubmit a patch that should address the issues raised.

^ permalink raw reply	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
@ 2011-03-25 12:07 Will Newton
  2011-04-01 10:00 ` Will Newton
  0 siblings, 1 reply; 12+ messages in thread
From: Will Newton @ 2011-03-25 12:07 UTC (permalink / raw)
  To: buildroot

NSS is the Network Security Services library developed as part of
the Mozilla project. It provides similar functions to OpenSSL but
allows MPL, GPL and LGPL licensing.

Signed-off-by: Will Newton <will.newton@imgtec.com>
---
 package/Config.in                  |    1 +
 package/libnss/Config.in           |   13 +++++++
 package/libnss/libnss-cross.patch  |   24 ++++++++++++++
 package/libnss/libnss-uclibc.patch |   14 ++++++++
 package/libnss/libnss.mk           |   62 ++++++++++++++++++++++++++++++++++++
 5 files changed, 114 insertions(+), 0 deletions(-)
 create mode 100644 package/libnss/Config.in
 create mode 100644 package/libnss/libnss-cross.patch
 create mode 100644 package/libnss/libnss-uclibc.patch
 create mode 100644 package/libnss/libnss.mk

diff --git a/package/Config.in b/package/Config.in
index 19c38fa..6bb3a42 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -245,6 +245,7 @@ menu "Crypto"
 source "package/beecrypt/Config.in"
 source "package/libgcrypt/Config.in"
 source "package/libgpg-error/Config.in"
+source "package/libnss/Config.in"
 source "package/openssl/Config.in"
 endmenu

diff --git a/package/libnss/Config.in b/package/libnss/Config.in
new file mode 100644
index 0000000..12502c8
--- /dev/null
+++ b/package/libnss/Config.in
@@ -0,0 +1,13 @@
+config BR2_PACKAGE_LIBNSS
+	bool "libnss"
+	select BR2_PACKAGE_LIBNSPR
+	select BR2_PACKAGE_SQLITE
+	select BR2_PACKAGE_ZLIB
+	help
+	  Network Security Services (NSS) is a set of libraries designed
+	  to support development of security-enabled client and server
+	  applications. Applications built with NSS can support SSL v2
+	  and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME,
+	  and X.509 v3 certificates.
+
+	  http://www.mozilla.org/projects/security/pki/nss/
diff --git a/package/libnss/libnss-cross.patch
b/package/libnss/libnss-cross.patch
new file mode 100644
index 0000000..8d01d7c
--- /dev/null
+++ b/package/libnss/libnss-cross.patch
@@ -0,0 +1,24 @@
+
+This patch allows us to set a value for the cross compiler via
TARGETCC without setting
+CC on the command line. CC is used for host tools as well as cross
compiled code so we
+cannot define it on the command line without breaking the host tools build.
+
+--- libnss-3.12.9.old/mozilla/security/coreconf/Linux.mk	2011-03-01
10:31:21.517847183 +0000
++++ libnss-3.12.9/mozilla/security/coreconf/Linux.mk	2011-03-01
10:33:42.688648237 +0000
+@@ -46,9 +46,13 @@
+ 	IMPL_STRATEGY = _PTH
+ endif
+
+-CC			= gcc
+-CCC			= g++
+-RANLIB			= ranlib
++TARGETCC		= gcc
++TARGETCCC		= g++
++TARGETRANLIB		= ranlib
++
++CC			= $(TARGETCC)
++CCC			= $(TARGETCCC)
++RANLIB			= $(TARGETRANLIB)
+
+ DEFAULT_COMPILER = gcc
+
diff --git a/package/libnss/libnss-uclibc.patch
b/package/libnss/libnss-uclibc.patch
new file mode 100644
index 0000000..46b71b4
--- /dev/null
+++ b/package/libnss/libnss-uclibc.patch
@@ -0,0 +1,14 @@
+
+uCLibc does not support RTLD_NOLOAD.
+
+--- libnss-3.12.9.old/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
10:41:35.226450100 +0000
++++ libnss-3.12.9/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
10:42:14.628507934 +0000
+@@ -539,7 +539,7 @@
+  * fetch the library if it's loaded. For NSS it should already be loaded
+  */
+ #define freebl_getLibrary(libName)  \
+-    dlopen (libName, RTLD_LAZY|RTLD_NOLOAD)
++    dlopen (libName, RTLD_LAZY)
+
+ #define freebl_releaseLibrary(lib) \
+     if (lib) dlclose(lib)
diff --git a/package/libnss/libnss.mk b/package/libnss/libnss.mk
new file mode 100644
index 0000000..b530cc3
--- /dev/null
+++ b/package/libnss/libnss.mk
@@ -0,0 +1,62 @@
+#############################################################
+#
+# libnss
+#
+#############################################################
+LIBNSS_VERSION = 3.12.9
+LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz
+LIBNSS_SITE_VERSION = $(subst .,_,$(LIBNSS_VERSION))
+LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(LIBNSS_SITE_VERSION)_RTM/src/
+LIBNSS_SUBDIR = mozilla/security
+LIBNSS_DISTDIR = mozilla/dist
+LIBNSS_INSTALL_STAGING = YES
+LIBNSS_DEPENDENCIES = libnspr sqlite zlib
+
+LIBNSS_BUILD_VARS = MOZILLA_CLIENT=1 \
+		NSPR_INCLUDE_DIR=$(STAGING_DIR)/usr/include/nspr \
+		NSPR_LIB_DIR=$(STAGING_DIR)/usr/lib \
+		BUILD_OPT=1 \
+		NS_USE_GCC=1 \
+		OPTIMIZER="$(TARGET_CFLAGS)" \
+		NSS_USE_SYSTEM_SQLITE=1 \
+		NSS_ENABLE_ECC=1 \
+		NATIVE_CC="$(HOSTCC)" \
+		TARGETCC="$(TARGET_CC)" \
+		TARGETCCC="$(TARGET_CXX)" \
+		TARGETRANLIB="$(TARGET_RANLIB)" \
+		OS_ARCH="Linux" \
+		OS_RELEASE="2.6" \
+		OS_TEST="$(ARCH)"
+
+
+define LIBNSS_BUILD_CMDS
+	$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR)/nss build_coreconf build_dbm all \
+			SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
+			DIST=$(@D)/$(LIBNSS_DISTDIR) \
+			CHECKLOC= \
+			$(LIBNSS_BUILD_VARS)
+endef
+
+define LIBNSS_INSTALL_STAGING_CMDS
+	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
+	$(INSTALL) -m 755 -d $(STAGING_DIR)/usr/include/nss
+	$(INSTALL) -m 644 -t $(STAGING_DIR)/usr/include/nss \
+		$(@D)/$(LIBNSS_DISTDIR)/public/nss/*
+	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.a
+endef
+
+define LIBNSS_INSTALL_TARGET_CMDS
+	$(INSTALL) -m 755 -t $(TARGET_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
+endef
+
+define LIBNSS_CLEAN_CMDS
+	-$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR) clobber \
+					clobber_dbm \
+					clobber_coreconf \
+					BUILD_OPT=1
+endef
+
+$(eval $(call GENTARGETS,package,libnss))
-- 
1.7.3.4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-libnss-Add-new-package.patch
Type: text/x-patch
Size: 5667 bytes
Desc: not available
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20110325/3db22bc8/attachment.bin>

^ permalink raw reply related	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
  2011-03-25 12:07 Will Newton
@ 2011-04-01 10:00 ` Will Newton
  0 siblings, 0 replies; 12+ messages in thread
From: Will Newton @ 2011-04-01 10:00 UTC (permalink / raw)
  To: buildroot

Ping?

On Fri, Mar 25, 2011 at 12:07 PM, Will Newton <will.newton@gmail.com> wrote:
> NSS is the Network Security Services library developed as part of
> the Mozilla project. It provides similar functions to OpenSSL but
> allows MPL, GPL and LGPL licensing.
>
> Signed-off-by: Will Newton <will.newton@imgtec.com>
> ---
> ?package/Config.in ? ? ? ? ? ? ? ? ?| ? ?1 +
> ?package/libnss/Config.in ? ? ? ? ? | ? 13 +++++++
> ?package/libnss/libnss-cross.patch ?| ? 24 ++++++++++++++
> ?package/libnss/libnss-uclibc.patch | ? 14 ++++++++
> ?package/libnss/libnss.mk ? ? ? ? ? | ? 62 ++++++++++++++++++++++++++++++++++++
> ?5 files changed, 114 insertions(+), 0 deletions(-)
> ?create mode 100644 package/libnss/Config.in
> ?create mode 100644 package/libnss/libnss-cross.patch
> ?create mode 100644 package/libnss/libnss-uclibc.patch
> ?create mode 100644 package/libnss/libnss.mk
>
> diff --git a/package/Config.in b/package/Config.in
> index 19c38fa..6bb3a42 100644
> --- a/package/Config.in
> +++ b/package/Config.in
> @@ -245,6 +245,7 @@ menu "Crypto"
> ?source "package/beecrypt/Config.in"
> ?source "package/libgcrypt/Config.in"
> ?source "package/libgpg-error/Config.in"
> +source "package/libnss/Config.in"
> ?source "package/openssl/Config.in"
> ?endmenu
>
> diff --git a/package/libnss/Config.in b/package/libnss/Config.in
> new file mode 100644
> index 0000000..12502c8
> --- /dev/null
> +++ b/package/libnss/Config.in
> @@ -0,0 +1,13 @@
> +config BR2_PACKAGE_LIBNSS
> + ? ? ? bool "libnss"
> + ? ? ? select BR2_PACKAGE_LIBNSPR
> + ? ? ? select BR2_PACKAGE_SQLITE
> + ? ? ? select BR2_PACKAGE_ZLIB
> + ? ? ? help
> + ? ? ? ? Network Security Services (NSS) is a set of libraries designed
> + ? ? ? ? to support development of security-enabled client and server
> + ? ? ? ? applications. Applications built with NSS can support SSL v2
> + ? ? ? ? and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME,
> + ? ? ? ? and X.509 v3 certificates.
> +
> + ? ? ? ? http://www.mozilla.org/projects/security/pki/nss/
> diff --git a/package/libnss/libnss-cross.patch
> b/package/libnss/libnss-cross.patch
> new file mode 100644
> index 0000000..8d01d7c
> --- /dev/null
> +++ b/package/libnss/libnss-cross.patch
> @@ -0,0 +1,24 @@
> +
> +This patch allows us to set a value for the cross compiler via
> TARGETCC without setting
> +CC on the command line. CC is used for host tools as well as cross
> compiled code so we
> +cannot define it on the command line without breaking the host tools build.
> +
> +--- libnss-3.12.9.old/mozilla/security/coreconf/Linux.mk ? ? ? 2011-03-01
> 10:31:21.517847183 +0000
> ++++ libnss-3.12.9/mozilla/security/coreconf/Linux.mk ? 2011-03-01
> 10:33:42.688648237 +0000
> +@@ -46,9 +46,13 @@
> + ? ? ? IMPL_STRATEGY = _PTH
> + endif
> +
> +-CC ? ? ? ? ? ? ? ? ? ?= gcc
> +-CCC ? ? ? ? ? ? ? ? ? = g++
> +-RANLIB ? ? ? ? ? ? ? ? ? ? ? ?= ranlib
> ++TARGETCC ? ? ? ? ? ? ?= gcc
> ++TARGETCCC ? ? ? ? ? ? = g++
> ++TARGETRANLIB ? ? ? ? ?= ranlib
> ++
> ++CC ? ? ? ? ? ? ? ? ? ?= $(TARGETCC)
> ++CCC ? ? ? ? ? ? ? ? ? = $(TARGETCCC)
> ++RANLIB ? ? ? ? ? ? ? ? ? ? ? ?= $(TARGETRANLIB)
> +
> + DEFAULT_COMPILER = gcc
> +
> diff --git a/package/libnss/libnss-uclibc.patch
> b/package/libnss/libnss-uclibc.patch
> new file mode 100644
> index 0000000..46b71b4
> --- /dev/null
> +++ b/package/libnss/libnss-uclibc.patch
> @@ -0,0 +1,14 @@
> +
> +uCLibc does not support RTLD_NOLOAD.
> +
> +--- libnss-3.12.9.old/mozilla/security/nss/lib/freebl/stubs.c ?2011-03-01
> 10:41:35.226450100 +0000
> ++++ libnss-3.12.9/mozilla/security/nss/lib/freebl/stubs.c ? ? ?2011-03-01
> 10:42:14.628507934 +0000
> +@@ -539,7 +539,7 @@
> + ?* fetch the library if it's loaded. For NSS it should already be loaded
> + ?*/
> + #define freebl_getLibrary(libName) ?\
> +- ? ?dlopen (libName, RTLD_LAZY|RTLD_NOLOAD)
> ++ ? ?dlopen (libName, RTLD_LAZY)
> +
> + #define freebl_releaseLibrary(lib) \
> + ? ? if (lib) dlclose(lib)
> diff --git a/package/libnss/libnss.mk b/package/libnss/libnss.mk
> new file mode 100644
> index 0000000..b530cc3
> --- /dev/null
> +++ b/package/libnss/libnss.mk
> @@ -0,0 +1,62 @@
> +#############################################################
> +#
> +# libnss
> +#
> +#############################################################
> +LIBNSS_VERSION = 3.12.9
> +LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz
> +LIBNSS_SITE_VERSION = $(subst .,_,$(LIBNSS_VERSION))
> +LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(LIBNSS_SITE_VERSION)_RTM/src/
> +LIBNSS_SUBDIR = mozilla/security
> +LIBNSS_DISTDIR = mozilla/dist
> +LIBNSS_INSTALL_STAGING = YES
> +LIBNSS_DEPENDENCIES = libnspr sqlite zlib
> +
> +LIBNSS_BUILD_VARS = MOZILLA_CLIENT=1 \
> + ? ? ? ? ? ? ? NSPR_INCLUDE_DIR=$(STAGING_DIR)/usr/include/nspr \
> + ? ? ? ? ? ? ? NSPR_LIB_DIR=$(STAGING_DIR)/usr/lib \
> + ? ? ? ? ? ? ? BUILD_OPT=1 \
> + ? ? ? ? ? ? ? NS_USE_GCC=1 \
> + ? ? ? ? ? ? ? OPTIMIZER="$(TARGET_CFLAGS)" \
> + ? ? ? ? ? ? ? NSS_USE_SYSTEM_SQLITE=1 \
> + ? ? ? ? ? ? ? NSS_ENABLE_ECC=1 \
> + ? ? ? ? ? ? ? NATIVE_CC="$(HOSTCC)" \
> + ? ? ? ? ? ? ? TARGETCC="$(TARGET_CC)" \
> + ? ? ? ? ? ? ? TARGETCCC="$(TARGET_CXX)" \
> + ? ? ? ? ? ? ? TARGETRANLIB="$(TARGET_RANLIB)" \
> + ? ? ? ? ? ? ? OS_ARCH="Linux" \
> + ? ? ? ? ? ? ? OS_RELEASE="2.6" \
> + ? ? ? ? ? ? ? OS_TEST="$(ARCH)"
> +
> +
> +define LIBNSS_BUILD_CMDS
> + ? ? ? $(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR)/nss build_coreconf build_dbm all \
> + ? ? ? ? ? ? ? ? ? ? ? SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
> + ? ? ? ? ? ? ? ? ? ? ? DIST=$(@D)/$(LIBNSS_DISTDIR) \
> + ? ? ? ? ? ? ? ? ? ? ? CHECKLOC= \
> + ? ? ? ? ? ? ? ? ? ? ? $(LIBNSS_BUILD_VARS)
> +endef
> +
> +define LIBNSS_INSTALL_STAGING_CMDS
> + ? ? ? $(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
> + ? ? ? ? ? ? ? $(@D)/$(LIBNSS_DISTDIR)/lib/*.so
> + ? ? ? $(INSTALL) -m 755 -d $(STAGING_DIR)/usr/include/nss
> + ? ? ? $(INSTALL) -m 644 -t $(STAGING_DIR)/usr/include/nss \
> + ? ? ? ? ? ? ? $(@D)/$(LIBNSS_DISTDIR)/public/nss/*
> + ? ? ? $(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
> + ? ? ? ? ? ? ? $(@D)/$(LIBNSS_DISTDIR)/lib/*.a
> +endef
> +
> +define LIBNSS_INSTALL_TARGET_CMDS
> + ? ? ? $(INSTALL) -m 755 -t $(TARGET_DIR)/usr/lib/ \
> + ? ? ? ? ? ? ? $(@D)/$(LIBNSS_DISTDIR)/lib/*.so
> +endef
> +
> +define LIBNSS_CLEAN_CMDS
> + ? ? ? -$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR) clobber \
> + ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? clobber_dbm \
> + ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? clobber_coreconf \
> + ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? BUILD_OPT=1
> +endef
> +
> +$(eval $(call GENTARGETS,package,libnss))
> --
> 1.7.3.4
>

^ permalink raw reply	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
@ 2011-03-14 17:24 Will Newton
  2011-03-15 22:57 ` Thomas Petazzoni
  0 siblings, 1 reply; 12+ messages in thread
From: Will Newton @ 2011-03-14 17:24 UTC (permalink / raw)
  To: buildroot

NSS is the Network Security Services library developed as part of
the Mozilla project. It provides similar functions to OpenSSL but
allows MPL, GPL and LGPL licensing.

Signed-off-by: Will Newton <will.newton@imgtec.com>
---
 package/Config.in                  |    1 +
 package/libnss/Config.in           |   13 +++++++
 package/libnss/libnss-cross.patch  |   19 +++++++++++
 package/libnss/libnss-uclibc.patch |   11 ++++++
 package/libnss/libnss.mk           |   62 ++++++++++++++++++++++++++++++++++++
 5 files changed, 106 insertions(+), 0 deletions(-)
 create mode 100644 package/libnss/Config.in
 create mode 100644 package/libnss/libnss-cross.patch
 create mode 100644 package/libnss/libnss-uclibc.patch
 create mode 100644 package/libnss/libnss.mk

diff --git a/package/Config.in b/package/Config.in
index 19c38fa..6bb3a42 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -245,6 +245,7 @@ menu "Crypto"
 source "package/beecrypt/Config.in"
 source "package/libgcrypt/Config.in"
 source "package/libgpg-error/Config.in"
+source "package/libnss/Config.in"
 source "package/openssl/Config.in"
 endmenu

diff --git a/package/libnss/Config.in b/package/libnss/Config.in
new file mode 100644
index 0000000..e58aa50
--- /dev/null
+++ b/package/libnss/Config.in
@@ -0,0 +1,13 @@
+config BR2_PACKAGE_LIBNSS
+	bool "libnss"
+	depends on BR2_PACKAGE_LIBNSPR
+	depends on BR2_PACKAGE_SQLITE
+	depends on BR2_PACKAGE_ZLIB
+	help
+	  Network Security Services (NSS) is a set of libraries designed
+	  to support development of security-enabled client and server
+	  applications. Applications built with NSS can support SSL v2
+	  and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME,
+	  and X.509 v3 certificates.
+
+	  http://www.mozilla.org/projects/security/pki/nss/
diff --git a/package/libnss/libnss-cross.patch
b/package/libnss/libnss-cross.patch
new file mode 100644
index 0000000..7670511
--- /dev/null
+++ b/package/libnss/libnss-cross.patch
@@ -0,0 +1,19 @@
+--- libnss-3.12.9.old/mozilla/security/coreconf/Linux.mk	2011-03-01
10:31:21.517847183 +0000
++++ libnss-3.12.9/mozilla/security/coreconf/Linux.mk	2011-03-01
10:33:42.688648237 +0000
+@@ -46,9 +46,13 @@
+ 	IMPL_STRATEGY = _PTH
+ endif
+
+-CC			= gcc
+-CCC			= g++
+-RANLIB			= ranlib
++TARGETCC		= gcc
++TARGETCCC		= g++
++TARGETRANLIB		= ranlib
++
++CC			= $(TARGETCC)
++CCC			= $(TARGETCCC)
++RANLIB			= $(TARGETRANLIB)
+
+ DEFAULT_COMPILER = gcc
+
diff --git a/package/libnss/libnss-uclibc.patch
b/package/libnss/libnss-uclibc.patch
new file mode 100644
index 0000000..e437067
--- /dev/null
+++ b/package/libnss/libnss-uclibc.patch
@@ -0,0 +1,11 @@
+--- libnss-3.12.9.old/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
10:41:35.226450100 +0000
++++ libnss-3.12.9/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
10:42:14.628507934 +0000
+@@ -539,7 +539,7 @@
+  * fetch the library if it's loaded. For NSS it should already be loaded
+  */
+ #define freebl_getLibrary(libName)  \
+-    dlopen (libName, RTLD_LAZY|RTLD_NOLOAD)
++    dlopen (libName, RTLD_LAZY)
+
+ #define freebl_releaseLibrary(lib) \
+     if (lib) dlclose(lib)
diff --git a/package/libnss/libnss.mk b/package/libnss/libnss.mk
new file mode 100644
index 0000000..b530cc3
--- /dev/null
+++ b/package/libnss/libnss.mk
@@ -0,0 +1,62 @@
+#############################################################
+#
+# libnss
+#
+#############################################################
+LIBNSS_VERSION = 3.12.9
+LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz
+LIBNSS_SITE_VERSION = $(subst .,_,$(LIBNSS_VERSION))
+LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(LIBNSS_SITE_VERSION)_RTM/src/
+LIBNSS_SUBDIR = mozilla/security
+LIBNSS_DISTDIR = mozilla/dist
+LIBNSS_INSTALL_STAGING = YES
+LIBNSS_DEPENDENCIES = libnspr sqlite zlib
+
+LIBNSS_BUILD_VARS = MOZILLA_CLIENT=1 \
+		NSPR_INCLUDE_DIR=$(STAGING_DIR)/usr/include/nspr \
+		NSPR_LIB_DIR=$(STAGING_DIR)/usr/lib \
+		BUILD_OPT=1 \
+		NS_USE_GCC=1 \
+		OPTIMIZER="$(TARGET_CFLAGS)" \
+		NSS_USE_SYSTEM_SQLITE=1 \
+		NSS_ENABLE_ECC=1 \
+		NATIVE_CC="$(HOSTCC)" \
+		TARGETCC="$(TARGET_CC)" \
+		TARGETCCC="$(TARGET_CXX)" \
+		TARGETRANLIB="$(TARGET_RANLIB)" \
+		OS_ARCH="Linux" \
+		OS_RELEASE="2.6" \
+		OS_TEST="$(ARCH)"
+
+
+define LIBNSS_BUILD_CMDS
+	$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR)/nss build_coreconf build_dbm all \
+			SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
+			DIST=$(@D)/$(LIBNSS_DISTDIR) \
+			CHECKLOC= \
+			$(LIBNSS_BUILD_VARS)
+endef
+
+define LIBNSS_INSTALL_STAGING_CMDS
+	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
+	$(INSTALL) -m 755 -d $(STAGING_DIR)/usr/include/nss
+	$(INSTALL) -m 644 -t $(STAGING_DIR)/usr/include/nss \
+		$(@D)/$(LIBNSS_DISTDIR)/public/nss/*
+	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.a
+endef
+
+define LIBNSS_INSTALL_TARGET_CMDS
+	$(INSTALL) -m 755 -t $(TARGET_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
+endef
+
+define LIBNSS_CLEAN_CMDS
+	-$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR) clobber \
+					clobber_dbm \
+					clobber_coreconf \
+					BUILD_OPT=1
+endef
+
+$(eval $(call GENTARGETS,package,libnss))
-- 
1.7.3.4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-libnss-Add-new-package.patch
Type: text/x-patch
Size: 5374 bytes
Desc: not available
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20110314/58df823a/attachment.bin>

^ permalink raw reply related	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
  2011-03-14 17:24 Will Newton
@ 2011-03-15 22:57 ` Thomas Petazzoni
  2011-03-17 12:20   ` Will Newton
  0 siblings, 1 reply; 12+ messages in thread
From: Thomas Petazzoni @ 2011-03-15 22:57 UTC (permalink / raw)
  To: buildroot

On Mon, 14 Mar 2011 17:24:56 +0000
Will Newton <will.newton@gmail.com> wrote:

> NSS is the Network Security Services library developed as part of
> the Mozilla project. It provides similar functions to OpenSSL but
> allows MPL, GPL and LGPL licensing.

Just curious, besides Mozilla software, are there other software
components that rely on libnss ?

> +config BR2_PACKAGE_LIBNSS
> +	bool "libnss"
> +	depends on BR2_PACKAGE_LIBNSPR
> +	depends on BR2_PACKAGE_SQLITE
> +	depends on BR2_PACKAGE_ZLIB

The tradition is to use "select" dependencies for
non-obvious dependencies on libraries.

> diff --git a/package/libnss/libnss-cross.patch
> b/package/libnss/libnss-cross.patch

Your patch seems wrapped.

The patch lacks a description.

Regards!

Thomas
-- 
Thomas Petazzoni, Free Electrons
Kernel, drivers, real-time and embedded Linux
development, consulting, training and support.
http://free-electrons.com

^ permalink raw reply	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
  2011-03-15 22:57 ` Thomas Petazzoni
@ 2011-03-17 12:20   ` Will Newton
  0 siblings, 0 replies; 12+ messages in thread
From: Will Newton @ 2011-03-17 12:20 UTC (permalink / raw)
  To: buildroot

On Tue, Mar 15, 2011 at 10:57 PM, Thomas Petazzoni
<thomas.petazzoni@free-electrons.com> wrote:
> On Mon, 14 Mar 2011 17:24:56 +0000
> Will Newton <will.newton@gmail.com> wrote:
>
>> NSS is the Network Security Services library developed as part of
>> the Mozilla project. It provides similar functions to OpenSSL but
>> allows MPL, GPL and LGPL licensing.
>
> Just curious, besides Mozilla software, are there other software
> components that rely on libnss ?

Yes, there's a discussion about it here:

http://lwn.net/Articles/428292/

It's part of the LSB and is also used by some quite high profile
proprietary software packages.

>> +config BR2_PACKAGE_LIBNSS
>> + ? ? bool "libnss"
>> + ? ? depends on BR2_PACKAGE_LIBNSPR
>> + ? ? depends on BR2_PACKAGE_SQLITE
>> + ? ? depends on BR2_PACKAGE_ZLIB
>
> The tradition is to use "select" dependencies for
> non-obvious dependencies on libraries.

Ok, fixed.

>> diff --git a/package/libnss/libnss-cross.patch
>> b/package/libnss/libnss-cross.patch
>
> Your patch seems wrapped.

Hopefully the attached version will not be word wrapped. Unfortunately
gmail makes it very difficult not to word wrap patches (I don't have
SMTP access from behind the corporate firewall).

> The patch lacks a description.

I've added some description to the patches.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-libnss-Add-new-package.patch
Type: text/x-patch
Size: 5667 bytes
Desc: not available
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20110317/534f5819/attachment.bin>

^ permalink raw reply	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
@ 2011-03-14 16:25 Will Newton
  2011-03-14 16:54 ` Michael S. Zick
  0 siblings, 1 reply; 12+ messages in thread
From: Will Newton @ 2011-03-14 16:25 UTC (permalink / raw)
  To: buildroot

NSS is the Network Security Services library developed as part of
the Mozilla project. It provides similar functions to OpenSSL but
allows MPL, GPL and LGPL licensing and has been FIPS certified.

Signed-off-by: Will Newton <will.newton@imgtec.com>
---
 package/Config.in                  |    1 +
 package/libnss/Config.in           |   13 +++++++
 package/libnss/libnss-cross.patch  |   19 +++++++++++
 package/libnss/libnss-uclibc.patch |   11 ++++++
 package/libnss/libnss.mk           |   62 ++++++++++++++++++++++++++++++++++++
 5 files changed, 106 insertions(+), 0 deletions(-)
 create mode 100644 package/libnss/Config.in
 create mode 100644 package/libnss/libnss-cross.patch
 create mode 100644 package/libnss/libnss-uclibc.patch
 create mode 100644 package/libnss/libnss.mk

diff --git a/package/Config.in b/package/Config.in
index 19c38fa..6bb3a42 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -245,6 +245,7 @@ menu "Crypto"
 source "package/beecrypt/Config.in"
 source "package/libgcrypt/Config.in"
 source "package/libgpg-error/Config.in"
+source "package/libnss/Config.in"
 source "package/openssl/Config.in"
 endmenu

diff --git a/package/libnss/Config.in b/package/libnss/Config.in
new file mode 100644
index 0000000..e58aa50
--- /dev/null
+++ b/package/libnss/Config.in
@@ -0,0 +1,13 @@
+config BR2_PACKAGE_LIBNSS
+	bool "libnss"
+	depends on BR2_PACKAGE_LIBNSPR
+	depends on BR2_PACKAGE_SQLITE
+	depends on BR2_PACKAGE_ZLIB
+	help
+	  Network Security Services (NSS) is a set of libraries designed
+	  to support development of security-enabled client and server
+	  applications. Applications built with NSS can support SSL v2
+	  and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME,
+	  and X.509 v3 certificates.
+
+	  http://www.mozilla.org/projects/security/pki/nss/
diff --git a/package/libnss/libnss-cross.patch
b/package/libnss/libnss-cross.patch
new file mode 100644
index 0000000..7670511
--- /dev/null
+++ b/package/libnss/libnss-cross.patch
@@ -0,0 +1,19 @@
+--- libnss-3.12.9.old/mozilla/security/coreconf/Linux.mk	2011-03-01
10:31:21.517847183 +0000
++++ libnss-3.12.9/mozilla/security/coreconf/Linux.mk	2011-03-01
10:33:42.688648237 +0000
+@@ -46,9 +46,13 @@
+ 	IMPL_STRATEGY = _PTH
+ endif
+
+-CC			= gcc
+-CCC			= g++
+-RANLIB			= ranlib
++TARGETCC		= gcc
++TARGETCCC		= g++
++TARGETRANLIB		= ranlib
++
++CC			= $(TARGETCC)
++CCC			= $(TARGETCCC)
++RANLIB			= $(TARGETRANLIB)
+
+ DEFAULT_COMPILER = gcc
+
diff --git a/package/libnss/libnss-uclibc.patch
b/package/libnss/libnss-uclibc.patch
new file mode 100644
index 0000000..e437067
--- /dev/null
+++ b/package/libnss/libnss-uclibc.patch
@@ -0,0 +1,11 @@
+--- libnss-3.12.9.old/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
10:41:35.226450100 +0000
++++ libnss-3.12.9/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
10:42:14.628507934 +0000
+@@ -539,7 +539,7 @@
+  * fetch the library if it's loaded. For NSS it should already be loaded
+  */
+ #define freebl_getLibrary(libName)  \
+-    dlopen (libName, RTLD_LAZY|RTLD_NOLOAD)
++    dlopen (libName, RTLD_LAZY)
+
+ #define freebl_releaseLibrary(lib) \
+     if (lib) dlclose(lib)
diff --git a/package/libnss/libnss.mk b/package/libnss/libnss.mk
new file mode 100644
index 0000000..b530cc3
--- /dev/null
+++ b/package/libnss/libnss.mk
@@ -0,0 +1,62 @@
+#############################################################
+#
+# libnss
+#
+#############################################################
+LIBNSS_VERSION = 3.12.9
+LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz
+LIBNSS_SITE_VERSION = $(subst .,_,$(LIBNSS_VERSION))
+LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(LIBNSS_SITE_VERSION)_RTM/src/
+LIBNSS_SUBDIR = mozilla/security
+LIBNSS_DISTDIR = mozilla/dist
+LIBNSS_INSTALL_STAGING = YES
+LIBNSS_DEPENDENCIES = libnspr sqlite zlib
+
+LIBNSS_BUILD_VARS = MOZILLA_CLIENT=1 \
+		NSPR_INCLUDE_DIR=$(STAGING_DIR)/usr/include/nspr \
+		NSPR_LIB_DIR=$(STAGING_DIR)/usr/lib \
+		BUILD_OPT=1 \
+		NS_USE_GCC=1 \
+		OPTIMIZER="$(TARGET_CFLAGS)" \
+		NSS_USE_SYSTEM_SQLITE=1 \
+		NSS_ENABLE_ECC=1 \
+		NATIVE_CC="$(HOSTCC)" \
+		TARGETCC="$(TARGET_CC)" \
+		TARGETCCC="$(TARGET_CXX)" \
+		TARGETRANLIB="$(TARGET_RANLIB)" \
+		OS_ARCH="Linux" \
+		OS_RELEASE="2.6" \
+		OS_TEST="$(ARCH)"
+
+
+define LIBNSS_BUILD_CMDS
+	$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR)/nss build_coreconf build_dbm all \
+			SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
+			DIST=$(@D)/$(LIBNSS_DISTDIR) \
+			CHECKLOC= \
+			$(LIBNSS_BUILD_VARS)
+endef
+
+define LIBNSS_INSTALL_STAGING_CMDS
+	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
+	$(INSTALL) -m 755 -d $(STAGING_DIR)/usr/include/nss
+	$(INSTALL) -m 644 -t $(STAGING_DIR)/usr/include/nss \
+		$(@D)/$(LIBNSS_DISTDIR)/public/nss/*
+	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.a
+endef
+
+define LIBNSS_INSTALL_TARGET_CMDS
+	$(INSTALL) -m 755 -t $(TARGET_DIR)/usr/lib/ \
+		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
+endef
+
+define LIBNSS_CLEAN_CMDS
+	-$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR) clobber \
+					clobber_dbm \
+					clobber_coreconf \
+					BUILD_OPT=1
+endef
+
+$(eval $(call GENTARGETS,package,libnss))
-- 
1.7.3.4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-libnss-Add-new-package.patch
Type: text/x-patch
Size: 5402 bytes
Desc: not available
URL: <http://lists.busybox.net/pipermail/buildroot/attachments/20110314/2f91788c/attachment.bin>

^ permalink raw reply related	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
  2011-03-14 16:25 Will Newton
@ 2011-03-14 16:54 ` Michael S. Zick
  2011-03-14 17:22   ` Will Newton
  0 siblings, 1 reply; 12+ messages in thread
From: Michael S. Zick @ 2011-03-14 16:54 UTC (permalink / raw)
  To: buildroot

On Mon March 14 2011, Will Newton wrote:
> NSS is the Network Security Services library developed as part of
> the Mozilla project. It provides similar functions to OpenSSL but
> allows MPL, GPL and LGPL licensing and has been FIPS certified.
>

Note:
The version mentioned in this patch __is not__ one of the certified
versions.
Ref:
http://www.mozilla.org/projects/security/pki/nss/fips/

Nor does the validated version build for all of the Buildroot targets.
Ref:
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#815
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp815.pdf

So I think it is unwise to include that "and has been FIPS certified"
in the new package description.

Mike 
> Signed-off-by: Will Newton <will.newton@imgtec.com>
> ---
>  package/Config.in                  |    1 +
>  package/libnss/Config.in           |   13 +++++++
>  package/libnss/libnss-cross.patch  |   19 +++++++++++
>  package/libnss/libnss-uclibc.patch |   11 ++++++
>  package/libnss/libnss.mk           |   62 ++++++++++++++++++++++++++++++++++++
>  5 files changed, 106 insertions(+), 0 deletions(-)
>  create mode 100644 package/libnss/Config.in
>  create mode 100644 package/libnss/libnss-cross.patch
>  create mode 100644 package/libnss/libnss-uclibc.patch
>  create mode 100644 package/libnss/libnss.mk
> 
> diff --git a/package/Config.in b/package/Config.in
> index 19c38fa..6bb3a42 100644
> --- a/package/Config.in
> +++ b/package/Config.in
> @@ -245,6 +245,7 @@ menu "Crypto"
>  source "package/beecrypt/Config.in"
>  source "package/libgcrypt/Config.in"
>  source "package/libgpg-error/Config.in"
> +source "package/libnss/Config.in"
>  source "package/openssl/Config.in"
>  endmenu
> 
> diff --git a/package/libnss/Config.in b/package/libnss/Config.in
> new file mode 100644
> index 0000000..e58aa50
> --- /dev/null
> +++ b/package/libnss/Config.in
> @@ -0,0 +1,13 @@
> +config BR2_PACKAGE_LIBNSS
> +	bool "libnss"
> +	depends on BR2_PACKAGE_LIBNSPR
> +	depends on BR2_PACKAGE_SQLITE
> +	depends on BR2_PACKAGE_ZLIB
> +	help
> +	  Network Security Services (NSS) is a set of libraries designed
> +	  to support development of security-enabled client and server
> +	  applications. Applications built with NSS can support SSL v2
> +	  and v3, TLS, PKCS #5, PKCS #7, PKCS #11, PKCS #12, S/MIME,
> +	  and X.509 v3 certificates.
> +
> +	  http://www.mozilla.org/projects/security/pki/nss/
> diff --git a/package/libnss/libnss-cross.patch
> b/package/libnss/libnss-cross.patch
> new file mode 100644
> index 0000000..7670511
> --- /dev/null
> +++ b/package/libnss/libnss-cross.patch
> @@ -0,0 +1,19 @@
> +--- libnss-3.12.9.old/mozilla/security/coreconf/Linux.mk	2011-03-01
> 10:31:21.517847183 +0000
> ++++ libnss-3.12.9/mozilla/security/coreconf/Linux.mk	2011-03-01
> 10:33:42.688648237 +0000
> +@@ -46,9 +46,13 @@
> + 	IMPL_STRATEGY = _PTH
> + endif
> +
> +-CC			= gcc
> +-CCC			= g++
> +-RANLIB			= ranlib
> ++TARGETCC		= gcc
> ++TARGETCCC		= g++
> ++TARGETRANLIB		= ranlib
> ++
> ++CC			= $(TARGETCC)
> ++CCC			= $(TARGETCCC)
> ++RANLIB			= $(TARGETRANLIB)
> +
> + DEFAULT_COMPILER = gcc
> +
> diff --git a/package/libnss/libnss-uclibc.patch
> b/package/libnss/libnss-uclibc.patch
> new file mode 100644
> index 0000000..e437067
> --- /dev/null
> +++ b/package/libnss/libnss-uclibc.patch
> @@ -0,0 +1,11 @@
> +--- libnss-3.12.9.old/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
> 10:41:35.226450100 +0000
> ++++ libnss-3.12.9/mozilla/security/nss/lib/freebl/stubs.c	2011-03-01
> 10:42:14.628507934 +0000
> +@@ -539,7 +539,7 @@
> +  * fetch the library if it's loaded. For NSS it should already be loaded
> +  */
> + #define freebl_getLibrary(libName)  \
> +-    dlopen (libName, RTLD_LAZY|RTLD_NOLOAD)
> ++    dlopen (libName, RTLD_LAZY)
> +
> + #define freebl_releaseLibrary(lib) \
> +     if (lib) dlclose(lib)
> diff --git a/package/libnss/libnss.mk b/package/libnss/libnss.mk
> new file mode 100644
> index 0000000..b530cc3
> --- /dev/null
> +++ b/package/libnss/libnss.mk
> @@ -0,0 +1,62 @@
> +#############################################################
> +#
> +# libnss
> +#
> +#############################################################
> +LIBNSS_VERSION = 3.12.9
> +LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz
> +LIBNSS_SITE_VERSION = $(subst .,_,$(LIBNSS_VERSION))
> +LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(LIBNSS_SITE_VERSION)_RTM/src/
> +LIBNSS_SUBDIR = mozilla/security
> +LIBNSS_DISTDIR = mozilla/dist
> +LIBNSS_INSTALL_STAGING = YES
> +LIBNSS_DEPENDENCIES = libnspr sqlite zlib
> +
> +LIBNSS_BUILD_VARS = MOZILLA_CLIENT=1 \
> +		NSPR_INCLUDE_DIR=$(STAGING_DIR)/usr/include/nspr \
> +		NSPR_LIB_DIR=$(STAGING_DIR)/usr/lib \
> +		BUILD_OPT=1 \
> +		NS_USE_GCC=1 \
> +		OPTIMIZER="$(TARGET_CFLAGS)" \
> +		NSS_USE_SYSTEM_SQLITE=1 \
> +		NSS_ENABLE_ECC=1 \
> +		NATIVE_CC="$(HOSTCC)" \
> +		TARGETCC="$(TARGET_CC)" \
> +		TARGETCCC="$(TARGET_CXX)" \
> +		TARGETRANLIB="$(TARGET_RANLIB)" \
> +		OS_ARCH="Linux" \
> +		OS_RELEASE="2.6" \
> +		OS_TEST="$(ARCH)"
> +
> +
> +define LIBNSS_BUILD_CMDS
> +	$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR)/nss build_coreconf build_dbm all \
> +			SOURCE_MD_DIR=$(@D)/$(LIBNSS_DISTDIR) \
> +			DIST=$(@D)/$(LIBNSS_DISTDIR) \
> +			CHECKLOC= \
> +			$(LIBNSS_BUILD_VARS)
> +endef
> +
> +define LIBNSS_INSTALL_STAGING_CMDS
> +	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
> +		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
> +	$(INSTALL) -m 755 -d $(STAGING_DIR)/usr/include/nss
> +	$(INSTALL) -m 644 -t $(STAGING_DIR)/usr/include/nss \
> +		$(@D)/$(LIBNSS_DISTDIR)/public/nss/*
> +	$(INSTALL) -m 755 -t $(STAGING_DIR)/usr/lib/ \
> +		$(@D)/$(LIBNSS_DISTDIR)/lib/*.a
> +endef
> +
> +define LIBNSS_INSTALL_TARGET_CMDS
> +	$(INSTALL) -m 755 -t $(TARGET_DIR)/usr/lib/ \
> +		$(@D)/$(LIBNSS_DISTDIR)/lib/*.so
> +endef
> +
> +define LIBNSS_CLEAN_CMDS
> +	-$(MAKE1) -C $(@D)/$(LIBNSS_SUBDIR) clobber \
> +					clobber_dbm \
> +					clobber_coreconf \
> +					BUILD_OPT=1
> +endef
> +
> +$(eval $(call GENTARGETS,package,libnss))

^ permalink raw reply	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
  2011-03-14 16:54 ` Michael S. Zick
@ 2011-03-14 17:22   ` Will Newton
  2011-03-14 19:04     ` Michael S. Zick
  0 siblings, 1 reply; 12+ messages in thread
From: Will Newton @ 2011-03-14 17:22 UTC (permalink / raw)
  To: buildroot

On Mon, Mar 14, 2011 at 4:54 PM, Michael S. Zick <minimod@morethan.org> wrote:
> On Mon March 14 2011, Will Newton wrote:
>> NSS is the Network Security Services library developed as part of
>> the Mozilla project. It provides similar functions to OpenSSL but
>> allows MPL, GPL and LGPL licensing and has been FIPS certified.
>>
>
> Note:
> The version mentioned in this patch __is not__ one of the certified
> versions.
> Ref:
> http://www.mozilla.org/projects/security/pki/nss/fips/
>
> Nor does the validated version build for all of the Buildroot targets.
> Ref:
> http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#815
> http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp815.pdf
>
> So I think it is unwise to include that "and has been FIPS certified"
> in the new package description.

I'm aware that it is not a FIPS certified version, I only that line in
there to help answer the inevitable "why another crypto library?"
question.

I'll remove the mention of FIPS certification.

^ permalink raw reply	[flat|nested] 12+ messages in thread

* [Buildroot] [PATCH] libnss: Add new package.
  2011-03-14 17:22   ` Will Newton
@ 2011-03-14 19:04     ` Michael S. Zick
  0 siblings, 0 replies; 12+ messages in thread
From: Michael S. Zick @ 2011-03-14 19:04 UTC (permalink / raw)
  To: buildroot

On Mon March 14 2011, you wrote:
> On Mon, Mar 14, 2011 at 4:54 PM, Michael S. Zick <minimod@morethan.org> wrote:
> > On Mon March 14 2011, Will Newton wrote:
> >> NSS is the Network Security Services library developed as part of
> >> the Mozilla project. It provides similar functions to OpenSSL but
> >> allows MPL, GPL and LGPL licensing and has been FIPS certified.
> >>
> >
> > Note:
> > The version mentioned in this patch __is not__ one of the certified
> > versions.
> > Ref:
> > http://www.mozilla.org/projects/security/pki/nss/fips/
> >
> > Nor does the validated version build for all of the Buildroot targets.
> > Ref:
> > http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140val-all.htm#815
> > http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp815.pdf
> >
> > So I think it is unwise to include that "and has been FIPS certified"
> > in the new package description.
> 
> I'm aware that it is not a FIPS certified version, I only that line in
> there to help answer the inevitable "why another crypto library?"
> question.
> 
> I'll remove the mention of FIPS certification.
> 
> 

Good idea, will not mis-lead someone in the future.

But it does raise an interesting guestion -

OpenSSL will build the FIPS validated module which can be
used with the rest of the library when the security policy
is followed (which I think would be easy for BR to do).
http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/140sp/140sp1051.pdf
Installation instructions start on page 15.

Which might be of interest because the validated module will
build for ARM-uClibc. (Page 6)  Also, version 1.2.2 should have
the cross-compile problem fixed. (Page 4).

Having that would also allow other users of the library to build
"FIPS mode" applications, such as OpenSSH.  (In case anyone needs
a "FIPS mode ssh" ;-) )

One down-side I can see to suggesting that FIPS mode be included in BR:

The configuration and make files are easy for someone to change without
reference to the security policy - 
If someone updated the package site, version or allowed commands,
they would be generating a non-validated module when they thought otherwise.

So maybe "FIPS mode" of everything should remain the providence of the
local security officer, outside of Buildroot.

Mike

^ permalink raw reply	[flat|nested] 12+ messages in thread

end of thread, other threads:[~2011-07-08 13:25 UTC | newest]

Thread overview: 12+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2011-07-07 12:08 [Buildroot] [PATCH] libnss: Add new package Will Newton
2011-07-07 20:32 ` Peter Korsgaard
2011-07-08 13:25   ` Will Newton
  -- strict thread matches above, loose matches on Subject: below --
2011-03-25 12:07 Will Newton
2011-04-01 10:00 ` Will Newton
2011-03-14 17:24 Will Newton
2011-03-15 22:57 ` Thomas Petazzoni
2011-03-17 12:20   ` Will Newton
2011-03-14 16:25 Will Newton
2011-03-14 16:54 ` Michael S. Zick
2011-03-14 17:22   ` Will Newton
2011-03-14 19:04     ` Michael S. Zick

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox