From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1751151AbdKTC7o (ORCPT ); Sun, 19 Nov 2017 21:59:44 -0500 Received: from mail-pf0-f196.google.com ([209.85.192.196]:35197 "EHLO mail-pf0-f196.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751107AbdKTC7n (ORCPT ); Sun, 19 Nov 2017 21:59:43 -0500 X-Google-Smtp-Source: AGs4zMbNr2gpxAthIHiaziP9woel7nfA/Aj2NXQGRROCMwfSAU3IAeiOdrTq9j5Tq3N/kChZiVYJpA== From: Jesse Chan Cc: Jesse Chan , Greg Kroah-Hartman , Jonathan Corbet , Thomas Gleixner , Kate Stewart , Mauro Carvalho Chehab , linux-kernel@vger.kernel.org Subject: [PATCH] extract-cert: detect and warn if libssl is missing Date: Sun, 19 Nov 2017 18:55:29 -0800 Message-Id: <20171120025531.10413-1-jc@linux.com> X-Mailer: git-send-email 2.14.1 To: unlisted-recipients:; (no To-header on input) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org With CONFIG_SYSTEM_TRUSTED_KEYRING enabled, if the host system doesn't have a development version of libssl installed, the build fails with errors like: extract-cert.c: fatal error: openssl/bio.h: No such file or directory In this case, prompt to install libssl-dev(el). Signed-off-by: Jesse Chan --- scripts/Makefile | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/scripts/Makefile b/scripts/Makefile index 25ab143cbe14..6c75a32aae12 100644 --- a/scripts/Makefile +++ b/scripts/Makefile @@ -35,6 +35,14 @@ PHONY += build_unifdef build_unifdef: $(obj)/unifdef @: +ifdef CONFIG_SYSTEM_TRUSTED_KEYRING + has_libssl := $(call try-run,\ + echo "int main() {}" | $(HOSTCC) -xc -o /dev/null -lssl -,1,0) + ifneq ($(has_libssl),1) + $(error "Cannot use CONFIG_SYSTEM_TRUSTED_KEYRING=y, please install libssl-dev or libssl-devel") + endif +endif + subdir-$(CONFIG_MODVERSIONS) += genksyms subdir-y += mod subdir-$(CONFIG_SECURITY_SELINUX) += selinux -- 2.14.1