Difuse/difos
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

openssl: optimize build options, disable old SSL versions

Browse source 
Based on a patchset by Etienne CHAMPETIER <champetier.etienne@gmail.com>
Signed-off-by: Steven Barth <steven@midlink.org>

SVN-Revision: 43123
This commit is contained in:
Steven Barth 2014-10-30 13:11:04 +00:00
parent d7e981ca4c
commit 6a4a437e04
2 changed files with 18 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
package/libs/openssl/Config.in
View file

@ -11,6 +11,11 @@ config OPENSSL_WITH_EC2M
depends on OPENSSL_WITH_EC depends on OPENSSL_WITH_EC
prompt "Enable ec2m support" prompt "Enable ec2m support"
config OPENSSL_WITH_SSL3
bool
default n
prompt "Enable sslv3 support"
config OPENSSL_ENGINE_CRYPTO config OPENSSL_ENGINE_CRYPTO
bool bool
prompt "Crypto acceleration support" prompt "Crypto acceleration support"

19
package/libs/openssl/Makefile
View file

@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
PKG_NAME:=openssl PKG_NAME:=openssl
PKG_VERSION:=1.0.1j PKG_VERSION:=1.0.1j
PKG_RELEASE:=1 PKG_RELEASE:=2
PKG_USE_MIPS16:=0 PKG_USE_MIPS16:=0
PKG_BUILD_PARALLEL:=1 PKG_BUILD_PARALLEL:=1
@ -23,8 +23,12 @@ PKG_MD5SUM:=f7175c9cd3c39bb1907ac8bba9df8ed3
PKG_LICENSE:=SSLEAY OPENSSL PKG_LICENSE:=SSLEAY OPENSSL
PKG_LICENSE_FILES:=LICENSE PKG_LICENSE_FILES:=LICENSE
PKG_BUILD_DEPENDS:=ocf-crypto-headers PKG_BUILD_DEPENDS:=ocf-crypto-headers
PKG_CONFIG_DEPENDS:=CONFIG_OPENSSL_ENGINE_CRYPTO CONFIG_OPENSSL_ENGINE_DIGEST \ PKG_CONFIG_DEPENDS:= \
CONFIG_OPENSSL_WITH_EC CONFIG_OPENSSL_WITH_EC2M CONFIG_OPENSSL_ENGINE_CRYPTO \
CONFIG_OPENSSL_ENGINE_DIGEST \
CONFIG_OPENSSL_WITH_EC \
CONFIG_OPENSSL_WITH_EC2M \
CONFIG_OPENSSL_WITH_SSL3
include $(INCLUDE_DIR)/package.mk include $(INCLUDE_DIR)/package.mk
@ -83,9 +87,8 @@ This package contains the OpenSSL command-line utility.
endef endef
OPENSSL_NO_CIPHERS:= no-idea no-md2 no-mdc2 no-rc5 no-sha0 no-smime \ OPENSSL_NO_CIPHERS:= no-idea no-md2 no-mdc2 no-rc5 no-sha0 no-camellia no-krb5
no-aes192 no-camellia no-ans1 no-krb5 OPENSSL_OPTIONS:= shared no-err no-hw zlib-dynamic no-sse2 no-ssl2 no-cms
OPENSSL_OPTIONS:= shared no-err no-hw zlib-dynamic no-sse2
ifdef CONFIG_OPENSSL_ENGINE_CRYPTO ifdef CONFIG_OPENSSL_ENGINE_CRYPTO
OPENSSL_OPTIONS += -DHAVE_CRYPTODEV OPENSSL_OPTIONS += -DHAVE_CRYPTODEV
@ -104,6 +107,10 @@ ifndef CONFIG_OPENSSL_WITH_EC2M
OPENSSL_OPTIONS += no-ec2m OPENSSL_OPTIONS += no-ec2m
endif endif
ifndef CONFIG_OPENSSL_WITH_SSL3
OPENSSL_OPTIONS += no-ssl3
endif
ifeq ($(CONFIG_x86_64),y) ifeq ($(CONFIG_x86_64),y)
OPENSSL_TARGET:=linux-x86_64-openwrt OPENSSL_TARGET:=linux-x86_64-openwrt
OPENSSL_MAKEFLAGS += LIBDIR=lib OPENSSL_MAKEFLAGS += LIBDIR=lib