EljakimHerrewijnen/Openwrt
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
58d2bd88ae
Openwrt/package/libs/wolfssl/Makefile

112 lines
3.6 KiB
Makefile
Raw Normal View History

add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
#
libs/wolfssl: bump to version 3.12.0 ; add myself as maintainer Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-25 13:22:36 +00:00
# Copyright (C) 2006-2017 OpenWrt.org
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
cyassl: version bump to 3.4.6 This patch introduces a new build error into coova-chilli, but coova-chilli already fails to build even without it anyway. CyaSSL is now called wolfSSL, and all the API's have been renamed, and backward-compatibility headers added. Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 46167
2015-07-03 23:20:01 +00:00
PKG_NAME:=wolfssl
wolfssl: update to 4.4.0-stable This version adds many bugfixes, including a couple of security vulnerabilities: - For fast math (enabled by wpa_supplicant option), use a constant time modular inverse when mapping to affine when operation involves a private key - keygen, calc shared secret, sign. - Change constant time and cache resistant ECC mulmod. Ensure points being operated on change to make constant time. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-05-01 15:06:48 +00:00
PKG_VERSION:=4.4.0-stable
wolfssl: use -fomit-frame-pointer to fix asm error 32-bit x86 fail to compile fast-math feature when compiled with frame pointer, which uses a register used in a couple of inline asm functions. Previous versions of wolfssl had this by default. Keeping an extra register available may increase performance, so it's being restored for all architectures. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-05-26 13:45:22 +00:00
PKG_RELEASE:=2
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
wolfssl: update to 3.15.7, fix Makefile This includes a fix for a medium-level potential cache attack with a variant of Bleichenbacher’s attack. Patches were refreshed. Increased FP_MAX_BITS to allow 4096-bit RSA keys. Fixed poly1305 build option, and some Makefile updates. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:39:59 +00:00
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
wolfssl: update to version 3.14.4 Use download from github archive corresponding to v3.14.4 tag because the project's website apparently only offers 3.14.0-stable release downloads. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-05-23 21:26:41 +00:00
PKG_SOURCE_URL:=https://github.com/wolfSSL/wolfssl/archive/v$(PKG_VERSION)
wolfssl: update to 4.4.0-stable This version adds many bugfixes, including a couple of security vulnerabilities: - For fast math (enabled by wpa_supplicant option), use a constant time modular inverse when mapping to affine when operation involves a private key - keygen, calc shared secret, sign. - Change constant time and cache resistant ECC mulmod. Ensure points being operated on change to make constant time. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-05-01 15:06:48 +00:00
PKG_HASH:=7f854804c8ae0ca49cc77809e38e9a3b5a8c91ba7855ea928e6d6651b0d35f18
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
change fixup method and fix CFLAGS handling Signed-off-by: Imre Kaloz <kaloz@openwrt.org> SVN-Revision: 39151
2013-12-20 20:25:44 +00:00
PKG_FIXUP:=libtool
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
PKG_INSTALL:=1
cyassl: update to wolfssl version 3.10.0 This fixes a low level security vulnerability. Deactivate MIPS16 support, crypto code gets much slower with MIPS16. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-01-09 22:56:05 +00:00
PKG_USE_MIPS16:=0
From: Joseph Roback <openwrt-devel@roback.cc> 26 Makefile patches for enabling parallel builds. Tested on Linux (8-core) and Darwin (12-core), individually and from clean build_root. The first set is from trunk, the second is from feeds/packages. Signed-off-by: Joe Roback <joe@roback.cc> SVN-Revision: 22965
2010-09-07 10:00:34 +00:00
PKG_BUILD_PARALLEL:=1
wolfssl: update to 3.15.7, fix Makefile This includes a fix for a medium-level potential cache attack with a variant of Bleichenbacher’s attack. Patches were refreshed. Increased FP_MAX_BITS to allow 4096-bit RSA keys. Fixed poly1305 build option, and some Makefile updates. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:39:59 +00:00
PKG_LICENSE:=GPL-2.0-or-later
PKG_LICENSE_FILES:=LICENSING COPYING
wolfssl: update to 4.0.0-stable Removed options that can't be turned off because we're building with --enable-stunnel, some of which affect hostapd's Config.in. Adjusted the title of OCSP option, as OCSP itself can't be turned off, only the stapling part is selectable. Mark options turned on when wpad support is selected. Add building options for TLS 1.0, and TLS 1.3. Add hardware crypto support, which due to a bug, only works when CCM support is turned off. Reorganized option conditionals in Makefile. Add Eneas U de Queiroz as maintainer. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:40:00 +00:00
PKG_MAINTAINER:=Eneas U de Queiroz <cotequeiroz@gmail.com>
wolfssl: update to 3.15.7, fix Makefile This includes a fix for a medium-level potential cache attack with a variant of Bleichenbacher’s attack. Patches were refreshed. Increased FP_MAX_BITS to allow 4096-bit RSA keys. Fixed poly1305 build option, and some Makefile updates. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:39:59 +00:00
PKG_CPE_ID:=cpe:/a:wolfssl:wolfssl
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
wolfssl: add PKG_CONFIG_DEPENDS symbols This change will trigger rebuild on buildbots in case of changed config symbols, like in the case of hostapd selecting some wolfssl symbols lately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-05-25 18:35:46 +00:00
PKG_CONFIG_DEPENDS:=\
wolfssl: bump to 4.1.0-stable Always build AES-GCM support. Unnecessary patches were removed. This includes two vulnerability fixes: CVE-2019-11873: a potential buffer overflow case with the TLSv1.3 PSK extension parsing. CVE-2019-13628 (currently assigned-only): potential leak of nonce sizes when performing ECDSA signing operations. The leak is considered to be difficult to exploit but it could potentially be used maliciously to perform a lattice based timing attack. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-08-05 14:47:58 +00:00
CONFIG_WOLFSSL_HAS_AES_CCM CONFIG_WOLFSSL_HAS_AFALG \
CONFIG_WOLFSSL_HAS_ARC4 CONFIG_WOLFSSL_HAS_CHACHA_POLY \
CONFIG_WOLFSSL_HAS_DEVCRYPTO_AES CONFIG_WOLFSSL_HAS_DEVCRYPTO_FULL \
CONFIG_WOLFSSL_HAS_DH CONFIG_WOLFSSL_HAS_DTLS \
CONFIG_WOLFSSL_HAS_ECC25519 CONFIG_WOLFSSL_HAS_OCSP \
CONFIG_WOLFSSL_HAS_SESSION_TICKET CONFIG_WOLFSSL_HAS_TLSV10 \
CONFIG_WOLFSSL_HAS_TLSV13 CONFIG_WOLFSSL_HAS_WPAS
wolfssl: add PKG_CONFIG_DEPENDS symbols This change will trigger rebuild on buildbots in case of changed config symbols, like in the case of hostapd selecting some wolfssl symbols lately. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-05-25 18:35:46 +00:00
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
include $(INCLUDE_DIR)/package.mk
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
define Package/libwolfssl
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
SECTION:=libs
SUBMENU:=SSL
CATEGORY:=Libraries
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
TITLE:=wolfSSL library
cyassl: update to wolfssl 3.6.0 Upstream wolfssl already has better checks to detect broken ssl v2 ClientHellos, we can remove our hack. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 46168
2015-07-03 23:20:36 +00:00
URL:=http://www.wolfssl.com/
cyassl: make CyaSSL/WolfSSL more configurable The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
2016-08-20 10:52:42 +00:00
MENU:=1
libs/wolfssl: add libcysassl to PROVIDES field (for backwards compat) Until other packages from feeds decide to rename the dependency of `+libcyassl` to `+libwolfssl`, this allows for a bit of backwards compatibility with those packages. Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-25 11:25:28 +00:00
PROVIDES:=libcyassl
wolfssl: update to 4.0.0-stable Removed options that can't be turned off because we're building with --enable-stunnel, some of which affect hostapd's Config.in. Adjusted the title of OCSP option, as OCSP itself can't be turned off, only the stapling part is selectable. Mark options turned on when wpad support is selected. Add building options for TLS 1.0, and TLS 1.3. Add hardware crypto support, which due to a bug, only works when CCM support is turned off. Reorganized option conditionals in Makefile. Add Eneas U de Queiroz as maintainer. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:40:00 +00:00
DEPENDS:=+WOLFSSL_HAS_DEVCRYPTO:kmod-cryptodev +WOLFSSL_HAS_AFALG:kmod-crypto-user
wolfssl: bump to 4.3.0-stable This update fixes many bugs, and six security vulnerabilities, including CVE-2019-18840. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-12-26 18:11:31 +00:00
ABI_VERSION:=24
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
endef
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
define Package/libwolfssl/description
wolfSSL (formerly CyaSSL) is an SSL library optimized for small
footprint, both on disk and for memory use.
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
endef
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
define Package/libwolfssl/config
cyassl: make CyaSSL/WolfSSL more configurable The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
2016-08-20 10:52:42 +00:00
source "$(SOURCE)/Config.in"
endef
wolfssl: use -fomit-frame-pointer to fix asm error 32-bit x86 fail to compile fast-math feature when compiled with frame pointer, which uses a register used in a couple of inline asm functions. Previous versions of wolfssl had this by default. Keeping an extra register available may increase performance, so it's being restored for all architectures. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-05-26 13:45:22 +00:00
TARGET_CFLAGS += $(FPIC) -DFP_MAX_BITS=8192 -fomit-frame-pointer
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
libs/cyassl: re-enable the stunnel flag This partially reverts commit 15734b023b7e04d12d258ea28bfb5e6e735f10b7. --enable-stunnel was actually important and properly described in commit 9b118cde898e. Removing it broke ustream-cyassl Signed-off-by: Felix Fietkau <nbd@nbd.name>
2016-12-20 09:39:20 +00:00
# --enable-stunnel needed for OpenSSL API compatibility bits
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
CONFIGURE_ARGS += \
cyassl: add support for SSL_set_tlsext_host_name Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 45215
2015-04-01 10:42:28 +00:00
--enable-opensslextra \
--enable-sni \
libs/cyassl: re-enable the stunnel flag This partially reverts commit 15734b023b7e04d12d258ea28bfb5e6e735f10b7. --enable-stunnel was actually important and properly described in commit 9b118cde898e. Removing it broke ustream-cyassl Signed-off-by: Felix Fietkau <nbd@nbd.name>
2016-12-20 09:39:20 +00:00
--enable-stunnel \
wolfssl: fix options and add support for wpa_supplicant features Some options' default values have been changed upstream, others were accidentally inverted (CONFIG_WOLFSSL_HAS_DES3). Also add options needed to build hostapd/wpa_supplicant against wolfssl. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-04-28 18:55:51 +00:00
--disable-examples \
wolfssl: bump to 4.1.0-stable Always build AES-GCM support. Unnecessary patches were removed. This includes two vulnerability fixes: CVE-2019-11873: a potential buffer overflow case with the TLSv1.3 PSK extension parsing. CVE-2019-13628 (currently assigned-only): potential leak of nonce sizes when performing ECDSA signing operations. The leak is considered to be difficult to exploit but it could potentially be used maliciously to perform a lattice based timing attack. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-08-05 14:47:58 +00:00
--disable-jobserver \
wolfssl: update to 4.0.0-stable Removed options that can't be turned off because we're building with --enable-stunnel, some of which affect hostapd's Config.in. Adjusted the title of OCSP option, as OCSP itself can't be turned off, only the stapling part is selectable. Mark options turned on when wpad support is selected. Add building options for TLS 1.0, and TLS 1.3. Add hardware crypto support, which due to a bug, only works when CCM support is turned off. Reorganized option conditionals in Makefile. Add Eneas U de Queiroz as maintainer. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-07-01 16:40:00 +00:00
--$(if $(CONFIG_IPV6),enable,disable)-ipv6 \
--$(if $(CONFIG_WOLFSSL_HAS_AES_CCM),enable,disable)-aesccm \
--$(if $(CONFIG_WOLFSSL_HAS_CHACHA_POLY),enable,disable)-chacha \
--$(if $(CONFIG_WOLFSSL_HAS_CHACHA_POLY),enable,disable)-poly1305 \
--$(if $(CONFIG_WOLFSSL_HAS_DH),enable,disable)-dh \
--$(if $(CONFIG_WOLFSSL_HAS_ARC4),enable,disable)-arc4 \
--$(if $(CONFIG_WOLFSSL_HAS_TLSV10),enable,disable)-tlsv10 \
--$(if $(CONFIG_WOLFSSL_HAS_TLSV13),enable,disable)-tls13 \
--$(if $(CONFIG_WOLFSSL_HAS_SESSION_TICKET),enable,disable)-session-ticket \
--$(if $(CONFIG_WOLFSSL_HAS_DTLS),enable,disable)-dtls \
--$(if $(CONFIG_WOLFSSL_HAS_ECC25519),enable,disable)-curve25519 \
--$(if $(CONFIG_WOLFSSL_HAS_AFALG),enable,disable)-afalg \
wolfssl: allow building with hw-crytpo and AES-CCM Hardware acceleration was disabled when AES-CCM was selected as a workaround for a build failure. This applies a couple of upstream patches fixing this. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-09-12 20:00:00 +00:00
--enable-devcrypto=$(if $(CONFIG_WOLFSSL_HAS_DEVCRYPTO_CBC),cbc\
,$(if $(CONFIG_WOLFSSL_HAS_DEVCRYPTO_AES),aes\
,$(if $(CONFIG_WOLFSSL_HAS_DEVCRYPTO_FULL),yes,no)))
cyassl: make CyaSSL/WolfSSL more configurable The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
2016-08-20 10:52:42 +00:00
wolfssl: fix options and add support for wpa_supplicant features Some options' default values have been changed upstream, others were accidentally inverted (CONFIG_WOLFSSL_HAS_DES3). Also add options needed to build hostapd/wpa_supplicant against wolfssl. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2018-04-28 18:55:51 +00:00
ifeq ($(CONFIG_WOLFSSL_HAS_OCSP),y)
CONFIGURE_ARGS += \
--enable-ocsp --enable-ocspstapling --enable-ocspstapling2
endif
ifeq ($(CONFIG_WOLFSSL_HAS_WPAS),y)
CONFIGURE_ARGS += \
--enable-wpas --enable-sha512 --enable-fortress --enable-fastmath
endif
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
define Build/InstallDev
cyassl: make CyaSSL/WolfSSL more configurable The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
2016-08-20 10:52:42 +00:00
$(INSTALL_DIR) $(1)/usr/include $(1)/usr/lib/pkgconfig
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/include/* $(1)/usr/include/
$(INSTALL_DIR) $(1)/usr/lib
cyassl: version bump to 3.4.6 This patch introduces a new build error into coova-chilli, but coova-chilli already fails to build even without it anyway. CyaSSL is now called wolfSSL, and all the API's have been renamed, and backward-compatibility headers added. Signed-off-by: Daniel Gimpelevich <daniel@gimpelevich.san-francisco.ca.us> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> SVN-Revision: 46167
2015-07-03 23:20:01 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/libwolfssl.{so*,la} $(1)/usr/lib/
ln -s libwolfssl.so $(1)/usr/lib/libcyassl.so
ln -s libwolfssl.la $(1)/usr/lib/libcyassl.la
cyassl: make CyaSSL/WolfSSL more configurable The default configuration might not be suitable for every use case. Add options to enable/disable additional options. Signed-off-by: Andreas Schultz <aschultz@tpip.net>
2016-08-20 10:52:42 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/*.pc $(1)/usr/lib/pkgconfig
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
endef
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
define Package/libwolfssl/install
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
$(INSTALL_DIR) $(1)/usr/lib
treewide: revise library packaging - Annotate versionless libraries (such as libubox, libuci etc.) with a fixed ABI_VERSION resembling the source date of the last incompatible change - Annotate packages shipping versioned library objects with ABI_VERSION - Stop shipping unversioned library symlinks for packages with ABI_VERSION Ref: https://openwrt.org/docs/guide-developer/package-policies#shared_libraries Ref: https://github.com/KanjiMonster/maintainer-tools/blob/master/check-abi-versions.pl Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-01-22 18:17:32 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/libwolfssl.so.* $(1)/usr/lib/
add cyassl (moved from packages feed, required by uhttpd-mod-tls) SVN-Revision: 20430
2010-03-25 16:03:10 +00:00
endef
cyassl,curl,libustream-ssl: rename every `cyassl` to `wolfssl` This is to eliminate any ambiguity about the cyassl/wolfssl lib. The rename happened some time ago (~3+ years). As time goes by, people will start to forget cyassl and start to get confused about the wolfSSL vs cyassl thing. It's a good idea to keep up with the times (moving forward). Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2017-08-24 05:56:40 +00:00
$(eval $(call BuildPackage,libwolfssl))
Reference in New Issue Copy Permalink