]> rtime.felk.cvut.cz Git - coffee/buildroot.git/blob - package/libopenssl/libopenssl.mk
package/libopenssl: security bump to version 1.0.2n
[coffee/buildroot.git] / package / libopenssl / libopenssl.mk
1 ################################################################################
2 #
3 # libopenssl
4 #
5 ################################################################################
6
7 LIBOPENSSL_VERSION = 1.0.2n
8 LIBOPENSSL_SITE = http://www.openssl.org/source
9 LIBOPENSSL_SOURCE = openssl-$(LIBOPENSSL_VERSION).tar.gz
10 LIBOPENSSL_LICENSE = OpenSSL or SSLeay
11 LIBOPENSSL_LICENSE_FILES = LICENSE
12 LIBOPENSSL_INSTALL_STAGING = YES
13 LIBOPENSSL_DEPENDENCIES = zlib
14 HOST_LIBOPENSSL_DEPENDENCIES = host-zlib
15 LIBOPENSSL_TARGET_ARCH = generic32
16 LIBOPENSSL_CFLAGS = $(TARGET_CFLAGS)
17 LIBOPENSSL_PROVIDES = openssl
18 LIBOPENSSL_PATCH = \
19         https://gitweb.gentoo.org/repo/gentoo.git/plain/dev-libs/openssl/files/openssl-1.0.2d-parallel-build.patch?id=c8abcbe8de5d3b6cdd68c162f398c011ff6e2d9d \
20         https://gitweb.gentoo.org/repo/gentoo.git/plain/dev-libs/openssl/files/openssl-1.0.2a-parallel-obj-headers.patch?id=c8abcbe8de5d3b6cdd68c162f398c011ff6e2d9d \
21         https://gitweb.gentoo.org/repo/gentoo.git/plain/dev-libs/openssl/files/openssl-1.0.2a-parallel-install-dirs.patch?id=c8abcbe8de5d3b6cdd68c162f398c011ff6e2d9d \
22         https://gitweb.gentoo.org/repo/gentoo.git/plain/dev-libs/openssl/files/openssl-1.0.2a-parallel-symlinking.patch?id=c8abcbe8de5d3b6cdd68c162f398c011ff6e2d9d
23
24 # relocation truncated to fit: R_68K_GOT16O
25 ifeq ($(BR2_m68k_cf),y)
26 LIBOPENSSL_CFLAGS += -mxgot
27 endif
28
29 ifeq ($(BR2_USE_MMU),)
30 LIBOPENSSL_CFLAGS += -DHAVE_FORK=0
31 endif
32
33 ifeq ($(BR2_PACKAGE_HAS_CRYPTODEV),y)
34 LIBOPENSSL_CFLAGS += -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
35 LIBOPENSSL_DEPENDENCIES += cryptodev
36 endif
37
38 # Some architectures are optimized in OpenSSL
39 # Doesn't work for thumb-only (Cortex-M?)
40 ifeq ($(BR2_ARM_CPU_HAS_ARM),y)
41 LIBOPENSSL_TARGET_ARCH = armv4
42 endif
43 ifeq ($(ARCH),aarch64)
44 LIBOPENSSL_TARGET_ARCH = aarch64
45 endif
46 ifeq ($(ARCH),powerpc)
47 # 4xx cores seem to have trouble with openssl's ASM optimizations
48 ifeq ($(BR2_powerpc_401)$(BR2_powerpc_403)$(BR2_powerpc_405)$(BR2_powerpc_405fp)$(BR2_powerpc_440)$(BR2_powerpc_440fp),)
49 LIBOPENSSL_TARGET_ARCH = ppc
50 endif
51 endif
52 ifeq ($(ARCH),powerpc64)
53 LIBOPENSSL_TARGET_ARCH = ppc64
54 endif
55 ifeq ($(ARCH),powerpc64le)
56 LIBOPENSSL_TARGET_ARCH = ppc64le
57 endif
58 ifeq ($(ARCH),x86_64)
59 LIBOPENSSL_TARGET_ARCH = x86_64
60 endif
61
62 define HOST_LIBOPENSSL_CONFIGURE_CMDS
63         (cd $(@D); \
64                 $(HOST_CONFIGURE_OPTS) \
65                 ./config \
66                 --prefix=$(HOST_DIR) \
67                 --openssldir=$(HOST_DIR)/etc/ssl \
68                 --libdir=/lib \
69                 shared \
70                 zlib-dynamic \
71         )
72         $(SED) "s#-O[0-9]#$(HOST_CFLAGS)#" $(@D)/Makefile
73 endef
74
75 define LIBOPENSSL_CONFIGURE_CMDS
76         (cd $(@D); \
77                 $(TARGET_CONFIGURE_ARGS) \
78                 $(TARGET_CONFIGURE_OPTS) \
79                 ./Configure \
80                         linux-$(LIBOPENSSL_TARGET_ARCH) \
81                         --prefix=/usr \
82                         --openssldir=/etc/ssl \
83                         --libdir=/lib \
84                         $(if $(BR2_TOOLCHAIN_HAS_THREADS),threads,no-threads) \
85                         $(if $(BR2_STATIC_LIBS),no-shared,shared) \
86                         no-rc5 \
87                         enable-camellia \
88                         enable-mdc2 \
89                         enable-tlsext \
90                         $(if $(BR2_STATIC_LIBS),zlib,zlib-dynamic) \
91                         $(if $(BR2_STATIC_LIBS),no-dso) \
92         )
93         $(SED) "s#-march=[-a-z0-9] ##" -e "s#-mcpu=[-a-z0-9] ##g" $(@D)/Makefile
94         $(SED) "s#-O[0-9]#$(LIBOPENSSL_CFLAGS)#" $(@D)/Makefile
95         $(SED) "s# build_tests##" $(@D)/Makefile
96 endef
97
98 # libdl is not available in a static build, and this is not implied by no-dso
99 ifeq ($(BR2_STATIC_LIBS),y)
100 define LIBOPENSSL_FIXUP_STATIC_MAKEFILE
101         $(SED) 's#-ldl##g' $(@D)/Makefile
102 endef
103 LIBOPENSSL_POST_CONFIGURE_HOOKS += LIBOPENSSL_FIXUP_STATIC_MAKEFILE
104 endif
105
106 define HOST_LIBOPENSSL_BUILD_CMDS
107         $(HOST_MAKE_ENV) $(MAKE) -C $(@D)
108 endef
109
110 define LIBOPENSSL_BUILD_CMDS
111         $(TARGET_MAKE_ENV) $(MAKE) -C $(@D)
112 endef
113
114 define LIBOPENSSL_INSTALL_STAGING_CMDS
115         $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) INSTALL_PREFIX=$(STAGING_DIR) install
116 endef
117
118 define HOST_LIBOPENSSL_INSTALL_CMDS
119         $(HOST_MAKE_ENV) $(MAKE) -C $(@D) install
120 endef
121
122 define LIBOPENSSL_INSTALL_TARGET_CMDS
123         $(TARGET_MAKE_ENV) $(MAKE) -C $(@D) INSTALL_PREFIX=$(TARGET_DIR) install
124         rm -rf $(TARGET_DIR)/usr/lib/ssl
125         rm -f $(TARGET_DIR)/usr/bin/c_rehash
126 endef
127
128 # libdl has no business in a static build
129 ifeq ($(BR2_STATIC_LIBS),y)
130 define LIBOPENSSL_FIXUP_STATIC_PKGCONFIG
131         $(SED) 's#-ldl##' $(STAGING_DIR)/usr/lib/pkgconfig/libcrypto.pc
132         $(SED) 's#-ldl##' $(STAGING_DIR)/usr/lib/pkgconfig/libssl.pc
133         $(SED) 's#-ldl##' $(STAGING_DIR)/usr/lib/pkgconfig/openssl.pc
134 endef
135 LIBOPENSSL_POST_INSTALL_STAGING_HOOKS += LIBOPENSSL_FIXUP_STATIC_PKGCONFIG
136 endif
137
138 ifneq ($(BR2_STATIC_LIBS),y)
139 # libraries gets installed read only, so strip fails
140 define LIBOPENSSL_INSTALL_FIXUPS_SHARED
141         chmod +w $(TARGET_DIR)/usr/lib/engines/lib*.so
142         for i in $(addprefix $(TARGET_DIR)/usr/lib/,libcrypto.so.* libssl.so.*); \
143         do chmod +w $$i; done
144 endef
145 LIBOPENSSL_POST_INSTALL_TARGET_HOOKS += LIBOPENSSL_INSTALL_FIXUPS_SHARED
146 endif
147
148 ifeq ($(BR2_PACKAGE_PERL),)
149 define LIBOPENSSL_REMOVE_PERL_SCRIPTS
150         $(RM) -f $(TARGET_DIR)/etc/ssl/misc/{CA.pl,tsget}
151 endef
152 LIBOPENSSL_POST_INSTALL_TARGET_HOOKS += LIBOPENSSL_REMOVE_PERL_SCRIPTS
153 endif
154
155 ifeq ($(BR2_PACKAGE_LIBOPENSSL_BIN),)
156 define LIBOPENSSL_REMOVE_BIN
157         $(RM) -f $(TARGET_DIR)/usr/bin/openssl
158         $(RM) -f $(TARGET_DIR)/etc/ssl/misc/{CA.*,c_*}
159 endef
160 LIBOPENSSL_POST_INSTALL_TARGET_HOOKS += LIBOPENSSL_REMOVE_BIN
161 endif
162
163 ifneq ($(BR2_PACKAGE_LIBOPENSSL_ENGINES),y)
164 define LIBOPENSSL_REMOVE_LIBOPENSSL_ENGINES
165         rm -rf $(TARGET_DIR)/usr/lib/engines
166 endef
167 LIBOPENSSL_POST_INSTALL_TARGET_HOOKS += LIBOPENSSL_REMOVE_LIBOPENSSL_ENGINES
168 endif
169
170 $(eval $(generic-package))
171 $(eval $(host-generic-package))