mirror of
https://git.yoctoproject.org/poky
synced 2026-05-08 17:19:20 +00:00
openssl: rename openssl 1.0.x to openssl10 and make openssl 1.1.x the default version
I believe the time has come to do this: openssl 1.0 upstream support stops at the end of 2019, and we do not want a situation where a supported YP release contains an unsupported version of a critical security component. Openssl 1.0 can still be utilized by depending on 'openssl10' recipe. (From OE-Core rev: 876466145f2da93757ba3f92177d0f959f5fe975) Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
committed by
Richard Purdie
parent
352d1a4bfd
commit
df15a4c914
@@ -2,6 +2,3 @@
|
||||
# Default preferred versions
|
||||
#
|
||||
|
||||
PREFERRED_VERSION_openssl ?= "1.0.%"
|
||||
PREFERRED_VERSION_openssl-native ?= "1.0.%"
|
||||
PREFERRED_VERSION_nativesdk-openssl ?= "1.0.%"
|
||||
|
||||
@@ -503,6 +503,7 @@ RECIPE_MAINTAINER_pn-nss-myhostname = "Maxin B. John <maxin.john@intel.com>"
|
||||
RECIPE_MAINTAINER_pn-ofono = "Maxin B. John <maxin.john@intel.com>"
|
||||
RECIPE_MAINTAINER_pn-openssh = "Armin Kuster <akuster808@gmail.com>"
|
||||
RECIPE_MAINTAINER_pn-openssl = "Alexander Kanavin <alex.kanavin@gmail.com>"
|
||||
RECIPE_MAINTAINER_pn-openssl10 = "Alexander Kanavin <alex.kanavin@gmail.com>"
|
||||
RECIPE_MAINTAINER_pn-opkg = "Alejandro del Castillo <alejandro.delcastillo@ni.com>"
|
||||
RECIPE_MAINTAINER_pn-opkg-arch-config = "Alejandro del Castillo <alejandro.delcastillo@ni.com>"
|
||||
RECIPE_MAINTAINER_pn-opkg-keyrings = "Alejandro del Castillo <alejandro.delcastillo@ni.com>"
|
||||
|
||||
+23
-8
@@ -11,8 +11,6 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=f475368924827d06d4b416111c8bdb77"
|
||||
DEPENDS = "hostperl-runtime-native"
|
||||
DEPENDS_append_class-target = " openssl-native"
|
||||
|
||||
PROVIDES += "openssl10"
|
||||
|
||||
SRC_URI = "http://www.openssl.org/source/openssl-${PV}.tar.gz \
|
||||
file://run-ptest \
|
||||
file://openssl-c_rehash.sh \
|
||||
@@ -56,6 +54,8 @@ SRC_URI_append_class-nativesdk = " \
|
||||
SRC_URI[md5sum] = "ac5eb30bf5798aa14b1ae6d0e7da58df"
|
||||
SRC_URI[sha256sum] = "50a98e07b1a89eb8f6a99477f262df71c6fa7bef77df4dc83025a2845c827d00"
|
||||
|
||||
S = "${WORKDIR}/openssl-${PV}"
|
||||
|
||||
UPSTREAM_CHECK_REGEX = "openssl-(?P<pver>1\.0.+)\.tar"
|
||||
|
||||
inherit pkgconfig siteinfo multilib_header ptest manpages
|
||||
@@ -326,20 +326,35 @@ do_install_ptest () {
|
||||
# file to be installed for both the base openssl package and the libcrypto
|
||||
# package since the base openssl package depends on the libcrypto package.
|
||||
|
||||
PACKAGES =+ "libcrypto libssl openssl-conf ${PN}-engines ${PN}-misc"
|
||||
PACKAGES =+ "libcrypto10 libssl10 openssl10-conf ${PN}-engines ${PN}-misc"
|
||||
|
||||
FILES_libcrypto = "${libdir}/libcrypto${SOLIBS}"
|
||||
FILES_libssl = "${libdir}/libssl${SOLIBS}"
|
||||
FILES_openssl-conf = "${sysconfdir}/ssl/openssl.cnf"
|
||||
FILES_libcrypto10 = "${libdir}/libcrypto${SOLIBS}"
|
||||
FILES_libssl10 = "${libdir}/libssl${SOLIBS}"
|
||||
FILES_openssl10-conf = "${sysconfdir}/ssl/openssl.cnf"
|
||||
FILES_${PN}-engines = "${libdir}/ssl/engines/*.so ${libdir}/engines"
|
||||
FILES_${PN}-misc = "${libdir}/ssl/misc"
|
||||
FILES_${PN} =+ "${libdir}/ssl/*"
|
||||
FILES_${PN}_append_class-nativesdk = " ${SDKPATHNATIVE}/environment-setup.d/openssl.sh"
|
||||
|
||||
CONFFILES_openssl-conf = "${sysconfdir}/ssl/openssl.cnf"
|
||||
CONFFILES_openssl10-conf = "${sysconfdir}/ssl/openssl.cnf"
|
||||
|
||||
RRECOMMENDS_libcrypto += "openssl-conf"
|
||||
RRECOMMENDS_libcrypto10 += "openssl10-conf"
|
||||
RDEPENDS_${PN}-misc = "${@bb.utils.filter('PACKAGECONFIG', 'perl', d)}"
|
||||
RDEPENDS_${PN}-ptest += "${PN}-misc make perl perl-module-filehandle bc"
|
||||
|
||||
BBCLASSEXTEND = "native nativesdk"
|
||||
PACKAGE_PREPROCESS_FUNCS += "openssl_package_preprocess"
|
||||
|
||||
# openssl 1.0 development files and executable binaries clash with openssl 1.1
|
||||
# files when installed into target rootfs. So we don't put them into
|
||||
# packages, but they continue to be provided via target sysroot for
|
||||
# cross-compilation on the host, if some software still depends on openssl 1.0.
|
||||
openssl_package_preprocess () {
|
||||
for file in `find ${PKGD} -name *.h -o -name *.pc -o -name *.so`; do
|
||||
rm $file
|
||||
done
|
||||
rm ${PKGD}/usr/bin/openssl
|
||||
rm ${PKGD}/usr/bin/c_rehash
|
||||
rmdir ${PKGD}/usr/bin
|
||||
|
||||
}
|
||||
Reference in New Issue
Block a user