mirror of
https://github.com/archr-linux/Arch-R.git
synced 2026-03-31 14:41:55 -07:00
f15afe43b0
Release notes: - https://openssl-library.org/news/openssl-3.3-notes/ Release notes: - https://openssl-library.org/news/vulnerabilities/index.html Jul 5, 2024 The master sources are maintained in our git repository, which is accessible over the network and cloned on GitHub, at https://github.com/openssl/openssl. Bugs and pull patches (issues and pull requests) should be filed on the GitHub repo. Please familiarize yourself with the license.
111 lines
3.5 KiB
Makefile
111 lines
3.5 KiB
Makefile
# SPDX-License-Identifier: GPL-2.0-or-later
|
|
# Copyright (C) 2009-2014 Stephan Raue (stephan@openelec.tv)
|
|
# Copyright (C) 2016-present Team LibreELEC (https://libreelec.tv)
|
|
|
|
PKG_NAME="openssl"
|
|
PKG_VERSION="3.3.2"
|
|
PKG_SHA256="2e8a40b01979afe8be0bbfb3de5dc1c6709fedb46d6c89c10da114ab5fc3d281"
|
|
PKG_LICENSE="Apache-2.0"
|
|
PKG_SITE="https://openssl-library.org"
|
|
PKG_URL="https://github.com/openssl/openssl/releases/download/${PKG_NAME}-${PKG_VERSION}/${PKG_NAME}-${PKG_VERSION}.tar.gz"
|
|
PKG_DEPENDS_HOST="ccache:host"
|
|
PKG_DEPENDS_TARGET="autotools:host gcc:host"
|
|
PKG_LONGDESC="The Open Source toolkit for Secure Sockets Layer and Transport Layer Security"
|
|
PKG_TOOLCHAIN="configure"
|
|
|
|
PKG_CONFIGURE_OPTS_SHARED="--libdir=lib \
|
|
shared \
|
|
threads \
|
|
no-ec2m \
|
|
no-md2 \
|
|
no-rc5 \
|
|
no-rfc3779 \
|
|
no-sctp \
|
|
no-ssl-trace \
|
|
no-ssl3 \
|
|
no-unit-test \
|
|
no-weak-ssl-ciphers \
|
|
no-zlib \
|
|
no-zlib-dynamic \
|
|
no-static-engine"
|
|
|
|
PKG_CONFIGURE_OPTS_HOST="--prefix=${TOOLCHAIN} \
|
|
--openssldir=${TOOLCHAIN}/etc/ssl"
|
|
PKG_CONFIGURE_OPTS_TARGET="--prefix=/usr \
|
|
--openssldir=/etc/ssl"
|
|
|
|
post_unpack() {
|
|
find ${PKG_BUILD}/apps -type f | xargs -n 1 -t sed 's|./demoCA|/etc/ssl|' -i
|
|
}
|
|
|
|
pre_configure_host() {
|
|
mkdir -p ${PKG_BUILD}/.${HOST_NAME}
|
|
cp -a ${PKG_BUILD}/* ${PKG_BUILD}/.${HOST_NAME}/
|
|
}
|
|
|
|
configure_host() {
|
|
cd ${PKG_BUILD}/.${HOST_NAME}
|
|
./Configure ${PKG_CONFIGURE_OPTS_HOST} ${PKG_CONFIGURE_OPTS_SHARED} linux-${MACHINE_HARDWARE_NAME} ${CFLAGS} ${LDFLAGS}
|
|
}
|
|
|
|
makeinstall_host() {
|
|
make install_sw
|
|
}
|
|
|
|
pre_configure_target() {
|
|
mkdir -p ${PKG_BUILD}/.${TARGET_NAME}
|
|
cp -a ${PKG_BUILD}/* ${PKG_BUILD}/.${TARGET_NAME}/
|
|
|
|
case ${TARGET_ARCH} in
|
|
x86_64)
|
|
OPENSSL_TARGET=linux-x86_64
|
|
PLATFORM_FLAGS=enable-ec_nistp_64_gcc_128
|
|
;;
|
|
arm)
|
|
OPENSSL_TARGET=linux-armv4
|
|
;;
|
|
aarch64)
|
|
OPENSSL_TARGET=linux-aarch64
|
|
;;
|
|
esac
|
|
}
|
|
|
|
configure_target() {
|
|
cd ${PKG_BUILD}/.${TARGET_NAME}
|
|
./Configure ${PKG_CONFIGURE_OPTS_TARGET} ${PKG_CONFIGURE_OPTS_SHARED} ${PLATFORM_FLAGS} ${OPENSSL_TARGET} ${CFLAGS} ${LDFLAGS}
|
|
}
|
|
|
|
makeinstall_target() {
|
|
make DESTDIR=${INSTALL} install_sw
|
|
make DESTDIR=${SYSROOT_PREFIX} install_sw
|
|
}
|
|
|
|
post_makeinstall_target() {
|
|
rm -rf ${INSTALL}/etc/ssl/misc
|
|
rm -rf ${INSTALL}/usr/bin/c_rehash
|
|
|
|
debug_strip ${INSTALL}/usr/bin/openssl
|
|
|
|
# cert from https://curl.haxx.se/docs/caextract.html
|
|
mkdir -p ${INSTALL}/etc/ssl
|
|
cp ${PKG_DIR}/cert/cacert.pem ${INSTALL}/etc/ssl/cacert.pem.system
|
|
|
|
# give user the chance to include their own CA
|
|
mkdir -p ${INSTALL}/usr/bin
|
|
cp ${PKG_DIR}/scripts/openssl-config ${INSTALL}/usr/bin
|
|
ln -sf /run/libreelec/cacert.pem ${INSTALL}/etc/ssl/cacert.pem
|
|
ln -sf /run/libreelec/cacert.pem ${INSTALL}/etc/ssl/cert.pem
|
|
|
|
# backwards comatibility
|
|
mkdir -p ${INSTALL}/etc/pki/tls
|
|
ln -sf /run/libreelec/cacert.pem ${INSTALL}/etc/pki/tls/cacert.pem
|
|
mkdir -p ${INSTALL}/etc/pki/tls/certs
|
|
ln -sf /run/libreelec/cacert.pem ${INSTALL}/etc/pki/tls/certs/ca-bundle.crt
|
|
mkdir -p ${INSTALL}/usr/lib/ssl
|
|
ln -sf /run/libreelec/cacert.pem ${INSTALL}/usr/lib/ssl/cert.pem
|
|
}
|
|
|
|
post_install() {
|
|
enable_service openssl-config.service
|
|
}
|