123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270 |
- #
- # Copyright (C) 2006-2016 OpenWrt.org
- #
- # This is free software, licensed under the GNU General Public License v2.
- # See /LICENSE for more information.
- #
- include $(TOPDIR)/rules.mk
- PKG_NAME:=openssl
- PKG_BASE:=1.0.2
- PKG_BUGFIX:=o
- PKG_VERSION:=$(PKG_BASE)$(PKG_BUGFIX)
- PKG_RELEASE:=1
- PKG_USE_MIPS16:=0
- PKG_BUILD_PARALLEL:=0
- PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
- PKG_SOURCE_URL:= \
- http://ftp.fi.muni.cz/pub/openssl/source/ \
- http://ftp.linux.hr/pub/openssl/source/ \
- http://gd.tuwien.ac.at/infosys/security/openssl/source/ \
- http://www.openssl.org/source/ \
- http://www.openssl.org/source/old/$(PKG_BASE)/
- PKG_HASH:=ec3f5c9714ba0fd45cb4e087301eb1336c317e0d20b575a125050470e8089e4d
- PKG_LICENSE:=OpenSSL
- PKG_LICENSE_FILES:=LICENSE
- PKG_CPE_ID:=cpe:/a:openssl:openssl
- PKG_CONFIG_DEPENDS:= \
- CONFIG_OPENSSL_ENGINE_CRYPTO \
- CONFIG_OPENSSL_ENGINE_DIGEST \
- CONFIG_OPENSSL_WITH_EC \
- CONFIG_OPENSSL_WITH_EC2M \
- CONFIG_OPENSSL_WITH_SSL3 \
- CONFIG_OPENSSL_HARDWARE_SUPPORT \
- CONFIG_OPENSSL_WITH_DEPRECATED \
- CONFIG_OPENSSL_WITH_DTLS \
- CONFIG_OPENSSL_WITH_COMPRESSION \
- CONFIG_OPENSSL_WITH_NPN \
- CONFIG_OPENSSL_WITH_PSK \
- CONFIG_OPENSSL_WITH_SRP \
- CONFIG_OPENSSL_OPTIMIZE_SPEED
- include $(INCLUDE_DIR)/package.mk
- ifneq ($(CONFIG_CCACHE),)
- HOSTCC=$(HOSTCC_NOCACHE)
- HOSTCXX=$(HOSTCXX_NOCACHE)
- endif
- define Package/openssl/Default
- TITLE:=Open source SSL toolkit
- URL:=http://www.openssl.org/
- endef
- define Package/libopenssl/config
- source "$(SOURCE)/Config.in"
- endef
- define Package/openssl/Default/description
- The OpenSSL Project is a collaborative effort to develop a robust,
- commercial-grade, full-featured, and Open Source toolkit implementing the Secure
- Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well
- as a full-strength general purpose cryptography library.
- endef
- define Package/libopenssl
- $(call Package/openssl/Default)
- SECTION:=libs
- SUBMENU:=SSL
- CATEGORY:=Libraries
- DEPENDS:=+OPENSSL_WITH_COMPRESSION:zlib
- TITLE+= (libraries)
- ABI_VERSION:=$(PKG_VERSION)
- MENU:=1
- endef
- define Package/libopenssl/description
- $(call Package/openssl/Default/description)
- This package contains the OpenSSL shared libraries, needed by other programs.
- endef
- define Package/openssl-util
- $(call Package/openssl/Default)
- SECTION:=utils
- CATEGORY:=Utilities
- DEPENDS:=+libopenssl
- TITLE+= (utility)
- endef
- define Package/openssl-util/conffiles
- /etc/ssl/openssl.cnf
- endef
- define Package/openssl-util/description
- $(call Package/openssl/Default/description)
- This package contains the OpenSSL command-line utility.
- endef
- OPENSSL_NO_CIPHERS:= no-idea no-md2 no-mdc2 no-rc5 no-sha0 no-camellia no-krb5 \
- no-whrlpool no-whirlpool no-seed no-jpake
- OPENSSL_OPTIONS:= shared no-err no-sse2 no-ssl2 no-ssl2-method no-heartbeats
- ifdef CONFIG_OPENSSL_ENGINE_CRYPTO
- OPENSSL_OPTIONS += -DHAVE_CRYPTODEV
- ifdef CONFIG_OPENSSL_ENGINE_DIGEST
- OPENSSL_OPTIONS += -DUSE_CRYPTODEV_DIGESTS
- endif
- else
- OPENSSL_OPTIONS += no-engines
- endif
- ifndef CONFIG_OPENSSL_WITH_EC
- OPENSSL_OPTIONS += no-ec
- endif
- ifndef CONFIG_OPENSSL_WITH_EC2M
- OPENSSL_OPTIONS += no-ec2m
- endif
- ifndef CONFIG_OPENSSL_WITH_SSL3
- OPENSSL_OPTIONS += no-ssl3 no-ssl3-method
- endif
- ifndef CONFIG_OPENSSL_HARDWARE_SUPPORT
- OPENSSL_OPTIONS += no-hw
- endif
- ifndef CONFIG_OPENSSL_WITH_DEPRECATED
- OPENSSL_OPTIONS += no-deprecated
- endif
- ifndef CONFIG_OPENSSL_WITH_DTLS
- OPENSSL_OPTIONS += no-dtls
- endif
- ifdef CONFIG_OPENSSL_WITH_COMPRESSION
- OPENSSL_OPTIONS += zlib-dynamic
- else
- OPENSSL_OPTIONS += no-comp
- endif
- ifndef CONFIG_OPENSSL_WITH_NPN
- OPENSSL_OPTIONS += no-nextprotoneg
- endif
- ifndef CONFIG_OPENSSL_WITH_PSK
- OPENSSL_OPTIONS += no-psk
- endif
- ifndef CONFIG_OPENSSL_WITH_SRP
- OPENSSL_OPTIONS += no-srp
- endif
- ifeq ($(CONFIG_OPENSSL_OPTIMIZE_SPEED),y)
- TARGET_CFLAGS := $(filter-out -Os,$(TARGET_CFLAGS)) -O3
- endif
- ifeq ($(CONFIG_x86_64),y)
- OPENSSL_TARGET:=linux-x86_64-openwrt
- OPENSSL_MAKEFLAGS += LIBDIR=lib
- else
- OPENSSL_OPTIONS+=no-sse2
- ifeq ($(CONFIG_mips)$(CONFIG_mipsel),y)
- OPENSSL_TARGET:=linux-mips-openwrt
- else ifeq ($(CONFIG_aarch64),y)
- OPENSSL_TARGET:=linux-aarch64-openwrt
- else ifeq ($(CONFIG_arm)$(CONFIG_armeb),y)
- OPENSSL_TARGET:=linux-armv4-openwrt
- else
- OPENSSL_TARGET:=linux-generic-openwrt
- OPENSSL_OPTIONS+=no-perlasm
- endif
- endif
- STAMP_CONFIGURED := $(STAMP_CONFIGURED)_$(shell echo $(OPENSSL_OPTIONS) | mkhash md5)
- define Build/Configure
- [ -f $(STAMP_CONFIGURED) ] || { \
- rm -f $(PKG_BUILD_DIR)/*.so.* $(PKG_BUILD_DIR)/*.a; \
- find $(PKG_BUILD_DIR) -name \*.o | xargs rm -f; \
- }
- (cd $(PKG_BUILD_DIR); \
- ./Configure $(OPENSSL_TARGET) \
- --prefix=/usr \
- --openssldir=/etc/ssl \
- $(TARGET_CPPFLAGS) \
- $(TARGET_LDFLAGS) -ldl \
- $(if $(CONFIG_OPENSSL_OPTIMIZE_SPEED),,-DOPENSSL_SMALL_FOOTPRINT) \
- $(OPENSSL_NO_CIPHERS) \
- $(OPENSSL_OPTIONS) \
- )
- +$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
- CROSS_COMPILE="$(TARGET_CROSS)" \
- MAKEDEPPROG="$(TARGET_CROSS)gcc" \
- OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
- $(OPENSSL_MAKEFLAGS) \
- depend
- endef
- TARGET_CFLAGS += $(FPIC) -I$(CURDIR)/include -ffunction-sections -fdata-sections
- TARGET_LDFLAGS += -Wl,--gc-sections
- define Build/Compile
- +$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
- CROSS_COMPILE="$(TARGET_CROSS)" \
- CC="$(TARGET_CC)" \
- ASFLAGS="$(TARGET_ASFLAGS) -I$(PKG_BUILD_DIR)/crypto -c" \
- AR="$(TARGET_CROSS)ar r" \
- RANLIB="$(TARGET_CROSS)ranlib" \
- OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
- $(OPENSSL_MAKEFLAGS) \
- all
- +$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
- CROSS_COMPILE="$(TARGET_CROSS)" \
- CC="$(TARGET_CC)" \
- ASFLAGS="$(TARGET_ASFLAGS) -I$(PKG_BUILD_DIR)/crypto -c" \
- AR="$(TARGET_CROSS)ar r" \
- RANLIB="$(TARGET_CROSS)ranlib" \
- OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
- $(OPENSSL_MAKEFLAGS) \
- build-shared
- # Work around openssl build bug to link libssl.so with libcrypto.so.
- -rm $(PKG_BUILD_DIR)/libssl.so.*.*.*
- +$(MAKE) $(PKG_JOBS) -C $(PKG_BUILD_DIR) \
- CROSS_COMPILE="$(TARGET_CROSS)" \
- CC="$(TARGET_CC)" \
- OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
- $(OPENSSL_MAKEFLAGS) \
- do_linux-shared
- $(MAKE) -C $(PKG_BUILD_DIR) \
- CROSS_COMPILE="$(TARGET_CROSS)" \
- CC="$(TARGET_CC)" \
- INSTALL_PREFIX="$(PKG_INSTALL_DIR)" \
- $(OPENSSL_MAKEFLAGS) \
- install
- endef
- define Build/InstallDev
- $(INSTALL_DIR) $(1)/usr/include
- $(CP) $(PKG_INSTALL_DIR)/usr/include/openssl $(1)/usr/include/
- $(INSTALL_DIR) $(1)/usr/lib/
- $(CP) $(PKG_INSTALL_DIR)/usr/lib/lib{crypto,ssl}.{a,so*} $(1)/usr/lib/
- $(INSTALL_DIR) $(1)/usr/lib/pkgconfig
- $(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/{openssl,libcrypto,libssl}.pc $(1)/usr/lib/pkgconfig/
- [ -n "$(TARGET_LDFLAGS)" ] && $(SED) 's#$(TARGET_LDFLAGS)##g' $(1)/usr/lib/pkgconfig/{openssl,libcrypto,libssl}.pc || true
- endef
- define Package/libopenssl/install
- $(INSTALL_DIR) $(1)/usr/lib
- $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libcrypto.so.* $(1)/usr/lib/
- $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libssl.so.* $(1)/usr/lib/
- endef
- define Package/openssl-util/install
- $(INSTALL_DIR) $(1)/etc/ssl
- $(CP) $(PKG_INSTALL_DIR)/etc/ssl/openssl.cnf $(1)/etc/ssl/
- $(INSTALL_DIR) $(1)/etc/ssl/certs
- $(INSTALL_DIR) $(1)/etc/ssl/private
- chmod 0700 $(1)/etc/ssl/private
- $(INSTALL_DIR) $(1)/usr/bin
- $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/openssl $(1)/usr/bin/
- endef
- $(eval $(call BuildPackage,libopenssl))
- $(eval $(call BuildPackage,openssl-util))
|