hak5
/
openwrt
mirror of https://github.com/hak5/openwrt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openwrt/package/libs/mbedtls/Makefile

95 lines
2.3 KiB
Makefile
Raw Normal View History

cosmetic: remove trailing whitespaces Signed-off-by: Luka Perkov <luka@openwrt.org> SVN-Revision: 47197
2015-10-15 22:12:13 +00:00
#
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
# Copyright (C) 2011-2015 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=mbedtls
mbedtls: Update to 2.14.1 Update mbedtls to 2.14.1 This fixes: * CVE-2018-19608: Local timing attack on RSA decryption Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> [Update to 2.14.1] Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2018-11-24 23:42:10 +00:00
PKG_VERSION:=2.14.1
mbedtls: update to version 2.4.2 This fixes the following security problems: * CVE-2017-2784: Freeing of memory allocated on stack when validating a public key with a secp224k1 curve * SLOTH vulnerability * Denial of Service through Certificate Revocation List Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2017-03-13 19:04:32 +00:00
PKG_RELEASE:=1
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
PKG_USE_MIPS16:=0
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-gpl.tgz
PKG_SOURCE_URL:=https://tls.mbed.org/download/
mbedtls: Update to 2.14.1 Update mbedtls to 2.14.1 This fixes: * CVE-2018-19608: Local timing attack on RSA decryption Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net> [Update to 2.14.1] Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2018-11-24 23:42:10 +00:00
PKG_HASH:=baa1121952786f5b2c66c52226a8ca0e05126de920d1756266551df677915b7e
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
PKG_BUILD_PARALLEL:=1
PKG_LICENSE:=GPL-2.0+
add PKG_CPE_ID ids to package and tools CPE ids helps to tracks CVE in packages. https://cpe.mitre.org/specification/ Thanks to swalker for CPE to package mapping and keep tracking CVEs. Acked-by: Jo-Philipp Wich <jo@mein.io> Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-09-28 02:55:46 +00:00
PKG_CPE_ID:=cpe:/a:arm:mbed_tls
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/cmake.mk
define Package/mbedtls/Default
TITLE:=Embedded SSL
URL:=https://tls.mbed.org
endef
define Package/mbedtls/Default/description
The aim of the mbedtls project is to provide a quality, open-source
cryptographic library written in C and targeted at embedded systems.
endef
define Package/libmbedtls
$(call Package/mbedtls/Default)
SECTION:=libs
CATEGORY:=Libraries
package/libs/mbedtls: add package with some mbedtls binaries. Add some basic binaries required for private key and CSR generation. Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2018-03-12 19:19:49 +00:00
SUBMENU:=SSL
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
TITLE+= (library)
packages: set more explicit ABI_VERSION values In the case of upstream libraries, set the ABI_VERSION variable to the soname value of the first version version after the last backwards incompatible change. For custom OpenWrt libraries, set the ABI_VERSION to the date of the last Git commit doing backwards incompatible changes to the source, such as changing function singatures or dropping exported symbols. The soname values have been determined by either checking https://abi-laboratory.pro/index.php?view=tracker or - in the case of OpenWrt libraries - by carefully reviewing the changes made to header files thorough the corresponding Git history. In the future, the ABI_VERSION values must be bumped whenever the library is updated to an incpompatible version but not with every package update, in order to reduce the dependency churn in the binary package repository. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2019-01-17 16:24:31 +00:00
ABI_VERSION:=12
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
endef
package/libs/mbedtls: add package with some mbedtls binaries. Add some basic binaries required for private key and CSR generation. Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2018-03-12 19:19:49 +00:00
define Package/mbedtls-util
$(call Package/mbedtls/Default)
SECTION:=utils
CATEGORY:=Utilities
TITLE+= (utilities)
DEPENDS:=+libmbedtls
endef
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
define Package/libmbedtls/description
$(call Package/mbedtls/Default/description)
This package contains the mbedtls library.
endef
package/libs/mbedtls: add package with some mbedtls binaries. Add some basic binaries required for private key and CSR generation. Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2018-03-12 19:19:49 +00:00
define Package/mbedtls-util/description
$(call Package/mbedtls/Default/description)
This package contains mbedtls helper programs for private key and
CSR generation (gen_key, cert_req)
endef
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
PKG_INSTALL:=1
mbedtls: add --function-sections and --data-sections to CFLAGS This allows binaries that links these libraries statically to be reduced by using --gc-sections on link Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-02-21 13:33:14 +00:00
TARGET_CFLAGS += -ffunction-sections -fdata-sections
mbedtls: Cosmetic cleanups This is more of a cosmetic change and a reminder that the CMake script hardcodes -O2. Source: https://github.com/ARMmbed/mbedtls/blob/mbedtls-2.7/CMakeLists.txt#L73 https://github.com/ARMmbed/mbedtls/blob/master/CMakeLists.txt#L97 Remove the release type option as it's already provided by the toolchain. Source: https://github.com/openwrt/openwrt/blob/master/include/cmake.mk#L50 Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2018-06-10 22:22:36 +00:00
TARGET_CFLAGS := $(filter-out -O%,$(TARGET_CFLAGS))
mbedtls: add --function-sections and --data-sections to CFLAGS This allows binaries that links these libraries statically to be reduced by using --gc-sections on link Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-02-21 13:33:14 +00:00
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
CMAKE_OPTIONS += \
-DUSE_SHARED_MBEDTLS_LIBRARY:Bool=ON \
-DENABLE_TESTING:Bool=OFF \
package/libs/mbedtls: add package with some mbedtls binaries. Add some basic binaries required for private key and CSR generation. Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2018-03-12 19:19:49 +00:00
-DENABLE_PROGRAMS:Bool=ON
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
define Build/InstallDev
$(INSTALL_DIR) $(1)/usr/include
$(CP) $(PKG_INSTALL_DIR)/usr/include/mbedtls $(1)/usr/include/
$(INSTALL_DIR) $(1)/usr/lib
$(CP) $(PKG_INSTALL_DIR)/usr/lib/lib*.so* $(1)/usr/lib/
mbedtls: add static files in staging_dir Signed-off-by: Domagoj Pintaric <domagoj.pintaric@sartura.hr> Signed-off-by: Luka Perkov <luka.perkov@sartura.hr>
2017-01-01 18:10:38 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/lib/lib*.a $(1)/usr/lib/
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
endef
define Package/libmbedtls/install
$(INSTALL_DIR) $(1)/usr/lib
$(CP) $(PKG_INSTALL_DIR)/usr/lib/lib*.so* $(1)/usr/lib/
endef
package/libs/mbedtls: add package with some mbedtls binaries. Add some basic binaries required for private key and CSR generation. Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2018-03-12 19:19:49 +00:00
define Package/mbedtls-util/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/gen_key $(1)/usr/bin/
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/cert_req $(1)/usr/bin/
endef
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484
2015-07-24 22:26:44 +00:00
$(eval $(call BuildPackage,libmbedtls))
package/libs/mbedtls: add package with some mbedtls binaries. Add some basic binaries required for private key and CSR generation. Signed-off-by: Paul Wassi <p.wassi@gmx.at>
2018-03-12 19:19:49 +00:00
$(eval $(call BuildPackage,mbedtls-util))