wok-current annotate openssl/receipt @ rev 25681
Up openssl, add openssl-compat, openssl11, patch dropbear CVE-2023-48795
author | Stanislas Leduc <shann@slitaz.org> |
---|---|
date | Tue Mar 12 19:49:16 2024 +0000 (10 months ago) |
parents | 3ad63c8fc2f9 |
children | 117b658b3eeb |
rev | line source |
---|---|
pankso@28 | 1 # SliTaz package receipt. |
pankso@28 | 2 |
pankso@28 | 3 PACKAGE="openssl" |
shann@25681 | 4 VERSION="3.0.13" |
pankso@209 | 5 CATEGORY="security" |
pankso@28 | 6 SHORT_DESC="Open source Secure Sockets Layer." |
pascal@62 | 7 MAINTAINER="pascal.bellard@slitaz.org" |
pascal@15472 | 8 LICENSE="BSD" |
al@19661 | 9 WEB_SITE="https://www.openssl.org/" |
pascal@15472 | 10 TAGS="ssl security" |
pankso@15969 | 11 HOST_ARCH="i486 arm" |
pascal@15472 | 12 |
al@19661 | 13 TARBALL="$PACKAGE-$VERSION.tar.gz" |
al@19661 | 14 WGET_URL="https://www.openssl.org/source/$TARBALL" |
al@19661 | 15 |
shann@25681 | 16 DEPENDS="libcrypto libssl libatomic" |
shann@25681 | 17 BUILD_DEPENDS="perl zlib-dev libatomic" |
al@19661 | 18 SPLIT="libcrypto libcrypto-dev libssl openssl-dev" |
pankso@28 | 19 |
pascal@24040 | 20 current_version() |
pascal@24040 | 21 { |
pascal@24040 | 22 wget -O - $(dirname $WGET_URL) 2>/dev/null | \ |
pascal@24079 | 23 sed '/openssl-/!d;/-[abr]/d;s|.tar.gz</a.*||;s|.*>openssl-||;q' |
pascal@24040 | 24 } |
pascal@24040 | 25 |
pankso@15969 | 26 # Perl is installed in cross env. |
pankso@15969 | 27 case "$ARCH" in |
pankso@15969 | 28 arm) BUILD_DEPENDS="" ;; |
pankso@15969 | 29 esac |
pankso@15969 | 30 |
pankso@28 | 31 # Rules to configure and make the package. |
pankso@28 | 32 compile_rules() |
pankso@28 | 33 { |
gokhlayeh@7705 | 34 # MAKEFLAGS make openssl build fail. |
gokhlayeh@7705 | 35 unset MAKEFLAGS |
slaxemulator@6192 | 36 |
shann@25681 | 37 export LDFLAGS="$LDFLAGS -latomic" |
shann@25681 | 38 |
gokhlayeh@7705 | 39 # Add -Wa,--noexecstack here so that libcrypto's assembler modules will be |
gokhlayeh@7705 | 40 # marked as not requiring an executable stack (compatibility improvement). |
pankso@15969 | 41 case "$ARCH" in |
pankso@15969 | 42 arm) |
pankso@15969 | 43 # BUG: shared libs are not built |
pankso@15969 | 44 ./Configure --prefix=/usr --openssldir=/etc/ssl \ |
pankso@15969 | 45 shared zlib enable-md2 -Wa,--noexecstack \ |
pankso@15969 | 46 linux-armv4 && |
pankso@15969 | 47 sed -i 's/\(basename .*\)`/\1 || true `/' Makefile && |
pankso@15969 | 48 make \ |
pankso@15969 | 49 CC=${HOST_SYSTEM}-gcc \ |
pankso@15969 | 50 AR="${HOST_SYSTEM}-ar r" \ |
pankso@15969 | 51 RANLIB=${HOST_SYSTEM}-ranlib ;; |
pankso@15969 | 52 i486) |
shann@25681 | 53 ./config linux-generic32 --prefix=/usr --openssldir=/etc/ssl \ |
shann@25629 | 54 shared zlib zlib-dynamic enable-md2 \ |
shann@25629 | 55 no-ssl3-method -Wa,--noexecstack && |
al@19661 | 56 make depend ;; |
pankso@15969 | 57 esac && |
pankso@15969 | 58 # Install |
shann@25629 | 59 make DESTDIR=$PWD/_pkg MANDIR=$PWD/_pkg/usr/share/man \ |
shann@25629 | 60 install_sw install_ssldirs |
pankso@28 | 61 } |
pankso@28 | 62 |
pankso@28 | 63 # Rules to gen a SliTaz package suitable for Tazpkg. |
pankso@28 | 64 genpkg_rules() |
pankso@28 | 65 { |
al@19661 | 66 cook_copy_folders etc bin engines |
shann@25681 | 67 # Remove .dist file |
shann@25681 | 68 rm $fs/etc/ssl/*.dist |
pankso@28 | 69 } |
pankso@15969 | 70 |
pankso@15969 | 71 testsuite() |
pankso@15969 | 72 { |
pankso@15969 | 73 readelf -h $install/usr/bin/openssl |
pankso@15969 | 74 } |