wok-current annotate openssl11/receipt @ rev 25681
Up openssl, add openssl-compat, openssl11, patch dropbear CVE-2023-48795
author | Stanislas Leduc <shann@slitaz.org> |
---|---|
date | Tue Mar 12 19:49:16 2024 +0000 (3 months ago) |
parents | |
children |
rev | line source |
---|---|
shann@25681 | 1 # SliTaz package receipt. |
shann@25681 | 2 |
shann@25681 | 3 PACKAGE="openssl11" |
shann@25681 | 4 SOURCE="openssl" |
shann@25681 | 5 VERSION="1.1.1w" |
shann@25681 | 6 CATEGORY="security" |
shann@25681 | 7 SHORT_DESC="Open source Secure Sockets Layer (1.1.1 series)." |
shann@25681 | 8 MAINTAINER="pascal.bellard@slitaz.org" |
shann@25681 | 9 LICENSE="BSD" |
shann@25681 | 10 WEB_SITE="https://www.openssl.org/" |
shann@25681 | 11 TAGS="ssl security" |
shann@25681 | 12 HOST_ARCH="i486 arm" |
shann@25681 | 13 |
shann@25681 | 14 TARBALL="$SOURCE-$VERSION.tar.gz" |
shann@25681 | 15 WGET_URL="https://www.openssl.org/source/$TARBALL" |
shann@25681 | 16 |
shann@25681 | 17 DEPENDS="libcrypto11 libssl11" |
shann@25681 | 18 BUILD_DEPENDS="perl zlib-dev" |
shann@25681 | 19 SPLIT="libcrypto11 libcrypto11-dev libssl11 openssl11-dev" |
shann@25681 | 20 |
shann@25681 | 21 current_version() |
shann@25681 | 22 { |
shann@25681 | 23 wget -O - $(dirname $WGET_URL) 2>/dev/null | \ |
shann@25681 | 24 sed '/openssl-/!d;/-[abr]/d;s|.tar.gz</a.*||;s|.*>openssl-||;q' |
shann@25681 | 25 } |
shann@25681 | 26 |
shann@25681 | 27 # Perl is installed in cross env. |
shann@25681 | 28 case "$ARCH" in |
shann@25681 | 29 arm) BUILD_DEPENDS="" ;; |
shann@25681 | 30 esac |
shann@25681 | 31 |
shann@25681 | 32 # Rules to configure and make the package. |
shann@25681 | 33 compile_rules() |
shann@25681 | 34 { |
shann@25681 | 35 # MAKEFLAGS make openssl build fail. |
shann@25681 | 36 unset MAKEFLAGS |
shann@25681 | 37 |
shann@25681 | 38 # Add -Wa,--noexecstack here so that libcrypto's assembler modules will be |
shann@25681 | 39 # marked as not requiring an executable stack (compatibility improvement). |
shann@25681 | 40 case "$ARCH" in |
shann@25681 | 41 arm) |
shann@25681 | 42 # BUG: shared libs are not built |
shann@25681 | 43 ./Configure --prefix=/usr --openssldir=/etc/ssl \ |
shann@25681 | 44 shared zlib enable-md2 -Wa,--noexecstack \ |
shann@25681 | 45 linux-armv4 && |
shann@25681 | 46 sed -i 's/\(basename .*\)`/\1 || true `/' Makefile && |
shann@25681 | 47 make \ |
shann@25681 | 48 CC=${HOST_SYSTEM}-gcc \ |
shann@25681 | 49 AR="${HOST_SYSTEM}-ar r" \ |
shann@25681 | 50 RANLIB=${HOST_SYSTEM}-ranlib ;; |
shann@25681 | 51 i486) |
shann@25681 | 52 MACHINE=i686 \ |
shann@25681 | 53 ./config --prefix=/usr --openssldir=/etc/ssl \ |
shann@25681 | 54 --libdir=lib/openssl-1.1 shared zlib \ |
shann@25681 | 55 zlib-dynamic enable-md2 no-ssl3-method \ |
shann@25681 | 56 -Wa,--noexecstack && |
shann@25681 | 57 make depend ;; |
shann@25681 | 58 esac && |
shann@25681 | 59 # Install |
shann@25681 | 60 make DESTDIR=$PWD/_pkg MANDIR=$PWD/_pkg/usr/share/man \ |
shann@25681 | 61 install_sw install_ssldirs |
shann@25681 | 62 } |
shann@25681 | 63 |
shann@25681 | 64 # Rules to gen a SliTaz package suitable for Tazpkg. |
shann@25681 | 65 genpkg_rules() |
shann@25681 | 66 { |
shann@25681 | 67 mkdir -p $fs/usr/bin $fs/usr/lib/openssl-1.1 |
shann@25681 | 68 cp -a $install/usr/bin/openssl $fs/usr/bin/openssl-1.1 |
shann@25681 | 69 cp -a $install/usr/lib/openssl-1.1/engines-1.1 $fs/usr/lib/openssl-1.1 |
shann@25681 | 70 } |
shann@25681 | 71 |
shann@25681 | 72 testsuite() |
shann@25681 | 73 { |
shann@25681 | 74 readelf -h $install/usr/bin/openssl |
shann@25681 | 75 } |