Index: app/bsd-games/2.17/Makefile
===================================================================
--- app/bsd-games/2.17/Makefile (revision 441)
+++ app/bsd-games/2.17/Makefile (revision 442)
@@ -61,7 +61,7 @@
SOURCE_REQUIRES = sources/packages/y/bsd-games
REQUIRES = libs/ncurses/6.5
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += dev/flex/2.6.4
# ======= __END_OF_REQUIRES__ =======
Index: app/coreutils/8.32/Makefile
===================================================================
--- app/coreutils/8.32/Makefile (revision 441)
+++ app/coreutils/8.32/Makefile (revision 442)
@@ -62,7 +62,7 @@
REQUIRES = app/acl/2.3.2
REQUIRES += secure/libcap/2.48
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: app/cryptsetup/2.6.1/Makefile
===================================================================
--- app/cryptsetup/2.6.1/Makefile (revision 441)
+++ app/cryptsetup/2.6.1/Makefile (revision 442)
@@ -62,7 +62,7 @@
REQUIRES = app/util-linux/2.38.1
REQUIRES += app/lvm2/2.03.11
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += libs/argon2/20190702
REQUIRES += libs/libssh/0.9.5
REQUIRES += libs/json-c/0.15
Index: app/kmod/33/Makefile
===================================================================
--- app/kmod/33/Makefile (revision 441)
+++ app/kmod/33/Makefile (revision 442)
@@ -61,7 +61,7 @@
SOURCE_REQUIRES = sources/packages/a/kmod
REQUIRES = libs/zstd/1.5.6
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: app/kmod/33-ppc32/Makefile
===================================================================
--- app/kmod/33-ppc32/Makefile (revision 441)
+++ app/kmod/33-ppc32/Makefile (revision 442)
@@ -17,7 +17,7 @@
REQUIRES = app/kmod/33
REQUIRES += libs/zstd/1.5.6-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: app/kmod/33-x86_32/Makefile
===================================================================
--- app/kmod/33-x86_32/Makefile (revision 441)
+++ app/kmod/33-x86_32/Makefile (revision 442)
@@ -14,7 +14,7 @@
REQUIRES = app/kmod/33
REQUIRES += libs/zstd/1.5.6-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: app/mariadb/10.6.5/Makefile
===================================================================
--- app/mariadb/10.6.5/Makefile (revision 441)
+++ app/mariadb/10.6.5/Makefile (revision 442)
@@ -69,7 +69,7 @@
REQUIRES += libs/liburing/2.1
REQUIRES += libs/jemalloc/5.2.1
REQUIRES += libs/judy/1.0.5
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/krb5/1.19.1
REQUIRES += net/curl/7.75.0
REQUIRES += secure/cracklib/2.9.7
Index: app/mariadb/10.6.5-ppc32/Makefile
===================================================================
--- app/mariadb/10.6.5-ppc32/Makefile (revision 441)
+++ app/mariadb/10.6.5-ppc32/Makefile (revision 442)
@@ -25,7 +25,7 @@
REQUIRES += libs/liburing/2.1-ppc32
REQUIRES += libs/jemalloc/5.2.1-ppc32
REQUIRES += libs/judy/1.0.5-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
REQUIRES += net/krb5/1.19.1-ppc32
REQUIRES += net/curl/7.75.0-ppc32
REQUIRES += secure/cracklib/2.9.7-ppc32
Index: app/mariadb/10.6.5-x86_32/Makefile
===================================================================
--- app/mariadb/10.6.5-x86_32/Makefile (revision 441)
+++ app/mariadb/10.6.5-x86_32/Makefile (revision 442)
@@ -22,7 +22,7 @@
REQUIRES += libs/liburing/2.1-x86_32
REQUIRES += libs/jemalloc/5.2.1-x86_32
REQUIRES += libs/judy/1.0.5-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
REQUIRES += net/krb5/1.19.1-x86_32
REQUIRES += net/curl/7.75.0-x86_32
REQUIRES += secure/cracklib/2.9.7-x86_32
Index: app/mtd-utils/2.1.4/Makefile
===================================================================
--- app/mtd-utils/2.1.4/Makefile (revision 441)
+++ app/mtd-utils/2.1.4/Makefile (revision 442)
@@ -63,7 +63,7 @@
REQUIRES = app/util-linux/2.38.1
REQUIRES += libs/lzo/2.10
REQUIRES += libs/zstd/1.5.6
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: app/postgresql/14.1/Makefile
===================================================================
--- app/postgresql/14.1/Makefile (revision 441)
+++ app/postgresql/14.1/Makefile (revision 442)
@@ -68,7 +68,7 @@
REQUIRES += libs/readline/8.2
REQUIRES += libs/icu4c/76.1
REQUIRES += libs/lz4/1.10.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/krb5/1.19.1
REQUIRES += secure/pam/1.5.1
Index: app/postgresql/14.1-ppc32/Makefile
===================================================================
--- app/postgresql/14.1-ppc32/Makefile (revision 441)
+++ app/postgresql/14.1-ppc32/Makefile (revision 442)
@@ -24,7 +24,7 @@
REQUIRES += libs/readline/8.2-ppc32
REQUIRES += libs/icu4c/76.1-ppc32
REQUIRES += libs/lz4/1.10.0-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
REQUIRES += net/krb5/1.19.1-ppc32
REQUIRES += secure/pam/1.5.1-ppc32
Index: app/postgresql/14.1-x86_32/Makefile
===================================================================
--- app/postgresql/14.1-x86_32/Makefile (revision 441)
+++ app/postgresql/14.1-x86_32/Makefile (revision 442)
@@ -21,7 +21,7 @@
REQUIRES += libs/readline/8.2-x86_32
REQUIRES += libs/icu4c/76.1-x86_32
REQUIRES += libs/lz4/1.10.0-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
REQUIRES += net/krb5/1.19.1-x86_32
REQUIRES += secure/pam/1.5.1-x86_32
Index: app/qpdf/11.3.0/Makefile
===================================================================
--- app/qpdf/11.3.0/Makefile (revision 441)
+++ app/qpdf/11.3.0/Makefile (revision 442)
@@ -61,7 +61,7 @@
SOURCE_REQUIRES = sources/packages/a/qpdf
REQUIRES = libs/libjpeg-turbo/2.1.2
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/gnutls/3.8.0
# ======= __END_OF_REQUIRES__ =======
Index: app/qpdf/11.3.0-ppc32/Makefile
===================================================================
--- app/qpdf/11.3.0-ppc32/Makefile (revision 441)
+++ app/qpdf/11.3.0-ppc32/Makefile (revision 442)
@@ -17,7 +17,7 @@
REQUIRES = app/qpdf/11.3.0
REQUIRES += libs/libjpeg-turbo/2.1.2-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
REQUIRES += net/gnutls/3.8.0-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: app/qpdf/11.3.0-x86_32/Makefile
===================================================================
--- app/qpdf/11.3.0-x86_32/Makefile (revision 441)
+++ app/qpdf/11.3.0-x86_32/Makefile (revision 442)
@@ -14,7 +14,7 @@
REQUIRES = app/qpdf/11.3.0
REQUIRES += libs/libjpeg-turbo/2.1.2-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
REQUIRES += net/gnutls/3.8.0-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: dev/python2/2.7.18/Makefile
===================================================================
--- dev/python2/2.7.18/Makefile (revision 441)
+++ dev/python2/2.7.18/Makefile (revision 442)
@@ -66,7 +66,7 @@
REQUIRES += libs/libffi/3.4.6
REQUIRES += libs/readline/8.2
REQUIRES += libs/expat/2.5.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: dev/python2/2.7.18-ppc32/Makefile
===================================================================
--- dev/python2/2.7.18-ppc32/Makefile (revision 441)
+++ dev/python2/2.7.18-ppc32/Makefile (revision 442)
@@ -21,7 +21,7 @@
REQUIRES += libs/libffi/3.4.6-ppc32
REQUIRES += libs/readline/8.2-ppc32
REQUIRES += libs/expat/2.5.0-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: dev/python2/2.7.18-x86_32/Makefile
===================================================================
--- dev/python2/2.7.18-x86_32/Makefile (revision 441)
+++ dev/python2/2.7.18-x86_32/Makefile (revision 442)
@@ -18,7 +18,7 @@
REQUIRES += libs/libffi/3.4.6-x86_32
REQUIRES += libs/readline/8.2-x86_32
REQUIRES += libs/expat/2.5.0-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: dev/python3/3.10.8/Makefile
===================================================================
--- dev/python3/3.10.8/Makefile (revision 441)
+++ dev/python3/3.10.8/Makefile (revision 442)
@@ -68,7 +68,7 @@
REQUIRES += libs/libffi/3.4.6
REQUIRES += libs/expat/2.5.0
REQUIRES += libs/gdbm/1.23
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: dev/python3/3.10.8-ppc32/Makefile
===================================================================
--- dev/python3/3.10.8-ppc32/Makefile (revision 441)
+++ dev/python3/3.10.8-ppc32/Makefile (revision 442)
@@ -23,7 +23,7 @@
REQUIRES += libs/libffi/3.4.6-ppc32
REQUIRES += libs/expat/2.5.0-ppc32
REQUIRES += libs/gdbm/1.23-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: dev/python3/3.10.8-x86_32/Makefile
===================================================================
--- dev/python3/3.10.8-x86_32/Makefile (revision 441)
+++ dev/python3/3.10.8-x86_32/Makefile (revision 442)
@@ -20,7 +20,7 @@
REQUIRES += libs/libffi/3.4.6-x86_32
REQUIRES += libs/expat/2.5.0-x86_32
REQUIRES += libs/gdbm/1.23-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: dev/ruby/3.2.0/Makefile
===================================================================
--- dev/ruby/3.2.0/Makefile (revision 441)
+++ dev/ruby/3.2.0/Makefile (revision 442)
@@ -66,7 +66,7 @@
REQUIRES += libs/readline/8.2
REQUIRES += libs/zlib/1.3.1
REQUIRES += libs/gdbm/1.23
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: dev/ruby/3.2.0-ppc32/Makefile
===================================================================
--- dev/ruby/3.2.0-ppc32/Makefile (revision 441)
+++ dev/ruby/3.2.0-ppc32/Makefile (revision 442)
@@ -22,7 +22,7 @@
REQUIRES += libs/readline/8.2-ppc32
REQUIRES += libs/zlib/1.3.1-ppc32
REQUIRES += libs/gdbm/1.23-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: dev/ruby/3.2.0-x86_32/Makefile
===================================================================
--- dev/ruby/3.2.0-x86_32/Makefile (revision 441)
+++ dev/ruby/3.2.0-x86_32/Makefile (revision 442)
@@ -19,7 +19,7 @@
REQUIRES += libs/readline/8.2-x86_32
REQUIRES += libs/zlib/1.3.1-x86_32
REQUIRES += libs/gdbm/1.23-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: env/cyrus-sasl/2.1.27/Makefile
===================================================================
--- env/cyrus-sasl/2.1.27/Makefile (revision 441)
+++ env/cyrus-sasl/2.1.27/Makefile (revision 442)
@@ -62,7 +62,7 @@
REQUIRES = app/db/18.1.40
REQUIRES += app/sqlite/3.39.4.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += secure/pam/1.5.1
# ======= __END_OF_REQUIRES__ =======
Index: env/cyrus-sasl/2.1.27-ppc32/Makefile
===================================================================
--- env/cyrus-sasl/2.1.27-ppc32/Makefile (revision 441)
+++ env/cyrus-sasl/2.1.27-ppc32/Makefile (revision 442)
@@ -18,7 +18,7 @@
REQUIRES = env/cyrus-sasl/2.1.27
REQUIRES += app/db/18.1.40-ppc32
REQUIRES += app/sqlite/3.39.4.0-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
REQUIRES += secure/pam/1.5.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: env/cyrus-sasl/2.1.27-x86_32/Makefile
===================================================================
--- env/cyrus-sasl/2.1.27-x86_32/Makefile (revision 441)
+++ env/cyrus-sasl/2.1.27-x86_32/Makefile (revision 442)
@@ -15,7 +15,7 @@
REQUIRES = env/cyrus-sasl/2.1.27
REQUIRES += app/db/18.1.40-x86_32
REQUIRES += app/sqlite/3.39.4.0-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
REQUIRES += secure/pam/1.5.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: libs/libevent/2.1.12/Makefile
===================================================================
--- libs/libevent/2.1.12/Makefile (revision 441)
+++ libs/libevent/2.1.12/Makefile (revision 442)
@@ -60,7 +60,7 @@
SOURCE_REQUIRES = sources/packages/l/libevent
-REQUIRES = net/openssl/3.4.0
+REQUIRES = net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: libs/libevent/2.1.12-ppc32/Makefile
===================================================================
--- libs/libevent/2.1.12-ppc32/Makefile (revision 441)
+++ libs/libevent/2.1.12-ppc32/Makefile (revision 442)
@@ -16,7 +16,7 @@
SOURCE_REQUIRES = sources/packages/l/libevent
REQUIRES = libs/libevent/2.1.12
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: libs/libevent/2.1.12-x86_32/Makefile
===================================================================
--- libs/libevent/2.1.12-x86_32/Makefile (revision 441)
+++ libs/libevent/2.1.12-x86_32/Makefile (revision 442)
@@ -13,7 +13,7 @@
SOURCE_REQUIRES = sources/packages/l/libevent
REQUIRES = libs/libevent/2.1.12
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: libs/libnvme/1.7.1/Makefile
===================================================================
--- libs/libnvme/1.7.1/Makefile (revision 441)
+++ libs/libnvme/1.7.1/Makefile (revision 442)
@@ -64,7 +64,7 @@
REQUIRES += app/dbus/1.13.18
REQUIRES += libs/keyutils/1.6.3
REQUIRES += libs/json-c/0.15
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: libs/libssh2/1.9.0/Makefile
===================================================================
--- libs/libssh2/1.9.0/Makefile (revision 441)
+++ libs/libssh2/1.9.0/Makefile (revision 442)
@@ -60,7 +60,7 @@
SOURCE_REQUIRES = sources/packages/l/libssh2
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: libs/libssh2/1.9.0-ppc32/Makefile
===================================================================
--- libs/libssh2/1.9.0-ppc32/Makefile (revision 441)
+++ libs/libssh2/1.9.0-ppc32/Makefile (revision 442)
@@ -16,7 +16,7 @@
SOURCE_REQUIRES = sources/packages/l/libssh2
REQUIRES = libs/libssh2/1.9.0
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: libs/libssh2/1.9.0-x86_32/Makefile
===================================================================
--- libs/libssh2/1.9.0-x86_32/Makefile (revision 441)
+++ libs/libssh2/1.9.0-x86_32/Makefile (revision 442)
@@ -13,7 +13,7 @@
SOURCE_REQUIRES = sources/packages/l/libssh2
REQUIRES = libs/libssh2/1.9.0
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: libs/libstrophe/0.10.1/Makefile
===================================================================
--- libs/libstrophe/0.10.1/Makefile (revision 441)
+++ libs/libstrophe/0.10.1/Makefile (revision 442)
@@ -61,7 +61,7 @@
SOURCE_REQUIRES = sources/packages/l/libstrophe
REQUIRES = libs/expat/2.5.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: libs/libstrophe/0.10.1-ppc32/Makefile
===================================================================
--- libs/libstrophe/0.10.1-ppc32/Makefile (revision 441)
+++ libs/libstrophe/0.10.1-ppc32/Makefile (revision 442)
@@ -17,7 +17,7 @@
REQUIRES = libs/libstrophe/0.10.1
REQUIRES = libs/expat/2.5.0-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: libs/libstrophe/0.10.1-x86_32/Makefile
===================================================================
--- libs/libstrophe/0.10.1-x86_32/Makefile (revision 441)
+++ libs/libstrophe/0.10.1-x86_32/Makefile (revision 442)
@@ -14,7 +14,7 @@
REQUIRES = libs/libstrophe/0.10.1
REQUIRES = libs/expat/2.5.0-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: libs/libzip/1.9.2/Makefile
===================================================================
--- libs/libzip/1.9.2/Makefile (revision 441)
+++ libs/libzip/1.9.2/Makefile (revision 442)
@@ -66,7 +66,7 @@
REQUIRES += libs/zstd/1.5.6
REQUIRES += net/gnutls/3.8.0
REQUIRES += net/nettle/3.7.1
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: libs/libzip/1.9.2-ppc32/Makefile
===================================================================
--- libs/libzip/1.9.2-ppc32/Makefile (revision 441)
+++ libs/libzip/1.9.2-ppc32/Makefile (revision 442)
@@ -22,7 +22,7 @@
REQUIRES += libs/zstd/1.5.6-ppc32
REQUIRES += net/gnutls/3.8.0-ppc32
REQUIRES += net/nettle/3.7.1-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: libs/libzip/1.9.2-x86_32/Makefile
===================================================================
--- libs/libzip/1.9.2-x86_32/Makefile (revision 441)
+++ libs/libzip/1.9.2-x86_32/Makefile (revision 442)
@@ -19,7 +19,7 @@
REQUIRES += libs/zstd/1.5.6-x86_32
REQUIRES += net/gnutls/3.8.0-x86_32
REQUIRES += net/nettle/3.7.1-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: libs/netcdf/4.9.0/Makefile
===================================================================
--- libs/netcdf/4.9.0/Makefile (revision 441)
+++ libs/netcdf/4.9.0/Makefile (revision 442)
@@ -61,7 +61,7 @@
SOURCE_REQUIRES = sources/packages/l/unidata/netcdf-c
REQUIRES = net/curl/7.75.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/nghttp2/1.43.0
REQUIRES += libs/libzip/1.9.2
REQUIRES += libs/libunistring/1.3
Index: libs/netcdf/4.9.0-ppc32/Makefile
===================================================================
--- libs/netcdf/4.9.0-ppc32/Makefile (revision 441)
+++ libs/netcdf/4.9.0-ppc32/Makefile (revision 442)
@@ -17,7 +17,7 @@
REQUIRES = libs/netcdf/4.9.0
REQUIRES += net/curl/7.75.0-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
REQUIRES += net/nghttp2/1.43.0-ppc32
REQUIRES += libs/libzip/1.9.2-ppc32
REQUIRES += libs/libunistring/1.3-ppc32
Index: libs/netcdf/4.9.0-x86_32/Makefile
===================================================================
--- libs/netcdf/4.9.0-x86_32/Makefile (revision 441)
+++ libs/netcdf/4.9.0-x86_32/Makefile (revision 442)
@@ -14,7 +14,7 @@
REQUIRES = libs/netcdf/4.9.0
REQUIRES += net/curl/7.75.0-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
REQUIRES += net/nghttp2/1.43.0-x86_32
REQUIRES += libs/libzip/1.9.2-x86_32
REQUIRES += libs/libunistring/1.3-x86_32
Index: media/libshout/2.4.6/Makefile
===================================================================
--- media/libshout/2.4.6/Makefile (revision 441)
+++ media/libshout/2.4.6/Makefile (revision 442)
@@ -63,7 +63,7 @@
REQUIRES = media/libtheora/1.1.1
REQUIRES += media/libvorbis/1.3.7
REQUIRES += media/speex/1.2.1
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: media/libshout/2.4.6-ppc32/Makefile
===================================================================
--- media/libshout/2.4.6-ppc32/Makefile (revision 441)
+++ media/libshout/2.4.6-ppc32/Makefile (revision 442)
@@ -19,7 +19,7 @@
REQUIRES += media/libtheora/1.1.1-ppc32
REQUIRES += media/libvorbis/1.3.7-ppc32
REQUIRES += media/speex/1.2.1-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: media/libshout/2.4.6-x86_32/Makefile
===================================================================
--- media/libshout/2.4.6-x86_32/Makefile (revision 441)
+++ media/libshout/2.4.6-x86_32/Makefile (revision 442)
@@ -16,7 +16,7 @@
REQUIRES += media/libtheora/1.1.1-x86_32
REQUIRES += media/libvorbis/1.3.7-x86_32
REQUIRES += media/speex/1.2.1-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: media/opusfile/0.12/Makefile
===================================================================
--- media/opusfile/0.12/Makefile (revision 441)
+++ media/opusfile/0.12/Makefile (revision 442)
@@ -62,7 +62,7 @@
REQUIRES = media/opus/1.3.1
REQUIRES += media/libogg/1.3.5
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: media/opusfile/0.12-ppc32/Makefile
===================================================================
--- media/opusfile/0.12-ppc32/Makefile (revision 441)
+++ media/opusfile/0.12-ppc32/Makefile (revision 442)
@@ -18,7 +18,7 @@
REQUIRES = media/opusfile/0.12
REQUIRES += media/opus/1.3.1-ppc32
REQUIRES += media/libogg/1.3.5-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: media/opusfile/0.12-x86_32/Makefile
===================================================================
--- media/opusfile/0.12-x86_32/Makefile (revision 441)
+++ media/opusfile/0.12-x86_32/Makefile (revision 442)
@@ -15,7 +15,7 @@
REQUIRES = media/opusfile/0.12
REQUIRES += media/opus/1.3.1-x86_32
REQUIRES += media/libogg/1.3.5-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: media/pulseaudio/16.1/Makefile
===================================================================
--- media/pulseaudio/16.1/Makefile (revision 441)
+++ media/pulseaudio/16.1/Makefile (revision 442)
@@ -64,7 +64,7 @@
ENABLE_GSTREAMER_SUPPORT = no
REQUIRES = net/bluez/5.62
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += app/dbus/1.13.18
REQUIRES += app/elogind/246.10
REQUIRES += app/tdb/1.4.7
Index: media/pulseaudio/16.1-ppc32/Makefile
===================================================================
--- media/pulseaudio/16.1-ppc32/Makefile (revision 441)
+++ media/pulseaudio/16.1-ppc32/Makefile (revision 442)
@@ -20,7 +20,7 @@
REQUIRES = media/pulseaudio/16.1
REQUIRES += net/bluez/5.62-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
REQUIRES += app/dbus/1.13.18-ppc32
REQUIRES += app/elogind/246.10-ppc32
REQUIRES += app/tdb/1.4.7-ppc32
Index: media/pulseaudio/16.1-x86_32/Makefile
===================================================================
--- media/pulseaudio/16.1-x86_32/Makefile (revision 441)
+++ media/pulseaudio/16.1-x86_32/Makefile (revision 442)
@@ -17,7 +17,7 @@
REQUIRES = media/pulseaudio/16.1
REQUIRES += net/bluez/5.62-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
REQUIRES += app/dbus/1.13.18-x86_32
REQUIRES += app/elogind/246.10-x86_32
REQUIRES += app/tdb/1.4.7-x86_32
Index: net/alpine/2.25/Makefile
===================================================================
--- net/alpine/2.25/Makefile (revision 441)
+++ net/alpine/2.25/Makefile (revision 442)
@@ -62,7 +62,7 @@
REQUIRES = libs/ncurses/6.5
REQUIRES += net/cyrus-sasl/2.1.27
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/krb5/1.19.1
# ======= __END_OF_REQUIRES__ =======
Index: net/ca-certificates/20211220/Makefile
===================================================================
--- net/ca-certificates/20211220/Makefile (revision 441)
+++ net/ca-certificates/20211220/Makefile (revision 442)
@@ -61,7 +61,7 @@
SOURCE_REQUIRES = sources/packages/n/ca-certificates/mozilla
SOURCE_REQUIRES += sources/packages/n/ca-certificates/debian
-REQUIRES = net/openssl/3.4.0
+REQUIRES = net/openssl/3.4.1
REQUIRES += app/dcron/4.5
# ======= __END_OF_REQUIRES__ =======
Index: net/crda/4.14/Makefile
===================================================================
--- net/crda/4.14/Makefile (revision 441)
+++ net/crda/4.14/Makefile (revision 442)
@@ -66,7 +66,7 @@
REQUIRES = net/iw/5.9
REQUIRES += net/libnl3/3.5.0
ifeq ($(ENABLE_DYNAMIC_PUBKEYS),yes)
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
else
REQUIRES += net/libgcrypt/1.10.1
endif
Index: net/cyrus-imapd/3.4.4/Makefile
===================================================================
--- net/cyrus-imapd/3.4.4/Makefile (revision 441)
+++ net/cyrus-imapd/3.4.4/Makefile (revision 442)
@@ -73,7 +73,7 @@
REQUIRES += libs/pcre/8.45
REQUIRES += net/tcp_wrappers/7.6
REQUIRES += net/cyrus-sasl/2.1.27
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/krb5/1.19.1
REQUIRES += net/libtirpc/1.3.1
REQUIRES += net/libnsl/1.3.0
Index: net/cyrus-sasl/2.1.27/Makefile
===================================================================
--- net/cyrus-sasl/2.1.27/Makefile (revision 441)
+++ net/cyrus-sasl/2.1.27/Makefile (revision 442)
@@ -63,7 +63,7 @@
REQUIRES = app/db/18.1.40
REQUIRES += app/sqlite/3.39.4.0
REQUIRES += net/openldap/2.4.58
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += secure/pam/1.5.1
REQUIRES += net/krb5/1.19.1
Index: net/cyrus-sasl/2.1.27-ppc32/Makefile
===================================================================
--- net/cyrus-sasl/2.1.27-ppc32/Makefile (revision 441)
+++ net/cyrus-sasl/2.1.27-ppc32/Makefile (revision 442)
@@ -19,7 +19,7 @@
REQUIRES += app/db/18.1.40-ppc32
REQUIRES += app/sqlite/3.39.4.0-ppc32
REQUIRES += net/openldap/2.4.58-ppc32
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
REQUIRES += secure/pam/1.5.1-ppc32
REQUIRES += net/krb5/1.19.1-ppc32
Index: net/cyrus-sasl/2.1.27-x86_32/Makefile
===================================================================
--- net/cyrus-sasl/2.1.27-x86_32/Makefile (revision 441)
+++ net/cyrus-sasl/2.1.27-x86_32/Makefile (revision 442)
@@ -16,7 +16,7 @@
REQUIRES += app/db/18.1.40-x86_32
REQUIRES += app/sqlite/3.39.4.0-x86_32
REQUIRES += net/openldap/2.4.58-x86_32
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
REQUIRES += secure/pam/1.5.1-x86_32
REQUIRES += net/krb5/1.19.1-x86_32
Index: net/httpd/2.4.51/Makefile
===================================================================
--- net/httpd/2.4.51/Makefile (revision 441)
+++ net/httpd/2.4.51/Makefile (revision 442)
@@ -77,7 +77,7 @@
REQUIRES += net/curl/7.75.0
REQUIRES += net/cyrus-sasl/2.1.27
REQUIRES += net/nghttp2/1.43.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/krb5/1.19.1
# ======= __END_OF_REQUIRES__ =======
Index: net/iperf3/3.9/Makefile
===================================================================
--- net/iperf3/3.9/Makefile (revision 441)
+++ net/iperf3/3.9/Makefile (revision 442)
@@ -60,7 +60,7 @@
SOURCE_REQUIRES = sources/packages/n/iperf3
-REQUIRES = net/openssl/3.4.0
+REQUIRES = net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: net/iputils/20210202/Makefile
===================================================================
--- net/iputils/20210202/Makefile (revision 441)
+++ net/iputils/20210202/Makefile (revision 442)
@@ -62,7 +62,7 @@
REQUIRES = libs/libidn2/2.3.0
REQUIRES += secure/libcap/2.48
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: net/net-snmp/5.9/Makefile
===================================================================
--- net/net-snmp/5.9/Makefile (revision 441)
+++ net/net-snmp/5.9/Makefile (revision 442)
@@ -61,7 +61,7 @@
SOURCE_REQUIRES = sources/packages/n/net-snmp
REQUIRES = net/libnl3/3.5.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/tcp_wrappers/7.6
REQUIRES += app/lm-sensors/3.6.0
REQUIRES += app/pciutils/3.7.0
Index: net/nginx/1.20.2/Makefile
===================================================================
--- net/nginx/1.20.2/Makefile (revision 441)
+++ net/nginx/1.20.2/Makefile (revision 442)
@@ -65,7 +65,7 @@
REQUIRES += libs/libgd/2.3.3
REQUIRES += libs/pcre/8.45
REQUIRES += libs/zlib/1.3.1
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/geoip/1.16.2
REQUIRES += net/libnsl/1.3.0
REQUIRES += dev/perl/5.36.0
Index: net/nmap/7.94/Makefile
===================================================================
--- net/nmap/7.94/Makefile (revision 441)
+++ net/nmap/7.94/Makefile (revision 442)
@@ -63,7 +63,7 @@
REQUIRES = libs/pcre/8.45
REQUIRES += libs/libssh2/1.9.0
REQUIRES += libs/zlib/1.3.1
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: net/ntp/4.2.8p15/Makefile
===================================================================
--- net/ntp/4.2.8p15/Makefile (revision 441)
+++ net/ntp/4.2.8p15/Makefile (revision 442)
@@ -61,7 +61,7 @@
SOURCE_REQUIRES = sources/packages/n/ntp
REQUIRES = secure/libcap/2.48
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += libs/libevent/2.1.12
REQUIRES += libs/libedit/20191231-3.1
REQUIRES += libs/ncurses/6.5
Index: net/opendkim/2.11.0.2/Makefile
===================================================================
--- net/opendkim/2.11.0.2/Makefile (revision 441)
+++ net/opendkim/2.11.0.2/Makefile (revision 442)
@@ -64,7 +64,7 @@
REQUIRES += libs/jansson/2.13.1
REQUIRES += net/libmilter/8.17.1
REQUIRES += net/cyrus-sasl/2.1.27
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/curl/7.75.0
REQUIRES += net/krb5/1.19.1
REQUIRES += app/sqlite/3.39.4.0
Index: net/openldap/2.4.58/Makefile
===================================================================
--- net/openldap/2.4.58/Makefile (revision 441)
+++ net/openldap/2.4.58/Makefile (revision 442)
@@ -60,7 +60,7 @@
SOURCE_REQUIRES = sources/packages/n/openldap
-REQUIRES = net/openssl/3.4.0
+REQUIRES = net/openssl/3.4.1
REQUIRES += net/tcp_wrappers/7.6
REQUIRES += app/util-linux/2.38.1
REQUIRES += app/db/18.1.40
Index: net/openldap/2.4.58-ppc32/Makefile
===================================================================
--- net/openldap/2.4.58-ppc32/Makefile (revision 441)
+++ net/openldap/2.4.58-ppc32/Makefile (revision 442)
@@ -16,7 +16,7 @@
SOURCE_REQUIRES = sources/packages/n/openldap
REQUIRES = net/openldap/2.4.58
-REQUIRES += net/openssl/3.4.0-ppc32
+REQUIRES += net/openssl/3.4.1-ppc32
REQUIRES += env/cyrus-sasl/2.1.27-ppc32
# ======= __END_OF_REQUIRES__ =======
Index: net/openldap/2.4.58-x86_32/Makefile
===================================================================
--- net/openldap/2.4.58-x86_32/Makefile (revision 441)
+++ net/openldap/2.4.58-x86_32/Makefile (revision 442)
@@ -13,7 +13,7 @@
SOURCE_REQUIRES = sources/packages/n/openldap
REQUIRES = net/openldap/2.4.58
-REQUIRES += net/openssl/3.4.0-x86_32
+REQUIRES += net/openssl/3.4.1-x86_32
REQUIRES += env/cyrus-sasl/2.1.27-x86_32
# ======= __END_OF_REQUIRES__ =======
Index: net/openssh/8.5p1/Makefile
===================================================================
--- net/openssh/8.5p1/Makefile (revision 441)
+++ net/openssh/8.5p1/Makefile (revision 442)
@@ -62,7 +62,7 @@
REQUIRES = libs/libedit/20191231-3.1
REQUIRES += net/tcp_wrappers/7.6
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/krb5/1.19.1
# ======= __END_OF_REQUIRES__ =======
Index: net/openssl/3.4.0-x86_32/openssl-x32-pkg-install.sh
===================================================================
--- net/openssl/3.4.0-x86_32/openssl-x32-pkg-install.sh (revision 441)
+++ net/openssl/3.4.0-x86_32/openssl-x32-pkg-install.sh (nonexistent)
@@ -1,39 +0,0 @@
-#!/bin/sh
-
-# arg 1: the new package version
-pre_install() {
- /bin/true
-}
-
-# arg 1: the new package version
-post_install() {
- /bin/true
-}
-
-# arg 1: the new package version
-# arg 2: the old package version
-pre_update() {
- /bin/true
-}
-
-# arg 1: the new package version
-# arg 2: the old package version
-post_update() {
- post_install
-}
-
-# arg 1: the old package version
-pre_remove() {
- /bin/true
-}
-
-# arg 1: the old package version
-post_remove() {
- /bin/true
-}
-
-
-operation=$1
-shift
-
-$operation $*
Property changes on: net/openssl/3.4.0-x86_32/openssl-x32-pkg-install.sh
___________________________________________________________________
Deleted: svn:executable
## -1 +0,0 ##
-*
\ No newline at end of property
Index: net/openssl/3.4.0-x86_32/PATCHES
===================================================================
--- net/openssl/3.4.0-x86_32/PATCHES (revision 441)
+++ net/openssl/3.4.0-x86_32/PATCHES (nonexistent)
@@ -1,2 +0,0 @@
-
-../../../sources/packages/n/openssl/patches/openssl-3.4.0-legacy-provider.patch -p0
Index: net/openssl/3.4.0-x86_32/openssl-x32-pkg-description.in
===================================================================
--- net/openssl/3.4.0-x86_32/openssl-x32-pkg-description.in (revision 441)
+++ net/openssl/3.4.0-x86_32/openssl-x32-pkg-description.in (nonexistent)
@@ -1,19 +0,0 @@
-# HOW TO EDIT THIS FILE:
-# The "handy ruler" below makes it easier to edit a package description. Line
-# up the first '|' above the ':' following the base package name, and the '|'
-# on the right side marks the last column you can put a character in. You must
-# make exactly 11 lines for the formatting to be correct. It's also
-# customary to leave one space after the ':'.
-
- |-----handy-ruler------------------------------------------------------|
-openssl-x32: openssl-x32 @VERSION@ (Secure Sockets Layer toolkit)
-openssl-x32:
-openssl-x32: The OpenSSL certificate management tool and the shared libraries
-openssl-x32: that provide various encryption and decryption algorithms and
-openssl-x32: protocols.
-openssl-x32: This product includes software developed by the OpenSSL Project for
-openssl-x32: use in the OpenSSL Toolkit (http://www.openssl.org). This product
-openssl-x32: includes cryptographic software written by Eric Young
-openssl-x32: (eay@cryptsoft.com). This product includes software written by Tim
-openssl-x32: Hudson (tjh@cryptsoft.com).
-openssl-x32:
Index: net/openssl/3.4.0-x86_32/Makefile
===================================================================
--- net/openssl/3.4.0-x86_32/Makefile (revision 441)
+++ net/openssl/3.4.0-x86_32/Makefile (nonexistent)
@@ -1,183 +0,0 @@
-
-COMPONENT_TARGETS = $(HARDWARE_INTEL_PC64)
-
-NEED_ABS_PATH = true
-COMPONENT_IS_3PP = true
-
-CREATE_X86_32_PACKAGE = true
-
-
-include ../../../build-system/constants.mk
-
-
-SOURCE_REQUIRES = sources/packages/n/openssl
-
-REQUIRES = net/openssl/3.4.0
-REQUIRES += libs/zlib/1.3.1-x86_32
-REQUIRES += libs/gmp/6.3.0-x86_32
-
-# ======= __END_OF_REQUIRES__ =======
-
-
-version = 3.4.0
-tar_xz_archive = $(SRC_PACKAGE_PATH)/packages/n/openssl/openssl-$(version).tar.xz
-SRC_ARCHIVE = $(tar_xz_archive)
-SRC_DIR = $(TARGET_BUILD_DIR)/openssl-$(version)
-src_dir_name = openssl-$(version)
-src_done = $(TARGET_BUILD_DIR)/.source_done
-
-PATCHES = PATCHES
-
-build_target = $(TARGET_BUILD_DIR)/.build_done
-install_target = $(TARGET_BUILD_DIR)/.install_done
-
-
-####### Targets
-
-PKG_GROUP = net
-#
-# *PKG_NAME & *PKG_VERSION shouldn't be a reference to value.
-#
-OPENSSL32_PKG_NAME = openssl-x32
-OPENSSL32_PKG_VERSION = 3.4.0
-OPENSSL32_PKG_ARCH = $(PKGARCH)
-OPENSSL32_PKG_DISTRO_NAME = $(DISTRO_NAME)
-OPENSSL32_PKG_DISTRO_VERSION = $(DISTRO_VERSION)
-OPENSSL32_PKG_GROUP = $(PKG_GROUP)
-### |---handy-ruler-------------------------------|
-OPENSSL32_PKG_SHORT_DESCRIPTION = Secure Sockets Layer toolkit
-OPENSSL32_PKG_URL = $(BUG_URL)
-OPENSSL32_PKG_LICENSE = Apache-v2.0
-OPENSSL32_PKG_DESCRIPTION_FILE = $(TARGET_BUILD_DIR)/$(OPENSSL32_PKG_NAME)-pkg-description
-OPENSSL32_PKG_DESCRIPTION_FILE_IN = $(OPENSSL32_PKG_NAME)-pkg-description.in
-OPENSSL32_PKG_INSTALL_SCRIPT = $(OPENSSL32_PKG_NAME)-pkg-install.sh
-
-OPENSSL32_PKG = $(CURDIR)/$(TARGET_BUILD_DIR)/$(OPENSSL32_PKG_NAME)-package
-
-pkg_basename = $(OPENSSL32_PKG_NAME)-$(OPENSSL32_PKG_VERSION)-$(OPENSSL32_PKG_ARCH)-$(OPENSSL32_PKG_DISTRO_NAME)-$(OPENSSL32_PKG_DISTRO_VERSION)
-
-pkg_archive = $(TARGET_BUILD_DIR)/$(PKG_GROUP)/$(pkg_basename).$(pkg_arch_suffix)
-pkg_certificate = $(call cert-name,$(pkg_archive))
-pkg_signature = $(call sign-name,$(pkg_archive))
-pkg_description = $(call desc-name,$(pkg_archive))
-products = $(call pkg-files,$(pkg_archive))
-
-BUILD_TARGETS = $(build_target)
-BUILD_TARGETS += $(install_target)
-
-PRODUCT_TARGETS = $(products)
-
-ROOTFS_TARGETS = $(pkg_archive)
-
-
-include ../../../build-system/core.mk
-
-
-env_sysroot = DESTDIR=$(OPENSSL32_PKG)
-
-
-extra_configure_switches = --libdir=lib$(MULTILIB_X86_32_SUFFIX)
-extra_configure_switches += --openssldir=/etc/ssl
-extra_configure_switches += no-mdc2
-extra_configure_switches += no-ec2m
-extra_configure_switches += no-sm2
-extra_configure_switches += no-sm4
-extra_configure_switches += no-sse2
-extra_configure_switches += no-weak-ssl-ciphers
-extra_configure_switches += enable-camellia
-extra_configure_switches += enable-seed
-extra_configure_switches += enable-rfc3779
-extra_configure_switches += enable-cms
-extra_configure_switches += enable-md2
-extra_configure_switches += enable-rc5
-extra_configure_switches += enable-ssl3
-extra_configure_switches += enable-ssl3-method
-extra_configure_switches += zlib
-extra_configure_switches += shared
-
-
-LDFLAGS += -Wl,-rpath=/lib$(MULTILIB_X86_32_SUFFIX):/usr/lib$(MULTILIB_X86_32_SUFFIX)
-
-
-####### Dependencies
-
-$(src_done): $(SRC_ARCHIVE) $(PATCHES_DEP)
- $(UNPACK_SRC_ARCHIVE)
- $(APPLY_PATCHES)
- @( cd $(SRC_DIR) ; \
- find . -name "*.pod" -exec sed -i "s/^\=item \([0-9]\)\(\ \|\.\|$$\)/\=item C<\1>/g" {} \; \
- )
- @touch $@
-
-$(build_target): $(src_done)
- @cd $(SRC_DIR) && \
- ./Configure linux-x86 --cross-compile-prefix=$(CROSS_PREFIX) \
- --prefix=/usr \
- $(extra_configure_switches) \
- $(CFLAGS)
- @cd $(SRC_DIR) && $(MAKE) $(BUILD_ENVIRONMENT)
- @touch $@
-
-$(install_target): $(build_target)
- @mkdir -p $(OPENSSL32_PKG)
- @cd $(SRC_DIR) && $(BUILD_ENVIRONMENT) $(MAKE) -j1 MANDIR=/usr/share/man install $(env_sysroot)
-ifneq ($(__ENABLE_STATIC__),yes)
- @rm -f $(OPENSSL32_PKG)/usr/lib$(MULTILIB_X86_32_SUFFIX)/*.a
-endif
- @mkdir -p $(OPENSSL32_PKG)/usr/bin/32
- @( cd $(OPENSSL32_PKG)/usr/bin ; \
- rm -f c_rehash ; \
- find . -type f | xargs mv -t 32 ; \
- )
- @mkdir -p $(OPENSSL32_PKG)/lib$(MULTILIB_X86_32_SUFFIX)
- @( cd $(OPENSSL32_PKG)/usr/lib$(MULTILIB_X86_32_SUFFIX) ; \
- chmod +w lib*.so.? ; \
- mv lib*.so.? ../../lib$(MULTILIB_X86_32_SUFFIX) ; \
- ln -sf ../../lib$(MULTILIB_X86_32_SUFFIX)/lib*.so.? . ; \
- cp -a lib*.so ../../lib$(MULTILIB_X86_32_SUFFIX) ; \
- )
- @sed -e 's,/include $$,/include,' -i $(OPENSSL32_PKG)/usr/lib$(MULTILIB_X86_32_SUFFIX)/pkgconfig/*.pc
- @rm -rf $(OPENSSL32_PKG)/etc
- @rm -rf $(OPENSSL32_PKG)/usr/include
- @rm -rf $(OPENSSL32_PKG)/usr/share
- # ======= Install the same to $(TARGET_DEST_DIR) =======
- $(call install-into-devenv, $(OPENSSL32_PKG))
- # ======= tune pkg-config *.pc search path to the target destination for development =======
- @( cd $(TARGET_DEST_DIR)/usr/lib$(MULTILIB_X86_32_SUFFIX)/pkgconfig ; \
- sed -i "s,/usr,$(TARGET_DEST_DIR)/usr,g" libcrypto.pc libssl.pc openssl.pc \
- )
- # ======= Strip binaries =======
- @( cd $(OPENSSL32_PKG) ; \
- find . | xargs file | grep "executable" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
- find . | xargs file | grep "shared object" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
- )
-ifeq ($(__ENABLE_STATIC__),yes)
- @( cd $(OPENSSL32_PKG) ; \
- find . | xargs file | grep "current ar archive" | cut -f 1 -d : | xargs $(STRIP) -g 2> /dev/null ; \
- )
-endif
- @touch $@
-
-$(OPENSSL32_PKG_DESCRIPTION_FILE): $(OPENSSL32_PKG_DESCRIPTION_FILE_IN)
- @cat $< | $(SED) -e "s/@VERSION@/$(version)/g" > $@
-
-$(pkg_certificate) : $(pkg_archive) ;
-$(pkg_signature) : $(pkg_archive) ;
-$(pkg_description) : $(pkg_archive) ;
-
-$(pkg_archive): $(install_target) $(OPENSSL32_PKG_DESCRIPTION_FILE) $(OPENSSL32_PKG_INSTALL_SCRIPT)
- @cp $(OPENSSL32_PKG_DESCRIPTION_FILE) $(OPENSSL32_PKG)/.DESCRIPTION
- @cp $(OPENSSL32_PKG_INSTALL_SCRIPT) $(OPENSSL32_PKG)/.INSTALL
- @$(BUILD_PKG_REQUIRES) $(OPENSSL32_PKG)/.REQUIRES
- @echo "pkgname=$(OPENSSL32_PKG_NAME)" > $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "pkgver=$(OPENSSL32_PKG_VERSION)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "arch=$(OPENSSL32_PKG_ARCH)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "distroname=$(OPENSSL32_PKG_DISTRO_NAME)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "distrover=$(OPENSSL32_PKG_DISTRO_VERSION)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "group=$(OPENSSL32_PKG_GROUP)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "short_description=\"$(OPENSSL32_PKG_SHORT_DESCRIPTION)\"" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "url=$(OPENSSL32_PKG_URL)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "license=$(OPENSSL32_PKG_LICENSE)" >> $(OPENSSL32_PKG)/.PKGINFO
- @$(PSEUDO) sh -c "cd $(OPENSSL32_PKG) && \
- chown -R root:root . && \
- $(MAKE_PACKAGE) -J --linkadd=yes $(GNUPG_OPTIONS) -m -d .. ."
Index: net/openssl/3.4.0-x86_32
===================================================================
--- net/openssl/3.4.0-x86_32 (revision 441)
+++ net/openssl/3.4.0-x86_32 (nonexistent)
Property changes on: net/openssl/3.4.0-x86_32
___________________________________________________________________
Deleted: svn:ignore
## -1,74 +0,0 ##
-
-# install dir
-dist
-
-# Target build dirs
-.a1x-newlib
-.a2x-newlib
-.at91sam7s-newlib
-
-.build-machine
-
-.a1x-glibc
-.a2x-glibc
-.h3-glibc
-.h5-glibc
-.i586-glibc
-.i686-glibc
-.imx6-glibc
-.jz47xx-glibc
-.makefile
-.am335x-glibc
-.omap543x-glibc
-.p5600-glibc
-.power8-glibc
-.power8le-glibc
-.power9-glibc
-.power9le-glibc
-.m1000-glibc
-.riscv64-glibc
-.rk328x-glibc
-.rk33xx-glibc
-.rk339x-glibc
-.rk358x-glibc
-.s8xx-glibc
-.s9xx-glibc
-.x86_64-glibc
-
-# Hidden files (each file)
-.makefile
-.dist
-.rootfs
-
-# src & hw requires
-.src_requires
-.src_requires_depend
-.requires
-.requires_depend
-
-# Tarballs
-*.gz
-*.bz2
-*.lz
-*.xz
-*.tgz
-*.txz
-
-# Signatures
-*.asc
-*.sig
-*.sign
-*.sha1sum
-
-# Patches
-*.patch
-
-# Descriptions
-*.dsc
-*.txt
-
-# Default linux config files
-*.defconfig
-
-# backup copies
-*~
Index: net/openssl/3.4.0/openssl-pkg-install.sh
===================================================================
--- net/openssl/3.4.0/openssl-pkg-install.sh (revision 441)
+++ net/openssl/3.4.0/openssl-pkg-install.sh (nonexistent)
@@ -1,67 +0,0 @@
-#!/bin/sh
-
-# Preserve new files
-install_file() {
- NEW="$1"
- OLD="`dirname $NEW`/`basename $NEW .new`"
- # If there's no file by that name, mv it over:
- if [ ! -r $OLD ]; then
- mv $NEW $OLD
- elif [ "`cat $OLD | md5sum`" = "`cat $NEW | md5sum`" ]; then # toss the redundant copy
- rm $NEW
- fi
- # Otherwise, we leave the .new copy for the admin to consider...
-}
-
-
-# arg 1: the new package version
-pre_install() {
- /bin/true
-}
-
-# arg 1: the new package version
-post_install() {
- # If there is a known buggy certwatch script with no local modifications, just replace it:
- if [ "$(md5sum etc/cron.daily/certwatch 2> /dev/null)" = "f4cf63e557820781f40c4cac67a44d77 etc/cron.daily/certwatch" ]; then
- cat etc/cron.daily/certwatch.new > etc/cron.daily/certwatch
- touch -r etc/cron.daily/certwatch.new etc/cron.daily/certwatch
- fi
-
- install_file etc/ssl/openssl.cnf.new
- install_file etc/cron.daily/certwatch.new
-
- # Rehash certificates if the package is upgraded on a running system:
- # Note that we have to be sure that we are on the working system
- # on the target hardware ("proc/sys/kernel/osrelease" - relative path).
- if [ -r proc/sys/kernel/osrelease -a -x /usr/bin/c_rehash ]; then
- /usr/bin/c_rehash 1> /dev/null 2> /dev/null
- fi
-}
-
-# arg 1: the new package version
-# arg 2: the old package version
-pre_update() {
- /bin/true
-}
-
-# arg 1: the new package version
-# arg 2: the old package version
-post_update() {
- post_install
-}
-
-# arg 1: the old package version
-pre_remove() {
- /bin/true
-}
-
-# arg 1: the old package version
-post_remove() {
- /bin/true
-}
-
-
-operation=$1
-shift
-
-$operation $*
Property changes on: net/openssl/3.4.0/openssl-pkg-install.sh
___________________________________________________________________
Deleted: svn:executable
## -1 +0,0 ##
-*
\ No newline at end of property
Index: net/openssl/3.4.0/PATCHES
===================================================================
--- net/openssl/3.4.0/PATCHES (revision 441)
+++ net/openssl/3.4.0/PATCHES (nonexistent)
@@ -1,2 +0,0 @@
-
-../../../sources/packages/n/openssl/patches/openssl-3.4.0-legacy-provider.patch -p0
Index: net/openssl/3.4.0/cron/certwatch
===================================================================
--- net/openssl/3.4.0/cron/certwatch (revision 441)
+++ net/openssl/3.4.0/cron/certwatch (nonexistent)
@@ -1,129 +0,0 @@
-#!/bin/sh
-#
-# Will check all certificates stored in $CERTDIR for their expiration date,
-# and will display (if optional "stdout" argument is given), or mail a warning
-# message to $MAILADDR (if script is executed without any parameter
-# - unattended mode suitable for cron execution) for each particular certificate
-# that is about to expire in time less to, or equal to $DAYS after this script
-# has been executed, or if it has already expired.
-# This stupid script (C) 2006,2007 Jan Rafaj
-
-########################## CONFIGURATION SECTION BEGIN #########################
-# Note: all settings are mandatory
-# Warning will be sent if a certificate expires in time <= days given here
-DAYS=7
-# E-mail address where to send warnings
-MAILADDR=root
-# Directory with certificates to check
-CERTDIR=/etc/ssl/certs
-# Directory where to keep state files if this script isnt executed with "stdout"
-STATEDIR=/var/run
-########################### CONFIGURATION SECTION END ##########################
-
-PATH=/bin:/usr/bin:/sbin:/usr/sbin
-DAY_IN_SECS=$((60*60*24))
-DATE_CURRENT=$(date '+%s')
-
-usage()
-{
- echo "Usage: $0 [stdout]"
- echo
- echo "Detailed description and configuration is embedded within the script."
- exit 0
-}
-
-message()
-{
- cat << EOF
- WARNING: certificate $certfile
- is about to expire in time equal to or less than $DAYS days from now on,
- or has already expired - it might be a good idea to obtain/create new one.
-
-EOF
-}
-
-message_mail()
-{
- message
- cat << EOF
- NOTE: This message is being sent only once.
-
- A lock-file
- $STATEDIR/certwatch-mailwarning-sent-$certfilebase
- has been created, which will prevent this script from mailing you again
- upon its subsequent executions by crond. You dont need to care about it;
- the file will be auto-deleted as soon as you'll prolong your certificate.
-EOF
-}
-
-unset stdout
-case $# in
- 0) ;;
- 1) if [ "$1" = "-h" -o "$1" == "--help" ]; then
- usage
- elif [ "$1" = "stdout" ]; then
- stdout=1
- else
- usage
- fi
- ;;
- *) usage ;;
-esac
-
-for dir in $STATEDIR $CERTDIR ; do
- if [ ! -d $dir ]; then
- echo "ERROR: directory $dir does not exist"
- exit 1
- fi
-done
-for binary in basename date find grep mail openssl touch ; do
- if [ ! \( -x /usr/bin/$binary -o -x /bin/$binary \) ]; then
- echo "ERROR: /usr/bin/$binary not found"
- exit 1
- fi
-done
-
-find $CERTDIR -type f -maxdepth 1 | while read certfile ; do
- if [ "$certfile" != "/etc/ssl/certs/ca-certificates.crt" ]; then
- certfilebase="$(basename "$certfile")"
- inform=PEM
- echo "$certfile" | grep -q -i '\.net$'
- if [ $? -eq 0 ]; then
- # This is based purely on filename extension, so may give false results.
- # But lets assume noone uses NET format certs today, ok?
- continue
- fi
- echo "$certfile" | grep -q -i '\.der$'
- if [ $? -eq 0 -o "$(file "$certfile" | egrep '(ASCII|PEM)')" == "" ]; then
- inform=DER
- fi
- # We wont use '-checkend' since it is not properly documented (as of
- # OpenSSL 0.9.8e).
- DATE_CERT_EXPIRES=$(openssl x509 -in "$certfile" -inform $inform -noout -enddate | sed 's/^notAfter=//')
- DATE_CERT_EXPIRES=$(date -d"$DATE_CERT_EXPIRES" +%s)
- if [ $(($DATE_CERT_EXPIRES - $DATE_CURRENT)) -le $(($DAYS * $DAY_IN_SECS)) ]
- then
- if [ $stdout ]; then
- message
- else
- if [ ! -f $STATEDIR/certwatch-mailwarning-sent-"$certfilebase" ]; then
- subject="$0: certificate $certfile expiration warning"
- message_mail | mail -r "certwatch@$HOSTNAME" \
- -s "$subject" \
- $MAILADDR 2>/dev/null
- # echo "Mail about expiring certificate $certfile sent to $MAILADDR."
- # echo "If you need to send it again, please remove lock-file"
- # echo "$STATEDIR/certwatch-mailwarning-sent-$certfilebase ."
- # echo
- fi
- touch $STATEDIR/certwatch-mailwarning-sent-"$certfilebase"
- fi
- else
- if [ ! $stdout ]; then
- if [ -f $STATEDIR/certwatch-mailwarning-sent-"$certfilebase" ]; then
- rm $STATEDIR/certwatch-mailwarning-sent-"$certfilebase"
- fi
- fi
- fi
- fi
-done
Index: net/openssl/3.4.0/openssl-pkg-description.in
===================================================================
--- net/openssl/3.4.0/openssl-pkg-description.in (revision 441)
+++ net/openssl/3.4.0/openssl-pkg-description.in (nonexistent)
@@ -1,19 +0,0 @@
-# HOW TO EDIT THIS FILE:
-# The "handy ruler" below makes it easier to edit a package description. Line
-# up the first '|' above the ':' following the base package name, and the '|'
-# on the right side marks the last column you can put a character in. You must
-# make exactly 11 lines for the formatting to be correct. It's also
-# customary to leave one space after the ':'.
-
- |-----handy-ruler------------------------------------------------------|
-openssl: openssl @VERSION@ (Secure Sockets Layer toolkit)
-openssl:
-openssl: The OpenSSL certificate management tool and the shared libraries
-openssl: that provide various encryption and decryption algorithms and
-openssl: protocols.
-openssl: This product includes software developed by the OpenSSL Project for
-openssl: use in the OpenSSL Toolkit (http://www.openssl.org). This product
-openssl: includes cryptographic software written by Eric Young
-openssl: (eay@cryptsoft.com). This product includes software written by Tim
-openssl: Hudson (tjh@cryptsoft.com).
-openssl:
Index: net/openssl/3.4.0/Makefile
===================================================================
--- net/openssl/3.4.0/Makefile (revision 441)
+++ net/openssl/3.4.0/Makefile (nonexistent)
@@ -1,323 +0,0 @@
-
-COMPONENT_TARGETS = $(HARDWARE_INTEL_PC32)
-COMPONENT_TARGETS += $(HARDWARE_INTEL_PC64)
-COMPONENT_TARGETS += $(HARDWARE_EBOX_3350DX2)
-COMPONENT_TARGETS += $(HARDWARE_CB1X)
-COMPONENT_TARGETS += $(HARDWARE_CB2X)
-COMPONENT_TARGETS += $(HARDWARE_CB3X)
-COMPONENT_TARGETS += $(HARDWARE_ORANGE_PP2E)
-COMPONENT_TARGETS += $(HARDWARE_NANOPI_NEO)
-COMPONENT_TARGETS += $(HARDWARE_ORANGE_PP)
-COMPONENT_TARGETS += $(HARDWARE_ORANGE_PL2)
-COMPONENT_TARGETS += $(HARDWARE_ORANGE_PI5)
-COMPONENT_TARGETS += $(HARDWARE_ORANGE_PI5B)
-COMPONENT_TARGETS += $(HARDWARE_ORANGE_PI5P)
-COMPONENT_TARGETS += $(HARDWARE_ROCK_5B)
-COMPONENT_TARGETS += $(HARDWARE_WECHIP_TX6)
-COMPONENT_TARGETS += $(HARDWARE_REPKA_PI3)
-COMPONENT_TARGETS += $(HARDWARE_FFRK3288)
-COMPONENT_TARGETS += $(HARDWARE_POIN2)
-COMPONENT_TARGETS += $(HARDWARE_RK3328_CC)
-COMPONENT_TARGETS += $(HARDWARE_KHADAS_EDGE)
-COMPONENT_TARGETS += $(HARDWARE_LEEZ_P710)
-COMPONENT_TARGETS += $(HARDWARE_M201)
-COMPONENT_TARGETS += $(HARDWARE_MXV)
-COMPONENT_TARGETS += $(HARDWARE_P201)
-COMPONENT_TARGETS += $(HARDWARE_NEXBOX_A95X)
-COMPONENT_TARGETS += $(HARDWARE_ODROID_C2)
-COMPONENT_TARGETS += $(HARDWARE_P212)
-COMPONENT_TARGETS += $(HARDWARE_KHADAS_VIM)
-COMPONENT_TARGETS += $(HARDWARE_Q201)
-COMPONENT_TARGETS += $(HARDWARE_ENYBOX_X2)
-COMPONENT_TARGETS += $(HARDWARE_KHADAS_VIM2)
-COMPONENT_TARGETS += $(HARDWARE_NIT6Q)
-COMPONENT_TARGETS += $(HARDWARE_OKMX6DL_C)
-COMPONENT_TARGETS += $(HARDWARE_OKMX6Q_C)
-COMPONENT_TARGETS += $(HARDWARE_BONE_BLACK)
-COMPONENT_TARGETS += $(HARDWARE_OMAP5UEVM)
-COMPONENT_TARGETS += $(HARDWARE_DRA7XXEVM)
-COMPONENT_TARGETS += $(HARDWARE_CI20)
-COMPONENT_TARGETS += $(HARDWARE_BAIKAL_T1)
-COMPONENT_TARGETS += $(HARDWARE_BAIKAL_M1)
-COMPONENT_TARGETS += $(HARDWARE_S824L)
-COMPONENT_TARGETS += $(HARDWARE_VESNIN)
-COMPONENT_TARGETS += $(HARDWARE_S824L_LSB)
-COMPONENT_TARGETS += $(HARDWARE_VESNIN_LSB)
-COMPONENT_TARGETS += $(HARDWARE_TL2WK2)
-COMPONENT_TARGETS += $(HARDWARE_TL2SV2)
-COMPONENT_TARGETS += $(HARDWARE_TL2WK2_LSB)
-COMPONENT_TARGETS += $(HARDWARE_TL2SV2_LSB)
-COMPONENT_TARGETS += $(HARDWARE_VISIONFIVE2)
-COMPONENT_TARGETS += $(HARDWARE_SIFIVE_U740)
-
-
-NEED_ABS_PATH = true
-COMPONENT_IS_3PP = true
-
-
-include ../../../build-system/constants.mk
-
-
-SOURCE_REQUIRES = sources/packages/n/openssl
-
-ifeq ($(__USE_BUILT_GCC_LIBS__),yes)
-REQUIRES = dev/gcc/14.2.0
-else
-REQUIRES = libs/zlib/1.3.1
-REQUIRES += libs/gmp/6.3.0
-endif
-
-# ======= __END_OF_REQUIRES__ =======
-
-
-version = 3.4.0
-tar_xz_archive = $(SRC_PACKAGE_PATH)/packages/n/openssl/openssl-$(version).tar.xz
-SRC_ARCHIVE = $(tar_xz_archive)
-SRC_DIR = $(TARGET_BUILD_DIR)/openssl-$(version)
-src_dir_name = openssl-$(version)
-src_done = $(TARGET_BUILD_DIR)/.source_done
-
-PATCHES = PATCHES
-
-build_target = $(TARGET_BUILD_DIR)/.build_done
-install_target = $(TARGET_BUILD_DIR)/.install_done
-
-cron_script = $(CURDIR)/cron/certwatch
-
-
-####### Targets
-
-PKG_GROUP = net
-
-#
-# *PKG_NAME & *PKG_VERSION shouldn't be a reference to value.
-#
-OPENSSL_PKG_NAME = openssl
-OPENSSL_PKG_VERSION = 3.4.0
-OPENSSL_PKG_ARCH = $(PKGARCH)
-OPENSSL_PKG_DISTRO_NAME = $(DISTRO_NAME)
-OPENSSL_PKG_DISTRO_VERSION = $(DISTRO_VERSION)
-OPENSSL_PKG_GROUP = $(PKG_GROUP)
-### |---handy-ruler-------------------------------|
-OPENSSL_PKG_SHORT_DESCRIPTION = Secure Sockets Layer toolkit
-OPENSSL_PKG_URL = $(BUG_URL)
-OPENSSL_PKG_LICENSE = Apache-v2.0
-OPENSSL_PKG_DESCRIPTION_FILE = $(TARGET_BUILD_DIR)/$(OPENSSL_PKG_NAME)-pkg-description
-OPENSSL_PKG_DESCRIPTION_FILE_IN = $(OPENSSL_PKG_NAME)-pkg-description.in
-OPENSSL_PKG_INSTALL_SCRIPT = $(OPENSSL_PKG_NAME)-pkg-install.sh
-
-OPENSSL_PKG = $(CURDIR)/$(TARGET_BUILD_DIR)/$(OPENSSL_PKG_NAME)-package
-
-pkg_basename = $(OPENSSL_PKG_NAME)-$(OPENSSL_PKG_VERSION)-$(OPENSSL_PKG_ARCH)-$(OPENSSL_PKG_DISTRO_NAME)-$(OPENSSL_PKG_DISTRO_VERSION)
-
-pkg_archive = $(TARGET_BUILD_DIR)/$(PKG_GROUP)/$(pkg_basename).$(pkg_arch_suffix)
-pkg_certificate = $(call cert-name,$(pkg_archive))
-pkg_signature = $(call sign-name,$(pkg_archive))
-pkg_description = $(call desc-name,$(pkg_archive))
-products = $(call pkg-files,$(pkg_archive))
-
-BUILD_TARGETS = $(build_target)
-BUILD_TARGETS += $(install_target)
-
-PRODUCT_TARGETS = $(products)
-
-ROOTFS_TARGETS = $(pkg_archive)
-
-
-include ../../../build-system/core.mk
-
-
-env_sysroot = DESTDIR=$(OPENSSL_PKG)
-
-
-# These are the known patent issues with OpenSSL:
-# name | expires
-# -------+------------------------------------
-# MDC-2: | 4,908,861 2007-03-13, not included
-# IDEA: | 5,214,703 2010-05-25, not included
-#
-# Although all of the above are expired, it's still
-# probably not a good idea to include them as there
-# are better algorithms to use.
-#
-extra_configure_switches = --libdir=lib$(LIBSUFFIX)
-extra_configure_switches += --openssldir=/etc/ssl
-extra_configure_switches += no-mdc2
-extra_configure_switches += no-ec2m
-extra_configure_switches += no-sm2
-extra_configure_switches += no-sm4
-extra_configure_switches += no-sse2
-extra_configure_switches += no-weak-ssl-ciphers
-extra_configure_switches += enable-camellia
-extra_configure_switches += enable-seed
-extra_configure_switches += enable-rfc3779
-extra_configure_switches += enable-cms
-extra_configure_switches += enable-md2
-extra_configure_switches += enable-rc5
-extra_configure_switches += enable-ssl3
-extra_configure_switches += enable-ssl3-method
-extra_configure_switches += zlib
-extra_configure_switches += shared
-
-
-ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_I586_GLIBC)),)
-arch = x86
-bits =
-endif
-ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_I686_GLIBC)),)
-arch = x86
-bits =
-endif
-ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_X86_64_GLIBC)),)
-arch = x86_64
-bits =
-endif
-ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_A1X_GLIBC) $(TOOLCHAIN_A2X_GLIBC) \
- $(TOOLCHAIN_H3_GLIBC) $(TOOLCHAIN_RK328X_GLIBC) \
- $(TOOLCHAIN_S8XX_GLIBC) $(TOOLCHAIN_IMX6_GLIBC) \
- $(TOOLCHAIN_AM335X_GLIBC) $(TOOLCHAIN_OMAP543X_GLIBC)),)
-arch = generic32
-bits =
-endif
-ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_H5_GLIBC) $(TOOLCHAIN_RK33XX_GLIBC) \
- $(TOOLCHAIN_RK339X_GLIBC) $(TOOLCHAIN_RK358X_GLIBC) \
- $(TOOLCHAIN_S9XX_GLIBC) \
- $(TOOLCHAIN_A311X_GLIBC) $(TOOLCHAIN_M1000_GLIBC)),)
-arch = aarch64
-bits =
-endif
-ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_JZ47XX_GLIBC) $(TOOLCHAIN_P5600_GLIBC)),)
-arch = mips32
-bits =
-endif
-ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_POWER8_GLIBC) $(TOOLCHAIN_POWER9_GLIBC)),)
-arch = ppc64
-bits =
-endif
-ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_POWER8LE_GLIBC) $(TOOLCHAIN_POWER9LE_GLIBC)),)
-arch = ppc64le
-bits =
-endif
-ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_RISCV64_GLIBC)),)
-arch = riscv64
-bits = 64
-endif
-
-
-LDFLAGS += -Wl,-rpath,/lib$(LIBSUFFIX):/usr/lib$(LIBSUFFIX)
-
-
-####### Dependencies
-
-$(src_done): $(SRC_ARCHIVE) $(PATCHES_DEP)
- $(UNPACK_SRC_ARCHIVE)
- $(APPLY_PATCHES)
- @( cd $(SRC_DIR) ; \
- find . -name "*.pod" -exec sed -i "s/^\=item \([0-9]\)\(\ \|\.\|$$\)/\=item C<\1>/g" {} \; \
- )
- @touch $@
-
-#$(BUILD_ENVIRONMENT) $(openssl_environment)
-
-$(build_target): $(src_done)
- @cd $(SRC_DIR) && \
- ./Configure linux$(bits)-$(arch) --cross-compile-prefix=$(CROSS_PREFIX) \
- --prefix=/usr \
- $(extra_configure_switches) \
- $(CFLAGS)
- @cd $(SRC_DIR) && $(MAKE) $(BUILD_ENVIRONMENT)
- @touch $@
-
-$(install_target): $(build_target)
- @mkdir -p $(OPENSSL_PKG)
- @cd $(SRC_DIR) && $(BUILD_ENVIRONMENT) $(MAKE) -j1 MANDIR=/usr/share/man install $(env_sysroot)
-ifneq ($(__ENABLE_STATIC__),yes)
- @rm -f $(OPENSSL_PKG)/usr/lib$(LIBSUFFIX)/*.a
-endif
- @mv $(OPENSSL_PKG)/etc/ssl/openssl.cnf $(OPENSSL_PKG)/etc/ssl/openssl.cnf.new
- @rm $(OPENSSL_PKG)/etc/ssl/openssl.cnf.dist
- @rm $(OPENSSL_PKG)/etc/ssl/ct_log_list.cnf.dist
- # ======= Add a cron script to warn root if a certificate is going to expire soon:
- @mkdir -p $(OPENSSL_PKG)/etc/cron.daily
- @cat $(cron_script) > $(OPENSSL_PKG)/etc/cron.daily/certwatch.new
- @chmod 755 $(OPENSSL_PKG)/etc/cron.daily/certwatch.new
- @mkdir -p $(OPENSSL_PKG)/lib$(LIBSUFFIX)
- @( cd $(OPENSSL_PKG)/usr/lib$(LIBSUFFIX) ; \
- chmod +w lib*.so.? ; \
- mv lib*.so.? ../../lib$(LIBSUFFIX) ; \
- ln -sf ../../lib$(LIBSUFFIX)/lib*.so.? . ; \
- cp -a lib*.so ../../lib$(LIBSUFFIX) ; \
- )
- @sed -e 's,/include $$,/include,' -i $(OPENSSL_PKG)/usr/lib$(LIBSUFFIX)/pkgconfig/*.pc
- # ======= Install Documentation =======
- @if [ -d $(OPENSSL_PKG)/usr/share/man ]; then \
- ( cd $(OPENSSL_PKG)/usr/share/man ; \
- for manpagedir in `find . -type d -name "man*"` ; do \
- ( cd $$manpagedir ; \
- for eachpage in `find . -type l -maxdepth 1` ; do \
- ln -s `readlink $$eachpage`.gz $$eachpage.gz ; \
- rm $$eachpage ; \
- done ; \
- gzip -9 *.?ossl ; \
- ) \
- done \
- ) \
- fi
- @rm -rf $(OPENSSL_PKG)/usr/share/doc
- @mkdir -p $(OPENSSL_PKG)/usr/doc/$(src_dir_name)
- @cp -a $(SRC_DIR)/AUTHORS* $(SRC_DIR)/LICENSE* \
- $(OPENSSL_PKG)/usr/doc/$(src_dir_name)
- @mkdir -p $(OPENSSL_PKG)/usr/share/doc/$(src_dir_name)
- @( cd $(SRC_DIR) ; \
- cp -a ACKNOWLEDGEMENTS* AUTHORS* CONTRIBUTING* INSTALL* LICENSE* NEWS* \
- NOTES* README* doc/{HOWTO,designs,images} doc/*.txt \
- $(OPENSSL_PKG)/usr/share/doc/$(src_dir_name) ; \
- )
- @( cd $(SRC_DIR) ; \
- if [ -r CHANGES.md ]; then \
- DOCSDIR=`echo $(OPENSSL_PKG)/usr/share/doc/$(src_dir_name)` ; \
- cat CHANGES.md | head -n 1000 > $$DOCSDIR/CHANGES.md ; \
- touch -r CHANGES.md $$DOCSDIR/CHANGES.md ; \
- fi \
- )
- # ======= Install the same to $(TARGET_DEST_DIR) =======
- $(call install-into-devenv, $(OPENSSL_PKG))
- # ======= Tune pkg-config *.pc search path to the target destination for development =======
- @( cd $(TARGET_DEST_DIR)/usr/lib$(LIBSUFFIX)/pkgconfig ; \
- sed -i "s,/usr,$(TARGET_DEST_DIR)/usr,g" libcrypto.pc libssl.pc openssl.pc \
- )
- # ======= Strip binaries =======
- @( cd $(OPENSSL_PKG) ; \
- find . | xargs file | grep "executable" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
- find . | xargs file | grep "shared object" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
- )
-ifeq ($(__ENABLE_STATIC__),yes)
- @( cd $(OPENSSL_PKG) ; \
- find . | xargs file | grep "current ar archive" | cut -f 1 -d : | xargs $(STRIP) -g 2> /dev/null ; \
- )
-endif
- @touch $@
-
-$(OPENSSL_PKG_DESCRIPTION_FILE): $(OPENSSL_PKG_DESCRIPTION_FILE_IN)
- @cat $< | $(SED) -e "s/@VERSION@/$(version)/g" > $@
-
-$(pkg_certificate) : $(pkg_archive) ;
-$(pkg_signature) : $(pkg_archive) ;
-$(pkg_description) : $(pkg_archive) ;
-
-$(pkg_archive): $(install_target) $(OPENSSL_PKG_DESCRIPTION_FILE) $(OPENSSL_PKG_INSTALL_SCRIPT)
- @cp $(OPENSSL_PKG_DESCRIPTION_FILE) $(OPENSSL_PKG)/.DESCRIPTION
- @cp $(OPENSSL_PKG_INSTALL_SCRIPT) $(OPENSSL_PKG)/.INSTALL
- @$(BUILD_PKG_REQUIRES) $(OPENSSL_PKG)/.REQUIRES
- @echo "pkgname=$(OPENSSL_PKG_NAME)" > $(OPENSSL_PKG)/.PKGINFO ; \
- echo "pkgver=$(OPENSSL_PKG_VERSION)" >> $(OPENSSL_PKG)/.PKGINFO ; \
- echo "arch=$(OPENSSL_PKG_ARCH)" >> $(OPENSSL_PKG)/.PKGINFO ; \
- echo "distroname=$(OPENSSL_PKG_DISTRO_NAME)" >> $(OPENSSL_PKG)/.PKGINFO ; \
- echo "distrover=$(OPENSSL_PKG_DISTRO_VERSION)" >> $(OPENSSL_PKG)/.PKGINFO ; \
- echo "group=$(OPENSSL_PKG_GROUP)" >> $(OPENSSL_PKG)/.PKGINFO ; \
- echo "short_description=\"$(OPENSSL_PKG_SHORT_DESCRIPTION)\"" >> $(OPENSSL_PKG)/.PKGINFO ; \
- echo "url=$(OPENSSL_PKG_URL)" >> $(OPENSSL_PKG)/.PKGINFO ; \
- echo "license=$(OPENSSL_PKG_LICENSE)" >> $(OPENSSL_PKG)/.PKGINFO
- @$(PSEUDO) sh -c "cd $(OPENSSL_PKG) && \
- chown -R root:root . && \
- $(MAKE_PACKAGE) -J --linkadd=yes $(GNUPG_OPTIONS) -m -d .. ."
Index: net/openssl/3.4.0
===================================================================
--- net/openssl/3.4.0 (revision 441)
+++ net/openssl/3.4.0 (nonexistent)
Property changes on: net/openssl/3.4.0
___________________________________________________________________
Deleted: svn:ignore
## -1,74 +0,0 ##
-
-# install dir
-dist
-
-# Target build dirs
-.a1x-newlib
-.a2x-newlib
-.at91sam7s-newlib
-
-.build-machine
-
-.a1x-glibc
-.a2x-glibc
-.h3-glibc
-.h5-glibc
-.i586-glibc
-.i686-glibc
-.imx6-glibc
-.jz47xx-glibc
-.makefile
-.am335x-glibc
-.omap543x-glibc
-.p5600-glibc
-.power8-glibc
-.power8le-glibc
-.power9-glibc
-.power9le-glibc
-.m1000-glibc
-.riscv64-glibc
-.rk328x-glibc
-.rk33xx-glibc
-.rk339x-glibc
-.rk358x-glibc
-.s8xx-glibc
-.s9xx-glibc
-.x86_64-glibc
-
-# Hidden files (each file)
-.makefile
-.dist
-.rootfs
-
-# src & hw requires
-.src_requires
-.src_requires_depend
-.requires
-.requires_depend
-
-# Tarballs
-*.gz
-*.bz2
-*.lz
-*.xz
-*.tgz
-*.txz
-
-# Signatures
-*.asc
-*.sig
-*.sign
-*.sha1sum
-
-# Patches
-*.patch
-
-# Descriptions
-*.dsc
-*.txt
-
-# Default linux config files
-*.defconfig
-
-# backup copies
-*~
Index: net/openssl/3.4.0-ppc32/openssl-x32-pkg-install.sh
===================================================================
--- net/openssl/3.4.0-ppc32/openssl-x32-pkg-install.sh (revision 441)
+++ net/openssl/3.4.0-ppc32/openssl-x32-pkg-install.sh (nonexistent)
@@ -1,39 +0,0 @@
-#!/bin/sh
-
-# arg 1: the new package version
-pre_install() {
- /bin/true
-}
-
-# arg 1: the new package version
-post_install() {
- /bin/true
-}
-
-# arg 1: the new package version
-# arg 2: the old package version
-pre_update() {
- /bin/true
-}
-
-# arg 1: the new package version
-# arg 2: the old package version
-post_update() {
- post_install
-}
-
-# arg 1: the old package version
-pre_remove() {
- /bin/true
-}
-
-# arg 1: the old package version
-post_remove() {
- /bin/true
-}
-
-
-operation=$1
-shift
-
-$operation $*
Property changes on: net/openssl/3.4.0-ppc32/openssl-x32-pkg-install.sh
___________________________________________________________________
Deleted: svn:executable
## -1 +0,0 ##
-*
\ No newline at end of property
Index: net/openssl/3.4.0-ppc32/PATCHES
===================================================================
--- net/openssl/3.4.0-ppc32/PATCHES (revision 441)
+++ net/openssl/3.4.0-ppc32/PATCHES (nonexistent)
@@ -1,2 +0,0 @@
-
-../../../sources/packages/n/openssl/patches/openssl-3.4.0-legacy-provider.patch -p0
Index: net/openssl/3.4.0-ppc32/openssl-x32-pkg-description.in
===================================================================
--- net/openssl/3.4.0-ppc32/openssl-x32-pkg-description.in (revision 441)
+++ net/openssl/3.4.0-ppc32/openssl-x32-pkg-description.in (nonexistent)
@@ -1,19 +0,0 @@
-# HOW TO EDIT THIS FILE:
-# The "handy ruler" below makes it easier to edit a package description. Line
-# up the first '|' above the ':' following the base package name, and the '|'
-# on the right side marks the last column you can put a character in. You must
-# make exactly 11 lines for the formatting to be correct. It's also
-# customary to leave one space after the ':'.
-
- |-----handy-ruler------------------------------------------------------|
-openssl-x32: openssl-x32 @VERSION@ (Secure Sockets Layer toolkit)
-openssl-x32:
-openssl-x32: The OpenSSL certificate management tool and the shared libraries
-openssl-x32: that provide various encryption and decryption algorithms and
-openssl-x32: protocols.
-openssl-x32: This product includes software developed by the OpenSSL Project for
-openssl-x32: use in the OpenSSL Toolkit (http://www.openssl.org). This product
-openssl-x32: includes cryptographic software written by Eric Young
-openssl-x32: (eay@cryptsoft.com). This product includes software written by Tim
-openssl-x32: Hudson (tjh@cryptsoft.com).
-openssl-x32:
Index: net/openssl/3.4.0-ppc32/Makefile
===================================================================
--- net/openssl/3.4.0-ppc32/Makefile (revision 441)
+++ net/openssl/3.4.0-ppc32/Makefile (nonexistent)
@@ -1,187 +0,0 @@
-
-COMPONENT_TARGETS = $(HARDWARE_S824L)
-COMPONENT_TARGETS += $(HARDWARE_VESNIN)
-COMPONENT_TARGETS += $(HARDWARE_TL2WK2)
-COMPONENT_TARGETS += $(HARDWARE_TL2SV2)
-
-NEED_ABS_PATH = true
-COMPONENT_IS_3PP = true
-
-CREATE_PPC32_PACKAGE = true
-
-
-include ../../../build-system/constants.mk
-
-
-SOURCE_REQUIRES = sources/packages/n/openssl
-
-REQUIRES = net/openssl/3.4.0
-REQUIRES += libs/zlib/1.3.1-ppc32
-REQUIRES += libs/gmp/6.3.0-ppc32
-
-# ======= __END_OF_REQUIRES__ =======
-
-
-version = 3.4.0
-tar_xz_archive = $(SRC_PACKAGE_PATH)/packages/n/openssl/openssl-$(version).tar.xz
-SRC_ARCHIVE = $(tar_xz_archive)
-SRC_DIR = $(TARGET_BUILD_DIR)/openssl-$(version)
-src_dir_name = openssl-$(version)
-src_done = $(TARGET_BUILD_DIR)/.source_done
-
-PATCHES = PATCHES
-
-build_target = $(TARGET_BUILD_DIR)/.build_done
-install_target = $(TARGET_BUILD_DIR)/.install_done
-
-
-####### Targets
-
-PKG_GROUP = net
-#
-# *PKG_NAME & *PKG_VERSION shouldn't be a reference to value.
-#
-OPENSSL32_PKG_NAME = openssl-x32
-OPENSSL32_PKG_VERSION = 3.4.0
-OPENSSL32_PKG_ARCH = $(PKGARCH)
-OPENSSL32_PKG_DISTRO_NAME = $(DISTRO_NAME)
-OPENSSL32_PKG_DISTRO_VERSION = $(DISTRO_VERSION)
-OPENSSL32_PKG_GROUP = $(PKG_GROUP)
-### |---handy-ruler-------------------------------|
-OPENSSL32_PKG_SHORT_DESCRIPTION = Secure Sockets Layer toolkit
-OPENSSL32_PKG_URL = $(BUG_URL)
-OPENSSL32_PKG_LICENSE = Apache-v2.0
-OPENSSL32_PKG_DESCRIPTION_FILE = $(TARGET_BUILD_DIR)/$(OPENSSL32_PKG_NAME)-pkg-description
-OPENSSL32_PKG_DESCRIPTION_FILE_IN = $(OPENSSL32_PKG_NAME)-pkg-description.in
-OPENSSL32_PKG_INSTALL_SCRIPT = $(OPENSSL32_PKG_NAME)-pkg-install.sh
-
-OPENSSL32_PKG = $(CURDIR)/$(TARGET_BUILD_DIR)/$(OPENSSL32_PKG_NAME)-package
-
-pkg_basename = $(OPENSSL32_PKG_NAME)-$(OPENSSL32_PKG_VERSION)-$(OPENSSL32_PKG_ARCH)-$(OPENSSL32_PKG_DISTRO_NAME)-$(OPENSSL32_PKG_DISTRO_VERSION)
-
-pkg_archive = $(TARGET_BUILD_DIR)/$(PKG_GROUP)/$(pkg_basename).$(pkg_arch_suffix)
-pkg_certificate = $(call cert-name,$(pkg_archive))
-pkg_signature = $(call sign-name,$(pkg_archive))
-pkg_description = $(call desc-name,$(pkg_archive))
-products = $(call pkg-files,$(pkg_archive))
-
-BUILD_TARGETS = $(build_target)
-BUILD_TARGETS += $(install_target)
-
-PRODUCT_TARGETS = $(products)
-
-ROOTFS_TARGETS = $(pkg_archive)
-
-
-include ../../../build-system/core.mk
-
-
-env_sysroot = DESTDIR=$(OPENSSL32_PKG)
-
-
-extra_configure_switches = --libdir=lib$(MULTILIB_PPC32_SUFFIX)
-extra_configure_switches += --openssldir=/etc/ssl
-extra_configure_switches += no-mdc2
-extra_configure_switches += no-ec2m
-extra_configure_switches += no-sm2
-extra_configure_switches += no-sm4
-extra_configure_switches += no-sse2
-extra_configure_switches += no-weak-ssl-ciphers
-extra_configure_switches += enable-camellia
-extra_configure_switches += enable-seed
-extra_configure_switches += enable-rfc3779
-extra_configure_switches += enable-cms
-extra_configure_switches += enable-md2
-extra_configure_switches += enable-rc5
-extra_configure_switches += enable-ssl3
-extra_configure_switches += enable-ssl3-method
-extra_configure_switches += zlib
-extra_configure_switches += shared
-
-openssl_environment = KERNEL_BITS=32 MACHINE=ppc64 SYSTEM=Linux
-
-LDFLAGS += -Wl,-rpath=/lib$(MULTILIB_PPC32_SUFFIX):/usr/lib$(MULTILIB_PPC32_SUFFIX)
-
-
-####### Dependencies
-
-$(src_done): $(SRC_ARCHIVE) $(PATCHES_DEP)
- $(UNPACK_SRC_ARCHIVE)
- $(APPLY_PATCHES)
- @( cd $(SRC_DIR) ; \
- find . -name "*.pod" -exec sed -i "s/^\=item \([0-9]\)\(\ \|\.\|$$\)/\=item C<\1>/g" {} \; \
- )
- @touch $@
-
-$(build_target): $(src_done)
- @cd $(SRC_DIR) && \
- ./Configure linux-ppc --cross-compile-prefix=$(CROSS_PREFIX) \
- --prefix=/usr \
- $(extra_configure_switches) \
- $(CFLAGS)
- @cd $(SRC_DIR) && $(MAKE) $(BUILD_ENVIRONMENT)
- @touch $@
-
-$(install_target): $(build_target)
- @mkdir -p $(OPENSSL32_PKG)
- @cd $(SRC_DIR) && $(BUILD_ENVIRONMENT) $(MAKE) -j1 MANDIR=/usr/share/man install $(env_sysroot)
-ifneq ($(__ENABLE_STATIC__),yes)
- @rm -f $(OPENSSL32_PKG)/usr/lib$(MULTILIB_PPC32_SUFFIX)/*.a
-endif
- @mkdir -p $(OPENSSL32_PKG)/usr/bin/32
- @( cd $(OPENSSL32_PKG)/usr/bin ; \
- rm -f c_rehash ; \
- find . -type f | xargs mv -t 32 ; \
- )
- @mkdir -p $(OPENSSL32_PKG)/lib$(MULTILIB_PPC32_SUFFIX)
- @( cd $(OPENSSL32_PKG)/usr/lib$(MULTILIB_PPC32_SUFFIX) ; \
- chmod +w lib*.so.? ; \
- mv lib*.so.? ../../lib$(MULTILIB_PPC32_SUFFIX) ; \
- ln -sf ../../lib$(MULTILIB_PPC32_SUFFIX)/lib*.so.? . ; \
- cp -a lib*.so ../../lib$(MULTILIB_PPC32_SUFFIX) ; \
- )
- @sed -e 's,/include $$,/include,' -i $(OPENSSL32_PKG)/usr/lib$(MULTILIB_PPC32_SUFFIX)/pkgconfig/*.pc
- @rm -rf $(OPENSSL32_PKG)/etc
- @rm -rf $(OPENSSL32_PKG)/usr/include
- @rm -rf $(OPENSSL32_PKG)/usr/share
- # ======= Install the same to $(TARGET_DEST_DIR) =======
- $(call install-into-devenv, $(OPENSSL32_PKG))
- # ======= tune pkg-config *.pc search path to the target destination for development =======
- @( cd $(TARGET_DEST_DIR)/usr/lib$(MULTILIB_PPC32_SUFFIX)/pkgconfig ; \
- sed -i "s,/usr,$(TARGET_DEST_DIR)/usr,g" libcrypto.pc libssl.pc openssl.pc \
- )
- # ======= Strip binaries =======
- @( cd $(OPENSSL32_PKG) ; \
- find . | xargs file | grep "executable" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
- find . | xargs file | grep "shared object" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
- )
-ifeq ($(__ENABLE_STATIC__),yes)
- @( cd $(OPENSSL32_PKG) ; \
- find . | xargs file | grep "current ar archive" | cut -f 1 -d : | xargs $(STRIP) -g 2> /dev/null ; \
- )
-endif
- @touch $@
-
-$(OPENSSL32_PKG_DESCRIPTION_FILE): $(OPENSSL32_PKG_DESCRIPTION_FILE_IN)
- @cat $< | $(SED) -e "s/@VERSION@/$(version)/g" > $@
-
-$(pkg_certificate) : $(pkg_archive) ;
-$(pkg_signature) : $(pkg_archive) ;
-$(pkg_description) : $(pkg_archive) ;
-
-$(pkg_archive): $(install_target) $(OPENSSL32_PKG_DESCRIPTION_FILE) $(OPENSSL32_PKG_INSTALL_SCRIPT)
- @cp $(OPENSSL32_PKG_DESCRIPTION_FILE) $(OPENSSL32_PKG)/.DESCRIPTION
- @cp $(OPENSSL32_PKG_INSTALL_SCRIPT) $(OPENSSL32_PKG)/.INSTALL
- @$(BUILD_PKG_REQUIRES) $(OPENSSL32_PKG)/.REQUIRES
- @echo "pkgname=$(OPENSSL32_PKG_NAME)" > $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "pkgver=$(OPENSSL32_PKG_VERSION)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "arch=$(OPENSSL32_PKG_ARCH)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "distroname=$(OPENSSL32_PKG_DISTRO_NAME)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "distrover=$(OPENSSL32_PKG_DISTRO_VERSION)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "group=$(OPENSSL32_PKG_GROUP)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "short_description=\"$(OPENSSL32_PKG_SHORT_DESCRIPTION)\"" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "url=$(OPENSSL32_PKG_URL)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
- echo "license=$(OPENSSL32_PKG_LICENSE)" >> $(OPENSSL32_PKG)/.PKGINFO
- @$(PSEUDO) sh -c "cd $(OPENSSL32_PKG) && \
- chown -R root:root . && \
- $(MAKE_PACKAGE) -J --linkadd=yes $(GNUPG_OPTIONS) -m -d .. ."
Index: net/openssl/3.4.0-ppc32
===================================================================
--- net/openssl/3.4.0-ppc32 (revision 441)
+++ net/openssl/3.4.0-ppc32 (nonexistent)
Property changes on: net/openssl/3.4.0-ppc32
___________________________________________________________________
Deleted: svn:ignore
## -1,74 +0,0 ##
-
-# install dir
-dist
-
-# Target build dirs
-.a1x-newlib
-.a2x-newlib
-.at91sam7s-newlib
-
-.build-machine
-
-.a1x-glibc
-.a2x-glibc
-.h3-glibc
-.h5-glibc
-.i586-glibc
-.i686-glibc
-.imx6-glibc
-.jz47xx-glibc
-.makefile
-.am335x-glibc
-.omap543x-glibc
-.p5600-glibc
-.power8-glibc
-.power8le-glibc
-.power9-glibc
-.power9le-glibc
-.m1000-glibc
-.riscv64-glibc
-.rk328x-glibc
-.rk33xx-glibc
-.rk339x-glibc
-.rk358x-glibc
-.s8xx-glibc
-.s9xx-glibc
-.x86_64-glibc
-
-# Hidden files (each file)
-.makefile
-.dist
-.rootfs
-
-# src & hw requires
-.src_requires
-.src_requires_depend
-.requires
-.requires_depend
-
-# Tarballs
-*.gz
-*.bz2
-*.lz
-*.xz
-*.tgz
-*.txz
-
-# Signatures
-*.asc
-*.sig
-*.sign
-*.sha1sum
-
-# Patches
-*.patch
-
-# Descriptions
-*.dsc
-*.txt
-
-# Default linux config files
-*.defconfig
-
-# backup copies
-*~
Index: net/openssl/3.4.1/Makefile
===================================================================
--- net/openssl/3.4.1/Makefile (nonexistent)
+++ net/openssl/3.4.1/Makefile (revision 442)
@@ -0,0 +1,323 @@
+
+COMPONENT_TARGETS = $(HARDWARE_INTEL_PC32)
+COMPONENT_TARGETS += $(HARDWARE_INTEL_PC64)
+COMPONENT_TARGETS += $(HARDWARE_EBOX_3350DX2)
+COMPONENT_TARGETS += $(HARDWARE_CB1X)
+COMPONENT_TARGETS += $(HARDWARE_CB2X)
+COMPONENT_TARGETS += $(HARDWARE_CB3X)
+COMPONENT_TARGETS += $(HARDWARE_ORANGE_PP2E)
+COMPONENT_TARGETS += $(HARDWARE_NANOPI_NEO)
+COMPONENT_TARGETS += $(HARDWARE_ORANGE_PP)
+COMPONENT_TARGETS += $(HARDWARE_ORANGE_PL2)
+COMPONENT_TARGETS += $(HARDWARE_ORANGE_PI5)
+COMPONENT_TARGETS += $(HARDWARE_ORANGE_PI5B)
+COMPONENT_TARGETS += $(HARDWARE_ORANGE_PI5P)
+COMPONENT_TARGETS += $(HARDWARE_ROCK_5B)
+COMPONENT_TARGETS += $(HARDWARE_WECHIP_TX6)
+COMPONENT_TARGETS += $(HARDWARE_REPKA_PI3)
+COMPONENT_TARGETS += $(HARDWARE_FFRK3288)
+COMPONENT_TARGETS += $(HARDWARE_POIN2)
+COMPONENT_TARGETS += $(HARDWARE_RK3328_CC)
+COMPONENT_TARGETS += $(HARDWARE_KHADAS_EDGE)
+COMPONENT_TARGETS += $(HARDWARE_LEEZ_P710)
+COMPONENT_TARGETS += $(HARDWARE_M201)
+COMPONENT_TARGETS += $(HARDWARE_MXV)
+COMPONENT_TARGETS += $(HARDWARE_P201)
+COMPONENT_TARGETS += $(HARDWARE_NEXBOX_A95X)
+COMPONENT_TARGETS += $(HARDWARE_ODROID_C2)
+COMPONENT_TARGETS += $(HARDWARE_P212)
+COMPONENT_TARGETS += $(HARDWARE_KHADAS_VIM)
+COMPONENT_TARGETS += $(HARDWARE_Q201)
+COMPONENT_TARGETS += $(HARDWARE_ENYBOX_X2)
+COMPONENT_TARGETS += $(HARDWARE_KHADAS_VIM2)
+COMPONENT_TARGETS += $(HARDWARE_NIT6Q)
+COMPONENT_TARGETS += $(HARDWARE_OKMX6DL_C)
+COMPONENT_TARGETS += $(HARDWARE_OKMX6Q_C)
+COMPONENT_TARGETS += $(HARDWARE_BONE_BLACK)
+COMPONENT_TARGETS += $(HARDWARE_OMAP5UEVM)
+COMPONENT_TARGETS += $(HARDWARE_DRA7XXEVM)
+COMPONENT_TARGETS += $(HARDWARE_CI20)
+COMPONENT_TARGETS += $(HARDWARE_BAIKAL_T1)
+COMPONENT_TARGETS += $(HARDWARE_BAIKAL_M1)
+COMPONENT_TARGETS += $(HARDWARE_S824L)
+COMPONENT_TARGETS += $(HARDWARE_VESNIN)
+COMPONENT_TARGETS += $(HARDWARE_S824L_LSB)
+COMPONENT_TARGETS += $(HARDWARE_VESNIN_LSB)
+COMPONENT_TARGETS += $(HARDWARE_TL2WK2)
+COMPONENT_TARGETS += $(HARDWARE_TL2SV2)
+COMPONENT_TARGETS += $(HARDWARE_TL2WK2_LSB)
+COMPONENT_TARGETS += $(HARDWARE_TL2SV2_LSB)
+COMPONENT_TARGETS += $(HARDWARE_VISIONFIVE2)
+COMPONENT_TARGETS += $(HARDWARE_SIFIVE_U740)
+
+
+NEED_ABS_PATH = true
+COMPONENT_IS_3PP = true
+
+
+include ../../../build-system/constants.mk
+
+
+SOURCE_REQUIRES = sources/packages/n/openssl
+
+ifeq ($(__USE_BUILT_GCC_LIBS__),yes)
+REQUIRES = dev/gcc/14.2.0
+else
+REQUIRES = libs/zlib/1.3.1
+REQUIRES += libs/gmp/6.3.0
+endif
+
+# ======= __END_OF_REQUIRES__ =======
+
+
+version = 3.4.1
+tar_xz_archive = $(SRC_PACKAGE_PATH)/packages/n/openssl/openssl-$(version).tar.xz
+SRC_ARCHIVE = $(tar_xz_archive)
+SRC_DIR = $(TARGET_BUILD_DIR)/openssl-$(version)
+src_dir_name = openssl-$(version)
+src_done = $(TARGET_BUILD_DIR)/.source_done
+
+PATCHES = PATCHES
+
+build_target = $(TARGET_BUILD_DIR)/.build_done
+install_target = $(TARGET_BUILD_DIR)/.install_done
+
+cron_script = $(CURDIR)/cron/certwatch
+
+
+####### Targets
+
+PKG_GROUP = net
+
+#
+# *PKG_NAME & *PKG_VERSION shouldn't be a reference to value.
+#
+OPENSSL_PKG_NAME = openssl
+OPENSSL_PKG_VERSION = 3.4.1
+OPENSSL_PKG_ARCH = $(PKGARCH)
+OPENSSL_PKG_DISTRO_NAME = $(DISTRO_NAME)
+OPENSSL_PKG_DISTRO_VERSION = $(DISTRO_VERSION)
+OPENSSL_PKG_GROUP = $(PKG_GROUP)
+### |---handy-ruler-------------------------------|
+OPENSSL_PKG_SHORT_DESCRIPTION = Secure Sockets Layer toolkit
+OPENSSL_PKG_URL = $(BUG_URL)
+OPENSSL_PKG_LICENSE = Apache-v2.0
+OPENSSL_PKG_DESCRIPTION_FILE = $(TARGET_BUILD_DIR)/$(OPENSSL_PKG_NAME)-pkg-description
+OPENSSL_PKG_DESCRIPTION_FILE_IN = $(OPENSSL_PKG_NAME)-pkg-description.in
+OPENSSL_PKG_INSTALL_SCRIPT = $(OPENSSL_PKG_NAME)-pkg-install.sh
+
+OPENSSL_PKG = $(CURDIR)/$(TARGET_BUILD_DIR)/$(OPENSSL_PKG_NAME)-package
+
+pkg_basename = $(OPENSSL_PKG_NAME)-$(OPENSSL_PKG_VERSION)-$(OPENSSL_PKG_ARCH)-$(OPENSSL_PKG_DISTRO_NAME)-$(OPENSSL_PKG_DISTRO_VERSION)
+
+pkg_archive = $(TARGET_BUILD_DIR)/$(PKG_GROUP)/$(pkg_basename).$(pkg_arch_suffix)
+pkg_certificate = $(call cert-name,$(pkg_archive))
+pkg_signature = $(call sign-name,$(pkg_archive))
+pkg_description = $(call desc-name,$(pkg_archive))
+products = $(call pkg-files,$(pkg_archive))
+
+BUILD_TARGETS = $(build_target)
+BUILD_TARGETS += $(install_target)
+
+PRODUCT_TARGETS = $(products)
+
+ROOTFS_TARGETS = $(pkg_archive)
+
+
+include ../../../build-system/core.mk
+
+
+env_sysroot = DESTDIR=$(OPENSSL_PKG)
+
+
+# These are the known patent issues with OpenSSL:
+# name | expires
+# -------+------------------------------------
+# MDC-2: | 4,908,861 2007-03-13, not included
+# IDEA: | 5,214,703 2010-05-25, not included
+#
+# Although all of the above are expired, it's still
+# probably not a good idea to include them as there
+# are better algorithms to use.
+#
+extra_configure_switches = --libdir=lib$(LIBSUFFIX)
+extra_configure_switches += --openssldir=/etc/ssl
+extra_configure_switches += no-mdc2
+extra_configure_switches += no-ec2m
+extra_configure_switches += no-sm2
+extra_configure_switches += no-sm4
+extra_configure_switches += no-sse2
+extra_configure_switches += no-weak-ssl-ciphers
+extra_configure_switches += enable-camellia
+extra_configure_switches += enable-seed
+extra_configure_switches += enable-rfc3779
+extra_configure_switches += enable-cms
+extra_configure_switches += enable-md2
+extra_configure_switches += enable-rc5
+extra_configure_switches += enable-ssl3
+extra_configure_switches += enable-ssl3-method
+extra_configure_switches += zlib
+extra_configure_switches += shared
+
+
+ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_I586_GLIBC)),)
+arch = x86
+bits =
+endif
+ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_I686_GLIBC)),)
+arch = x86
+bits =
+endif
+ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_X86_64_GLIBC)),)
+arch = x86_64
+bits =
+endif
+ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_A1X_GLIBC) $(TOOLCHAIN_A2X_GLIBC) \
+ $(TOOLCHAIN_H3_GLIBC) $(TOOLCHAIN_RK328X_GLIBC) \
+ $(TOOLCHAIN_S8XX_GLIBC) $(TOOLCHAIN_IMX6_GLIBC) \
+ $(TOOLCHAIN_AM335X_GLIBC) $(TOOLCHAIN_OMAP543X_GLIBC)),)
+arch = generic32
+bits =
+endif
+ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_H5_GLIBC) $(TOOLCHAIN_RK33XX_GLIBC) \
+ $(TOOLCHAIN_RK339X_GLIBC) $(TOOLCHAIN_RK358X_GLIBC) \
+ $(TOOLCHAIN_S9XX_GLIBC) \
+ $(TOOLCHAIN_A311X_GLIBC) $(TOOLCHAIN_M1000_GLIBC)),)
+arch = aarch64
+bits =
+endif
+ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_JZ47XX_GLIBC) $(TOOLCHAIN_P5600_GLIBC)),)
+arch = mips32
+bits =
+endif
+ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_POWER8_GLIBC) $(TOOLCHAIN_POWER9_GLIBC)),)
+arch = ppc64
+bits =
+endif
+ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_POWER8LE_GLIBC) $(TOOLCHAIN_POWER9LE_GLIBC)),)
+arch = ppc64le
+bits =
+endif
+ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_RISCV64_GLIBC)),)
+arch = riscv64
+bits = 64
+endif
+
+
+LDFLAGS += -Wl,-rpath,/lib$(LIBSUFFIX):/usr/lib$(LIBSUFFIX)
+
+
+####### Dependencies
+
+$(src_done): $(SRC_ARCHIVE) $(PATCHES_DEP)
+ $(UNPACK_SRC_ARCHIVE)
+ $(APPLY_PATCHES)
+ @( cd $(SRC_DIR) ; \
+ find . -name "*.pod" -exec sed -i "s/^\=item \([0-9]\)\(\ \|\.\|$$\)/\=item C<\1>/g" {} \; \
+ )
+ @touch $@
+
+#$(BUILD_ENVIRONMENT) $(openssl_environment)
+
+$(build_target): $(src_done)
+ @cd $(SRC_DIR) && \
+ ./Configure linux$(bits)-$(arch) --cross-compile-prefix=$(CROSS_PREFIX) \
+ --prefix=/usr \
+ $(extra_configure_switches) \
+ $(CFLAGS)
+ @cd $(SRC_DIR) && $(MAKE) $(BUILD_ENVIRONMENT)
+ @touch $@
+
+$(install_target): $(build_target)
+ @mkdir -p $(OPENSSL_PKG)
+ @cd $(SRC_DIR) && $(BUILD_ENVIRONMENT) $(MAKE) -j1 MANDIR=/usr/share/man install $(env_sysroot)
+ifneq ($(__ENABLE_STATIC__),yes)
+ @rm -f $(OPENSSL_PKG)/usr/lib$(LIBSUFFIX)/*.a
+endif
+ @mv $(OPENSSL_PKG)/etc/ssl/openssl.cnf $(OPENSSL_PKG)/etc/ssl/openssl.cnf.new
+ @rm $(OPENSSL_PKG)/etc/ssl/openssl.cnf.dist
+ @rm $(OPENSSL_PKG)/etc/ssl/ct_log_list.cnf.dist
+ # ======= Add a cron script to warn root if a certificate is going to expire soon:
+ @mkdir -p $(OPENSSL_PKG)/etc/cron.daily
+ @cat $(cron_script) > $(OPENSSL_PKG)/etc/cron.daily/certwatch.new
+ @chmod 755 $(OPENSSL_PKG)/etc/cron.daily/certwatch.new
+ @mkdir -p $(OPENSSL_PKG)/lib$(LIBSUFFIX)
+ @( cd $(OPENSSL_PKG)/usr/lib$(LIBSUFFIX) ; \
+ chmod +w lib*.so.? ; \
+ mv lib*.so.? ../../lib$(LIBSUFFIX) ; \
+ ln -sf ../../lib$(LIBSUFFIX)/lib*.so.? . ; \
+ cp -a lib*.so ../../lib$(LIBSUFFIX) ; \
+ )
+ @sed -e 's,/include $$,/include,' -i $(OPENSSL_PKG)/usr/lib$(LIBSUFFIX)/pkgconfig/*.pc
+ # ======= Install Documentation =======
+ @if [ -d $(OPENSSL_PKG)/usr/share/man ]; then \
+ ( cd $(OPENSSL_PKG)/usr/share/man ; \
+ for manpagedir in `find . -type d -name "man*"` ; do \
+ ( cd $$manpagedir ; \
+ for eachpage in `find . -type l -maxdepth 1` ; do \
+ ln -s `readlink $$eachpage`.gz $$eachpage.gz ; \
+ rm $$eachpage ; \
+ done ; \
+ gzip -9 *.?ossl ; \
+ ) \
+ done \
+ ) \
+ fi
+ @rm -rf $(OPENSSL_PKG)/usr/share/doc
+ @mkdir -p $(OPENSSL_PKG)/usr/doc/$(src_dir_name)
+ @cp -a $(SRC_DIR)/AUTHORS* $(SRC_DIR)/LICENSE* \
+ $(OPENSSL_PKG)/usr/doc/$(src_dir_name)
+ @mkdir -p $(OPENSSL_PKG)/usr/share/doc/$(src_dir_name)
+ @( cd $(SRC_DIR) ; \
+ cp -a ACKNOWLEDGEMENTS* AUTHORS* CONTRIBUTING* INSTALL* LICENSE* NEWS* \
+ NOTES* README* doc/{HOWTO,designs,images} doc/*.txt \
+ $(OPENSSL_PKG)/usr/share/doc/$(src_dir_name) ; \
+ )
+ @( cd $(SRC_DIR) ; \
+ if [ -r CHANGES.md ]; then \
+ DOCSDIR=`echo $(OPENSSL_PKG)/usr/share/doc/$(src_dir_name)` ; \
+ cat CHANGES.md | head -n 1000 > $$DOCSDIR/CHANGES.md ; \
+ touch -r CHANGES.md $$DOCSDIR/CHANGES.md ; \
+ fi \
+ )
+ # ======= Install the same to $(TARGET_DEST_DIR) =======
+ $(call install-into-devenv, $(OPENSSL_PKG))
+ # ======= Tune pkg-config *.pc search path to the target destination for development =======
+ @( cd $(TARGET_DEST_DIR)/usr/lib$(LIBSUFFIX)/pkgconfig ; \
+ sed -i "s,/usr,$(TARGET_DEST_DIR)/usr,g" libcrypto.pc libssl.pc openssl.pc \
+ )
+ # ======= Strip binaries =======
+ @( cd $(OPENSSL_PKG) ; \
+ find . | xargs file | grep "executable" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
+ find . | xargs file | grep "shared object" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
+ )
+ifeq ($(__ENABLE_STATIC__),yes)
+ @( cd $(OPENSSL_PKG) ; \
+ find . | xargs file | grep "current ar archive" | cut -f 1 -d : | xargs $(STRIP) -g 2> /dev/null ; \
+ )
+endif
+ @touch $@
+
+$(OPENSSL_PKG_DESCRIPTION_FILE): $(OPENSSL_PKG_DESCRIPTION_FILE_IN)
+ @cat $< | $(SED) -e "s/@VERSION@/$(version)/g" > $@
+
+$(pkg_certificate) : $(pkg_archive) ;
+$(pkg_signature) : $(pkg_archive) ;
+$(pkg_description) : $(pkg_archive) ;
+
+$(pkg_archive): $(install_target) $(OPENSSL_PKG_DESCRIPTION_FILE) $(OPENSSL_PKG_INSTALL_SCRIPT)
+ @cp $(OPENSSL_PKG_DESCRIPTION_FILE) $(OPENSSL_PKG)/.DESCRIPTION
+ @cp $(OPENSSL_PKG_INSTALL_SCRIPT) $(OPENSSL_PKG)/.INSTALL
+ @$(BUILD_PKG_REQUIRES) $(OPENSSL_PKG)/.REQUIRES
+ @echo "pkgname=$(OPENSSL_PKG_NAME)" > $(OPENSSL_PKG)/.PKGINFO ; \
+ echo "pkgver=$(OPENSSL_PKG_VERSION)" >> $(OPENSSL_PKG)/.PKGINFO ; \
+ echo "arch=$(OPENSSL_PKG_ARCH)" >> $(OPENSSL_PKG)/.PKGINFO ; \
+ echo "distroname=$(OPENSSL_PKG_DISTRO_NAME)" >> $(OPENSSL_PKG)/.PKGINFO ; \
+ echo "distrover=$(OPENSSL_PKG_DISTRO_VERSION)" >> $(OPENSSL_PKG)/.PKGINFO ; \
+ echo "group=$(OPENSSL_PKG_GROUP)" >> $(OPENSSL_PKG)/.PKGINFO ; \
+ echo "short_description=\"$(OPENSSL_PKG_SHORT_DESCRIPTION)\"" >> $(OPENSSL_PKG)/.PKGINFO ; \
+ echo "url=$(OPENSSL_PKG_URL)" >> $(OPENSSL_PKG)/.PKGINFO ; \
+ echo "license=$(OPENSSL_PKG_LICENSE)" >> $(OPENSSL_PKG)/.PKGINFO
+ @$(PSEUDO) sh -c "cd $(OPENSSL_PKG) && \
+ chown -R root:root . && \
+ $(MAKE_PACKAGE) -J --linkadd=yes $(GNUPG_OPTIONS) -m -d .. ."
Index: net/openssl/3.4.1/PATCHES
===================================================================
--- net/openssl/3.4.1/PATCHES (nonexistent)
+++ net/openssl/3.4.1/PATCHES (revision 442)
@@ -0,0 +1,2 @@
+
+../../../sources/packages/n/openssl/patches/openssl-3.4.1-legacy-provider.patch -p0
Index: net/openssl/3.4.1/cron/certwatch
===================================================================
--- net/openssl/3.4.1/cron/certwatch (nonexistent)
+++ net/openssl/3.4.1/cron/certwatch (revision 442)
@@ -0,0 +1,129 @@
+#!/bin/sh
+#
+# Will check all certificates stored in $CERTDIR for their expiration date,
+# and will display (if optional "stdout" argument is given), or mail a warning
+# message to $MAILADDR (if script is executed without any parameter
+# - unattended mode suitable for cron execution) for each particular certificate
+# that is about to expire in time less to, or equal to $DAYS after this script
+# has been executed, or if it has already expired.
+# This stupid script (C) 2006,2007 Jan Rafaj
+
+########################## CONFIGURATION SECTION BEGIN #########################
+# Note: all settings are mandatory
+# Warning will be sent if a certificate expires in time <= days given here
+DAYS=7
+# E-mail address where to send warnings
+MAILADDR=root
+# Directory with certificates to check
+CERTDIR=/etc/ssl/certs
+# Directory where to keep state files if this script isnt executed with "stdout"
+STATEDIR=/var/run
+########################### CONFIGURATION SECTION END ##########################
+
+PATH=/bin:/usr/bin:/sbin:/usr/sbin
+DAY_IN_SECS=$((60*60*24))
+DATE_CURRENT=$(date '+%s')
+
+usage()
+{
+ echo "Usage: $0 [stdout]"
+ echo
+ echo "Detailed description and configuration is embedded within the script."
+ exit 0
+}
+
+message()
+{
+ cat << EOF
+ WARNING: certificate $certfile
+ is about to expire in time equal to or less than $DAYS days from now on,
+ or has already expired - it might be a good idea to obtain/create new one.
+
+EOF
+}
+
+message_mail()
+{
+ message
+ cat << EOF
+ NOTE: This message is being sent only once.
+
+ A lock-file
+ $STATEDIR/certwatch-mailwarning-sent-$certfilebase
+ has been created, which will prevent this script from mailing you again
+ upon its subsequent executions by crond. You dont need to care about it;
+ the file will be auto-deleted as soon as you'll prolong your certificate.
+EOF
+}
+
+unset stdout
+case $# in
+ 0) ;;
+ 1) if [ "$1" = "-h" -o "$1" == "--help" ]; then
+ usage
+ elif [ "$1" = "stdout" ]; then
+ stdout=1
+ else
+ usage
+ fi
+ ;;
+ *) usage ;;
+esac
+
+for dir in $STATEDIR $CERTDIR ; do
+ if [ ! -d $dir ]; then
+ echo "ERROR: directory $dir does not exist"
+ exit 1
+ fi
+done
+for binary in basename date find grep mail openssl touch ; do
+ if [ ! \( -x /usr/bin/$binary -o -x /bin/$binary \) ]; then
+ echo "ERROR: /usr/bin/$binary not found"
+ exit 1
+ fi
+done
+
+find $CERTDIR -type f -maxdepth 1 | while read certfile ; do
+ if [ "$certfile" != "/etc/ssl/certs/ca-certificates.crt" ]; then
+ certfilebase="$(basename "$certfile")"
+ inform=PEM
+ echo "$certfile" | grep -q -i '\.net$'
+ if [ $? -eq 0 ]; then
+ # This is based purely on filename extension, so may give false results.
+ # But lets assume noone uses NET format certs today, ok?
+ continue
+ fi
+ echo "$certfile" | grep -q -i '\.der$'
+ if [ $? -eq 0 -o "$(file "$certfile" | egrep '(ASCII|PEM)')" == "" ]; then
+ inform=DER
+ fi
+ # We wont use '-checkend' since it is not properly documented (as of
+ # OpenSSL 0.9.8e).
+ DATE_CERT_EXPIRES=$(openssl x509 -in "$certfile" -inform $inform -noout -enddate | sed 's/^notAfter=//')
+ DATE_CERT_EXPIRES=$(date -d"$DATE_CERT_EXPIRES" +%s)
+ if [ $(($DATE_CERT_EXPIRES - $DATE_CURRENT)) -le $(($DAYS * $DAY_IN_SECS)) ]
+ then
+ if [ $stdout ]; then
+ message
+ else
+ if [ ! -f $STATEDIR/certwatch-mailwarning-sent-"$certfilebase" ]; then
+ subject="$0: certificate $certfile expiration warning"
+ message_mail | mail -r "certwatch@$HOSTNAME" \
+ -s "$subject" \
+ $MAILADDR 2>/dev/null
+ # echo "Mail about expiring certificate $certfile sent to $MAILADDR."
+ # echo "If you need to send it again, please remove lock-file"
+ # echo "$STATEDIR/certwatch-mailwarning-sent-$certfilebase ."
+ # echo
+ fi
+ touch $STATEDIR/certwatch-mailwarning-sent-"$certfilebase"
+ fi
+ else
+ if [ ! $stdout ]; then
+ if [ -f $STATEDIR/certwatch-mailwarning-sent-"$certfilebase" ]; then
+ rm $STATEDIR/certwatch-mailwarning-sent-"$certfilebase"
+ fi
+ fi
+ fi
+ fi
+done
Index: net/openssl/3.4.1/openssl-pkg-description.in
===================================================================
--- net/openssl/3.4.1/openssl-pkg-description.in (nonexistent)
+++ net/openssl/3.4.1/openssl-pkg-description.in (revision 442)
@@ -0,0 +1,19 @@
+# HOW TO EDIT THIS FILE:
+# The "handy ruler" below makes it easier to edit a package description. Line
+# up the first '|' above the ':' following the base package name, and the '|'
+# on the right side marks the last column you can put a character in. You must
+# make exactly 11 lines for the formatting to be correct. It's also
+# customary to leave one space after the ':'.
+
+ |-----handy-ruler------------------------------------------------------|
+openssl: openssl @VERSION@ (Secure Sockets Layer toolkit)
+openssl:
+openssl: The OpenSSL certificate management tool and the shared libraries
+openssl: that provide various encryption and decryption algorithms and
+openssl: protocols.
+openssl: This product includes software developed by the OpenSSL Project for
+openssl: use in the OpenSSL Toolkit (http://www.openssl.org). This product
+openssl: includes cryptographic software written by Eric Young
+openssl: (eay@cryptsoft.com). This product includes software written by Tim
+openssl: Hudson (tjh@cryptsoft.com).
+openssl:
Index: net/openssl/3.4.1/openssl-pkg-install.sh
===================================================================
--- net/openssl/3.4.1/openssl-pkg-install.sh (nonexistent)
+++ net/openssl/3.4.1/openssl-pkg-install.sh (revision 442)
@@ -0,0 +1,67 @@
+#!/bin/sh
+
+# Preserve new files
+install_file() {
+ NEW="$1"
+ OLD="`dirname $NEW`/`basename $NEW .new`"
+ # If there's no file by that name, mv it over:
+ if [ ! -r $OLD ]; then
+ mv $NEW $OLD
+ elif [ "`cat $OLD | md5sum`" = "`cat $NEW | md5sum`" ]; then # toss the redundant copy
+ rm $NEW
+ fi
+ # Otherwise, we leave the .new copy for the admin to consider...
+}
+
+
+# arg 1: the new package version
+pre_install() {
+ /bin/true
+}
+
+# arg 1: the new package version
+post_install() {
+ # If there is a known buggy certwatch script with no local modifications, just replace it:
+ if [ "$(md5sum etc/cron.daily/certwatch 2> /dev/null)" = "f4cf63e557820781f40c4cac67a44d77 etc/cron.daily/certwatch" ]; then
+ cat etc/cron.daily/certwatch.new > etc/cron.daily/certwatch
+ touch -r etc/cron.daily/certwatch.new etc/cron.daily/certwatch
+ fi
+
+ install_file etc/ssl/openssl.cnf.new
+ install_file etc/cron.daily/certwatch.new
+
+ # Rehash certificates if the package is upgraded on a running system:
+ # Note that we have to be sure that we are on the working system
+ # on the target hardware ("proc/sys/kernel/osrelease" - relative path).
+ if [ -r proc/sys/kernel/osrelease -a -x /usr/bin/c_rehash ]; then
+ /usr/bin/c_rehash 1> /dev/null 2> /dev/null
+ fi
+}
+
+# arg 1: the new package version
+# arg 2: the old package version
+pre_update() {
+ /bin/true
+}
+
+# arg 1: the new package version
+# arg 2: the old package version
+post_update() {
+ post_install
+}
+
+# arg 1: the old package version
+pre_remove() {
+ /bin/true
+}
+
+# arg 1: the old package version
+post_remove() {
+ /bin/true
+}
+
+
+operation=$1
+shift
+
+$operation $*
Property changes on: net/openssl/3.4.1/openssl-pkg-install.sh
___________________________________________________________________
Added: svn:executable
## -0,0 +1 ##
+*
\ No newline at end of property
Index: net/openssl/3.4.1
===================================================================
--- net/openssl/3.4.1 (nonexistent)
+++ net/openssl/3.4.1 (revision 442)
Property changes on: net/openssl/3.4.1
___________________________________________________________________
Added: svn:ignore
## -0,0 +1,74 ##
+
+# install dir
+dist
+
+# Target build dirs
+.a1x-newlib
+.a2x-newlib
+.at91sam7s-newlib
+
+.build-machine
+
+.a1x-glibc
+.a2x-glibc
+.h3-glibc
+.h5-glibc
+.i586-glibc
+.i686-glibc
+.imx6-glibc
+.jz47xx-glibc
+.makefile
+.am335x-glibc
+.omap543x-glibc
+.p5600-glibc
+.power8-glibc
+.power8le-glibc
+.power9-glibc
+.power9le-glibc
+.m1000-glibc
+.riscv64-glibc
+.rk328x-glibc
+.rk33xx-glibc
+.rk339x-glibc
+.rk358x-glibc
+.s8xx-glibc
+.s9xx-glibc
+.x86_64-glibc
+
+# Hidden files (each file)
+.makefile
+.dist
+.rootfs
+
+# src & hw requires
+.src_requires
+.src_requires_depend
+.requires
+.requires_depend
+
+# Tarballs
+*.gz
+*.bz2
+*.lz
+*.xz
+*.tgz
+*.txz
+
+# Signatures
+*.asc
+*.sig
+*.sign
+*.sha1sum
+
+# Patches
+*.patch
+
+# Descriptions
+*.dsc
+*.txt
+
+# Default linux config files
+*.defconfig
+
+# backup copies
+*~
Index: net/openssl/3.4.1-ppc32/Makefile
===================================================================
--- net/openssl/3.4.1-ppc32/Makefile (nonexistent)
+++ net/openssl/3.4.1-ppc32/Makefile (revision 442)
@@ -0,0 +1,187 @@
+
+COMPONENT_TARGETS = $(HARDWARE_S824L)
+COMPONENT_TARGETS += $(HARDWARE_VESNIN)
+COMPONENT_TARGETS += $(HARDWARE_TL2WK2)
+COMPONENT_TARGETS += $(HARDWARE_TL2SV2)
+
+NEED_ABS_PATH = true
+COMPONENT_IS_3PP = true
+
+CREATE_PPC32_PACKAGE = true
+
+
+include ../../../build-system/constants.mk
+
+
+SOURCE_REQUIRES = sources/packages/n/openssl
+
+REQUIRES = net/openssl/3.4.1
+REQUIRES += libs/zlib/1.3.1-ppc32
+REQUIRES += libs/gmp/6.3.0-ppc32
+
+# ======= __END_OF_REQUIRES__ =======
+
+
+version = 3.4.1
+tar_xz_archive = $(SRC_PACKAGE_PATH)/packages/n/openssl/openssl-$(version).tar.xz
+SRC_ARCHIVE = $(tar_xz_archive)
+SRC_DIR = $(TARGET_BUILD_DIR)/openssl-$(version)
+src_dir_name = openssl-$(version)
+src_done = $(TARGET_BUILD_DIR)/.source_done
+
+PATCHES = PATCHES
+
+build_target = $(TARGET_BUILD_DIR)/.build_done
+install_target = $(TARGET_BUILD_DIR)/.install_done
+
+
+####### Targets
+
+PKG_GROUP = net
+#
+# *PKG_NAME & *PKG_VERSION shouldn't be a reference to value.
+#
+OPENSSL32_PKG_NAME = openssl-x32
+OPENSSL32_PKG_VERSION = 3.4.1
+OPENSSL32_PKG_ARCH = $(PKGARCH)
+OPENSSL32_PKG_DISTRO_NAME = $(DISTRO_NAME)
+OPENSSL32_PKG_DISTRO_VERSION = $(DISTRO_VERSION)
+OPENSSL32_PKG_GROUP = $(PKG_GROUP)
+### |---handy-ruler-------------------------------|
+OPENSSL32_PKG_SHORT_DESCRIPTION = Secure Sockets Layer toolkit
+OPENSSL32_PKG_URL = $(BUG_URL)
+OPENSSL32_PKG_LICENSE = Apache-v2.0
+OPENSSL32_PKG_DESCRIPTION_FILE = $(TARGET_BUILD_DIR)/$(OPENSSL32_PKG_NAME)-pkg-description
+OPENSSL32_PKG_DESCRIPTION_FILE_IN = $(OPENSSL32_PKG_NAME)-pkg-description.in
+OPENSSL32_PKG_INSTALL_SCRIPT = $(OPENSSL32_PKG_NAME)-pkg-install.sh
+
+OPENSSL32_PKG = $(CURDIR)/$(TARGET_BUILD_DIR)/$(OPENSSL32_PKG_NAME)-package
+
+pkg_basename = $(OPENSSL32_PKG_NAME)-$(OPENSSL32_PKG_VERSION)-$(OPENSSL32_PKG_ARCH)-$(OPENSSL32_PKG_DISTRO_NAME)-$(OPENSSL32_PKG_DISTRO_VERSION)
+
+pkg_archive = $(TARGET_BUILD_DIR)/$(PKG_GROUP)/$(pkg_basename).$(pkg_arch_suffix)
+pkg_certificate = $(call cert-name,$(pkg_archive))
+pkg_signature = $(call sign-name,$(pkg_archive))
+pkg_description = $(call desc-name,$(pkg_archive))
+products = $(call pkg-files,$(pkg_archive))
+
+BUILD_TARGETS = $(build_target)
+BUILD_TARGETS += $(install_target)
+
+PRODUCT_TARGETS = $(products)
+
+ROOTFS_TARGETS = $(pkg_archive)
+
+
+include ../../../build-system/core.mk
+
+
+env_sysroot = DESTDIR=$(OPENSSL32_PKG)
+
+
+extra_configure_switches = --libdir=lib$(MULTILIB_PPC32_SUFFIX)
+extra_configure_switches += --openssldir=/etc/ssl
+extra_configure_switches += no-mdc2
+extra_configure_switches += no-ec2m
+extra_configure_switches += no-sm2
+extra_configure_switches += no-sm4
+extra_configure_switches += no-sse2
+extra_configure_switches += no-weak-ssl-ciphers
+extra_configure_switches += enable-camellia
+extra_configure_switches += enable-seed
+extra_configure_switches += enable-rfc3779
+extra_configure_switches += enable-cms
+extra_configure_switches += enable-md2
+extra_configure_switches += enable-rc5
+extra_configure_switches += enable-ssl3
+extra_configure_switches += enable-ssl3-method
+extra_configure_switches += zlib
+extra_configure_switches += shared
+
+openssl_environment = KERNEL_BITS=32 MACHINE=ppc64 SYSTEM=Linux
+
+LDFLAGS += -Wl,-rpath=/lib$(MULTILIB_PPC32_SUFFIX):/usr/lib$(MULTILIB_PPC32_SUFFIX)
+
+
+####### Dependencies
+
+$(src_done): $(SRC_ARCHIVE) $(PATCHES_DEP)
+ $(UNPACK_SRC_ARCHIVE)
+ $(APPLY_PATCHES)
+ @( cd $(SRC_DIR) ; \
+ find . -name "*.pod" -exec sed -i "s/^\=item \([0-9]\)\(\ \|\.\|$$\)/\=item C<\1>/g" {} \; \
+ )
+ @touch $@
+
+$(build_target): $(src_done)
+ @cd $(SRC_DIR) && \
+ ./Configure linux-ppc --cross-compile-prefix=$(CROSS_PREFIX) \
+ --prefix=/usr \
+ $(extra_configure_switches) \
+ $(CFLAGS)
+ @cd $(SRC_DIR) && $(MAKE) $(BUILD_ENVIRONMENT)
+ @touch $@
+
+$(install_target): $(build_target)
+ @mkdir -p $(OPENSSL32_PKG)
+ @cd $(SRC_DIR) && $(BUILD_ENVIRONMENT) $(MAKE) -j1 MANDIR=/usr/share/man install $(env_sysroot)
+ifneq ($(__ENABLE_STATIC__),yes)
+ @rm -f $(OPENSSL32_PKG)/usr/lib$(MULTILIB_PPC32_SUFFIX)/*.a
+endif
+ @mkdir -p $(OPENSSL32_PKG)/usr/bin/32
+ @( cd $(OPENSSL32_PKG)/usr/bin ; \
+ rm -f c_rehash ; \
+ find . -type f | xargs mv -t 32 ; \
+ )
+ @mkdir -p $(OPENSSL32_PKG)/lib$(MULTILIB_PPC32_SUFFIX)
+ @( cd $(OPENSSL32_PKG)/usr/lib$(MULTILIB_PPC32_SUFFIX) ; \
+ chmod +w lib*.so.? ; \
+ mv lib*.so.? ../../lib$(MULTILIB_PPC32_SUFFIX) ; \
+ ln -sf ../../lib$(MULTILIB_PPC32_SUFFIX)/lib*.so.? . ; \
+ cp -a lib*.so ../../lib$(MULTILIB_PPC32_SUFFIX) ; \
+ )
+ @sed -e 's,/include $$,/include,' -i $(OPENSSL32_PKG)/usr/lib$(MULTILIB_PPC32_SUFFIX)/pkgconfig/*.pc
+ @rm -rf $(OPENSSL32_PKG)/etc
+ @rm -rf $(OPENSSL32_PKG)/usr/include
+ @rm -rf $(OPENSSL32_PKG)/usr/share
+ # ======= Install the same to $(TARGET_DEST_DIR) =======
+ $(call install-into-devenv, $(OPENSSL32_PKG))
+ # ======= tune pkg-config *.pc search path to the target destination for development =======
+ @( cd $(TARGET_DEST_DIR)/usr/lib$(MULTILIB_PPC32_SUFFIX)/pkgconfig ; \
+ sed -i "s,/usr,$(TARGET_DEST_DIR)/usr,g" libcrypto.pc libssl.pc openssl.pc \
+ )
+ # ======= Strip binaries =======
+ @( cd $(OPENSSL32_PKG) ; \
+ find . | xargs file | grep "executable" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
+ find . | xargs file | grep "shared object" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
+ )
+ifeq ($(__ENABLE_STATIC__),yes)
+ @( cd $(OPENSSL32_PKG) ; \
+ find . | xargs file | grep "current ar archive" | cut -f 1 -d : | xargs $(STRIP) -g 2> /dev/null ; \
+ )
+endif
+ @touch $@
+
+$(OPENSSL32_PKG_DESCRIPTION_FILE): $(OPENSSL32_PKG_DESCRIPTION_FILE_IN)
+ @cat $< | $(SED) -e "s/@VERSION@/$(version)/g" > $@
+
+$(pkg_certificate) : $(pkg_archive) ;
+$(pkg_signature) : $(pkg_archive) ;
+$(pkg_description) : $(pkg_archive) ;
+
+$(pkg_archive): $(install_target) $(OPENSSL32_PKG_DESCRIPTION_FILE) $(OPENSSL32_PKG_INSTALL_SCRIPT)
+ @cp $(OPENSSL32_PKG_DESCRIPTION_FILE) $(OPENSSL32_PKG)/.DESCRIPTION
+ @cp $(OPENSSL32_PKG_INSTALL_SCRIPT) $(OPENSSL32_PKG)/.INSTALL
+ @$(BUILD_PKG_REQUIRES) $(OPENSSL32_PKG)/.REQUIRES
+ @echo "pkgname=$(OPENSSL32_PKG_NAME)" > $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "pkgver=$(OPENSSL32_PKG_VERSION)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "arch=$(OPENSSL32_PKG_ARCH)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "distroname=$(OPENSSL32_PKG_DISTRO_NAME)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "distrover=$(OPENSSL32_PKG_DISTRO_VERSION)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "group=$(OPENSSL32_PKG_GROUP)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "short_description=\"$(OPENSSL32_PKG_SHORT_DESCRIPTION)\"" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "url=$(OPENSSL32_PKG_URL)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "license=$(OPENSSL32_PKG_LICENSE)" >> $(OPENSSL32_PKG)/.PKGINFO
+ @$(PSEUDO) sh -c "cd $(OPENSSL32_PKG) && \
+ chown -R root:root . && \
+ $(MAKE_PACKAGE) -J --linkadd=yes $(GNUPG_OPTIONS) -m -d .. ."
Index: net/openssl/3.4.1-ppc32/PATCHES
===================================================================
--- net/openssl/3.4.1-ppc32/PATCHES (nonexistent)
+++ net/openssl/3.4.1-ppc32/PATCHES (revision 442)
@@ -0,0 +1,2 @@
+
+../../../sources/packages/n/openssl/patches/openssl-3.4.1-legacy-provider.patch -p0
Index: net/openssl/3.4.1-ppc32/openssl-x32-pkg-description.in
===================================================================
--- net/openssl/3.4.1-ppc32/openssl-x32-pkg-description.in (nonexistent)
+++ net/openssl/3.4.1-ppc32/openssl-x32-pkg-description.in (revision 442)
@@ -0,0 +1,19 @@
+# HOW TO EDIT THIS FILE:
+# The "handy ruler" below makes it easier to edit a package description. Line
+# up the first '|' above the ':' following the base package name, and the '|'
+# on the right side marks the last column you can put a character in. You must
+# make exactly 11 lines for the formatting to be correct. It's also
+# customary to leave one space after the ':'.
+
+ |-----handy-ruler------------------------------------------------------|
+openssl-x32: openssl-x32 @VERSION@ (Secure Sockets Layer toolkit)
+openssl-x32:
+openssl-x32: The OpenSSL certificate management tool and the shared libraries
+openssl-x32: that provide various encryption and decryption algorithms and
+openssl-x32: protocols.
+openssl-x32: This product includes software developed by the OpenSSL Project for
+openssl-x32: use in the OpenSSL Toolkit (http://www.openssl.org). This product
+openssl-x32: includes cryptographic software written by Eric Young
+openssl-x32: (eay@cryptsoft.com). This product includes software written by Tim
+openssl-x32: Hudson (tjh@cryptsoft.com).
+openssl-x32:
Index: net/openssl/3.4.1-ppc32/openssl-x32-pkg-install.sh
===================================================================
--- net/openssl/3.4.1-ppc32/openssl-x32-pkg-install.sh (nonexistent)
+++ net/openssl/3.4.1-ppc32/openssl-x32-pkg-install.sh (revision 442)
@@ -0,0 +1,39 @@
+#!/bin/sh
+
+# arg 1: the new package version
+pre_install() {
+ /bin/true
+}
+
+# arg 1: the new package version
+post_install() {
+ /bin/true
+}
+
+# arg 1: the new package version
+# arg 2: the old package version
+pre_update() {
+ /bin/true
+}
+
+# arg 1: the new package version
+# arg 2: the old package version
+post_update() {
+ post_install
+}
+
+# arg 1: the old package version
+pre_remove() {
+ /bin/true
+}
+
+# arg 1: the old package version
+post_remove() {
+ /bin/true
+}
+
+
+operation=$1
+shift
+
+$operation $*
Property changes on: net/openssl/3.4.1-ppc32/openssl-x32-pkg-install.sh
___________________________________________________________________
Added: svn:executable
## -0,0 +1 ##
+*
\ No newline at end of property
Index: net/openssl/3.4.1-ppc32
===================================================================
--- net/openssl/3.4.1-ppc32 (nonexistent)
+++ net/openssl/3.4.1-ppc32 (revision 442)
Property changes on: net/openssl/3.4.1-ppc32
___________________________________________________________________
Added: svn:ignore
## -0,0 +1,74 ##
+
+# install dir
+dist
+
+# Target build dirs
+.a1x-newlib
+.a2x-newlib
+.at91sam7s-newlib
+
+.build-machine
+
+.a1x-glibc
+.a2x-glibc
+.h3-glibc
+.h5-glibc
+.i586-glibc
+.i686-glibc
+.imx6-glibc
+.jz47xx-glibc
+.makefile
+.am335x-glibc
+.omap543x-glibc
+.p5600-glibc
+.power8-glibc
+.power8le-glibc
+.power9-glibc
+.power9le-glibc
+.m1000-glibc
+.riscv64-glibc
+.rk328x-glibc
+.rk33xx-glibc
+.rk339x-glibc
+.rk358x-glibc
+.s8xx-glibc
+.s9xx-glibc
+.x86_64-glibc
+
+# Hidden files (each file)
+.makefile
+.dist
+.rootfs
+
+# src & hw requires
+.src_requires
+.src_requires_depend
+.requires
+.requires_depend
+
+# Tarballs
+*.gz
+*.bz2
+*.lz
+*.xz
+*.tgz
+*.txz
+
+# Signatures
+*.asc
+*.sig
+*.sign
+*.sha1sum
+
+# Patches
+*.patch
+
+# Descriptions
+*.dsc
+*.txt
+
+# Default linux config files
+*.defconfig
+
+# backup copies
+*~
Index: net/openssl/3.4.1-x86_32/Makefile
===================================================================
--- net/openssl/3.4.1-x86_32/Makefile (nonexistent)
+++ net/openssl/3.4.1-x86_32/Makefile (revision 442)
@@ -0,0 +1,183 @@
+
+COMPONENT_TARGETS = $(HARDWARE_INTEL_PC64)
+
+NEED_ABS_PATH = true
+COMPONENT_IS_3PP = true
+
+CREATE_X86_32_PACKAGE = true
+
+
+include ../../../build-system/constants.mk
+
+
+SOURCE_REQUIRES = sources/packages/n/openssl
+
+REQUIRES = net/openssl/3.4.1
+REQUIRES += libs/zlib/1.3.1-x86_32
+REQUIRES += libs/gmp/6.3.0-x86_32
+
+# ======= __END_OF_REQUIRES__ =======
+
+
+version = 3.4.1
+tar_xz_archive = $(SRC_PACKAGE_PATH)/packages/n/openssl/openssl-$(version).tar.xz
+SRC_ARCHIVE = $(tar_xz_archive)
+SRC_DIR = $(TARGET_BUILD_DIR)/openssl-$(version)
+src_dir_name = openssl-$(version)
+src_done = $(TARGET_BUILD_DIR)/.source_done
+
+PATCHES = PATCHES
+
+build_target = $(TARGET_BUILD_DIR)/.build_done
+install_target = $(TARGET_BUILD_DIR)/.install_done
+
+
+####### Targets
+
+PKG_GROUP = net
+#
+# *PKG_NAME & *PKG_VERSION shouldn't be a reference to value.
+#
+OPENSSL32_PKG_NAME = openssl-x32
+OPENSSL32_PKG_VERSION = 3.4.1
+OPENSSL32_PKG_ARCH = $(PKGARCH)
+OPENSSL32_PKG_DISTRO_NAME = $(DISTRO_NAME)
+OPENSSL32_PKG_DISTRO_VERSION = $(DISTRO_VERSION)
+OPENSSL32_PKG_GROUP = $(PKG_GROUP)
+### |---handy-ruler-------------------------------|
+OPENSSL32_PKG_SHORT_DESCRIPTION = Secure Sockets Layer toolkit
+OPENSSL32_PKG_URL = $(BUG_URL)
+OPENSSL32_PKG_LICENSE = Apache-v2.0
+OPENSSL32_PKG_DESCRIPTION_FILE = $(TARGET_BUILD_DIR)/$(OPENSSL32_PKG_NAME)-pkg-description
+OPENSSL32_PKG_DESCRIPTION_FILE_IN = $(OPENSSL32_PKG_NAME)-pkg-description.in
+OPENSSL32_PKG_INSTALL_SCRIPT = $(OPENSSL32_PKG_NAME)-pkg-install.sh
+
+OPENSSL32_PKG = $(CURDIR)/$(TARGET_BUILD_DIR)/$(OPENSSL32_PKG_NAME)-package
+
+pkg_basename = $(OPENSSL32_PKG_NAME)-$(OPENSSL32_PKG_VERSION)-$(OPENSSL32_PKG_ARCH)-$(OPENSSL32_PKG_DISTRO_NAME)-$(OPENSSL32_PKG_DISTRO_VERSION)
+
+pkg_archive = $(TARGET_BUILD_DIR)/$(PKG_GROUP)/$(pkg_basename).$(pkg_arch_suffix)
+pkg_certificate = $(call cert-name,$(pkg_archive))
+pkg_signature = $(call sign-name,$(pkg_archive))
+pkg_description = $(call desc-name,$(pkg_archive))
+products = $(call pkg-files,$(pkg_archive))
+
+BUILD_TARGETS = $(build_target)
+BUILD_TARGETS += $(install_target)
+
+PRODUCT_TARGETS = $(products)
+
+ROOTFS_TARGETS = $(pkg_archive)
+
+
+include ../../../build-system/core.mk
+
+
+env_sysroot = DESTDIR=$(OPENSSL32_PKG)
+
+
+extra_configure_switches = --libdir=lib$(MULTILIB_X86_32_SUFFIX)
+extra_configure_switches += --openssldir=/etc/ssl
+extra_configure_switches += no-mdc2
+extra_configure_switches += no-ec2m
+extra_configure_switches += no-sm2
+extra_configure_switches += no-sm4
+extra_configure_switches += no-sse2
+extra_configure_switches += no-weak-ssl-ciphers
+extra_configure_switches += enable-camellia
+extra_configure_switches += enable-seed
+extra_configure_switches += enable-rfc3779
+extra_configure_switches += enable-cms
+extra_configure_switches += enable-md2
+extra_configure_switches += enable-rc5
+extra_configure_switches += enable-ssl3
+extra_configure_switches += enable-ssl3-method
+extra_configure_switches += zlib
+extra_configure_switches += shared
+
+
+LDFLAGS += -Wl,-rpath=/lib$(MULTILIB_X86_32_SUFFIX):/usr/lib$(MULTILIB_X86_32_SUFFIX)
+
+
+####### Dependencies
+
+$(src_done): $(SRC_ARCHIVE) $(PATCHES_DEP)
+ $(UNPACK_SRC_ARCHIVE)
+ $(APPLY_PATCHES)
+ @( cd $(SRC_DIR) ; \
+ find . -name "*.pod" -exec sed -i "s/^\=item \([0-9]\)\(\ \|\.\|$$\)/\=item C<\1>/g" {} \; \
+ )
+ @touch $@
+
+$(build_target): $(src_done)
+ @cd $(SRC_DIR) && \
+ ./Configure linux-x86 --cross-compile-prefix=$(CROSS_PREFIX) \
+ --prefix=/usr \
+ $(extra_configure_switches) \
+ $(CFLAGS)
+ @cd $(SRC_DIR) && $(MAKE) $(BUILD_ENVIRONMENT)
+ @touch $@
+
+$(install_target): $(build_target)
+ @mkdir -p $(OPENSSL32_PKG)
+ @cd $(SRC_DIR) && $(BUILD_ENVIRONMENT) $(MAKE) -j1 MANDIR=/usr/share/man install $(env_sysroot)
+ifneq ($(__ENABLE_STATIC__),yes)
+ @rm -f $(OPENSSL32_PKG)/usr/lib$(MULTILIB_X86_32_SUFFIX)/*.a
+endif
+ @mkdir -p $(OPENSSL32_PKG)/usr/bin/32
+ @( cd $(OPENSSL32_PKG)/usr/bin ; \
+ rm -f c_rehash ; \
+ find . -type f | xargs mv -t 32 ; \
+ )
+ @mkdir -p $(OPENSSL32_PKG)/lib$(MULTILIB_X86_32_SUFFIX)
+ @( cd $(OPENSSL32_PKG)/usr/lib$(MULTILIB_X86_32_SUFFIX) ; \
+ chmod +w lib*.so.? ; \
+ mv lib*.so.? ../../lib$(MULTILIB_X86_32_SUFFIX) ; \
+ ln -sf ../../lib$(MULTILIB_X86_32_SUFFIX)/lib*.so.? . ; \
+ cp -a lib*.so ../../lib$(MULTILIB_X86_32_SUFFIX) ; \
+ )
+ @sed -e 's,/include $$,/include,' -i $(OPENSSL32_PKG)/usr/lib$(MULTILIB_X86_32_SUFFIX)/pkgconfig/*.pc
+ @rm -rf $(OPENSSL32_PKG)/etc
+ @rm -rf $(OPENSSL32_PKG)/usr/include
+ @rm -rf $(OPENSSL32_PKG)/usr/share
+ # ======= Install the same to $(TARGET_DEST_DIR) =======
+ $(call install-into-devenv, $(OPENSSL32_PKG))
+ # ======= tune pkg-config *.pc search path to the target destination for development =======
+ @( cd $(TARGET_DEST_DIR)/usr/lib$(MULTILIB_X86_32_SUFFIX)/pkgconfig ; \
+ sed -i "s,/usr,$(TARGET_DEST_DIR)/usr,g" libcrypto.pc libssl.pc openssl.pc \
+ )
+ # ======= Strip binaries =======
+ @( cd $(OPENSSL32_PKG) ; \
+ find . | xargs file | grep "executable" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
+ find . | xargs file | grep "shared object" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
+ )
+ifeq ($(__ENABLE_STATIC__),yes)
+ @( cd $(OPENSSL32_PKG) ; \
+ find . | xargs file | grep "current ar archive" | cut -f 1 -d : | xargs $(STRIP) -g 2> /dev/null ; \
+ )
+endif
+ @touch $@
+
+$(OPENSSL32_PKG_DESCRIPTION_FILE): $(OPENSSL32_PKG_DESCRIPTION_FILE_IN)
+ @cat $< | $(SED) -e "s/@VERSION@/$(version)/g" > $@
+
+$(pkg_certificate) : $(pkg_archive) ;
+$(pkg_signature) : $(pkg_archive) ;
+$(pkg_description) : $(pkg_archive) ;
+
+$(pkg_archive): $(install_target) $(OPENSSL32_PKG_DESCRIPTION_FILE) $(OPENSSL32_PKG_INSTALL_SCRIPT)
+ @cp $(OPENSSL32_PKG_DESCRIPTION_FILE) $(OPENSSL32_PKG)/.DESCRIPTION
+ @cp $(OPENSSL32_PKG_INSTALL_SCRIPT) $(OPENSSL32_PKG)/.INSTALL
+ @$(BUILD_PKG_REQUIRES) $(OPENSSL32_PKG)/.REQUIRES
+ @echo "pkgname=$(OPENSSL32_PKG_NAME)" > $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "pkgver=$(OPENSSL32_PKG_VERSION)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "arch=$(OPENSSL32_PKG_ARCH)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "distroname=$(OPENSSL32_PKG_DISTRO_NAME)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "distrover=$(OPENSSL32_PKG_DISTRO_VERSION)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "group=$(OPENSSL32_PKG_GROUP)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "short_description=\"$(OPENSSL32_PKG_SHORT_DESCRIPTION)\"" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "url=$(OPENSSL32_PKG_URL)" >> $(OPENSSL32_PKG)/.PKGINFO ; \
+ echo "license=$(OPENSSL32_PKG_LICENSE)" >> $(OPENSSL32_PKG)/.PKGINFO
+ @$(PSEUDO) sh -c "cd $(OPENSSL32_PKG) && \
+ chown -R root:root . && \
+ $(MAKE_PACKAGE) -J --linkadd=yes $(GNUPG_OPTIONS) -m -d .. ."
Index: net/openssl/3.4.1-x86_32/PATCHES
===================================================================
--- net/openssl/3.4.1-x86_32/PATCHES (nonexistent)
+++ net/openssl/3.4.1-x86_32/PATCHES (revision 442)
@@ -0,0 +1,2 @@
+
+../../../sources/packages/n/openssl/patches/openssl-3.4.1-legacy-provider.patch -p0
Index: net/openssl/3.4.1-x86_32/openssl-x32-pkg-description.in
===================================================================
--- net/openssl/3.4.1-x86_32/openssl-x32-pkg-description.in (nonexistent)
+++ net/openssl/3.4.1-x86_32/openssl-x32-pkg-description.in (revision 442)
@@ -0,0 +1,19 @@
+# HOW TO EDIT THIS FILE:
+# The "handy ruler" below makes it easier to edit a package description. Line
+# up the first '|' above the ':' following the base package name, and the '|'
+# on the right side marks the last column you can put a character in. You must
+# make exactly 11 lines for the formatting to be correct. It's also
+# customary to leave one space after the ':'.
+
+ |-----handy-ruler------------------------------------------------------|
+openssl-x32: openssl-x32 @VERSION@ (Secure Sockets Layer toolkit)
+openssl-x32:
+openssl-x32: The OpenSSL certificate management tool and the shared libraries
+openssl-x32: that provide various encryption and decryption algorithms and
+openssl-x32: protocols.
+openssl-x32: This product includes software developed by the OpenSSL Project for
+openssl-x32: use in the OpenSSL Toolkit (http://www.openssl.org). This product
+openssl-x32: includes cryptographic software written by Eric Young
+openssl-x32: (eay@cryptsoft.com). This product includes software written by Tim
+openssl-x32: Hudson (tjh@cryptsoft.com).
+openssl-x32:
Index: net/openssl/3.4.1-x86_32/openssl-x32-pkg-install.sh
===================================================================
--- net/openssl/3.4.1-x86_32/openssl-x32-pkg-install.sh (nonexistent)
+++ net/openssl/3.4.1-x86_32/openssl-x32-pkg-install.sh (revision 442)
@@ -0,0 +1,39 @@
+#!/bin/sh
+
+# arg 1: the new package version
+pre_install() {
+ /bin/true
+}
+
+# arg 1: the new package version
+post_install() {
+ /bin/true
+}
+
+# arg 1: the new package version
+# arg 2: the old package version
+pre_update() {
+ /bin/true
+}
+
+# arg 1: the new package version
+# arg 2: the old package version
+post_update() {
+ post_install
+}
+
+# arg 1: the old package version
+pre_remove() {
+ /bin/true
+}
+
+# arg 1: the old package version
+post_remove() {
+ /bin/true
+}
+
+
+operation=$1
+shift
+
+$operation $*
Property changes on: net/openssl/3.4.1-x86_32/openssl-x32-pkg-install.sh
___________________________________________________________________
Added: svn:executable
## -0,0 +1 ##
+*
\ No newline at end of property
Index: net/openssl/3.4.1-x86_32
===================================================================
--- net/openssl/3.4.1-x86_32 (nonexistent)
+++ net/openssl/3.4.1-x86_32 (revision 442)
Property changes on: net/openssl/3.4.1-x86_32
___________________________________________________________________
Added: svn:ignore
## -0,0 +1,74 ##
+
+# install dir
+dist
+
+# Target build dirs
+.a1x-newlib
+.a2x-newlib
+.at91sam7s-newlib
+
+.build-machine
+
+.a1x-glibc
+.a2x-glibc
+.h3-glibc
+.h5-glibc
+.i586-glibc
+.i686-glibc
+.imx6-glibc
+.jz47xx-glibc
+.makefile
+.am335x-glibc
+.omap543x-glibc
+.p5600-glibc
+.power8-glibc
+.power8le-glibc
+.power9-glibc
+.power9le-glibc
+.m1000-glibc
+.riscv64-glibc
+.rk328x-glibc
+.rk33xx-glibc
+.rk339x-glibc
+.rk358x-glibc
+.s8xx-glibc
+.s9xx-glibc
+.x86_64-glibc
+
+# Hidden files (each file)
+.makefile
+.dist
+.rootfs
+
+# src & hw requires
+.src_requires
+.src_requires_depend
+.requires
+.requires_depend
+
+# Tarballs
+*.gz
+*.bz2
+*.lz
+*.xz
+*.tgz
+*.txz
+
+# Signatures
+*.asc
+*.sig
+*.sign
+*.sha1sum
+
+# Patches
+*.patch
+
+# Descriptions
+*.dsc
+*.txt
+
+# Default linux config files
+*.defconfig
+
+# backup copies
+*~
Index: net/openvpn/2.5.2/Makefile
===================================================================
--- net/openvpn/2.5.2/Makefile (revision 441)
+++ net/openvpn/2.5.2/Makefile (revision 442)
@@ -63,7 +63,7 @@
REQUIRES = libs/lz4/1.10.0
REQUIRES += libs/lzo/2.10
REQUIRES += net/libnsl/1.3.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += secure/pam/1.5.1
# ======= __END_OF_REQUIRES__ =======
Index: net/php/8.1.2/Makefile
===================================================================
--- net/php/8.1.2/Makefile (revision 441)
+++ net/php/8.1.2/Makefile (revision 442)
@@ -64,7 +64,7 @@
REQUIRES += net/alpine/2.25
REQUIRES += net/curl/7.75.0
REQUIRES += net/net-snmp/5.9
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/krb5/1.19.1
REQUIRES += net/libnsl/1.3.0
Index: net/postfix/3.6.4/Makefile
===================================================================
--- net/postfix/3.6.4/Makefile (revision 441)
+++ net/postfix/3.6.4/Makefile (revision 442)
@@ -67,7 +67,7 @@
REQUIRES += dev/perl/5.36.0
REQUIRES += libs/pcre/8.45
REQUIRES += net/cyrus-sasl/2.1.27
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/krb5/1.19.1
REQUIRES += net/libnsl/1.3.0
Index: net/ppp/2.4.9/Makefile
===================================================================
--- net/ppp/2.4.9/Makefile (revision 441)
+++ net/ppp/2.4.9/Makefile (revision 442)
@@ -61,7 +61,7 @@
SOURCE_REQUIRES = sources/packages/n/ppp
REQUIRES = net/libpcap/1.10.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += secure/pam/1.5.1
# ======= __END_OF_REQUIRES__ =======
Index: net/rsync/3.2.7/Makefile
===================================================================
--- net/rsync/3.2.7/Makefile (revision 441)
+++ net/rsync/3.2.7/Makefile (revision 442)
@@ -60,7 +60,7 @@
SOURCE_REQUIRES = sources/packages/n/rsync
-REQUIRES = net/openssl/3.4.0
+REQUIRES = net/openssl/3.4.1
REQUIRES += dev/python3/3.10.8
REQUIRES += libs/xxhash/0.8.2
REQUIRES += libs/zstd/1.5.6
Index: net/uwsgi/2.0.20/Makefile
===================================================================
--- net/uwsgi/2.0.20/Makefile (revision 441)
+++ net/uwsgi/2.0.20/Makefile (revision 442)
@@ -67,7 +67,7 @@
REQUIRES += libs/jansson/2.13.1
REQUIRES += app/xz/5.6.3
REQUIRES += app/sqlite/3.39.4.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
REQUIRES += net/openldap/2.4.58
REQUIRES += dev/python3/3.10.8
REQUIRES += dev/lua/5.4.2
Index: net/wpa_supplicant/2.9/Makefile
===================================================================
--- net/wpa_supplicant/2.9/Makefile (revision 441)
+++ net/wpa_supplicant/2.9/Makefile (revision 442)
@@ -63,7 +63,7 @@
REQUIRES = app/dbus/1.13.18
REQUIRES += libs/readline/8.2
REQUIRES += net/libnl3/3.5.0
-REQUIRES += net/openssl/3.4.0
+REQUIRES += net/openssl/3.4.1
# ======= __END_OF_REQUIRES__ =======
Index: products/base/Makefile
===================================================================
--- products/base/Makefile (revision 441)
+++ products/base/Makefile (revision 442)
@@ -314,9 +314,9 @@
# │ │ ├── net/openssl11/1.1.1w-ppc32
# │ │ └── net/openssl11/1.1.1w-x86_32
# │ │
-# │ ├── net/openssl/3.4.0
-# │ │ ├── net/openssl/3.4.0-ppc32
-# │ │ ├── net/openssl/3.4.0-x86_32
+# │ ├── net/openssl/3.4.1
+# │ │ ├── net/openssl/3.4.1-ppc32
+# │ │ ├── net/openssl/3.4.1-x86_32
# │ │ │
# │ │ ├── libs/libevent/2.1.12 ■
# │ │ │ ├── libs/libevent/2.1.12-ppc32
@@ -340,7 +340,7 @@
# │ ├── dev/python2/2.7.18 ├── libs/libffi/3.4.6
# │ │ ├── dev/python2/2.7.18-ppc32 ├── libs/readline/8.2
# │ │ └── dev/python2/2.7.18-x86_32 ├── libs/expat/2.5.0
-# │ │ └── net/openssl/3.4.0
+# │ │ └── net/openssl/3.4.1
# │ │
# │ ├───────────────────────────────────┬── libs/gdbm/1.23
# │ │ └── app/sqlite/3.39.4.0
@@ -355,7 +355,7 @@
# │ ...
# │ ├───────────────────────────────────┬── libs/ncurses/6.5
# │ │ ├── dev/flex/2.6.4
-# │ ├── app/bsd-games/2.17 ■ └── net/openssl/3.4.0
+# │ ├── app/bsd-games/2.17 ■ └── net/openssl/3.4.1
# │ │
# │ ...
# │
Index: sources/packages/n/openssl/create-3.4.0-legacy-provider-patch/file.list
===================================================================
--- sources/packages/n/openssl/create-3.4.0-legacy-provider-patch/file.list (revision 441)
+++ sources/packages/n/openssl/create-3.4.0-legacy-provider-patch/file.list (nonexistent)
@@ -1 +0,0 @@
-openssl-3.4.0/apps/openssl.cnf
Index: sources/packages/n/openssl/create-3.4.0-legacy-provider-patch/openssl-3.4.0-new/apps/openssl.cnf
===================================================================
--- sources/packages/n/openssl/create-3.4.0-legacy-provider-patch/openssl-3.4.0-new/apps/openssl.cnf (revision 441)
+++ sources/packages/n/openssl/create-3.4.0-legacy-provider-patch/openssl-3.4.0-new/apps/openssl.cnf (nonexistent)
@@ -1,388 +0,0 @@
-#
-# OpenSSL example configuration file.
-# See doc/man5/config.pod for more info.
-#
-# This is mostly being used for generation of certificate requests,
-# but may be used for auto loading of providers
-
-# Note that you can include other files from the main configuration
-# file using the .include directive.
-#.include filename
-
-# This definition stops the following lines choking if HOME isn't
-# defined.
-HOME = .
-
-# Use this in order to automatically load providers.
-openssl_conf = openssl_init
-
-# Comment out the next line to ignore configuration errors
-config_diagnostics = 1
-
-# Extra OBJECT IDENTIFIER info:
-# oid_file = $ENV::HOME/.oid
-oid_section = new_oids
-
-# To use this configuration file with the "-extfile" option of the
-# "openssl x509" utility, name here the section containing the
-# X.509v3 extensions to use:
-# extensions =
-# (Alternatively, use a configuration file that has only
-# X.509v3 extensions in its main [= default] section.)
-
-[ new_oids ]
-# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
-# Add a simple OID like this:
-# testoid1=1.2.3.4
-# Or use config file substitution like this:
-# testoid2=${testoid1}.5.6
-
-# Policies used by the TSA examples.
-tsa_policy1 = 1.2.3.4.1
-tsa_policy2 = 1.2.3.4.5.6
-tsa_policy3 = 1.2.3.4.5.7
-
-[openssl_init]
-providers = provider_sect
-
-# List of providers to load:
-# Uncomment the sections that start with ## below to enable the legacy provider.
-# Loading the legacy provider enables support for the following algorithms:
-# Hashing Algorithms / Message Digests: MD2, MD4, MDC2, WHIRLPOOL, RIPEMD160
-# Symmetric Ciphers: Blowfish, CAST, DES, IDEA, RC2, RC4,RC5, SEED
-# Key Derivation Function (KDF): PBKDF1
-# In general it is not recommended to use the above mentioned algorithms for
-# security critical operations, as they are cryptographically weak or vulnerable
-# to side-channel attacks and as such have been deprecated.
-# If you add a section explicitly activating any other provider(s), you most
-# probably need to explicitly activate the default provider, otherwise it
-# becomes unavailable in openssl. As a consequence applications depending on
-# OpenSSL may not work correctly which could lead to significant system
-# problems including inability to remotely access the system.
-
-[provider_sect]
-default = default_sect
-##legacy = legacy_sect
-
-[default_sect]
-activate = 1
-
-##[legacy_sect]
-##activate = 1
-
-####################################################################
-[ ca ]
-default_ca = CA_default # The default ca section
-
-####################################################################
-[ CA_default ]
-
-dir = ./demoCA # Where everything is kept
-certs = $dir/certs # Where the issued certs are kept
-crl_dir = $dir/crl # Where the issued crl are kept
-database = $dir/index.txt # database index file.
-#unique_subject = no # Set to 'no' to allow creation of
- # several certs with same subject.
-new_certs_dir = $dir/newcerts # default place for new certs.
-
-certificate = $dir/cacert.pem # The CA certificate
-serial = $dir/serial # The current serial number
-crlnumber = $dir/crlnumber # the current crl number
- # must be commented out to leave a V1 CRL
-crl = $dir/crl.pem # The current CRL
-private_key = $dir/private/cakey.pem # The private key
-
-x509_extensions = usr_cert # The extensions to add to the cert
-
-# Comment out the following two lines for the "traditional"
-# (and highly broken) format.
-name_opt = ca_default # Subject Name options
-cert_opt = ca_default # Certificate field options
-
-# Extension copying option: use with caution.
-# copy_extensions = copy
-
-# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
-# so this is commented out by default to leave a V1 CRL.
-# crlnumber must also be commented out to leave a V1 CRL.
-# crl_extensions = crl_ext
-
-default_days = 365 # how long to certify for
-default_crl_days= 30 # how long before next CRL
-default_md = default # use public key default MD
-preserve = no # keep passed DN ordering
-
-# A few difference way of specifying how similar the request should look
-# For type CA, the listed attributes must be the same, and the optional
-# and supplied fields are just that :-)
-policy = policy_match
-
-# For the CA policy
-[ policy_match ]
-countryName = match
-stateOrProvinceName = match
-organizationName = match
-organizationalUnitName = optional
-commonName = supplied
-emailAddress = optional
-
-# For the 'anything' policy
-# At this point in time, you must list all acceptable 'object'
-# types.
-[ policy_anything ]
-countryName = optional
-stateOrProvinceName = optional
-localityName = optional
-organizationName = optional
-organizationalUnitName = optional
-commonName = supplied
-emailAddress = optional
-
-####################################################################
-[ req ]
-default_bits = 2048
-default_keyfile = privkey.pem
-distinguished_name = req_distinguished_name
-attributes = req_attributes
-x509_extensions = v3_ca # The extensions to add to the self signed cert
-
-# Passwords for private keys if not present they will be prompted for
-# input_password = secret
-# output_password = secret
-
-# This sets a mask for permitted string types. There are several options.
-# default: PrintableString, T61String, BMPString.
-# pkix : PrintableString, BMPString (PKIX recommendation before 2004)
-# utf8only: only UTF8Strings (PKIX recommendation after 2004).
-# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
-# MASK:XXXX a literal mask value.
-# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
-string_mask = utf8only
-
-# req_extensions = v3_req # The extensions to add to a certificate request
-
-[ req_distinguished_name ]
-countryName = Country Name (2 letter code)
-countryName_default = AU
-countryName_min = 2
-countryName_max = 2
-
-stateOrProvinceName = State or Province Name (full name)
-stateOrProvinceName_default = Some-State
-
-localityName = Locality Name (eg, city)
-
-0.organizationName = Organization Name (eg, company)
-0.organizationName_default = Internet Widgits Pty Ltd
-
-# we can do this but it is not needed normally :-)
-#1.organizationName = Second Organization Name (eg, company)
-#1.organizationName_default = World Wide Web Pty Ltd
-
-organizationalUnitName = Organizational Unit Name (eg, section)
-#organizationalUnitName_default =
-
-commonName = Common Name (e.g. server FQDN or YOUR name)
-commonName_max = 64
-
-emailAddress = Email Address
-emailAddress_max = 64
-
-# SET-ex3 = SET extension number 3
-
-[ req_attributes ]
-challengePassword = A challenge password
-challengePassword_min = 4
-challengePassword_max = 20
-
-unstructuredName = An optional company name
-
-[ usr_cert ]
-
-# These extensions are added when 'ca' signs a request.
-
-# This goes against PKIX guidelines but some CAs do it and some software
-# requires this to avoid interpreting an end user certificate as a CA.
-
-basicConstraints=CA:FALSE
-
-# This is typical in keyUsage for a client certificate.
-# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-# PKIX recommendations harmless if included in all certificates.
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer
-
-# This stuff is for subjectAltName and issuerAltname.
-# Import the email address.
-# subjectAltName=email:copy
-# An alternative to produce certificates that aren't
-# deprecated according to PKIX.
-# subjectAltName=email:move
-
-# Copy subject details
-# issuerAltName=issuer:copy
-
-# This is required for TSA certificates.
-# extendedKeyUsage = critical,timeStamping
-
-[ v3_req ]
-
-# Extensions to add to a certificate request
-
-basicConstraints = CA:FALSE
-keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-[ v3_ca ]
-
-
-# Extensions for a typical CA
-
-
-# PKIX recommendation.
-
-subjectKeyIdentifier=hash
-
-authorityKeyIdentifier=keyid:always,issuer
-
-basicConstraints = critical,CA:true
-
-# Key usage: this is typical for a CA certificate. However since it will
-# prevent it being used as an test self-signed certificate it is best
-# left out by default.
-# keyUsage = cRLSign, keyCertSign
-
-# Include email address in subject alt name: another PKIX recommendation
-# subjectAltName=email:copy
-# Copy issuer details
-# issuerAltName=issuer:copy
-
-# DER hex encoding of an extension: beware experts only!
-# obj=DER:02:03
-# Where 'obj' is a standard or added object
-# You can even override a supported extension:
-# basicConstraints= critical, DER:30:03:01:01:FF
-
-[ crl_ext ]
-
-# CRL extensions.
-# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
-
-# issuerAltName=issuer:copy
-authorityKeyIdentifier=keyid:always
-
-[ proxy_cert_ext ]
-# These extensions should be added when creating a proxy certificate
-
-# This goes against PKIX guidelines but some CAs do it and some software
-# requires this to avoid interpreting an end user certificate as a CA.
-
-basicConstraints=CA:FALSE
-
-# This is typical in keyUsage for a client certificate.
-# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
-
-# PKIX recommendations harmless if included in all certificates.
-subjectKeyIdentifier=hash
-authorityKeyIdentifier=keyid,issuer
-
-# This stuff is for subjectAltName and issuerAltname.
-# Import the email address.
-# subjectAltName=email:copy
-# An alternative to produce certificates that aren't
-# deprecated according to PKIX.
-# subjectAltName=email:move
-
-# Copy subject details
-# issuerAltName=issuer:copy
-
-# This really needs to be in place for it to be a proxy certificate.
-proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo
-
-####################################################################
-[ tsa ]
-
-default_tsa = tsa_config1 # the default TSA section
-
-[ tsa_config1 ]
-
-# These are used by the TSA reply generation only.
-dir = ./demoCA # TSA root directory
-serial = $dir/tsaserial # The current serial number (mandatory)
-crypto_device = builtin # OpenSSL engine to use for signing
-signer_cert = $dir/tsacert.pem # The TSA signing certificate
- # (optional)
-certs = $dir/cacert.pem # Certificate chain to include in reply
- # (optional)
-signer_key = $dir/private/tsakey.pem # The TSA private key (optional)
-signer_digest = sha256 # Signing digest to use. (Optional)
-default_policy = tsa_policy1 # Policy if request did not specify it
- # (optional)
-other_policies = tsa_policy2, tsa_policy3 # acceptable policies (optional)
-digests = sha1, sha256, sha384, sha512 # Acceptable message digests (mandatory)
-accuracy = secs:1, millisecs:500, microsecs:100 # (optional)
-clock_precision_digits = 0 # number of digits after dot. (optional)
-ordering = yes # Is ordering defined for timestamps?
- # (optional, default: no)
-tsa_name = yes # Must the TSA name be included in the reply?
- # (optional, default: no)
-ess_cert_id_chain = no # Must the ESS cert id chain be included?
- # (optional, default: no)
-ess_cert_id_alg = sha256 # algorithm to compute certificate
- # identifier (optional, default: sha256)
-
-[insta] # CMP using Insta Demo CA
-# Message transfer
-server = pki.certificate.fi:8700
-# proxy = # set this as far as needed, e.g., http://192.168.1.1:8080
-# tls_use = 0
-path = pkix/
-
-# Server authentication
-recipient = "/C=FI/O=Insta Demo/CN=Insta Demo CA" # or set srvcert or issuer
-ignore_keyusage = 1 # potentially needed quirk
-unprotected_errors = 1 # potentially needed quirk
-extracertsout = insta.extracerts.pem
-
-# Client authentication
-ref = 3078 # user identification
-secret = pass:insta # can be used for both client and server side
-
-# Generic message options
-cmd = ir # default operation, can be overridden on cmd line with, e.g., kur
-
-# Certificate enrollment
-subject = "/CN=openssl-cmp-test"
-newkey = insta.priv.pem
-out_trusted = apps/insta.ca.crt # does not include keyUsage digitalSignature
-certout = insta.cert.pem
-
-[pbm] # Password-based protection for Insta CA
-# Server and client authentication
-ref = $insta::ref # 3078
-secret = $insta::secret # pass:insta
-
-[signature] # Signature-based protection for Insta CA
-# Server authentication
-trusted = $insta::out_trusted # apps/insta.ca.crt
-
-# Client authentication
-secret = # disable PBM
-key = $insta::newkey # insta.priv.pem
-cert = $insta::certout # insta.cert.pem
-
-[ir]
-cmd = ir
-
-[cr]
-cmd = cr
-
-[kur]
-# Certificate update
-cmd = kur
-oldcert = $insta::certout # insta.cert.pem
-
-[rr]
-# Certificate revocation
-cmd = rr
-oldcert = $insta::certout # insta.cert.pem
Index: sources/packages/n/openssl/create-3.4.0-legacy-provider-patch/create.patch.sh
===================================================================
--- sources/packages/n/openssl/create-3.4.0-legacy-provider-patch/create.patch.sh (revision 441)
+++ sources/packages/n/openssl/create-3.4.0-legacy-provider-patch/create.patch.sh (nonexistent)
@@ -1,15 +0,0 @@
-#!/bin/sh
-
-VERSION=3.4.0
-
-tar --files-from=file.list -xJvf ../openssl-$VERSION.tar.xz
-mv openssl-$VERSION openssl-$VERSION-orig
-
-cp -rf ./openssl-$VERSION-new ./openssl-$VERSION
-
-diff --unified -Nr openssl-$VERSION-orig openssl-$VERSION > openssl-$VERSION-legacy-provider.patch
-
-mv openssl-$VERSION-legacy-provider.patch ../patches
-
-rm -rf ./openssl-$VERSION
-rm -rf ./openssl-$VERSION-orig
Property changes on: sources/packages/n/openssl/create-3.4.0-legacy-provider-patch/create.patch.sh
___________________________________________________________________
Deleted: svn:executable
## -1 +0,0 ##
-*
\ No newline at end of property
Index: sources/packages/n/openssl/Makefile
===================================================================
--- sources/packages/n/openssl/Makefile (revision 441)
+++ sources/packages/n/openssl/Makefile (revision 442)
@@ -7,7 +7,7 @@
url = $(DOWNLOAD_SERVER)/sources/packages/n/openssl
-versions = 3.4.0
+versions = 3.4.1
pkgname = openssl
suffix = tar.xz
@@ -15,7 +15,7 @@
tarballs = $(addsuffix .$(suffix), $(addprefix $(pkgname)-, $(versions)))
sha1s = $(addsuffix .sha1sum, $(tarballs))
-patches = $(CURDIR)/patches/openssl-3.4.0-legacy-provider.patch
+patches = $(CURDIR)/patches/openssl-3.4.1-legacy-provider.patch
.NOTPARALLEL: $(patches)
@@ -50,7 +50,7 @@
$(patches): $(sha1s)
@echo -e "\n======= Create Patches =======\n" ; \
- ( cd create-3.4.0-legacy-provider-patch ; ./create.patch.sh ) ; \
+ ( cd create-3.4.1-legacy-provider-patch ; ./create.patch.sh ) ; \
echo -e "\n"
download_clean:
Index: sources/packages/n/openssl/create-3.4.1-legacy-provider-patch/create.patch.sh
===================================================================
--- sources/packages/n/openssl/create-3.4.1-legacy-provider-patch/create.patch.sh (nonexistent)
+++ sources/packages/n/openssl/create-3.4.1-legacy-provider-patch/create.patch.sh (revision 442)
@@ -0,0 +1,15 @@
+#!/bin/sh
+
+VERSION=3.4.1
+
+tar --files-from=file.list -xJvf ../openssl-$VERSION.tar.xz
+mv openssl-$VERSION openssl-$VERSION-orig
+
+cp -rf ./openssl-$VERSION-new ./openssl-$VERSION
+
+diff --unified -Nr openssl-$VERSION-orig openssl-$VERSION > openssl-$VERSION-legacy-provider.patch
+
+mv openssl-$VERSION-legacy-provider.patch ../patches
+
+rm -rf ./openssl-$VERSION
+rm -rf ./openssl-$VERSION-orig
Property changes on: sources/packages/n/openssl/create-3.4.1-legacy-provider-patch/create.patch.sh
___________________________________________________________________
Added: svn:executable
## -0,0 +1 ##
+*
\ No newline at end of property
Index: sources/packages/n/openssl/create-3.4.1-legacy-provider-patch/file.list
===================================================================
--- sources/packages/n/openssl/create-3.4.1-legacy-provider-patch/file.list (nonexistent)
+++ sources/packages/n/openssl/create-3.4.1-legacy-provider-patch/file.list (revision 442)
@@ -0,0 +1 @@
+openssl-3.4.1/apps/openssl.cnf
Index: sources/packages/n/openssl/create-3.4.1-legacy-provider-patch/openssl-3.4.1-new/apps/openssl.cnf
===================================================================
--- sources/packages/n/openssl/create-3.4.1-legacy-provider-patch/openssl-3.4.1-new/apps/openssl.cnf (nonexistent)
+++ sources/packages/n/openssl/create-3.4.1-legacy-provider-patch/openssl-3.4.1-new/apps/openssl.cnf (revision 442)
@@ -0,0 +1,388 @@
+#
+# OpenSSL example configuration file.
+# See doc/man5/config.pod for more info.
+#
+# This is mostly being used for generation of certificate requests,
+# but may be used for auto loading of providers
+
+# Note that you can include other files from the main configuration
+# file using the .include directive.
+#.include filename
+
+# This definition stops the following lines choking if HOME isn't
+# defined.
+HOME = .
+
+# Use this in order to automatically load providers.
+openssl_conf = openssl_init
+
+# Comment out the next line to ignore configuration errors
+config_diagnostics = 1
+
+# Extra OBJECT IDENTIFIER info:
+# oid_file = $ENV::HOME/.oid
+oid_section = new_oids
+
+# To use this configuration file with the "-extfile" option of the
+# "openssl x509" utility, name here the section containing the
+# X.509v3 extensions to use:
+# extensions =
+# (Alternatively, use a configuration file that has only
+# X.509v3 extensions in its main [= default] section.)
+
+[ new_oids ]
+# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
+# Add a simple OID like this:
+# testoid1=1.2.3.4
+# Or use config file substitution like this:
+# testoid2=${testoid1}.5.6
+
+# Policies used by the TSA examples.
+tsa_policy1 = 1.2.3.4.1
+tsa_policy2 = 1.2.3.4.5.6
+tsa_policy3 = 1.2.3.4.5.7
+
+[openssl_init]
+providers = provider_sect
+
+# List of providers to load:
+# Uncomment the sections that start with ## below to enable the legacy provider.
+# Loading the legacy provider enables support for the following algorithms:
+# Hashing Algorithms / Message Digests: MD2, MD4, MDC2, WHIRLPOOL, RIPEMD160
+# Symmetric Ciphers: Blowfish, CAST, DES, IDEA, RC2, RC4,RC5, SEED
+# Key Derivation Function (KDF): PBKDF1
+# In general it is not recommended to use the above mentioned algorithms for
+# security critical operations, as they are cryptographically weak or vulnerable
+# to side-channel attacks and as such have been deprecated.
+# If you add a section explicitly activating any other provider(s), you most
+# probably need to explicitly activate the default provider, otherwise it
+# becomes unavailable in openssl. As a consequence applications depending on
+# OpenSSL may not work correctly which could lead to significant system
+# problems including inability to remotely access the system.
+
+[provider_sect]
+default = default_sect
+##legacy = legacy_sect
+
+[default_sect]
+activate = 1
+
+##[legacy_sect]
+##activate = 1
+
+####################################################################
+[ ca ]
+default_ca = CA_default # The default ca section
+
+####################################################################
+[ CA_default ]
+
+dir = ./demoCA # Where everything is kept
+certs = $dir/certs # Where the issued certs are kept
+crl_dir = $dir/crl # Where the issued crl are kept
+database = $dir/index.txt # database index file.
+#unique_subject = no # Set to 'no' to allow creation of
+ # several certs with same subject.
+new_certs_dir = $dir/newcerts # default place for new certs.
+
+certificate = $dir/cacert.pem # The CA certificate
+serial = $dir/serial # The current serial number
+crlnumber = $dir/crlnumber # the current crl number
+ # must be commented out to leave a V1 CRL
+crl = $dir/crl.pem # The current CRL
+private_key = $dir/private/cakey.pem # The private key
+
+x509_extensions = usr_cert # The extensions to add to the cert
+
+# Comment out the following two lines for the "traditional"
+# (and highly broken) format.
+name_opt = ca_default # Subject Name options
+cert_opt = ca_default # Certificate field options
+
+# Extension copying option: use with caution.
+# copy_extensions = copy
+
+# Extensions to add to a CRL. Note: Netscape communicator chokes on V2 CRLs
+# so this is commented out by default to leave a V1 CRL.
+# crlnumber must also be commented out to leave a V1 CRL.
+# crl_extensions = crl_ext
+
+default_days = 365 # how long to certify for
+default_crl_days= 30 # how long before next CRL
+default_md = default # use public key default MD
+preserve = no # keep passed DN ordering
+
+# A few difference way of specifying how similar the request should look
+# For type CA, the listed attributes must be the same, and the optional
+# and supplied fields are just that :-)
+policy = policy_match
+
+# For the CA policy
+[ policy_match ]
+countryName = match
+stateOrProvinceName = match
+organizationName = match
+organizationalUnitName = optional
+commonName = supplied
+emailAddress = optional
+
+# For the 'anything' policy
+# At this point in time, you must list all acceptable 'object'
+# types.
+[ policy_anything ]
+countryName = optional
+stateOrProvinceName = optional
+localityName = optional
+organizationName = optional
+organizationalUnitName = optional
+commonName = supplied
+emailAddress = optional
+
+####################################################################
+[ req ]
+default_bits = 2048
+default_keyfile = privkey.pem
+distinguished_name = req_distinguished_name
+attributes = req_attributes
+x509_extensions = v3_ca # The extensions to add to the self signed cert
+
+# Passwords for private keys if not present they will be prompted for
+# input_password = secret
+# output_password = secret
+
+# This sets a mask for permitted string types. There are several options.
+# default: PrintableString, T61String, BMPString.
+# pkix : PrintableString, BMPString (PKIX recommendation before 2004)
+# utf8only: only UTF8Strings (PKIX recommendation after 2004).
+# nombstr : PrintableString, T61String (no BMPStrings or UTF8Strings).
+# MASK:XXXX a literal mask value.
+# WARNING: ancient versions of Netscape crash on BMPStrings or UTF8Strings.
+string_mask = utf8only
+
+# req_extensions = v3_req # The extensions to add to a certificate request
+
+[ req_distinguished_name ]
+countryName = Country Name (2 letter code)
+countryName_default = AU
+countryName_min = 2
+countryName_max = 2
+
+stateOrProvinceName = State or Province Name (full name)
+stateOrProvinceName_default = Some-State
+
+localityName = Locality Name (eg, city)
+
+0.organizationName = Organization Name (eg, company)
+0.organizationName_default = Internet Widgits Pty Ltd
+
+# we can do this but it is not needed normally :-)
+#1.organizationName = Second Organization Name (eg, company)
+#1.organizationName_default = World Wide Web Pty Ltd
+
+organizationalUnitName = Organizational Unit Name (eg, section)
+#organizationalUnitName_default =
+
+commonName = Common Name (e.g. server FQDN or YOUR name)
+commonName_max = 64
+
+emailAddress = Email Address
+emailAddress_max = 64
+
+# SET-ex3 = SET extension number 3
+
+[ req_attributes ]
+challengePassword = A challenge password
+challengePassword_min = 4
+challengePassword_max = 20
+
+unstructuredName = An optional company name
+
+[ usr_cert ]
+
+# These extensions are added when 'ca' signs a request.
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+# This is required for TSA certificates.
+# extendedKeyUsage = critical,timeStamping
+
+[ v3_req ]
+
+# Extensions to add to a certificate request
+
+basicConstraints = CA:FALSE
+keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+[ v3_ca ]
+
+
+# Extensions for a typical CA
+
+
+# PKIX recommendation.
+
+subjectKeyIdentifier=hash
+
+authorityKeyIdentifier=keyid:always,issuer
+
+basicConstraints = critical,CA:true
+
+# Key usage: this is typical for a CA certificate. However since it will
+# prevent it being used as an test self-signed certificate it is best
+# left out by default.
+# keyUsage = cRLSign, keyCertSign
+
+# Include email address in subject alt name: another PKIX recommendation
+# subjectAltName=email:copy
+# Copy issuer details
+# issuerAltName=issuer:copy
+
+# DER hex encoding of an extension: beware experts only!
+# obj=DER:02:03
+# Where 'obj' is a standard or added object
+# You can even override a supported extension:
+# basicConstraints= critical, DER:30:03:01:01:FF
+
+[ crl_ext ]
+
+# CRL extensions.
+# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
+
+# issuerAltName=issuer:copy
+authorityKeyIdentifier=keyid:always
+
+[ proxy_cert_ext ]
+# These extensions should be added when creating a proxy certificate
+
+# This goes against PKIX guidelines but some CAs do it and some software
+# requires this to avoid interpreting an end user certificate as a CA.
+
+basicConstraints=CA:FALSE
+
+# This is typical in keyUsage for a client certificate.
+# keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+
+# PKIX recommendations harmless if included in all certificates.
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid,issuer
+
+# This stuff is for subjectAltName and issuerAltname.
+# Import the email address.
+# subjectAltName=email:copy
+# An alternative to produce certificates that aren't
+# deprecated according to PKIX.
+# subjectAltName=email:move
+
+# Copy subject details
+# issuerAltName=issuer:copy
+
+# This really needs to be in place for it to be a proxy certificate.
+proxyCertInfo=critical,language:id-ppl-anyLanguage,pathlen:3,policy:foo
+
+####################################################################
+[ tsa ]
+
+default_tsa = tsa_config1 # the default TSA section
+
+[ tsa_config1 ]
+
+# These are used by the TSA reply generation only.
+dir = ./demoCA # TSA root directory
+serial = $dir/tsaserial # The current serial number (mandatory)
+crypto_device = builtin # OpenSSL engine to use for signing
+signer_cert = $dir/tsacert.pem # The TSA signing certificate
+ # (optional)
+certs = $dir/cacert.pem # Certificate chain to include in reply
+ # (optional)
+signer_key = $dir/private/tsakey.pem # The TSA private key (optional)
+signer_digest = sha256 # Signing digest to use. (Optional)
+default_policy = tsa_policy1 # Policy if request did not specify it
+ # (optional)
+other_policies = tsa_policy2, tsa_policy3 # acceptable policies (optional)
+digests = sha1, sha256, sha384, sha512 # Acceptable message digests (mandatory)
+accuracy = secs:1, millisecs:500, microsecs:100 # (optional)
+clock_precision_digits = 0 # number of digits after dot. (optional)
+ordering = yes # Is ordering defined for timestamps?
+ # (optional, default: no)
+tsa_name = yes # Must the TSA name be included in the reply?
+ # (optional, default: no)
+ess_cert_id_chain = no # Must the ESS cert id chain be included?
+ # (optional, default: no)
+ess_cert_id_alg = sha256 # algorithm to compute certificate
+ # identifier (optional, default: sha256)
+
+[insta] # CMP using Insta Demo CA
+# Message transfer
+server = pki.certificate.fi:8700
+# proxy = # set this as far as needed, e.g., http://192.168.1.1:8080
+# tls_use = 0
+path = pkix/
+
+# Server authentication
+recipient = "/C=FI/O=Insta Demo/CN=Insta Demo CA" # or set srvcert or issuer
+ignore_keyusage = 1 # potentially needed quirk
+unprotected_errors = 1 # potentially needed quirk
+extracertsout = insta.extracerts.pem
+
+# Client authentication
+ref = 3078 # user identification
+secret = pass:insta # can be used for both client and server side
+
+# Generic message options
+cmd = ir # default operation, can be overridden on cmd line with, e.g., kur
+
+# Certificate enrollment
+subject = "/CN=openssl-cmp-test"
+newkey = insta.priv.pem
+out_trusted = apps/insta.ca.crt # does not include keyUsage digitalSignature
+certout = insta.cert.pem
+
+[pbm] # Password-based protection for Insta CA
+# Server and client authentication
+ref = $insta::ref # 3078
+secret = $insta::secret # pass:insta
+
+[signature] # Signature-based protection for Insta CA
+# Server authentication
+trusted = $insta::out_trusted # apps/insta.ca.crt
+
+# Client authentication
+secret = # disable PBM
+key = $insta::newkey # insta.priv.pem
+cert = $insta::certout # insta.cert.pem
+
+[ir]
+cmd = ir
+
+[cr]
+cmd = cr
+
+[kur]
+# Certificate update
+cmd = kur
+oldcert = $insta::certout # insta.cert.pem
+
+[rr]
+# Certificate revocation
+cmd = rr
+oldcert = $insta::certout # insta.cert.pem
Radix cross Linux
The main Radix cross Linux repository contains the build scripts of packages, which have the most complete and common functionality for desktop machines
452 Commits
2 Branches
1 Tag