420 kx
420 kx COMPONENT_TARGETS = $(HARDWARE_INTEL_PC32)
420 kx COMPONENT_TARGETS += $(HARDWARE_INTEL_PC64)
420 kx COMPONENT_TARGETS += $(HARDWARE_EBOX_3350DX2)
420 kx COMPONENT_TARGETS += $(HARDWARE_CB1X)
420 kx COMPONENT_TARGETS += $(HARDWARE_CB2X)
420 kx COMPONENT_TARGETS += $(HARDWARE_CB3X)
420 kx COMPONENT_TARGETS += $(HARDWARE_ORANGE_PP2E)
420 kx COMPONENT_TARGETS += $(HARDWARE_NANOPI_NEO)
420 kx COMPONENT_TARGETS += $(HARDWARE_ORANGE_PP)
420 kx COMPONENT_TARGETS += $(HARDWARE_ORANGE_PL2)
420 kx COMPONENT_TARGETS += $(HARDWARE_ORANGE_PI5)
420 kx COMPONENT_TARGETS += $(HARDWARE_ORANGE_PI5B)
420 kx COMPONENT_TARGETS += $(HARDWARE_ORANGE_PI5P)
420 kx COMPONENT_TARGETS += $(HARDWARE_ROCK_5B)
420 kx COMPONENT_TARGETS += $(HARDWARE_WECHIP_TX6)
420 kx COMPONENT_TARGETS += $(HARDWARE_REPKA_PI3)
420 kx COMPONENT_TARGETS += $(HARDWARE_FFRK3288)
420 kx COMPONENT_TARGETS += $(HARDWARE_POIN2)
420 kx COMPONENT_TARGETS += $(HARDWARE_RK3328_CC)
420 kx COMPONENT_TARGETS += $(HARDWARE_KHADAS_EDGE)
420 kx COMPONENT_TARGETS += $(HARDWARE_LEEZ_P710)
420 kx COMPONENT_TARGETS += $(HARDWARE_M201)
420 kx COMPONENT_TARGETS += $(HARDWARE_MXV)
420 kx COMPONENT_TARGETS += $(HARDWARE_P201)
420 kx COMPONENT_TARGETS += $(HARDWARE_NEXBOX_A95X)
420 kx COMPONENT_TARGETS += $(HARDWARE_ODROID_C2)
420 kx COMPONENT_TARGETS += $(HARDWARE_P212)
420 kx COMPONENT_TARGETS += $(HARDWARE_KHADAS_VIM)
420 kx COMPONENT_TARGETS += $(HARDWARE_Q201)
420 kx COMPONENT_TARGETS += $(HARDWARE_ENYBOX_X2)
420 kx COMPONENT_TARGETS += $(HARDWARE_KHADAS_VIM2)
420 kx COMPONENT_TARGETS += $(HARDWARE_NIT6Q)
420 kx COMPONENT_TARGETS += $(HARDWARE_OKMX6DL_C)
420 kx COMPONENT_TARGETS += $(HARDWARE_OKMX6Q_C)
420 kx COMPONENT_TARGETS += $(HARDWARE_BONE_BLACK)
420 kx COMPONENT_TARGETS += $(HARDWARE_OMAP5UEVM)
420 kx COMPONENT_TARGETS += $(HARDWARE_DRA7XXEVM)
420 kx COMPONENT_TARGETS += $(HARDWARE_CI20)
420 kx COMPONENT_TARGETS += $(HARDWARE_BAIKAL_T1)
420 kx COMPONENT_TARGETS += $(HARDWARE_BAIKAL_M1)
420 kx COMPONENT_TARGETS += $(HARDWARE_S824L)
420 kx COMPONENT_TARGETS += $(HARDWARE_VESNIN)
420 kx COMPONENT_TARGETS += $(HARDWARE_S824L_LSB)
420 kx COMPONENT_TARGETS += $(HARDWARE_VESNIN_LSB)
420 kx COMPONENT_TARGETS += $(HARDWARE_TL2WK2)
420 kx COMPONENT_TARGETS += $(HARDWARE_TL2SV2)
420 kx COMPONENT_TARGETS += $(HARDWARE_TL2WK2_LSB)
420 kx COMPONENT_TARGETS += $(HARDWARE_TL2SV2_LSB)
420 kx COMPONENT_TARGETS += $(HARDWARE_VISIONFIVE2)
420 kx COMPONENT_TARGETS += $(HARDWARE_SIFIVE_U740)
420 kx
420 kx
420 kx NEED_ABS_PATH = true
420 kx COMPONENT_IS_3PP = true
420 kx
420 kx
420 kx include ../../../build-system/constants.mk
420 kx
420 kx
420 kx SOURCE_REQUIRES = sources/packages/n/openssl
420 kx
420 kx ifeq ($(__USE_BUILT_GCC_LIBS__),yes)
420 kx REQUIRES = dev/gcc/14.2.0
420 kx else
420 kx REQUIRES = libs/zlib/1.3.1
420 kx REQUIRES += libs/gmp/6.3.0
420 kx endif
420 kx
420 kx # ======= __END_OF_REQUIRES__ =======
420 kx
420 kx
442 kx version = 3.4.1
420 kx tar_xz_archive = $(SRC_PACKAGE_PATH)/packages/n/openssl/openssl-$(version).tar.xz
420 kx SRC_ARCHIVE = $(tar_xz_archive)
420 kx SRC_DIR = $(TARGET_BUILD_DIR)/openssl-$(version)
420 kx src_dir_name = openssl-$(version)
420 kx src_done = $(TARGET_BUILD_DIR)/.source_done
420 kx
420 kx PATCHES = PATCHES
420 kx
420 kx build_target = $(TARGET_BUILD_DIR)/.build_done
420 kx install_target = $(TARGET_BUILD_DIR)/.install_done
420 kx
420 kx cron_script = $(CURDIR)/cron/certwatch
420 kx
420 kx
420 kx ####### Targets
420 kx
420 kx PKG_GROUP = net
420 kx
420 kx #
420 kx # *PKG_NAME & *PKG_VERSION shouldn't be a reference to value.
420 kx #
420 kx OPENSSL_PKG_NAME = openssl
442 kx OPENSSL_PKG_VERSION = 3.4.1
420 kx OPENSSL_PKG_ARCH = $(PKGARCH)
420 kx OPENSSL_PKG_DISTRO_NAME = $(DISTRO_NAME)
420 kx OPENSSL_PKG_DISTRO_VERSION = $(DISTRO_VERSION)
420 kx OPENSSL_PKG_GROUP = $(PKG_GROUP)
420 kx ### |---handy-ruler-------------------------------|
420 kx OPENSSL_PKG_SHORT_DESCRIPTION = Secure Sockets Layer toolkit
420 kx OPENSSL_PKG_URL = $(BUG_URL)
420 kx OPENSSL_PKG_LICENSE = Apache-v2.0
420 kx OPENSSL_PKG_DESCRIPTION_FILE = $(TARGET_BUILD_DIR)/$(OPENSSL_PKG_NAME)-pkg-description
420 kx OPENSSL_PKG_DESCRIPTION_FILE_IN = $(OPENSSL_PKG_NAME)-pkg-description.in
420 kx OPENSSL_PKG_INSTALL_SCRIPT = $(OPENSSL_PKG_NAME)-pkg-install.sh
420 kx
420 kx OPENSSL_PKG = $(CURDIR)/$(TARGET_BUILD_DIR)/$(OPENSSL_PKG_NAME)-package
420 kx
420 kx pkg_basename = $(OPENSSL_PKG_NAME)-$(OPENSSL_PKG_VERSION)-$(OPENSSL_PKG_ARCH)-$(OPENSSL_PKG_DISTRO_NAME)-$(OPENSSL_PKG_DISTRO_VERSION)
420 kx
420 kx pkg_archive = $(TARGET_BUILD_DIR)/$(PKG_GROUP)/$(pkg_basename).$(pkg_arch_suffix)
420 kx pkg_certificate = $(call cert-name,$(pkg_archive))
420 kx pkg_signature = $(call sign-name,$(pkg_archive))
420 kx pkg_description = $(call desc-name,$(pkg_archive))
420 kx products = $(call pkg-files,$(pkg_archive))
420 kx
420 kx BUILD_TARGETS = $(build_target)
420 kx BUILD_TARGETS += $(install_target)
420 kx
420 kx PRODUCT_TARGETS = $(products)
420 kx
420 kx ROOTFS_TARGETS = $(pkg_archive)
420 kx
420 kx
420 kx include ../../../build-system/core.mk
420 kx
420 kx
420 kx env_sysroot = DESTDIR=$(OPENSSL_PKG)
420 kx
420 kx
420 kx # These are the known patent issues with OpenSSL:
420 kx # name | expires
420 kx # -------+------------------------------------
420 kx # MDC-2: | 4,908,861 2007-03-13, not included
420 kx # IDEA: | 5,214,703 2010-05-25, not included
420 kx #
420 kx # Although all of the above are expired, it's still
420 kx # probably not a good idea to include them as there
420 kx # are better algorithms to use.
420 kx #
420 kx extra_configure_switches = --libdir=lib$(LIBSUFFIX)
420 kx extra_configure_switches += --openssldir=/etc/ssl
420 kx extra_configure_switches += no-mdc2
420 kx extra_configure_switches += no-ec2m
420 kx extra_configure_switches += no-sm2
420 kx extra_configure_switches += no-sm4
420 kx extra_configure_switches += no-sse2
420 kx extra_configure_switches += no-weak-ssl-ciphers
420 kx extra_configure_switches += enable-camellia
420 kx extra_configure_switches += enable-seed
420 kx extra_configure_switches += enable-rfc3779
420 kx extra_configure_switches += enable-cms
420 kx extra_configure_switches += enable-md2
420 kx extra_configure_switches += enable-rc5
420 kx extra_configure_switches += enable-ssl3
420 kx extra_configure_switches += enable-ssl3-method
420 kx extra_configure_switches += zlib
420 kx extra_configure_switches += shared
420 kx
420 kx
420 kx ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_I586_GLIBC)),)
420 kx arch = x86
420 kx bits =
420 kx endif
420 kx ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_I686_GLIBC)),)
420 kx arch = x86
420 kx bits =
420 kx endif
420 kx ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_X86_64_GLIBC)),)
420 kx arch = x86_64
420 kx bits =
420 kx endif
420 kx ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_A1X_GLIBC) $(TOOLCHAIN_A2X_GLIBC) \
420 kx $(TOOLCHAIN_H3_GLIBC) $(TOOLCHAIN_RK328X_GLIBC) \
420 kx $(TOOLCHAIN_S8XX_GLIBC) $(TOOLCHAIN_IMX6_GLIBC) \
420 kx $(TOOLCHAIN_AM335X_GLIBC) $(TOOLCHAIN_OMAP543X_GLIBC)),)
420 kx arch = generic32
420 kx bits =
420 kx endif
420 kx ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_H5_GLIBC) $(TOOLCHAIN_RK33XX_GLIBC) \
420 kx $(TOOLCHAIN_RK339X_GLIBC) $(TOOLCHAIN_RK358X_GLIBC) \
420 kx $(TOOLCHAIN_S9XX_GLIBC) \
420 kx $(TOOLCHAIN_A311X_GLIBC) $(TOOLCHAIN_M1000_GLIBC)),)
420 kx arch = aarch64
420 kx bits =
420 kx endif
420 kx ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_JZ47XX_GLIBC) $(TOOLCHAIN_P5600_GLIBC)),)
420 kx arch = mips32
420 kx bits =
420 kx endif
420 kx ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_POWER8_GLIBC) $(TOOLCHAIN_POWER9_GLIBC)),)
420 kx arch = ppc64
420 kx bits =
420 kx endif
420 kx ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_POWER8LE_GLIBC) $(TOOLCHAIN_POWER9LE_GLIBC)),)
420 kx arch = ppc64le
420 kx bits =
420 kx endif
420 kx ifneq ($(filter $(TOOLCHAIN),$(TOOLCHAIN_RISCV64_GLIBC)),)
420 kx arch = riscv64
420 kx bits = 64
420 kx endif
420 kx
420 kx
420 kx LDFLAGS += -Wl,-rpath,/lib$(LIBSUFFIX):/usr/lib$(LIBSUFFIX)
420 kx
420 kx
420 kx ####### Dependencies
420 kx
420 kx $(src_done): $(SRC_ARCHIVE) $(PATCHES_DEP)
420 kx $(UNPACK_SRC_ARCHIVE)
420 kx $(APPLY_PATCHES)
420 kx @( cd $(SRC_DIR) ; \
420 kx find . -name "*.pod" -exec sed -i "s/^\=item \([0-9]\)\(\ \|\.\|$$\)/\=item C<\1>/g" {} \; \
420 kx )
420 kx @touch $@
420 kx
420 kx #$(BUILD_ENVIRONMENT) $(openssl_environment)
420 kx
420 kx $(build_target): $(src_done)
420 kx @cd $(SRC_DIR) && \
420 kx ./Configure linux$(bits)-$(arch) --cross-compile-prefix=$(CROSS_PREFIX) \
420 kx --prefix=/usr \
420 kx $(extra_configure_switches) \
420 kx $(CFLAGS)
420 kx @cd $(SRC_DIR) && $(MAKE) $(BUILD_ENVIRONMENT)
420 kx @touch $@
420 kx
420 kx $(install_target): $(build_target)
420 kx @mkdir -p $(OPENSSL_PKG)
420 kx @cd $(SRC_DIR) && $(BUILD_ENVIRONMENT) $(MAKE) -j1 MANDIR=/usr/share/man install $(env_sysroot)
420 kx ifneq ($(__ENABLE_STATIC__),yes)
420 kx @rm -f $(OPENSSL_PKG)/usr/lib$(LIBSUFFIX)/*.a
420 kx endif
420 kx @mv $(OPENSSL_PKG)/etc/ssl/openssl.cnf $(OPENSSL_PKG)/etc/ssl/openssl.cnf.new
420 kx @rm $(OPENSSL_PKG)/etc/ssl/openssl.cnf.dist
420 kx @rm $(OPENSSL_PKG)/etc/ssl/ct_log_list.cnf.dist
420 kx # ======= Add a cron script to warn root if a certificate is going to expire soon:
420 kx @mkdir -p $(OPENSSL_PKG)/etc/cron.daily
420 kx @cat $(cron_script) > $(OPENSSL_PKG)/etc/cron.daily/certwatch.new
420 kx @chmod 755 $(OPENSSL_PKG)/etc/cron.daily/certwatch.new
420 kx @mkdir -p $(OPENSSL_PKG)/lib$(LIBSUFFIX)
420 kx @( cd $(OPENSSL_PKG)/usr/lib$(LIBSUFFIX) ; \
420 kx chmod +w lib*.so.? ; \
420 kx mv lib*.so.? ../../lib$(LIBSUFFIX) ; \
420 kx ln -sf ../../lib$(LIBSUFFIX)/lib*.so.? . ; \
420 kx cp -a lib*.so ../../lib$(LIBSUFFIX) ; \
420 kx )
420 kx @sed -e 's,/include $$,/include,' -i $(OPENSSL_PKG)/usr/lib$(LIBSUFFIX)/pkgconfig/*.pc
420 kx # ======= Install Documentation =======
420 kx @if [ -d $(OPENSSL_PKG)/usr/share/man ]; then \
420 kx ( cd $(OPENSSL_PKG)/usr/share/man ; \
420 kx for manpagedir in `find . -type d -name "man*"` ; do \
420 kx ( cd $$manpagedir ; \
420 kx for eachpage in `find . -type l -maxdepth 1` ; do \
420 kx ln -s `readlink $$eachpage`.gz $$eachpage.gz ; \
420 kx rm $$eachpage ; \
420 kx done ; \
420 kx gzip -9 *.?ossl ; \
420 kx ) \
420 kx done \
420 kx ) \
420 kx fi
420 kx @rm -rf $(OPENSSL_PKG)/usr/share/doc
420 kx @mkdir -p $(OPENSSL_PKG)/usr/doc/$(src_dir_name)
420 kx @cp -a $(SRC_DIR)/AUTHORS* $(SRC_DIR)/LICENSE* \
420 kx $(OPENSSL_PKG)/usr/doc/$(src_dir_name)
420 kx @mkdir -p $(OPENSSL_PKG)/usr/share/doc/$(src_dir_name)
420 kx @( cd $(SRC_DIR) ; \
420 kx cp -a ACKNOWLEDGEMENTS* AUTHORS* CONTRIBUTING* INSTALL* LICENSE* NEWS* \
420 kx NOTES* README* doc/{HOWTO,designs,images} doc/*.txt \
420 kx $(OPENSSL_PKG)/usr/share/doc/$(src_dir_name) ; \
420 kx )
420 kx @( cd $(SRC_DIR) ; \
420 kx if [ -r CHANGES.md ]; then \
420 kx DOCSDIR=`echo $(OPENSSL_PKG)/usr/share/doc/$(src_dir_name)` ; \
420 kx cat CHANGES.md | head -n 1000 > $$DOCSDIR/CHANGES.md ; \
420 kx touch -r CHANGES.md $$DOCSDIR/CHANGES.md ; \
420 kx fi \
420 kx )
420 kx # ======= Install the same to $(TARGET_DEST_DIR) =======
420 kx $(call install-into-devenv, $(OPENSSL_PKG))
420 kx # ======= Tune pkg-config *.pc search path to the target destination for development =======
420 kx @( cd $(TARGET_DEST_DIR)/usr/lib$(LIBSUFFIX)/pkgconfig ; \
420 kx sed -i "s,/usr,$(TARGET_DEST_DIR)/usr,g" libcrypto.pc libssl.pc openssl.pc \
420 kx )
420 kx # ======= Strip binaries =======
420 kx @( cd $(OPENSSL_PKG) ; \
420 kx find . | xargs file | grep "executable" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
420 kx find . | xargs file | grep "shared object" | grep ELF | cut -f 1 -d : | xargs $(STRIP) --strip-unneeded 2> /dev/null ; \
420 kx )
420 kx ifeq ($(__ENABLE_STATIC__),yes)
420 kx @( cd $(OPENSSL_PKG) ; \
420 kx find . | xargs file | grep "current ar archive" | cut -f 1 -d : | xargs $(STRIP) -g 2> /dev/null ; \
420 kx )
420 kx endif
420 kx @touch $@
420 kx
420 kx $(OPENSSL_PKG_DESCRIPTION_FILE): $(OPENSSL_PKG_DESCRIPTION_FILE_IN)
420 kx @cat $< | $(SED) -e "s/@VERSION@/$(version)/g" > $@
420 kx
420 kx $(pkg_certificate) : $(pkg_archive) ;
420 kx $(pkg_signature) : $(pkg_archive) ;
420 kx $(pkg_description) : $(pkg_archive) ;
420 kx
420 kx $(pkg_archive): $(install_target) $(OPENSSL_PKG_DESCRIPTION_FILE) $(OPENSSL_PKG_INSTALL_SCRIPT)
420 kx @cp $(OPENSSL_PKG_DESCRIPTION_FILE) $(OPENSSL_PKG)/.DESCRIPTION
420 kx @cp $(OPENSSL_PKG_INSTALL_SCRIPT) $(OPENSSL_PKG)/.INSTALL
420 kx @$(BUILD_PKG_REQUIRES) $(OPENSSL_PKG)/.REQUIRES
420 kx @echo "pkgname=$(OPENSSL_PKG_NAME)" > $(OPENSSL_PKG)/.PKGINFO ; \
420 kx echo "pkgver=$(OPENSSL_PKG_VERSION)" >> $(OPENSSL_PKG)/.PKGINFO ; \
420 kx echo "arch=$(OPENSSL_PKG_ARCH)" >> $(OPENSSL_PKG)/.PKGINFO ; \
420 kx echo "distroname=$(OPENSSL_PKG_DISTRO_NAME)" >> $(OPENSSL_PKG)/.PKGINFO ; \
420 kx echo "distrover=$(OPENSSL_PKG_DISTRO_VERSION)" >> $(OPENSSL_PKG)/.PKGINFO ; \
420 kx echo "group=$(OPENSSL_PKG_GROUP)" >> $(OPENSSL_PKG)/.PKGINFO ; \
420 kx echo "short_description=\"$(OPENSSL_PKG_SHORT_DESCRIPTION)\"" >> $(OPENSSL_PKG)/.PKGINFO ; \
420 kx echo "url=$(OPENSSL_PKG_URL)" >> $(OPENSSL_PKG)/.PKGINFO ; \
420 kx echo "license=$(OPENSSL_PKG_LICENSE)" >> $(OPENSSL_PKG)/.PKGINFO
420 kx @$(PSEUDO) sh -c "cd $(OPENSSL_PKG) && \
420 kx chown -R root:root . && \
420 kx $(MAKE_PACKAGE) -J --linkadd=yes $(GNUPG_OPTIONS) -m -d .. ."