Age | Commit message (Collapse) | Author |
|
CVE-2011-0014
http://www.openssl.org/news/secadv_20110208.txt
OCSP stapling vulnerability in OpenSSL
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Enable OCF (cryptodev) support for openssl as an option.
This requires a patched kernel to export hardware acceleration for
openssl to use it.
If you lack a patched kernel or support it won't break anything, it will
simply fall back to the default software engine from openssl, you'll
just have a slightly bigger libssl/libcrypto.
Tested with 20100325 release + 20101223 patch from the mailing list.
[Peter: slightly tweaked .mk]
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
|
|
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
|
|
Closes #1951
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
OpenSSL is not using the autotools as its build system. Therefore, we
must use the generic infrastructure instead of the autotools one.
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Closes #1567
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Closes #1411
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Closes #703
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Upstream openssl doesn't have avr32 support, and we dropped the
avr32 optimization patch some time ago.
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Thanks for Thomas for noticing.
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
Closes #497
Use ARCH instead of BR2_ARCH as BR2_ARCH won't match because of the
surrounding quotes.
Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
|
|
|
|
|
|
|
|
And remove the unnedded c_rehash binary while we're at it.
Patch by Gustavo Zacarias <gustavo@zacarias.com.br>, closes #307.
Saves ~250k on PPC with default config (E.G. -Os)
|
|
As noted by Hamish Moffatt on the list.
|
|
Patch by Gustavo Zacarias <gustavo@zacarias.com.ar>, closes #217
Fixes multiple security flaws - See
http://www.openssl.org/news/secadv_20090325.txt for details.
|
|
unclean and prevented the build from completing. Asked Atmel to submit upstream.
|
|
|
|
Patch by Gustavo Zacarias <gustavo@zacarias.com.ar>
Closes #151.
* Avoid fips directory completely since it just installs source file cruft
inlib
* Point openssldir to a more friendly and common /etc/ssl rather than
/usr/lib/ssl
|
|
|
|
|
|
Signed-off-by: Markus Heidelberg <markus.heidelberg@web.de>
|
|
|
|
|
|
This patch will default to linux-generic32, unless a known optimized
architecture is selected.
As of today it will select optimized config for; avr32, ia64, powerpc and
x86_64.
This fixes bug #5344.
Signed-off-by: Hans-Christian Egtvedt <hans-christian.egtvedt@atmel.com>
|
|
This patch will use linux-generic32 for all i386 target architectures, which
fixes bug #5274.
Signed-off-by: Hans-Christian Egtvedt <hans-christian.egtvedt@atmel.com>
|
|
This patch adds support for AVR32 architecture and adds an optimized DES and
AES algorithm for this architecture.
|
|
This patch converts building of OpenSSL to use Makefile.autotools.in and bumps
the version to 0.9.8g. The patches are updated to reflect this version upgrade.
A kconfig option for adding the OpenSSL engines is also added.
Signed-off-by: Hans-Christian Egtvedt <hans-christian.egtvedt@atmel.com>
|
|
for i in `find -name 'Config*' -o -name 'Makefile*' -o -name '*.mk'`;
do
sed -i 's/ \+$//' $i;
done
|
|
'default n' is the default, so there's no need to say it explicitly.
|
|
The build without CONFIG_UPDATE has now been verified on arm/armeb/avr32,
so lets revert this for good.
|
|
|
|
|
|
softfloat
|
|
|
|
Based on input from Arndt Kritzner & Bernhard Fischer.
|
|
- use $(STRIPCMD) in packages to avoid clashes with $(STRIP)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
First hunk of fixes for bug #1290
|
|
|