Skip to content

Turn OpenSSL into a virtual package

Thomas Petazzoni buildroot 1 version New

Get series with b4
b4 am 20171021213345.3e20e080@windsurf

Versions newest first

  1. v1 Latest0 of 13 patches 0 repliesNew

Patches in v1 No applies recorded yet

None of the 13 patches the cover letter announces are in this archive.

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [Buildroot] [PATCH 00/13] Turn OpenSSL into a virtual package

Hello,

Quoted 6 lines · Adam Duskett

Adam Duskett (13):
openssl: new virtual package
softether: depend on libopenssl
hostapd: add libressl-support.patch
ffmpeg: add libressl suport patch
mosquitto: add libressl support patch

Quoted 8 lines

opusfile: add libressl support patch
openldap: add libressl support patch
heirloom-mailx: add libressl support patch
libevent: add libressl support patch
wpa_supplicant: add libressl support patch
ca-certificates: fix installation against libressl
mosquitto: fix building against libressl
openssl: add libressl to virtual package

So, we finally applied this series, but with quite a few changes:

- We were not happy with carrying all those patches to make those packages compatible with LibreSSL, so instead we made them depend on libopenssl only.

- For heirloom-mailx, we kept the patch because it looks acceptable upstream. Could you submit it upstream, please?

- For softether, switching to a "depends on" was not acceptable, as it would break existing defconfigs. So instead, we introduced a BR2_PACKAGE_OPENSSL_FORCE_LIBOPENSSL hidden boolean that tells the openssl virtual package that only libopenssl is acceptable as a provider.

- With your series, ca-certificates would not build, because it needs host-openssl, which would be host-libressl, which doesn't exist. However, using host-libressl would mean that all packages that depend on host-openssl would have to be checked. So instead, we defined BR2_PACKAGE_PROVIDES_HOST_OPENSSL to host-libopenssl, which forces host-openssl to always point to host-libopenssl.

With those changes, series applied. Now, it would be helpful to update utils/genrandconfig to randomly enable libressl instead of openssl to get this situation tested by the autobuilders.

Thanks a lot!

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux and Kernel engineering
http://free-electrons.com