107 lines
3.2 KiB
Makefile
107 lines
3.2 KiB
Makefile
# SPDX-License-Identifier: GPL-2.0-or-later
|
|
# Copyright (C) 2009-2014 Stephan Raue (stephan@openelec.tv)
|
|
# Copyright (C) 2016-present Team LibreELEC (https://libreelec.tv)
|
|
|
|
PKG_NAME="openssl"
|
|
PKG_VERSION="3.0.12"
|
|
PKG_LICENSE="Apache-2.0"
|
|
PKG_SITE="https://www.openssl.org"
|
|
PKG_URL="https://www.openssl.org/source/${PKG_NAME}-${PKG_VERSION}.tar.gz"
|
|
PKG_DEPENDS_TARGET="toolchain"
|
|
PKG_LONGDESC="The Open Source toolkit for Secure Sockets Layer and Transport Layer Security"
|
|
PKG_TOOLCHAIN="configure"
|
|
PKG_BUILD_FLAGS="+local-cc"
|
|
|
|
PKG_CONFIGURE_OPTS_SHARED="--libdir=lib \
|
|
shared \
|
|
threads \
|
|
no-md2 \
|
|
no-rc5 \
|
|
no-rfc3779 \
|
|
no-unit-test \
|
|
no-zlib \
|
|
no-zlib-dynamic \
|
|
no-static-engine"
|
|
|
|
PKG_CONFIGURE_OPTS_HOST="--prefix=${TOOLCHAIN} \
|
|
--openssldir=${TOOLCHAIN}/etc/ssl"
|
|
PKG_CONFIGURE_OPTS_TARGET="--prefix=/usr \
|
|
--openssldir=/etc/ssl"
|
|
|
|
post_unpack() {
|
|
find ${PKG_BUILD}/apps -type f | xargs -n 1 -t sed 's|./demoCA|/etc/ssl|' -i
|
|
}
|
|
|
|
pre_configure_host() {
|
|
mkdir -p ${PKG_BUILD}/.${HOST_NAME}
|
|
cp -a ${PKG_BUILD}/* ${PKG_BUILD}/.${HOST_NAME}/
|
|
}
|
|
|
|
configure_host() {
|
|
cd ${PKG_BUILD}/.${HOST_NAME}
|
|
./Configure ${PKG_CONFIGURE_OPTS_HOST} ${PKG_CONFIGURE_OPTS_SHARED} linux-${MACHINE_HARDWARE_NAME} ${CFLAGS} ${LDFLAGS}
|
|
}
|
|
|
|
makeinstall_host() {
|
|
make install_sw
|
|
}
|
|
|
|
pre_configure_target() {
|
|
mkdir -p ${PKG_BUILD}/.${TARGET_NAME}
|
|
cp -a ${PKG_BUILD}/* ${PKG_BUILD}/.${TARGET_NAME}/
|
|
|
|
case ${TARGET_ARCH} in
|
|
i686)
|
|
OPENSSL_TARGET=linux-x86
|
|
;;
|
|
x86_64)
|
|
OPENSSL_TARGET=linux-x86_64
|
|
PLATFORM_FLAGS=enable-ec_nistp_64_gcc_128
|
|
;;
|
|
arm)
|
|
OPENSSL_TARGET=linux-armv4
|
|
;;
|
|
aarch64)
|
|
OPENSSL_TARGET=linux-aarch64
|
|
;;
|
|
esac
|
|
}
|
|
|
|
configure_target() {
|
|
cd ${PKG_BUILD}/.${TARGET_NAME}
|
|
./Configure ${PKG_CONFIGURE_OPTS_TARGET} ${PKG_CONFIGURE_OPTS_SHARED} ${PLATFORM_FLAGS} ${OPENSSL_TARGET} ${CFLAGS} ${LDFLAGS}
|
|
}
|
|
|
|
makeinstall_target() {
|
|
make DESTDIR=${INSTALL} install_sw
|
|
make DESTDIR=${SYSROOT_PREFIX} install_sw
|
|
}
|
|
|
|
post_makeinstall_target() {
|
|
rm -rf ${INSTALL}/etc/ssl/misc
|
|
rm -rf ${INSTALL}/usr/bin/c_rehash
|
|
|
|
debug_strip ${INSTALL}/usr/bin/openssl
|
|
|
|
# cert from https://curl.haxx.se/docs/caextract.html
|
|
mkdir -p ${INSTALL}/etc/ssl
|
|
cp ${PKG_DIR}/cert/cacert.pem ${INSTALL}/etc/ssl/cacert.pem.system
|
|
|
|
# give user the chance to include their own CA
|
|
mkdir -p ${INSTALL}/usr/bin
|
|
cp ${PKG_DIR}/scripts/openssl-config ${INSTALL}/usr/bin
|
|
ln -sf /run/libreelec/cacert.pem ${INSTALL}/etc/ssl/cacert.pem
|
|
ln -sf /run/libreelec/cacert.pem ${INSTALL}/etc/ssl/cert.pem
|
|
|
|
# backwards comatibility
|
|
mkdir -p ${INSTALL}/etc/pki/tls
|
|
ln -sf /run/libreelec/cacert.pem ${INSTALL}/etc/pki/tls/cacert.pem
|
|
mkdir -p ${INSTALL}/etc/pki/tls/certs
|
|
ln -sf /run/libreelec/cacert.pem ${INSTALL}/etc/pki/tls/certs/ca-bundle.crt
|
|
mkdir -p ${INSTALL}/usr/lib/ssl
|
|
ln -sf /run/libreelec/cacert.pem ${INSTALL}/usr/lib/ssl/cert.pem
|
|
}
|
|
|
|
post_install() {
|
|
enable_service openssl-config.service
|
|
}
|