KumiSystems/openwrtv3
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
openwrtv3/package/network/services/openvpn/Makefile

140 lines
4.3 KiB
Makefile
Raw Normal View History

openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
#
openvpn: bump PKG_REVISION and copyright year Signed-off-by: Jo-Philipp Wich <jow@openwrt.org> SVN-Revision: 43859
2015-01-06 12:41:22 +00:00
# Copyright (C) 2010-2015 OpenWrt.org
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=openvpn
openvpn: update to 2.4.3 Fixes for security and other issues. See security announcement for more details: https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243 * Remotely-triggerable ASSERT() on malformed IPv6 packet (CVE-2017-7508) * Pre-authentication remote crash/information disclosure for clients (CVE-2017-7520) * Potential double-free in --x509-alt-username (CVE-2017-7521) * Remote-triggerable memory leaks (CVE-2017-7512) * Post-authentication remote DoS when using the --x509-track option (CVE-2017-7522) * Null-pointer dereference in establish_http_proxy_passthru() * Restrict --x509-alt-username extension types * Fix potential 1-byte overread in TCP option parsing * Fix mbedtls fingerprint calculation * openssl: fix overflow check for long --tls-cipher option * Ensure option array p[] is always NULL-terminated * Pass correct buffer size to GetModuleFileNameW() (Quarkslabs finding 5.6) Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2017-06-22 21:01:01 +00:00
PKG_VERSION:=2.4.3
OpenVPN: Update to 2.4.1 Update OpenVPN to 2.4.1 Remove 200-small_build_enable_occ.patch as it's included upstream. Refresh patches Add mirror and switch to HTTPS Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-03-27 12:51:44 +00:00
PKG_RELEASE:=1
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
OpenVPN: Update to 2.4.1 Update OpenVPN to 2.4.1 Remove 200-small_build_enable_occ.patch as it's included upstream. Refresh patches Add mirror and switch to HTTPS Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>
2017-03-27 12:51:44 +00:00
PKG_SOURCE_URL:=\
https://build.openvpn.net/downloads/releases/ \
openvpn: update to 2.4.3 Fixes for security and other issues. See security announcement for more details: https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243 * Remotely-triggerable ASSERT() on malformed IPv6 packet (CVE-2017-7508) * Pre-authentication remote crash/information disclosure for clients (CVE-2017-7520) * Potential double-free in --x509-alt-username (CVE-2017-7521) * Remote-triggerable memory leaks (CVE-2017-7512) * Post-authentication remote DoS when using the --x509-track option (CVE-2017-7522) * Null-pointer dereference in establish_http_proxy_passthru() * Restrict --x509-alt-username extension types * Fix potential 1-byte overread in TCP option parsing * Fix mbedtls fingerprint calculation * openssl: fix overflow check for long --tls-cipher option * Ensure option array p[] is always NULL-terminated * Pass correct buffer size to GetModuleFileNameW() (Quarkslabs finding 5.6) Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2017-06-22 21:01:01 +00:00
https://swupdate.openvpn.net/community/releases/ \
http://www.eurephia.net/openvpn/
openvpn: update to version 2.3.10 Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 48201
2016-01-11 18:37:28 +00:00
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
openvpn: update to 2.4.3 Fixes for security and other issues. See security announcement for more details: https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243 * Remotely-triggerable ASSERT() on malformed IPv6 packet (CVE-2017-7508) * Pre-authentication remote crash/information disclosure for clients (CVE-2017-7520) * Potential double-free in --x509-alt-username (CVE-2017-7521) * Remote-triggerable memory leaks (CVE-2017-7512) * Post-authentication remote DoS when using the --x509-track option (CVE-2017-7522) * Null-pointer dereference in establish_http_proxy_passthru() * Restrict --x509-alt-username extension types * Fix potential 1-byte overread in TCP option parsing * Fix mbedtls fingerprint calculation * openssl: fix overflow check for long --tls-cipher option * Ensure option array p[] is always NULL-terminated * Pass correct buffer size to GetModuleFileNameW() (Quarkslabs finding 5.6) Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2017-06-22 21:01:01 +00:00
PKG_HASH:=7aa86167a5b8923e54e8795b814ed77288c793671f59fd830d9ab76d4b480571
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)
openvpn: add myself as maintainer Signed-off-by: Felix Fietkau <nbd@nbd.name>
2017-04-03 07:00:32 +00:00
PKG_MAINTAINER:=Felix Fietkau <nbd@nbd.name>
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
PKG_INSTALL:=1
PKG_FIXUP:=autoreconf
PKG_BUILD_PARALLEL:=1
Add a few SPDX tags Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 43151
2014-11-02 12:20:54 +00:00
PKG_LICENSE:=GPL-2.0
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
include $(INCLUDE_DIR)/package.mk
define Package/openvpn/Default
TITLE:=Open source VPN solution using $(2)
SECTION:=net
CATEGORY:=Network
URL:=http://openvpn.net
SUBMENU:=VPN
MENU:=1
DEPENDS:=+kmod-tun +OPENVPN_$(1)_ENABLE_LZO:liblzo +OPENVPN_$(1)_ENABLE_IPROUTE2:ip $(3)
VARIANT:=$(1)
openvpn: ssl-enabled variants also provide a virtual openvpn-crypto package When relying on x.509 certs for auth and / or encryption of traffic you can't use package openvpn-nossl. Just have your package depend on openvpn-crypto to have SSL-encryption and X.509-support enabled in OpenVPN. If encryption / X.509 is not a must, use virtual packge openvpn, which is provided by all OpenVPN-variants. Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
2017-01-22 18:00:51 +00:00
ifeq ($(1),nossl)
openvpn: let all openvpn variants provide a virtual openvpn package Add PROVIDES:=openvpn to the default recipe in order to let all build variants provide a virtual openvpn package. The advantage of this approach is that downstream packages can depend on just "openvpn" without having to require a specific flavor. Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2017-01-21 22:03:36 +00:00
PROVIDES:=openvpn
openvpn: ssl-enabled variants also provide a virtual openvpn-crypto package When relying on x.509 certs for auth and / or encryption of traffic you can't use package openvpn-nossl. Just have your package depend on openvpn-crypto to have SSL-encryption and X.509-support enabled in OpenVPN. If encryption / X.509 is not a must, use virtual packge openvpn, which is provided by all OpenVPN-variants. Signed-off-by: Sven Roederer <devel-sven@geroedel.de>
2017-01-22 18:00:51 +00:00
else
PROVIDES:=openvpn openvpn-crypto
endif
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
endef
openvpn: use conditional dependencies to avoid pulling in unused ssl libraries Signed-off-by: Felix Fietkau <nbd@nbd.name>
2016-12-17 09:35:32 +00:00
Package/openvpn-openssl=$(call Package/openvpn/Default,openssl,OpenSSL,+PACKAGE_openvpn-openssl:libopenssl)
Package/openvpn-mbedtls=$(call Package/openvpn/Default,mbedtls,mbedTLS,+PACKAGE_openvpn-mbedtls:libmbedtls)
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
Package/openvpn-nossl=$(call Package/openvpn/Default,nossl,plaintext (no SSL))
define Package/openvpn/config/Default
source "$(SOURCE)/Config-$(1).in"
endef
Package/openvpn-openssl/config=$(call Package/openvpn/config/Default,openssl)
openvpn: update to 2.4_rc2 OpenVPN 2.4 builds with mbedTLS 2.x, rename openvpn-polarssl variant to openvpn-mbedtls. Some feature highlights: * Data channel cipher negotiation * AEAD cipher support for data channel encryption (currently only * AES-GCM) * ECDH key exchange for control channel * LZ4 compression support See https://github.com/OpenVPN/openvpn/blob/master/Changes.rst for additional change notes. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2016-12-10 11:11:33 +00:00
Package/openvpn-mbedtls/config=$(call Package/openvpn/config/Default,mbedtls)
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
Package/openvpn-nossl/config=$(call Package/openvpn/config/Default,nossl)
openvpn: update to 2.4_rc2 OpenVPN 2.4 builds with mbedTLS 2.x, rename openvpn-polarssl variant to openvpn-mbedtls. Some feature highlights: * Data channel cipher negotiation * AEAD cipher support for data channel encryption (currently only * AES-GCM) * ECDH key exchange for control channel * LZ4 compression support See https://github.com/OpenVPN/openvpn/blob/master/Changes.rst for additional change notes. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2016-12-10 11:11:33 +00:00
ifeq ($(BUILD_VARIANT),mbedtls)
CONFIG_OPENVPN_MBEDTLS:=y
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
endif
ifeq ($(BUILD_VARIANT),openssl)
CONFIG_OPENVPN_OPENSSL:=y
endif
ifeq ($(BUILD_VARIANT),nossl)
CONFIG_OPENVPN_NOSSL:=y
endif
CONFIGURE_VARS += \
IFCONFIG=/sbin/ifconfig \
ROUTE=/sbin/route \
package: replace ifconfig-usage with ip Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46832
2015-09-08 17:44:24 +00:00
IPROUTE=/sbin/ip \
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
NETSTAT=/sbin/netstat
openvpn: reduce binary size using --gc-sections on linking Saves around 9kb gzipped on MIPS Signed-off-by: Felix Fietkau <nbd@nbd.name>
2016-12-10 11:39:54 +00:00
TARGET_CFLAGS += -ffunction-sections -fdata-sections
TARGET_LDFLAGS += -Wl,--gc-sections
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
define Build/Configure
$(call Build/Configure/Default, \
openvpn: make size optimization configurable Signed-off-by: Christoph Kottke <christoph.kottke@gmx.de> SVN-Revision: 39872
2014-03-11 12:07:17 +00:00
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_SMALL),--enable-small) \
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
--disable-selinux \
--disable-systemd \
--disable-plugins \
--disable-debug \
--disable-pkcs11 \
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_LZO),--enable,--disable)-lzo \
openvpn: update to 2.4_rc2 OpenVPN 2.4 builds with mbedTLS 2.x, rename openvpn-polarssl variant to openvpn-mbedtls. Some feature highlights: * Data channel cipher negotiation * AEAD cipher support for data channel encryption (currently only * AES-GCM) * ECDH key exchange for control channel * LZ4 compression support See https://github.com/OpenVPN/openvpn/blob/master/Changes.rst for additional change notes. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2016-12-10 11:11:33 +00:00
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_LZ4),--enable,--disable)-lz4 \
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_X509_ALT_USERNAME),enable,disable-x509-alt-username)-ssl \
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_SERVER),--enable,--disable)-server \
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_MANAGEMENT),--enable,--disable)-management \
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_SOCKS),--enable,--disable)-socks \
openvpn: fix configure options - eurephia: commit: Remove the --disable-eurephia configure option - fix option name: http proxy option is now called http-proxy (see configure.ac) fixes: configure: WARNING: unrecognized options: --disable-nls, --disable-eurephia, --enable-http Signed-off-by: Dirk Neukirchen <dirkneukirchen@web.de> SVN-Revision: 47979
2015-12-23 14:44:24 +00:00
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_HTTP),--enable,--disable)-http-proxy \
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_FRAGMENT),--enable,--disable)-fragment \
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_MULTIHOME),--enable,--disable)-multihome \
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_IPROUTE2),--enable,--disable)-iproute2 \
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_DEF_AUTH),--enable,--disable)-def-auth \
$(if $(CONFIG_OPENVPN_$(BUILD_VARIANT)_ENABLE_PF),--enable,--disable)-pf \
$(if $(CONFIG_OPENVPN_NOSSL),--disable-ssl --disable-crypto,--enable-ssl --enable-crypto) \
$(if $(CONFIG_OPENVPN_OPENSSL),--with-crypto-library=openssl) \
openvpn: update to 2.4_rc2 OpenVPN 2.4 builds with mbedTLS 2.x, rename openvpn-polarssl variant to openvpn-mbedtls. Some feature highlights: * Data channel cipher negotiation * AEAD cipher support for data channel encryption (currently only * AES-GCM) * ECDH key exchange for control channel * LZ4 compression support See https://github.com/OpenVPN/openvpn/blob/master/Changes.rst for additional change notes. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2016-12-10 11:11:33 +00:00
$(if $(CONFIG_OPENVPN_MBEDTLS),--with-crypto-library=mbedtls) \
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
)
endef
define Package/openvpn-$(BUILD_VARIANT)/conffiles
/etc/config/openvpn
endef
define Package/openvpn-$(BUILD_VARIANT)/install
$(INSTALL_DIR) \
$(1)/usr/sbin \
openvpn: move list of params and bools to a separate file So that future patches for addition/removal of them can be more readable Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-02-26 07:22:04 +00:00
$(1)/usr/share/openvpn \
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
$(1)/etc/init.d \
$(1)/etc/config \
$(1)/etc/openvpn \
$(1)/lib/upgrade/keep.d
$(INSTALL_BIN) \
$(PKG_INSTALL_DIR)/usr/sbin/openvpn \
$(1)/usr/sbin/
$(INSTALL_BIN) \
files/openvpn.init \
$(1)/etc/init.d/openvpn
openvpn: move list of params and bools to a separate file So that future patches for addition/removal of them can be more readable Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2017-02-26 07:22:04 +00:00
$(INSTALL_DATA) \
files/openvpn.options \
$(1)/usr/share/openvpn/openvpn.options
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
$(INSTALL_CONF) files/openvpn.config \
$(1)/etc/config/openvpn
$(INSTALL_DATA) \
files/openvpn.upgrade \
$(1)/lib/upgrade/keep.d/openvpn
endef
$(eval $(call BuildPackage,openvpn-openssl))
openvpn: update to 2.4_rc2 OpenVPN 2.4 builds with mbedTLS 2.x, rename openvpn-polarssl variant to openvpn-mbedtls. Some feature highlights: * Data channel cipher negotiation * AEAD cipher support for data channel encryption (currently only * AES-GCM) * ECDH key exchange for control channel * LZ4 compression support See https://github.com/OpenVPN/openvpn/blob/master/Changes.rst for additional change notes. Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2016-12-10 11:11:33 +00:00
$(eval $(call BuildPackage,openvpn-mbedtls))
openvpn: add from openvpn-devel from /packages, fix support for current polarssl SVN-Revision: 35412
2013-01-30 20:07:15 +00:00
$(eval $(call BuildPackage,openvpn-nossl))
Reference in a new issue Copy permalink