openwrtv4/package/libs/mbedtls/Makefile

#
# Copyright (C) 2011-2015 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=mbedtls
PKG_VERSION:=2.5.1
PKG_RELEASE:=1
PKG_USE_MIPS16:=0

PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-gpl.tgz
PKG_SOURCE_URL:=https://tls.mbed.org/download/
PKG_HASH:=312f020006f0d8e9ede3ed8e73d907a629baf6475229703941769372ab0adee2

PKG_BUILD_PARALLEL:=1
PKG_LICENSE:=GPL-2.0+

include $(INCLUDE_DIR)/package.mk
include $(INCLUDE_DIR)/cmake.mk

define Package/mbedtls/Default
  SUBMENU:=SSL
  TITLE:=Embedded SSL
  URL:=https://tls.mbed.org
endef

define Package/mbedtls/Default/description
The aim of the mbedtls project is to provide a quality, open-source
cryptographic library written in C and targeted at embedded systems.
endef

define Package/libmbedtls
$(call Package/mbedtls/Default)
  SECTION:=libs
  CATEGORY:=Libraries
  TITLE+= (library)
  ABI_VERSION:=$(PKG_VERSION)-$(PKG_RELEASE)
endef

define Package/libmbedtls/description
$(call Package/mbedtls/Default/description)
This package contains the mbedtls library.
endef

PKG_INSTALL:=1

TARGET_CFLAGS += -ffunction-sections -fdata-sections

CMAKE_OPTIONS += \
	-DCMAKE_BUILD_TYPE:String="Release" \
	-DUSE_SHARED_MBEDTLS_LIBRARY:Bool=ON \
	-DENABLE_TESTING:Bool=OFF \
	-DENABLE_PROGRAMS:Bool=OFF \

define Build/InstallDev
	$(INSTALL_DIR) $(1)/usr/include
	$(CP) $(PKG_INSTALL_DIR)/usr/include/mbedtls $(1)/usr/include/
	$(INSTALL_DIR) $(1)/usr/lib
	$(CP) $(PKG_INSTALL_DIR)/usr/lib/lib*.so* $(1)/usr/lib/
	$(CP) $(PKG_INSTALL_DIR)/usr/lib/lib*.a $(1)/usr/lib/
endef

define Package/libmbedtls/install
	$(INSTALL_DIR) $(1)/usr/lib
	$(CP) $(PKG_INSTALL_DIR)/usr/lib/lib*.so* $(1)/usr/lib/
endef

$(eval $(call BuildPackage,libmbedtls))
cosmetic: remove trailing whitespaces Signed-off-by: Luka Perkov <luka@openwrt.org> SVN-Revision: 47197 2015-10-15 22:12:13 +00:00			`#`
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484 2015-07-24 22:26:44 +00:00			`# Copyright (C) 2011-2015 OpenWrt.org`
			`#`
			`# This is free software, licensed under the GNU General Public License v2.`
			`# See /LICENSE for more information.`
			`#`

			`include $(TOPDIR)/rules.mk`

			`PKG_NAME:=mbedtls`
mbedtls: update to 2.5.1 Fixes some security issues (no remote exploits), and introduces some changes. See release notes for details: https://tls.mbed.org/tech-updates/releases/mbedtls-2.5.1-2.1.8-and-1.3.20-released * Fixes an unlimited overread of heap-based buffers in mbedtls_ssl_read() * Adds exponent blinding to RSA private operations * Wipes stack buffers in RSA private key operations (rsa_rsaes_pkcs1_v15_decrypt(), rsa_rsaes_oaep_decrypt()) * Removes SHA-1 and RIPEMD-160 from the default hash algorithms for certificate verification. * Fixes offset in FALLBACK_SCSV parsing that caused TLS server to fail to detect it sometimes. * Tighten parsing of RSA PKCS#1 v1.5 signatures, to avoid a potential Bleichenbacher/BERserk-style attack. Signed-off-by: Magnus Kroken <mkroken@gmail.com> 2017-06-21 19:05:09 +00:00			`PKG_VERSION:=2.5.1`
mbedtls: update to version 2.4.2 This fixes the following security problems: * CVE-2017-2784: Freeing of memory allocated on stack when validating a public key with a secp224k1 curve * SLOTH vulnerability * Denial of Service through Certificate Revocation List Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 2017-03-13 19:04:32 +00:00			`PKG_RELEASE:=1`
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484 2015-07-24 22:26:44 +00:00			`PKG_USE_MIPS16:=0`

			`PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION)-gpl.tgz`
			`PKG_SOURCE_URL:=https://tls.mbed.org/download/`
mbedtls: update to 2.5.1 Fixes some security issues (no remote exploits), and introduces some changes. See release notes for details: https://tls.mbed.org/tech-updates/releases/mbedtls-2.5.1-2.1.8-and-1.3.20-released * Fixes an unlimited overread of heap-based buffers in mbedtls_ssl_read() * Adds exponent blinding to RSA private operations * Wipes stack buffers in RSA private key operations (rsa_rsaes_pkcs1_v15_decrypt(), rsa_rsaes_oaep_decrypt()) * Removes SHA-1 and RIPEMD-160 from the default hash algorithms for certificate verification. * Fixes offset in FALLBACK_SCSV parsing that caused TLS server to fail to detect it sometimes. * Tighten parsing of RSA PKCS#1 v1.5 signatures, to avoid a potential Bleichenbacher/BERserk-style attack. Signed-off-by: Magnus Kroken <mkroken@gmail.com> 2017-06-21 19:05:09 +00:00			`PKG_HASH:=312f020006f0d8e9ede3ed8e73d907a629baf6475229703941769372ab0adee2`
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484 2015-07-24 22:26:44 +00:00
			`PKG_BUILD_PARALLEL:=1`
			`PKG_LICENSE:=GPL-2.0+`

			`include $(INCLUDE_DIR)/package.mk`
			`include $(INCLUDE_DIR)/cmake.mk`

			`define Package/mbedtls/Default`
			`SUBMENU:=SSL`
			`TITLE:=Embedded SSL`
			`URL:=https://tls.mbed.org`
			`endef`

			`define Package/mbedtls/Default/description`
			`The aim of the mbedtls project is to provide a quality, open-source`
			`cryptographic library written in C and targeted at embedded systems.`
			`endef`

			`define Package/libmbedtls`
			`$(call Package/mbedtls/Default)`
			`SECTION:=libs`
			`CATEGORY:=Libraries`
			`TITLE+= (library)`
			`ABI_VERSION:=$(PKG_VERSION)-$(PKG_RELEASE)`
			`endef`

			`define Package/libmbedtls/description`
			`$(call Package/mbedtls/Default/description)`
			`This package contains the mbedtls library.`
			`endef`

			`PKG_INSTALL:=1`

mbedtls: add --function-sections and --data-sections to CFLAGS This allows binaries that links these libraries statically to be reduced by using --gc-sections on link Signed-off-by: Felix Fietkau <nbd@nbd.name> 2017-02-21 13:33:14 +00:00			`TARGET_CFLAGS += -ffunction-sections -fdata-sections`

mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484 2015-07-24 22:26:44 +00:00			`CMAKE_OPTIONS += \`
			`-DCMAKE_BUILD_TYPE:String="Release" \`
			`-DUSE_SHARED_MBEDTLS_LIBRARY:Bool=ON \`
			`-DENABLE_TESTING:Bool=OFF \`
			`-DENABLE_PROGRAMS:Bool=OFF \`

			`define Build/InstallDev`
			`$(INSTALL_DIR) $(1)/usr/include`
			`$(CP) $(PKG_INSTALL_DIR)/usr/include/mbedtls $(1)/usr/include/`
			`$(INSTALL_DIR) $(1)/usr/lib`
			`$(CP) $(PKG_INSTALL_DIR)/usr/lib/lib.so $(1)/usr/lib/`
mbedtls: add static files in staging_dir Signed-off-by: Domagoj Pintaric <domagoj.pintaric@sartura.hr> Signed-off-by: Luka Perkov <luka.perkov@sartura.hr> 2017-01-01 18:10:38 +00:00			`$(CP) $(PKG_INSTALL_DIR)/usr/lib/lib*.a $(1)/usr/lib/`
mbedtls: package version 2.0, make polarssl compatible Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 46484 2015-07-24 22:26:44 +00:00			`endef`

			`define Package/libmbedtls/install`
			`$(INSTALL_DIR) $(1)/usr/lib`
			`$(CP) $(PKG_INSTALL_DIR)/usr/lib/lib.so $(1)/usr/lib/`
			`endef`

			`$(eval $(call BuildPackage,libmbedtls))`