]> code.ossystems Code Review - openembedded-core.git/commit
openssl_1.0.2n: improve reproducibility
authorJuro Bystricky <juro.bystricky@intel.com>
Sat, 10 Mar 2018 19:27:29 +0000 (11:27 -0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 26 Mar 2018 14:06:25 +0000 (15:06 +0100)
commit5a7cf3296715ac6543a171984fd09168bf73d1af
tree083c8cb11cf0ab4252a14f06ead7c6ea1842e7bf
parentd06cf17109a2ca310c270ce4a27a15cb6190e2ff
openssl_1.0.2n: improve reproducibility

Improve reproducible build of:

openssl-staticdev
openssl-dbg
libcrypto

There are two main causes that prevent reproducible build, both related to
the generated file "buildinf.h":

1. "buildinf.h" contains build host CFLAGS, containing various build
   host references.  We need to pass sanitized CFLAGS to the script
   generating this file ("mkbuildinf.pl". )

2. We also need to modify the script "mkbuildinf.pl" itsel in order to
   generate a build timestamp based on SOURCE_DATE_EPOCH, if present in
   the environment.

(From OE-Core rev: 6c556ed3553d8f5e75d65cd7db92b26df43846b7)

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
meta/recipes-connectivity/openssl/openssl-1.0.2n/reproducible-cflags.patch [new file with mode: 0644]
meta/recipes-connectivity/openssl/openssl-1.0.2n/reproducible-mkbuildinf.patch [new file with mode: 0644]
meta/recipes-connectivity/openssl/openssl10.inc
meta/recipes-connectivity/openssl/openssl_1.0.2n.bb