]> code.ossystems Code Review - openembedded-core.git/commitdiff
openssl: update 1.0.2o -> 1.0.2p
authorAndrej Valek <andrej.valek@siemens.com>
Thu, 16 Aug 2018 12:27:56 +0000 (14:27 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Sun, 19 Aug 2018 15:33:41 +0000 (16:33 +0100)
Please see this security advisory:
https://www.openssl.org/news/secadv/20180612.txt

Refresh patches

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
31 files changed:
meta/recipes-connectivity/openssl/openssl-1.0.2p/0001-Fix-build-with-clang-using-external-assembler.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/0001-Fix-build-with-clang-using-external-assembler.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/0001-allow-manpages-to-be-disabled.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/0001-allow-manpages-to-be-disabled.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/0001-openssl-force-soft-link-to-avoid-rare-race.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/0001-openssl-force-soft-link-to-avoid-rare-race.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/Makefiles-ptest.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/Makefiles-ptest.patch with 87% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/Use-SHA256-not-MD5-as-default-digest.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/Use-SHA256-not-MD5-as-default-digest.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/configure-musl-target.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/configure-musl-target.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/configure-targets.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/configure-targets.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian/c_rehash-compat.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/c_rehash-compat.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian/debian-targets.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/debian-targets.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian/man-dir.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/man-dir.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian/man-section.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/man-section.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian/no-rpath.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/no-rpath.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian/no-symbolic.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/no-symbolic.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian/pic.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian/pic.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian1.0.2/block_digicert_malaysia.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian1.0.2/block_digicert_malaysia.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian1.0.2/block_diginotar.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian1.0.2/block_diginotar.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian1.0.2/soname.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian1.0.2/soname.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/debian1.0.2/version-script.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/debian1.0.2/version-script.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/engines-install-in-libdir-ssl.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/engines-install-in-libdir-ssl.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/oe-ldflags.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/oe-ldflags.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/openssl-c_rehash.sh [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/openssl-c_rehash.sh with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/openssl-fix-des.pod-error.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/openssl-fix-des.pod-error.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/openssl_fix_for_x32.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/openssl_fix_for_x32.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/parallel.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/parallel.patch with 92% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/ptest-deps.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/ptest-deps.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/ptest_makefile_deps.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/ptest_makefile_deps.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/reproducible-cflags.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/reproducible-cflags.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/reproducible-mkbuildinf.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/reproducible-mkbuildinf.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/run-ptest [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/run-ptest with 100% similarity]
meta/recipes-connectivity/openssl/openssl-1.0.2p/shared-libs.patch [moved from meta/recipes-connectivity/openssl/openssl-1.0.2o/shared-libs.patch with 100% similarity]
meta/recipes-connectivity/openssl/openssl_1.0.2p.bb [moved from meta/recipes-connectivity/openssl/openssl_1.0.2o.bb with 98% similarity]

similarity index 87%
rename from meta/recipes-connectivity/openssl/openssl-1.0.2o/Makefiles-ptest.patch
rename to meta/recipes-connectivity/openssl/openssl-1.0.2p/Makefiles-ptest.patch
index 2122fa1fb48acbf9cf72ff2555457e8b94b20e40..1b8402af97732908b3298f01646c698405bd433a 100644 (file)
@@ -11,18 +11,15 @@ Signed-off-by: Maxin B. John <maxin.john@enea.com>
 Upstream-Status: Pending
 
 ---
- Makefile.org       |  10 +-
- Makefile.org.orig  |   7 +-
- test/Makefile      |  13 +-
- test/Makefile.orig | 987 +++++++++++++++++++++++++++++++++++++++++++++++++++++
- 4 files changed, 1009 insertions(+), 8 deletions(-)
- create mode 100644 test/Makefile.orig
-
+ Makefile.org  | 10 +++++++++-
+ test/Makefile | 13 +++++++++----
+ 2 files changed, 18 insertions(+), 5 deletions(-)
 diff --git a/Makefile.org b/Makefile.org
 index 111fbba..8e7936c 100644
 --- a/Makefile.org
 +++ b/Makefile.org
-@@ -468,8 +468,16 @@ rehash.time: certs apps
+@@ -467,8 +467,16 @@ rehash.time: certs apps
  test:   tests
  
  tests: rehash
@@ -41,7 +38,7 @@ index 111fbba..8e7936c 100644
  
  report:
 diff --git a/test/Makefile b/test/Makefile
-index a1f7eeb..b2984c4 100644
+index 55a6b50..d46b4d1 100644
 --- a/test/Makefile
 +++ b/test/Makefile
 @@ -150,7 +150,7 @@ tests:     exe apps $(TESTS)
@@ -55,7 +52,7 @@ index a1f7eeb..b2984c4 100644
        test_rmd test_rc2 test_rc4 test_rc5 test_bf test_cast test_aes \
 @@ -162,6 +162,11 @@ alltests: \
        test_constant_time test_verify_extra test_clienthello test_sslv2conftest \
-       test_dtls test_bad_dtls test_fatalerr
+       test_dtls test_bad_dtls test_fatalerr test_x509_time
  
 +alltests:
 +      @(for i in $(all-tests); do \
@@ -90,4 +87,3 @@ index a1f7eeb..b2984c4 100644
  
 -- 
 2.15.1
-
similarity index 92%
rename from meta/recipes-connectivity/openssl/openssl-1.0.2o/parallel.patch
rename to meta/recipes-connectivity/openssl/openssl-1.0.2p/parallel.patch
index e5413bf38951fff907d12f371c5a8e58a25200db..41abf3d6bdbdae24ea1a67c750897e9d06c95d30 100644 (file)
@@ -13,24 +13,18 @@ Refreshed for 1.0.2i
 Signed-off-by: Patrick Ohly <patrick.ohly@intel.com>
 
 ---
- Makefile.org          |  14 +-
- Makefile.org.orig     |  10 +-
- Makefile.shared       |   2 +
- Makefile.shared.orig  | 655 ++++++++++++++++++++++++++++++++++++++++++++++++++
- crypto/Makefile       |  10 +-
- engines/Makefile      |   6 +-
- engines/Makefile.orig | 338 ++++++++++++++++++++++++++
- test/Makefile         |  92 +++----
- test/Makefile.orig    |  88 ++++---
- 9 files changed, 1108 insertions(+), 107 deletions(-)
- create mode 100644 Makefile.shared.orig
- create mode 100644 engines/Makefile.orig
+ Makefile.org                                   | 14 ++--
+ Makefile.shared                                |  2 +
+ crypto/Makefile                                | 10 +--
+ engines/Makefile                               |  6 +-
+ test/Makefile                                  | 94 +++++++++++-----------
+ 5 files changed, 64 insertions(+), 62 deletions(-)
 
 diff --git a/Makefile.org b/Makefile.org
-index 8e7936c..ed98d2a 100644
+index efcfafb..82eab91 100644
 --- a/Makefile.org
 +++ b/Makefile.org
-@@ -283,17 +283,17 @@ build_libcrypto: build_crypto build_engines libcrypto.pc
+@@ -282,17 +282,17 @@ build_libcrypto: build_crypto build_engines libcrypto.pc
  build_libssl: build_ssl libssl.pc
  
  build_crypto:
@@ -54,7 +48,7 @@ index 8e7936c..ed98d2a 100644
  
  all_testapps: build_libs build_testapps
  build_testapps:
-@@ -565,7 +565,7 @@ install_sw:
+@@ -564,7 +564,7 @@ install_sw:
        (cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i; \
        chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \
        done;
@@ -64,7 +58,7 @@ index 8e7936c..ed98d2a 100644
        do \
                if [ -f "$$i" ]; then \
 diff --git a/Makefile.shared b/Makefile.shared
-index f6f92e7..8164186 100644
+index bbefb2b..18013a9 100644
 --- a/Makefile.shared
 +++ b/Makefile.shared
 @@ -105,6 +105,7 @@ LINK_SO=   \
@@ -84,7 +78,7 @@ index f6f92e7..8164186 100644
                          ln -s $$prev $$SHLIB$$SHLIB_SUFFIX ); \
                fi; \
 diff --git a/crypto/Makefile b/crypto/Makefile
-index 17a87f8..29c2dcf 100644
+index 875ea1a..c22b683 100644
 --- a/crypto/Makefile
 +++ b/crypto/Makefile
 @@ -85,11 +85,11 @@ testapps:
@@ -160,7 +154,7 @@ index fe8e9ca..a43d21b 100644
  tags:
        ctags $(SRC)
 diff --git a/test/Makefile b/test/Makefile
-index 40abd60..78d3788 100644
+index 36506cf..c69af8b 100644
 --- a/test/Makefile
 +++ b/test/Makefile
 @@ -145,7 +145,7 @@ install:
@@ -172,7 +166,7 @@ index 40abd60..78d3788 100644
  
  apps:
        @(cd ..; $(MAKE) DIRS=apps all)
-@@ -444,139 +444,139 @@ BUILD_CMD_STATIC=shlib_target=; \
+@@ -448,142 +448,142 @@ BUILD_CMD_STATIC=shlib_target=; \
                link_app.$${shlib_target}
  
  $(RSATEST)$(EXE_EXT): $(RSATEST).o $(DLIBCRYPTO)
@@ -345,7 +339,11 @@ index 40abd60..78d3788 100644
  
  $(FATALERRTEST)$(EXE_EXT): $(FATALERRTEST).o ssltestlib.o $(DLIBSSL) $(DLIBCRYPTO)
        @target=$(FATALERRTEST); exobj=ssltestlib.o; $(BUILD_CMD)
+
+ $(X509TIMETEST)$(EXE_EXT): $(X509TIMETEST).o
+-      @target=$(X509TIMETEST) $(BUILD_CMD)
++      +@target=$(X509TIMETEST) $(BUILD_CMD)
+
  $(SSLV2CONFTEST)$(EXE_EXT): $(SSLV2CONFTEST).o
 -      @target=$(SSLV2CONFTEST) $(BUILD_CMD)
 +      +@target=$(SSLV2CONFTEST) $(BUILD_CMD)
@@ -356,7 +354,7 @@ index 40abd60..78d3788 100644
  
  #$(AESTEST).o: $(AESTEST).c
  #     $(CC) -c $(CFLAGS) -DINTERMEDIATE_VALUE_KAT -DTRACE_KAT_MCT $(AESTEST).c
-@@ -589,7 +589,7 @@ $(DTLSTEST)$(EXE_EXT): $(DTLSTEST).o ssltestlib.o $(DLIBSSL) $(DLIBCRYPTO)
+@@ -596,7 +596,7 @@ $(DTLSTEST)$(EXE_EXT): $(DTLSTEST).o ssltestlib.o $(DLIBSSL) $(DLIBCRYPTO)
  #     fi
  
  dummytest$(EXE_EXT): dummytest.o $(DLIBCRYPTO)
similarity index 98%
rename from meta/recipes-connectivity/openssl/openssl_1.0.2o.bb
rename to meta/recipes-connectivity/openssl/openssl_1.0.2p.bb
index 8ba03b603ce33be02265bfe325df8fc384d77bbe..5d419772f9d5ca041f51b34401fa369daf3740f8 100644 (file)
@@ -53,8 +53,8 @@ SRC_URI_append_class-nativesdk = " \
            file://environment.d-openssl.sh \
            "
 
-SRC_URI[md5sum] = "44279b8557c3247cbe324e2322ecd114"
-SRC_URI[sha256sum] = "ec3f5c9714ba0fd45cb4e087301eb1336c317e0d20b575a125050470e8089e4d"
+SRC_URI[md5sum] = "ac5eb30bf5798aa14b1ae6d0e7da58df"
+SRC_URI[sha256sum] = "50a98e07b1a89eb8f6a99477f262df71c6fa7bef77df4dc83025a2845c827d00"
 
 UPSTREAM_CHECK_REGEX = "openssl-(?P<pver>1\.0.+)\.tar"