Changes done for unlinking OpenSSL 0.9.8 and OpenSSL 1.0.2 from build (#57)
This PR updates the build to succeed without relying on existing OpenSSL versions. Changes include: 1. Removed OpenSSL 0.9.8 and 1.0.2 components from VSB configuration 2. Removed ipcrypto and ipssl from ipnet root Makefile (ipComps and VARLIST) 3. Updated ipcom/src/ipcom_auth.c for compatibility with OpenSSL 3.5.0 4. Added OpenSSL 3.5.0 include paths where required 5. Removed script from vxworks.krnl.mak which was renaming old OpenSSL library files 6. Removed script from ossl350_prepare/Makefile which was copying OpenSSL 3.5.0 headers to target/h 7. Adapted OpenSSL 3.5.0 headers to ipcom types during build 8. Modified ipnet CDF to switch dependency from INCLUDE_IPSSL to INCLUDE_IPCRYPTO 9. Components: WebCli and NTP are by default disabled Note : There may still be build issues, as target/h/openssl and old OpenSSL source files remain in master. Co-authored-by: subhamgdeb <subhamgdeb> Reviewed-on: http://13.234.246.121:3000/Neominds/ossl35vx69/pulls/57 Reviewed-by: Siddhant Singh <siddhant.singh@neominds.in> Co-authored-by: Subham <subham.gangdeb@neominds.in> Co-committed-by: Subham <subham.gangdeb@neominds.in>
This commit is contained in:
@@ -743,7 +743,7 @@ config IPFTP_USE_TLS
|
||||
bool "Enable FTP with TLS"
|
||||
default n
|
||||
depends on COMPONENT_IPAPPL && MSP_KERNEL
|
||||
select COMPONENT_IPSSL
|
||||
select COMPONENT_IPCRYPTO
|
||||
help
|
||||
Enable FTP with TLS
|
||||
|
||||
@@ -876,7 +876,7 @@ menu "Diameter Components"
|
||||
|
||||
config IPDIAMETER_SEC_KEY_DB
|
||||
bool "Enable DIAMETER Secure key DB "
|
||||
depends on (COMPONENT_IPDIAMETERP || COMPONENT_IPDIAMETERC) && COMPONENT_IPSSL
|
||||
depends on (COMPONENT_IPDIAMETERP || COMPONENT_IPDIAMETERC) && COMPONENT_IPCRYPTO
|
||||
default n
|
||||
help
|
||||
This option enables Secure Key database support for Diameter components.
|
||||
@@ -1159,7 +1159,7 @@ config IPSNTP_SYSLOG_PRIORITY
|
||||
#
|
||||
config COMPONENT_IPNTP
|
||||
bool "Enable NTP"
|
||||
default y
|
||||
default n
|
||||
depends on !FEATURE_IPNET_INET6_ONLY && (MSP_KERNEL || MSP_RTP) && COMPONENT_IPSNTP && SUPPORTS_NTP
|
||||
help
|
||||
This option enables the Network Time protocol (NTP / RFC 1305) component.
|
||||
@@ -1331,22 +1331,6 @@ config COMPONENT_IPCRYPTO
|
||||
help
|
||||
This option enables ipcrypto, a port of the openssl encryption library, excluding the SSL part which is found in the ipssl component. If this option is deselected INCLUDE_IPCRYPTO, INCLUDE_IPCRYPTO_USE_CMDS and INCLUDE_IPCRYPTO_USE_TEST_CMDS will not be available in a VxWorks Image Project (VIP).
|
||||
|
||||
choice
|
||||
prompt "Select openssl version to be built"
|
||||
depends on COMPONENT_IPCRYPTO
|
||||
default COMPONENT_IPCRYPTO_OPENSSL_1_0_2
|
||||
|
||||
config COMPONENT_IPCRYPTO_OPENSSL_0_9_8
|
||||
bool "Build openssl-0_9_8"
|
||||
help
|
||||
Select to build openssl-0_9_8
|
||||
|
||||
config COMPONENT_IPCRYPTO_OPENSSL_1_0_2
|
||||
bool "Build openssl-1_0_2"
|
||||
help
|
||||
Select to build openssl-1_0_2 without fips-140-2.
|
||||
endchoice
|
||||
|
||||
config COMPONENT_IPCRYPTO_USE_FIPS_140_2
|
||||
bool "Enable FIPS 140-2 validated crypto libraries"
|
||||
depends on MSP_KERNEL && !FEATURE_IPNET_INET6_ONLY && COMPONENT_IPCRYPTO_OPENSSL_0_9_8 && !DEFAULT_SIT_NB
|
||||
@@ -1472,7 +1456,7 @@ config IPEAP_USE_EAP_PEAP
|
||||
bool "Enable EAP PEAP"
|
||||
default y
|
||||
depends on COMPONENT_IPEAP
|
||||
select COMPONENT_IPSSL
|
||||
select COMPONENT_IPCRYPTO
|
||||
help
|
||||
This option enables EAP_PEAP support.
|
||||
|
||||
@@ -1494,18 +1478,18 @@ config IPEAP_USE_EAP_TLS
|
||||
bool "Enable EAP TLS"
|
||||
default y
|
||||
depends on COMPONENT_IPEAP
|
||||
select COMPONENT_IPSSL
|
||||
select COMPONENT_IPCRYPTO
|
||||
help
|
||||
This option enables EAP_TLS support.
|
||||
|
||||
|
||||
comment "EAP TTLS requires COMPONENT_IPSSL to be selected"
|
||||
depends on COMPONENT_IPEAP && !IPEAP_USE_EAP_TTLS && !COMPONENT_IPSSL
|
||||
comment "EAP TTLS requires COMPONENT_IPCRYPTO to be selected"
|
||||
depends on COMPONENT_IPEAP && !IPEAP_USE_EAP_TTLS && !COMPONENT_IPCRYPTO
|
||||
|
||||
config IPEAP_USE_EAP_TTLS
|
||||
bool "Enable EAP TTLS"
|
||||
default y
|
||||
depends on COMPONENT_IPEAP && COMPONENT_IPSSL
|
||||
depends on COMPONENT_IPEAP && COMPONENT_IPCRYPTO
|
||||
help
|
||||
This option enables EAP_TTLS support.
|
||||
|
||||
@@ -1538,7 +1522,7 @@ config IPEAP_USE_EAP_COMMON_TLS
|
||||
config IPEAP_USE_EAP_COMMON_SIM
|
||||
bool
|
||||
default y if IPEAP_USE_EAP_SIM || IPEAP_USE_EAP_AKA
|
||||
select COMPONENT_IPSSL
|
||||
select COMPONENT_IPCRYPTO
|
||||
help
|
||||
This is a hidden component and will be selected if EAP SIM, and/or EAP AKA will be selected.
|
||||
#
|
||||
|
||||
Reference in New Issue
Block a user