1 ###############################################################################
3 # IPFire.org - A linux based firewall #
4 # Copyright (C) 2007-2022 IPFire Team <info@ipfire.org> #
6 # This program is free software: you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation, either version 3 of the License, or #
9 # (at your option) any later version. #
11 # This program is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
16 # You should have received a copy of the GNU General Public License #
17 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
19 ###############################################################################
21 ###############################################################################
23 ###############################################################################
29 THISAPP = openssl-$(VER)
30 DL_FILE = $(THISAPP).tar.gz
31 DL_FROM = $(URL_IPFIRE)
32 DIR_APP = $(DIR_SRC)/$(THISAPP)
34 TARGET = $(DIR_INFO)/$(THISAPP)$(KCFG)
36 CFLAGS += -DPURIFY -Wa,--noexecstack
38 export RPM_OPT_FLAGS = $(CFLAGS)
42 --openssldir=/etc/ssl \
55 ifeq "$(IS_64BIT)" "1"
56 OPENSSL_ARCH = linux-generic64
58 OPENSSL_ARCH = linux-generic32
61 ifeq "$(BUILD_ARCH)" "aarch64"
62 OPENSSL_ARCH = linux-aarch64
65 ifeq "$(BUILD_ARCH)" "x86_64"
66 OPENSSL_ARCH = linux-x86_64
69 ###############################################################################
71 ###############################################################################
75 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
77 $(DL_FILE)_BLAKE2 = ecd19eaf84dbc80448b51651abe52a89cc0052f024537959c4ebe61528988f235d661244fce6967159a876dd038c817bad19df742e828ca1cbae97ce6a4124bb
81 check : $(patsubst %,$(DIR_CHK)/%,$(objects))
83 download :$(patsubst %,$(DIR_DL)/%,$(objects))
85 b2 : $(subst %,%_BLAKE2,$(objects))
87 ###############################################################################
88 # Downloading, checking, b2sum
89 ###############################################################################
91 $(patsubst %,$(DIR_CHK)/%,$(objects)) :
94 $(patsubst %,$(DIR_DL)/%,$(objects)) :
97 $(subst %,%_BLAKE2,$(objects)) :
100 ###############################################################################
101 # Installation Details
102 ###############################################################################
104 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
106 @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
107 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.1.1d-default-cipherlist.patch
110 cd $(DIR_APP) && sed -i Configure \
111 -e "s/-O3 -fomit-frame-pointer/$(CFLAGS)/g"
113 cd $(DIR_APP) && find crypto/ -name Makefile -exec \
114 sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i {} \;
116 cd $(DIR_APP) && ./Configure $(CONFIGURE_OPTIONS) \
119 cd $(DIR_APP) && make depend
120 cd $(DIR_APP) && make $(MAKETUNING)
123 cd $(DIR_APP) && make install
124 install -m 0644 $(DIR_SRC)/config/ssl/openssl.cnf /etc/ssl
126 # Install RFC 7919 defined standard group ffdhe4096
127 install -m 0644 $(DIR_SRC)/config/ssl/ffdhe4096.pem /etc/ssl