openssl: Update to version 1.0.2b
[ipfire-2.x.git] / lfs / openssl
CommitLineData
cd1a2927 1###############################################################################
cd1a2927 2# #
70df8302 3# IPFire.org - A linux based firewall #
2805275e 4# Copyright (C) 2007-2015 IPFire Team <info@ipfire.org> #
70df8302
MT
5# #
6# This program is free software: you can redistribute it and/or modify #
cd1a2927 7# it under the terms of the GNU General Public License as published by #
70df8302 8# the Free Software Foundation, either version 3 of the License, or #
cd1a2927
MT
9# (at your option) any later version. #
10# #
70df8302 11# This program is distributed in the hope that it will be useful, #
cd1a2927
MT
12# but WITHOUT ANY WARRANTY; without even the implied warranty of #
13# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14# GNU General Public License for more details. #
15# #
16# You should have received a copy of the GNU General Public License #
70df8302 17# along with this program. If not, see <http://www.gnu.org/licenses/>. #
cd1a2927 18# #
cd1a2927
MT
19###############################################################################
20
21###############################################################################
22# Definitions
23###############################################################################
24
25include Config
26
3e95f420 27VER = 1.0.2b
cd1a2927
MT
28
29THISAPP = openssl-$(VER)
30DL_FILE = $(THISAPP).tar.gz
50f96334 31DL_FROM = $(URL_IPFIRE)
cd1a2927 32DIR_APP = $(DIR_SRC)/$(THISAPP)
37de68c9 33
f3c79385 34TARGET = $(DIR_INFO)/$(THISAPP)$(KCFG)
37de68c9 35
7fe56695 36ifneq "$(KCFG)" "-sse2"
37de68c9 37CFLAGS += -DPURIFY
7fe56695
AF
38else
39CFLAGS =-O2 -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fPIC
40CFLAGS+= -fstack-protector-all --param=ssp-buffer-size=4
41CFLAGS+= -march=i686 -mmmx -msse -msse2 -mfpmath=sse
42CFLAGS+= -fomit-frame-pointer -DPURIFY
43CXXFLAGS="${CFLAGS}"
44endif
45
37de68c9
MT
46export RPM_OPT_FLAGS = $(CFLAGS)
47
48CONFIGURE_OPTIONS = \
49 --prefix=/usr \
50 --openssldir=/etc/ssl \
51 --enginesdir=/usr/lib/openssl/engines \
52 shared \
53 zlib-dynamic \
54 enable-camellia \
55 enable-md2 \
56 enable-seed \
57 enable-tlsext \
58 enable-rfc3779 \
59 no-idea \
60 no-mdc2 \
61 no-rc5 \
62 no-srp \
63 -DSSL_FORBID_ENULL
cd1a2927 64
0f90adc0 65ifeq "$(MACHINE)" "i586"
37de68c9
MT
66 CONFIGURE_OPTIONS += linux-elf
67
f3c79385 68ifneq "$(KCFG)" "-sse2"
37de68c9
MT
69 CONFIGURE_OPTIONS += no-sse2
70endif
0f90adc0
EK
71endif
72
73ifeq "$(MACHINE)" "armv5tel"
432bc116 74 CONFIGURE_OPTIONS += linux-generic32
0f90adc0
EK
75endif
76
cd1a2927
MT
77###############################################################################
78# Top-level Rules
79###############################################################################
80
81objects = $(DL_FILE)
82
83$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
84
3e95f420 85$(DL_FILE)_MD5 = 7729b259e2dea7d60b32fc3934d6984b
cd1a2927
MT
86
87install : $(TARGET)
88
89check : $(patsubst %,$(DIR_CHK)/%,$(objects))
90
91download :$(patsubst %,$(DIR_DL)/%,$(objects))
92
93md5 : $(subst %,%_MD5,$(objects))
94
95###############################################################################
96# Downloading, checking, md5sum
97###############################################################################
98
99$(patsubst %,$(DIR_CHK)/%,$(objects)) :
100 @$(CHECK)
101
102$(patsubst %,$(DIR_DL)/%,$(objects)) :
103 @$(LOAD)
104
105$(subst %,%_MD5,$(objects)) :
106 @$(MD5)
107
108###############################################################################
109# Installation Details
110###############################################################################
111
112$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
113 @$(PREBUILD)
114 @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
0f90adc0 115 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.0-beta5-enginesdir.patch
1245aa72 116 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a-rpmbuild.patch
a0297133 117 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.1m-weak-ciphers.patch
d0bd5afe 118 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-disable-sslv2-sslv3.patch
0f90adc0 119
0e2f9b01 120 # i586 specific patches
f68ae02d
AF
121ifeq "$(MACHINE)" "i586"
122 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a_auto_enable_padlock.patch
0e2f9b01 123 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch
f68ae02d
AF
124endif
125
a0297133
MT
126 # Apply our CFLAGS
127 cd $(DIR_APP) && sed -i Configure \
128 -e "s/-O3 -fomit-frame-pointer/$(CFLAGS)/g"
129
0f90adc0
EK
130 cd $(DIR_APP) && find crypto/ -name Makefile -exec \
131 sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i {} \;
132
37de68c9 133 cd $(DIR_APP) && ./Configure $(CONFIGURE_OPTIONS)
0f90adc0
EK
134
135 cd $(DIR_APP) && make depend
136 cd $(DIR_APP) && make
137
f3c79385 138ifeq "$(KCFG)" "-sse2"
37de68c9
MT
139 -mkdir -pv /usr/lib/sse2
140 cd $(DIR_APP) && install -m 755 \
cbdee67e 141 libcrypto.so.10 /usr/lib/sse2
37de68c9 142else
0f90adc0
EK
143 # Install everything.
144 cd $(DIR_APP) && make install
cd1a2927 145 install -m 0644 $(DIR_SRC)/config/ssl/openssl.cnf /etc/ssl
0f90adc0
EK
146
147 # Remove man pages.
148 -rm -vfr /etc/ssl/man
149
150 # Move engines to the right place.
151 -mkdir -pv /usr/lib/openssl
152 rm -vfr /usr/lib/openssl/engines
153 mv -v /usr/lib/engines /usr/lib/openssl
37de68c9 154endif
0f90adc0 155
cd1a2927
MT
156 @rm -rf $(DIR_APP)
157 @$(POSTBUILD)