openssl: Update to 1.0.2m
[ipfire-2.x.git] / lfs / openssl
CommitLineData
cd1a2927 1###############################################################################
cd1a2927 2# #
70df8302 3# IPFire.org - A linux based firewall #
2f221a50 4# Copyright (C) 2007-2016 IPFire Team <info@ipfire.org> #
70df8302
MT
5# #
6# This program is free software: you can redistribute it and/or modify #
cd1a2927 7# it under the terms of the GNU General Public License as published by #
70df8302 8# the Free Software Foundation, either version 3 of the License, or #
cd1a2927
MT
9# (at your option) any later version. #
10# #
70df8302 11# This program is distributed in the hope that it will be useful, #
cd1a2927
MT
12# but WITHOUT ANY WARRANTY; without even the implied warranty of #
13# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14# GNU General Public License for more details. #
15# #
16# You should have received a copy of the GNU General Public License #
70df8302 17# along with this program. If not, see <http://www.gnu.org/licenses/>. #
cd1a2927 18# #
cd1a2927
MT
19###############################################################################
20
21###############################################################################
22# Definitions
23###############################################################################
24
25include Config
26
4a510319 27VER = 1.0.2m
cd1a2927
MT
28
29THISAPP = openssl-$(VER)
30DL_FILE = $(THISAPP).tar.gz
50f96334 31DL_FROM = $(URL_IPFIRE)
cd1a2927 32DIR_APP = $(DIR_SRC)/$(THISAPP)
37de68c9 33
f3c79385 34TARGET = $(DIR_INFO)/$(THISAPP)$(KCFG)
37de68c9 35
7fe56695 36ifneq "$(KCFG)" "-sse2"
37de68c9 37CFLAGS += -DPURIFY
7fe56695
AF
38else
39CFLAGS =-O2 -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fPIC
40CFLAGS+= -fstack-protector-all --param=ssp-buffer-size=4
41CFLAGS+= -march=i686 -mmmx -msse -msse2 -mfpmath=sse
42CFLAGS+= -fomit-frame-pointer -DPURIFY
43CXXFLAGS="${CFLAGS}"
44endif
45
37de68c9
MT
46export RPM_OPT_FLAGS = $(CFLAGS)
47
48CONFIGURE_OPTIONS = \
49 --prefix=/usr \
50 --openssldir=/etc/ssl \
51 --enginesdir=/usr/lib/openssl/engines \
52 shared \
53 zlib-dynamic \
54 enable-camellia \
55 enable-md2 \
d25d7bfc 56 disable-ssl2 \
37de68c9
MT
57 enable-seed \
58 enable-tlsext \
59 enable-rfc3779 \
60 no-idea \
61 no-mdc2 \
62 no-rc5 \
63 no-srp \
bff88a48
MT
64 -DSSL_FORBID_ENULL \
65 $(OPENSSL_ARCH)
cd1a2927 66
bff88a48
MT
67ifeq "$(IS_64BIT)" "1"
68 OPENSSL_ARCH = linux-generic64
69else
70 OPENSSL_ARCH = linux-generic32
6e696bee
MT
71endif
72
bff88a48
MT
73ifeq "$(BUILD_ARCH)" "aarch64"
74 OPENSSL_ARCH = linux-aarch64
37de68c9 75endif
bff88a48
MT
76
77ifeq "$(BUILD_ARCH)" "x86_64"
78 OPENSSL_ARCH = linux-x86_64
0f90adc0
EK
79endif
80
bff88a48
MT
81ifeq "$(BUILD_ARCH)" "i586"
82 OPENSSL_ARCH = linux-elf
83
84 ifneq "$(KCFG)" "-sse2"
85 OPENSSL_ARCH += no-sse2
86 endif
0f90adc0
EK
87endif
88
cd1a2927
MT
89###############################################################################
90# Top-level Rules
91###############################################################################
92
93objects = $(DL_FILE)
94
95$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
96
4a510319 97$(DL_FILE)_MD5 = 10e9e37f492094b9ef296f68f24a7666
cd1a2927
MT
98
99install : $(TARGET)
100
101check : $(patsubst %,$(DIR_CHK)/%,$(objects))
102
103download :$(patsubst %,$(DIR_DL)/%,$(objects))
104
105md5 : $(subst %,%_MD5,$(objects))
106
107###############################################################################
108# Downloading, checking, md5sum
109###############################################################################
110
111$(patsubst %,$(DIR_CHK)/%,$(objects)) :
112 @$(CHECK)
113
114$(patsubst %,$(DIR_DL)/%,$(objects)) :
115 @$(LOAD)
116
117$(subst %,%_MD5,$(objects)) :
118 @$(MD5)
119
120###############################################################################
121# Installation Details
122###############################################################################
123
124$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
125 @$(PREBUILD)
126 @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
0f90adc0 127 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.0-beta5-enginesdir.patch
1245aa72 128 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a-rpmbuild.patch
d25d7bfc 129 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2h-weak-ciphers.patch
353e08cd 130 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2g-disable-sslv2v3.patch
0f90adc0 131
0e2f9b01 132 # i586 specific patches
dc7d6b20 133ifeq "$(BUILD_ARCH)" "i586"
f68ae02d 134 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a_auto_enable_padlock.patch
0e2f9b01 135 cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch
f68ae02d
AF
136endif
137
c7762365
MT
138 # With openssl 1.0.2e, pod2mantest is missing
139 echo -e "#!/bin/bash\necho \$$(which pod2man)" > $(DIR_APP)/util/pod2mantest
140 chmod a+x $(DIR_APP)/util/pod2mantest
141
a0297133
MT
142 # Apply our CFLAGS
143 cd $(DIR_APP) && sed -i Configure \
144 -e "s/-O3 -fomit-frame-pointer/$(CFLAGS)/g"
145
0f90adc0
EK
146 cd $(DIR_APP) && find crypto/ -name Makefile -exec \
147 sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i {} \;
148
37de68c9 149 cd $(DIR_APP) && ./Configure $(CONFIGURE_OPTIONS)
0f90adc0
EK
150
151 cd $(DIR_APP) && make depend
152 cd $(DIR_APP) && make
153
f3c79385 154ifeq "$(KCFG)" "-sse2"
37de68c9
MT
155 -mkdir -pv /usr/lib/sse2
156 cd $(DIR_APP) && install -m 755 \
cbdee67e 157 libcrypto.so.10 /usr/lib/sse2
37de68c9 158else
0f90adc0
EK
159 # Install everything.
160 cd $(DIR_APP) && make install
cd1a2927 161 install -m 0644 $(DIR_SRC)/config/ssl/openssl.cnf /etc/ssl
0f90adc0
EK
162
163 # Remove man pages.
164 -rm -vfr /etc/ssl/man
165
166 # Move engines to the right place.
167 -mkdir -pv /usr/lib/openssl
168 rm -vfr /usr/lib/openssl/engines
169 mv -v /usr/lib/engines /usr/lib/openssl
37de68c9 170endif
0f90adc0 171
cd1a2927
MT
172 @rm -rf $(DIR_APP)
173 @$(POSTBUILD)