]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blob - lfs/openssl
suricata: Change midstream policy to "pass-flow"
[people/pmueller/ipfire-2.x.git] / lfs / openssl
1 ###############################################################################
2 # #
3 # IPFire.org - A linux based firewall #
4 # Copyright (C) 2007-2024 IPFire Team <info@ipfire.org> #
5 # #
6 # This program is free software: you can redistribute it and/or modify #
7 # it under the terms of the GNU General Public License as published by #
8 # the Free Software Foundation, either version 3 of the License, or #
9 # (at your option) any later version. #
10 # #
11 # This program is distributed in the hope that it will be useful, #
12 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
13 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
14 # GNU General Public License for more details. #
15 # #
16 # You should have received a copy of the GNU General Public License #
17 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
18 # #
19 ###############################################################################
20
21 ###############################################################################
22 # Definitions
23 ###############################################################################
24
25 include Config
26
27 VER = 3.2.1
28
29 THISAPP = openssl-$(VER)
30 DL_FILE = $(THISAPP).tar.gz
31 DL_FROM = $(URL_IPFIRE)
32 DIR_APP = $(DIR_SRC)/$(THISAPP)
33
34 TARGET = $(DIR_INFO)/$(THISAPP)$(KCFG)
35
36 CFLAGS += -DPURIFY -Wa,--noexecstack
37
38 export RPM_OPT_FLAGS = $(CFLAGS)
39
40 CONFIGURE_OPTIONS = \
41 --prefix=/usr \
42 --openssldir=/etc/ssl \
43 shared \
44 zlib-dynamic \
45 enable-camellia \
46 enable-seed \
47 enable-rfc3779 \
48 no-idea \
49 no-mdc2 \
50 no-rc5 \
51 no-srp \
52 no-aria \
53 $(OPENSSL_ARCH)
54
55 ifeq "$(BUILD_ARCH)" "aarch64"
56 OPENSSL_ARCH = linux-aarch64
57 endif
58
59 ifeq "$(BUILD_ARCH)" "riscv64"
60 OPENSSL_ARCH = linux64-riscv64
61 endif
62
63 ifeq "$(BUILD_ARCH)" "x86_64"
64 OPENSSL_ARCH = linux-x86_64
65 endif
66
67 ###############################################################################
68 # Top-level Rules
69 ###############################################################################
70
71 objects = $(DL_FILE)
72
73 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
74
75 $(DL_FILE)_BLAKE2 = 960222e0305166160e5ab000e29650b92063bf726551ee9ad46060166d99738d1e3a5b86fd28b14c8f4fb3a72f5aa70850defb87c02990acff3dbcbdac40b347
76
77 install : $(TARGET)
78
79 check : $(patsubst %,$(DIR_CHK)/%,$(objects))
80
81 download :$(patsubst %,$(DIR_DL)/%,$(objects))
82
83 b2 : $(subst %,%_BLAKE2,$(objects))
84
85 ###############################################################################
86 # Downloading, checking, b2sum
87 ###############################################################################
88
89 $(patsubst %,$(DIR_CHK)/%,$(objects)) :
90 @$(CHECK)
91
92 $(patsubst %,$(DIR_DL)/%,$(objects)) :
93 @$(LOAD)
94
95 $(subst %,%_BLAKE2,$(objects)) :
96 @$(B2SUM)
97
98 ###############################################################################
99 # Installation Details
100 ###############################################################################
101
102 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
103 @$(PREBUILD)
104 @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
105
106 # Apply our CFLAGS
107 cd $(DIR_APP) && sed -i Configure \
108 -e "s/-O3 -fomit-frame-pointer/$(CFLAGS)/g"
109
110 cd $(DIR_APP) && find crypto/ -name Makefile -exec \
111 sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i {} \;
112
113 cd $(DIR_APP) && ./Configure $(CONFIGURE_OPTIONS) \
114 $(CFLAGS) $(LDFLAGS)
115
116 cd $(DIR_APP) && make depend
117 cd $(DIR_APP) && make $(MAKETUNING)
118
119 # Install everything
120 cd $(DIR_APP) && make install
121 install -m 0644 $(DIR_SRC)/config/ssl/openssl.cnf /etc/ssl
122
123 # Install RFC 7919 defined standard group ffdhe4096
124 install -m 0644 $(DIR_SRC)/config/ssl/ffdhe4096.pem /etc/ssl
125
126 @rm -rf $(DIR_APP)
127 @$(POSTBUILD)