]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blobdiff - lfs/openssl
suricata: Change midstream policy to "pass-flow"
[people/pmueller/ipfire-2.x.git] / lfs / openssl
index 43401237a8bfaf34ccdc8ce83e15f38705f9003a..695035742481e82d31b832bf253bc46b91623e22 100644 (file)
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2022  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2024  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.1.1p
+VER        = 3.2.1
 
 THISAPP    = openssl-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -52,16 +52,14 @@ CONFIGURE_OPTIONS = \
        no-aria \
        $(OPENSSL_ARCH)
 
-ifeq "$(IS_64BIT)" "1"
-       OPENSSL_ARCH = linux-generic64
-else
-       OPENSSL_ARCH = linux-generic32
-endif
-
 ifeq "$(BUILD_ARCH)" "aarch64"
        OPENSSL_ARCH = linux-aarch64
 endif
 
+ifeq "$(BUILD_ARCH)" "riscv64"
+       OPENSSL_ARCH = linux64-riscv64
+endif
+
 ifeq "$(BUILD_ARCH)" "x86_64"
        OPENSSL_ARCH = linux-x86_64
 endif
@@ -74,7 +72,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 723c7784f39d7a475c190f0399b3721a6f315e1ea6f92617e12bfed3701609398b52d7881a6111c9260337cf369a85cc66f3d368043ab31a19ca5c8eb2237214
+$(DL_FILE)_BLAKE2 = 960222e0305166160e5ab000e29650b92063bf726551ee9ad46060166d99738d1e3a5b86fd28b14c8f4fb3a72f5aa70850defb87c02990acff3dbcbdac40b347
 
 install : $(TARGET)
 
@@ -104,7 +102,6 @@ $(subst %,%_BLAKE2,$(objects)) :
 $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        @$(PREBUILD)
        @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
-       cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.1.1d-default-cipherlist.patch
 
        # Apply our CFLAGS
        cd $(DIR_APP) && sed -i Configure \
@@ -123,5 +120,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
        cd $(DIR_APP) && make install
        install -m 0644 $(DIR_SRC)/config/ssl/openssl.cnf /etc/ssl
 
+       # Install RFC 7919 defined standard group ffdhe4096
+       install -m 0644 $(DIR_SRC)/config/ssl/ffdhe4096.pem /etc/ssl
+
        @rm -rf $(DIR_APP)
        @$(POSTBUILD)