]> git.ipfire.org Git - thirdparty/openwrt.git/commit
boot: arm-trusted-firmware-microchipsw: fix compilation against LibreSSL
authorRobert Marko <robert.marko@sartura.hr>
Mon, 12 Jan 2026 16:28:06 +0000 (17:28 +0100)
committerRobert Marko <robimarko@gmail.com>
Sun, 18 Jan 2026 10:21:27 +0000 (11:21 +0100)
commit111151379d498cb544b34a34fd0fde37f6ea5b19
treeb3e19c071b03f3b7f2c5d2adce9a68c53dc28169
parent43057c5c16c093bb8da5542a563c7e25e7d3c8e6
boot: arm-trusted-firmware-microchipsw: fix compilation against LibreSSL

LibreSSL 3.9+ has dropped support for X509V3 extension API so cert_create
tool does not compile against it at all.

This was hidden by the fact that it was compiling against OpenSSL on my
host which still has that API, however we do not ship libssl-dev in the
Buildbot containers so compiling against distro OpenSSL is not possible.

So, after a long time trying to find any docs on that API I resorted to
LLM(Gemini 3 Pro) to get it to compile.

Our libcrypto is linked against pthread so we must pass -lpthread as well
for cert_tool.

Fixes: 5205c0c42607 ("microchipsw: lan969x: add Microchip EV23X71A")
Signed-off-by: Robert Marko <robert.marko@sartura.hr>
(cherry picked from commit 410277ca12d811daa8040edf75dfd87a2d9dd5f8)
package/boot/arm-trusted-firmware-microchipsw/Makefile
package/boot/arm-trusted-firmware-microchipsw/patches/0002-cert_create-add-LibreSSL-3.9-compatibility.patch [new file with mode: 0644]
package/boot/arm-trusted-firmware-microchipsw/patches/0003-cert_create-pass-pthread-in-LDFLAGS.patch [new file with mode: 0644]