mtk-20170518/package/libs/openssl, branch v17.01.2 MTK 20170518 : Mediatek SDK based on OpenWRT Barrier Breaker openssl: Use mkhash for STAMP_CONFIGURED 2017-04-22T10:43:51+00:00 Florian Fainelli f.fainelli@gmail.com 2017-03-01T18:48:32+00:00 72fcdb6286ad7be24296acbd36043ee3e96e5ec4 The current way of creating a STAMP_CONFIGURED filename for OpenSSL can lead to an extremely long filename that makes touch unable to create it, and fail the build. Use mkhash to produce a hash against OPENSSL_OPTIONS which creates a shortert stamp file, Fixes #572 Signed-off-by: Florian Fainelli <f.fainelli@gmail.com> 
The current way of creating a STAMP_CONFIGURED filename for OpenSSL can
lead to an extremely long filename that makes touch unable to create it,
and fail the build.

Use mkhash to produce a hash against OPENSSL_OPTIONS which creates a
shortert stamp file,

Fixes #572

Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
openssl: update to version 1.0.2k 2017-01-28T12:33:22+00:00 Hauke Mehrtens hauke@hauke-m.de 2017-01-27T22:36:45+00:00 f5ab082243f9822544204fc713c6bd4dab14a3a8 This fixes the following security problems: CVE-2017-3731: Truncated packet could crash via OOB read CVE-2017-3732: BN_mod_exp may produce incorrect results on x86_64 CVE-2016-7055: Montgomery multiplication may produce incorrect results Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fixes the following security problems:
CVE-2017-3731: Truncated packet could crash via OOB read
CVE-2017-3732: BN_mod_exp may produce incorrect results on x86_64
CVE-2016-7055: Montgomery multiplication may produce incorrect results

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
treewide: clean up download hashes 2016-12-16T21:39:22+00:00 Felix Fietkau nbd@nbd.name 2016-12-16T16:32:10+00:00 720b99215da295a2e7b4acdef30b58bec6acedc2 Replace *MD5SUM with *HASH, replace MD5 hashes with SHA256 Signed-off-by: Felix Fietkau <nbd@nbd.name> 
Replace *MD5SUM with *HASH, replace MD5 hashes with SHA256

Signed-off-by: Felix Fietkau <nbd@nbd.name>
openssl: update to 1.0.2j 2016-09-27T15:50:22+00:00 Magnus Kroken mkroken@gmail.com 2016-09-26T15:21:52+00:00 b1f39d3d7ee7ba0714e45af64a935b01877a5175 A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0 but was omitted from OpenSSL 1.0.2i. As a result any attempt to use CRLs in OpenSSL 1.0.2i will crash with a null pointer exception. Patches applied upstream: * 301-fix_no_nextprotoneg_build.patch * 302-Fix_typo_introduced_by_a03f81f4.patch Security advisory: https://www.openssl.org/news/secadv/20160926.txt Signed-off-by: Magnus Kroken <mkroken@gmail.com> 
A bug fix which included a CRL sanity check was added to OpenSSL 1.1.0
but was omitted from OpenSSL 1.0.2i. As a result any attempt to use
CRLs in OpenSSL 1.0.2i will crash with a null pointer exception.

Patches applied upstream:
* 301-fix_no_nextprotoneg_build.patch
* 302-Fix_typo_introduced_by_a03f81f4.patch

Security advisory: https://www.openssl.org/news/secadv/20160926.txt

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
openssl: Make DTLS configurable. 2016-09-27T15:50:22+00:00 Rosen Penev rosenp@gmail.com 2016-09-26T20:00:04+00:00 c0b15b307201ddeeaf01aa4d6c85cdefbade035f Signed-off by: Rosen Penev <rosenp@gmail.com> 
Signed-off by: Rosen Penev <rosenp@gmail.com>
openssl: Remove J-PAKE. Nothing uses it. 2016-09-27T15:50:22+00:00 Rosen Penev rosenp@gmail.com 2016-09-26T19:56:14+00:00 aaa067ab0b3cfd6d26f976e2e5e43ac15a8f0ee6 Signed-off by: Rosen Penev <rosenp@gmail.com> 
Signed-off by: Rosen Penev <rosenp@gmail.com>
openssl: backport build fix when hardware support is used 2016-09-24T17:53:00+00:00 Hauke Mehrtens hauke@hauke-m.de 2016-09-24T17:50:27+00:00 ea288126dbcf11ecf990b858e1c563b24b198327 This fix added to the openssl 1.0.2 branch. In addition add the header for the existing backport. Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
This fix added to the openssl 1.0.2 branch.
In addition add the header for the existing backport.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
openssl: update to 1.0.2i 2016-09-24T11:28:59+00:00 Magnus Kroken mkroken@gmail.com 2016-09-24T09:36:49+00:00 6926325829a2f58059ca8e614c892062fbbae393 Drop 302-fix_no_cmac_build.patch, it has been applied upstream. Security fixes: * (Severity: High) OCSP Status Request extension unbounded memory growth (CVE-2016-6304) * (Severity: Moderate) SSL_peek() hang on empty record (CVE-2016-6305) * 10 Low severity issues Security advisory: https://www.openssl.org/news/secadv/20160922.txt Changelog: https://www.openssl.org/news/cl102.txt Signed-off-by: Magnus Kroken <mkroken@gmail.com> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 
Drop 302-fix_no_cmac_build.patch, it has been applied upstream.

Security fixes:
* (Severity: High) OCSP Status Request extension unbounded memory growth (CVE-2016-6304)
* (Severity: Moderate) SSL_peek() hang on empty record (CVE-2016-6305)
* 10 Low severity issues

Security advisory: https://www.openssl.org/news/secadv/20160922.txt
Changelog: https://www.openssl.org/news/cl102.txt

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
openssl: re-enable ARM assembly 2016-08-31T11:57:05+00:00 Felix Fietkau nbd@nbd.name 2016-08-31T11:31:38+00:00 00a1056c3f366ee27cb86da8e521a827ad5d5b8f The original reason for disabling it seems to have been fixed Related discussion: https://github.com/lede-project/source/pull/307 Signed-off-by: Felix Fietkau <nbd@nbd.name> 
The original reason for disabling it seems to have been fixed
Related discussion: https://github.com/lede-project/source/pull/307

Signed-off-by: Felix Fietkau <nbd@nbd.name>
openssl: re-enable CMAC support 2016-08-09T05:18:03+00:00 Felix Fietkau nbd@nbd.name 2016-08-09T05:17:58+00:00 7ee92227700c324f4c7c9b587bca1d8267c29112 Needed by a few packages Signed-off-by: Felix Fietkau <nbd@nbd.name> 
Needed by a few packages

Signed-off-by: Felix Fietkau <nbd@nbd.name>