[ptxdist] [PATCH v2] kernel: need openssl since v4.3

[ptxdist] [PATCH v2] kernel: need openssl since v4.3

[Markus Niebel]

From: Markus Niebel <Markus.Niebel@tq-group.com>

regarding to https://www.kernel.org/doc/Documentation/Changes
kernel needs openssl to compile since v4.3

This is true only for use cases like module signing and trusted keyring
for things like IMA. Add hostside openssl as an optional dependency

Signed-off-by: Markus Niebel <Markus.Niebel@tq-group.com>
---
Changes since v1

make dependency optional as suggested by M. Olbrich

 platforms/kernel.in | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/platforms/kernel.in b/platforms/kernel.in
index 8b16739..4893353 100644
--- a/platforms/kernel.in
+++ b/platforms/kernel.in
@@ -9,6 +9,7 @@ menuconfig KERNEL
 	select HOST_LZOP		if KERNEL_LZOP
 	select HOST_LIBKMOD		if KERNEL_MODULES
 	select HOST_SYSTEM_BC
+	select HOST_OPENSSL		if KERNEL_OPENSSL
 	prompt "Linux kernel                  "
 
 if KERNEL
@@ -236,6 +237,15 @@ config KERNEL_LZOP
 	  Select this if you're unsure, as it won't hurt. It just
 	  increases the build time.
 
+config KERNEL_OPENSSL
+	prompt "build openssl hosttool"
+	bool
+	help
+	  Select this if you're going to build your kernel with support for
+	  module signing, IMA etc. where openssl is need as hosttool
+
+	  Select this if you're unsure, as it won't hurt. It just
+	  increases the build time.
 
 menu "patching & configuration      "
 
-- 
1.9.1


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de

Re: [ptxdist] [PATCH v2] kernel: need openssl since v4.3

[Michael Olbrich]

On Fri, Mar 31, 2017 at 05:45:38PM +0200, Markus Niebel wrote:
> From: Markus Niebel <Markus.Niebel@tq-group.com>
> 
> regarding to https://www.kernel.org/doc/Documentation/Changes
> kernel needs openssl to compile since v4.3
> 
> This is true only for use cases like module signing and trusted keyring
> for things like IMA. Add hostside openssl as an optional dependency
> 
> Signed-off-by: Markus Niebel <Markus.Niebel@tq-group.com>

Thanks, applied,

Michael

> ---
> Changes since v1
> 
> make dependency optional as suggested by M. Olbrich
> 
>  platforms/kernel.in | 10 ++++++++++
>  1 file changed, 10 insertions(+)
> 
> diff --git a/platforms/kernel.in b/platforms/kernel.in
> index 8b16739..4893353 100644
> --- a/platforms/kernel.in
> +++ b/platforms/kernel.in
> @@ -9,6 +9,7 @@ menuconfig KERNEL
>  	select HOST_LZOP		if KERNEL_LZOP
>  	select HOST_LIBKMOD		if KERNEL_MODULES
>  	select HOST_SYSTEM_BC
> +	select HOST_OPENSSL		if KERNEL_OPENSSL
>  	prompt "Linux kernel                  "
>  
>  if KERNEL
> @@ -236,6 +237,15 @@ config KERNEL_LZOP
>  	  Select this if you're unsure, as it won't hurt. It just
>  	  increases the build time.
>  
> +config KERNEL_OPENSSL
> +	prompt "build openssl hosttool"
> +	bool
> +	help
> +	  Select this if you're going to build your kernel with support for
> +	  module signing, IMA etc. where openssl is need as hosttool
> +
> +	  Select this if you're unsure, as it won't hurt. It just
> +	  increases the build time.
>  
>  menu "patching & configuration      "
>  
> -- 
> 1.9.1
> 
> 
> _______________________________________________
> ptxdist mailing list
> ptxdist@pengutronix.de

-- 
Pengutronix e.K.                           |                             |
Industrial Linux Solutions                 | http://www.pengutronix.de/  |
Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de