From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from mail-wm1-x343.google.com ([2a00:1450:4864:20::343]) by metis.ext.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1k1XdU-0005i1-EN for ptxdist@pengutronix.de; Fri, 31 Jul 2020 18:11:56 +0200 Received: by mail-wm1-x343.google.com with SMTP id 184so9740423wmb.0 for ; Fri, 31 Jul 2020 09:11:56 -0700 (PDT) From: Bruno Thomsen Date: Fri, 31 Jul 2020 18:11:36 +0200 Message-Id: <20200731161141.6155-2-bruno.thomsen@gmail.com> In-Reply-To: <20200731161141.6155-1-bruno.thomsen@gmail.com> References: <20200731161141.6155-1-bruno.thomsen@gmail.com> MIME-Version: 1.0 Subject: [ptxdist] [PATCH v3 2/7] chrony: nettle authentication support List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ptxdist-bounces@pengutronix.de Sender: "ptxdist" To: ptxdist@pengutronix.de Cc: Bruno Thomsen , bth@kamstrup.com Use nettle crypto lib for stronger time packet authentication support. Signed-off-by: Bruno Thomsen --- Changes since version 2: - Go back to version 1 of patch. Changes since version 1: - Replace ptx/ifdef with ptx/endis and ptx/wwo for explicit options. This outputs unrecognized options, but we still get expected result. Unrecognized option : --enable-sechash Unrecognized option : --with-nettle rules/chrony.in | 8 ++++++++ rules/chrony.make | 4 ++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/rules/chrony.in b/rules/chrony.in index 1f5e241c9..c81eba868 100644 --- a/rules/chrony.in +++ b/rules/chrony.in @@ -6,6 +6,7 @@ menuconfig CHRONY prompt "chrony " select LIBC_M select LIBCAP + select NETTLE if CHRONY_USE_NETTLE help This will install the Chrony NTPD Daemon (chronyd) Chrony is a pair of programs which are used to maintain @@ -21,6 +22,13 @@ menuconfig CHRONY if CHRONY +config CHRONY_USE_NETTLE + bool + prompt "Use nettle crypto library" + help + Use nettle crypto library for stronger keys than MD5 in + NTP authentication. + comment "install options ---" config CHRONY_INSTALL_CHRONY_COMMAND diff --git a/rules/chrony.make b/rules/chrony.make index 8c1034462..9f20c413d 100644 --- a/rules/chrony.make +++ b/rules/chrony.make @@ -44,8 +44,8 @@ CHRONY_CONF_OPT := \ --sysconfdir=/etc \ --disable-readline \ --without-editline \ - --disable-sechash \ - --without-nettle \ + $(call ptx/ifdef, PTXCONF_CHRONY_USE_NETTLE,,--disable-sechash) \ + $(call ptx/ifdef, PTXCONF_CHRONY_USE_NETTLE,,--without-nettle) \ --without-nss \ --without-tomcrypt \ --disable-cmdmon \ -- 2.26.2 _______________________________________________ ptxdist mailing list ptxdist@pengutronix.de To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de