From mboxrd@z Thu Jan  1 00:00:00 1970
Delivery-date: Fri, 04 Feb 2022 17:30:02 +0100
Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33])
	by lore.white.stw.pengutronix.de with esmtps  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.94.2)
	(envelope-from <ptxdist-bounces+lore=lore.pengutronix.de@pengutronix.de>)
	id 1nG1TG-005fZa-Ae
	for lore@lore.pengutronix.de; Fri, 04 Feb 2022 17:30:02 +0100
Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de)
	by metis.ext.pengutronix.de with esmtp (Exim 4.92)
	(envelope-from <ptxdist-bounces@pengutronix.de>)
	id 1nG1TF-00083K-Em; Fri, 04 Feb 2022 17:30:01 +0100
Received: from mail.pqgruber.com ([2a05:d014:575:f70b:4f2c:8f1d:40c4:b13e])
 by metis.ext.pengutronix.de with esmtps
 (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92)
 (envelope-from <clemens.gruber@pqgruber.com>) id 1nG1Sa-0007uH-5l
 for ptxdist@pengutronix.de; Fri, 04 Feb 2022 17:29:20 +0100
Received: from localhost.localdomain (213-47-165-233.cable.dynamic.surfer.at
 [213.47.165.233])
 by mail.pqgruber.com (Postfix) with ESMTPSA id 9C066C028CD;
 Fri,  4 Feb 2022 17:29:19 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pqgruber.com;
 s=mail; t=1643992159;
 bh=f98AaUudzp4OSuYXki+4rBgjfmhr+jF44w8vK2cTUgY=;
 h=From:To:Cc:Subject:Date:In-Reply-To:References:From;
 b=MCu99SN6ZkQGSyD8ABc3XKhI9EEFdd3tARwQZrVINhGDAWy2EqI6AtACuXiB8BBiD
 nYAAYx3Ckz1LNpUdWHjpzOf7L8M8I49csMMN5dUeMTKwquvh5IOb0pOkcELimF3Joe
 FHpi6Ll5S21D9tufGEQ0vNu4mlmV6gNHPjBAmvOE=
From: Clemens Gruber <clemens.gruber@pqgruber.com>
To: ptxdist@pengutronix.de
Date: Fri,  4 Feb 2022 17:28:08 +0100
Message-Id: <20220204162809.830058-2-clemens.gruber@pqgruber.com>
X-Mailer: git-send-email 2.35.1
In-Reply-To: <20220204162809.830058-1-clemens.gruber@pqgruber.com>
References: <20220204162809.830058-1-clemens.gruber@pqgruber.com>
MIME-Version: 1.0
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
 metis.ext.pengutronix.de
X-Spam-Level: 
X-Spam-Status: No, score=-102.9 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE,
 SPF_PASS,T_SCC_BODY_TEXT_LINE,USER_IN_WELCOMELIST,USER_IN_WHITELIST
 autolearn=ham autolearn_force=no version=3.4.2
Subject: [ptxdist] [PATCH 2/3] systemd: add option for openssl support
X-BeenThere: ptxdist@pengutronix.de
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: PTXdist Development Mailing List <ptxdist.pengutronix.de>
List-Unsubscribe: <http://metis.pengutronix.de/cgi-bin/mailman/options/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=unsubscribe>
List-Archive: <http://metis.pengutronix.de/cgi-bin/mailman/private/ptxdist/>
List-Post: <mailto:ptxdist@pengutronix.de>
List-Help: <mailto:ptxdist-request@pengutronix.de?subject=help>
List-Subscribe: <http://metis.pengutronix.de/cgi-bin/mailman/listinfo/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=subscribe>
Reply-To: ptxdist@pengutronix.de
Cc: Clemens Gruber <clemens.gruber@pqgruber.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "ptxdist" <ptxdist-bounces@pengutronix.de>
X-SA-Exim-Connect-IP: 127.0.0.1
X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de
X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false

With the OpenSSL dependency, systemd-resolved supports DNSSEC
validation.

Signed-off-by: Clemens Gruber <clemens.gruber@pqgruber.com>
---
 rules/systemd.in   | 7 +++++++
 rules/systemd.make | 2 +-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/rules/systemd.in b/rules/systemd.in
index 1a8696d2b..053991f3e 100644
--- a/rules/systemd.in
+++ b/rules/systemd.in
@@ -28,6 +28,7 @@ menuconfig SYSTEMD
 	select IPTABLES		if SYSTEMD_IPMASQUERADE
 	select LIBELF		if SYSTEMD_COREDUMP
 	select LIBELF_LIBDW	if SYSTEMD_COREDUMP
+	select OPENSSL		if SYSTEMD_OPENSSL
 	# for udev:
 	select ROOTFS_DEV
 	select LIBBLKID
@@ -108,6 +109,12 @@ config SYSTEMD_NETWORK
 	select SYSTEMD_DBUS_SERVICES
 	prompt "network configuration with systemd"
 
+config SYSTEMD_OPENSSL
+	bool
+	prompt "openssl support"
+	help
+	  OpenSSL is needed for DNSSEC support in systemd-resolved
+
 config SYSTEMD_IPMASQUERADE
 	bool
 	depends on SYSTEMD_NETWORK
diff --git a/rules/systemd.make b/rules/systemd.make
index ffa9dbd6a..c13f9abb9 100644
--- a/rules/systemd.make
+++ b/rules/systemd.make
@@ -143,7 +143,7 @@ SYSTEMD_CONF_OPT	:= \
 	-Dntp-servers= \
 	-Dok-color=green \
 	-Doomd=false \
-	-Dopenssl=false \
+	-Dopenssl=$(call ptx/truefalse,PTXCONF_SYSTEMD_OPENSSL) \
 	-Doss-fuzz=false \
 	-Dp11kit=false \
 	-Dpam=false \
-- 
2.35.1


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de