[ptxdist] [RFC PATCH 2/2] openssl: Add option for AF_ALG support

[Alexander Dahl via ptxdist <ptxdist@pengutronix.de>]

There is a netlink socket based kernel interface for hardware crypto
acceleration, which can be used by openssl too, at least for some basic
aes ciphers.

Signed-off-by: Alexander Dahl <ada@thorsis.com>
---
 rules/openssl.in   | 7 +++++++
 rules/openssl.make | 5 +++++
 2 files changed, 12 insertions(+)

diff --git a/rules/openssl.in b/rules/openssl.in
index 474cf42fb..2e6a980f1 100644
--- a/rules/openssl.in
+++ b/rules/openssl.in
@@ -29,6 +29,13 @@ config OPENSSL_BIN
 	help
 	  Whether to build and install OpenSSL binary.
 
+config OPENSSL_AFALG
+	bool
+	prompt "support AF_ALG engine"
+	help
+	  Enable support for using the AF_ALG socket type as kernel
+	  interface for hardware acceleration.
+
 config OPENSSL_CRYPTODEV
 	bool
 	prompt "use cryptodev hw acceleration"
diff --git a/rules/openssl.make b/rules/openssl.make
index 2ffd9b4b6..798bfc415 100644
--- a/rules/openssl.make
+++ b/rules/openssl.make
@@ -69,6 +69,7 @@ OPENSSL_CONF_OPT := \
 	--libdir=/usr/lib \
 	--openssldir=/usr/lib/ssl \
 	shared \
+	$(call ptx/ifdef, PTXCONF_OPENSSL_AFALG, enable-afalgeng, no-afalgeng) \
 	$(call ptx/ifdef, PTXCONF_OPENSSL_CRYPTODEV, enable-devcryptoeng, no-devcryptoeng) \
 	$(call ptx/ifdef, PTXCONF_OPENSSL_KTLS, enable-ktls, no-ktls) \
 	no-idea \
@@ -114,6 +115,10 @@ ifdef PTXCONF_OPENSSL_LEGACY
 		/usr/lib/ossl-modules/legacy.so)
 endif
 
+ifdef PTXCONF_OPENSSL_AFALG
+	@$(call install_copy, openssl, 0, 0, 0644, -, \
+		/usr/lib/engines-3/afalg.so)
+endif
 ifdef PTXCONF_OPENSSL_CRYPTODEV
 	@$(call install_copy, openssl, 0, 0, 0644, -, \
 		/usr/lib/engines-3/devcrypto.so)
-- 
2.47.3