From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 21 Mar 2025 09:53:11 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1tvY7s-002G07-0i for lore@lore.pengutronix.de; Fri, 21 Mar 2025 09:53:11 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1tvY7r-0002Vf-8S; Fri, 21 Mar 2025 09:53:11 +0100 To: ptxdist@pengutronix.de Date: Fri, 21 Mar 2025 09:52:44 +0100 In-Reply-To: <20250321085246.21344-1-ada@thorsis.com> References: <20250321085246.21344-1-ada@thorsis.com> MIME-Version: 1.0 Message-ID: List-Id: PTXdist Development Mailing List List-Post: From: Alexander Dahl via ptxdist Precedence: list Cc: Alexander Dahl X-Mailman-Version: 2.1.29 X-BeenThere: ptxdist@pengutronix.de List-Subscribe: , List-Unsubscribe: , List-Archive: Reply-To: ptxdist@pengutronix.de List-Help: Subject: [ptxdist] [RFC PATCH 5/7] swupdate: Add option to build with OpenSSL support Content-Type: message/rfc822 Content-Disposition: inline Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Received: from mail.thorsis.com ([2003:a:e28:26e4::10]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1tvY7a-00026e-89 for ptxdist@pengutronix.de; Fri, 21 Mar 2025 09:52:54 +0100 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 612FA1488D72 for ; Fri, 21 Mar 2025 09:52:52 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thorsis.com; s=dkim; t=1742547172; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=S9/Xhthtq2NvTjBU0j9QdD6PjrJn+NtxkvRRTM7HHRE=; b=KVrdlroHYn3zMXg2u0ZfOVk73FYAS4erR9BdD1poAZ0DYd2iTVpqMQdsl+w6b19wyCRmwj zky3ln8VtirwyDyyIkEailZEoRel7dpJxOmzJ+ShY4ZR37F0AjhRQnlj85PvwLpx36FCUU YOgYzIHDC3RKBN+mfQjBi/UHOce7O8SxqBWTvH279rAdp4GjZ40S0iF7At9a/7X4b1SIJP 1XDkFpRR69PR2IgbWpDIgtmiOJxUiYQr/EJV6SdmxrR0y4psdT4hnkcUc3+se439ZtRvJt RIkpexP0Bp+Pv3Ryx9S+NyFwvKjEn2Hf57Ug4l89RRG5FJWBaF0b9PhkjBBi+Q== From: Alexander Dahl To: ptxdist@pengutronix.de Date: Fri, 21 Mar 2025 09:52:44 +0100 Message-Id: <20250321085246.21344-6-ada@thorsis.com> X-Mailer: git-send-email 2.39.5 In-Reply-To: <20250321085246.21344-1-ada@thorsis.com> References: <20250321085246.21344-1-ada@thorsis.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Last-TLS-Session-Version: TLSv1.3 X-SA-Exim-Connect-IP: 2003:a:e28:26e4::10 X-SA-Exim-Mail-From: ada@thorsis.com X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-3.4 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [RFC PATCH 5/7] swupdate: Add option to build with OpenSSL support X-SA-Exim-Version: 4.2.1 (built Wed, 08 May 2019 21:11:16 +0000) X-SA-Exim-Scanned: Yes (on metis.whiteo.stw.pengutronix.de) X-PTX-Original-Recipient: ptxdist@pengutronix.de Signed-off-by: Alexander Dahl --- rules/swupdate.in | 16 ++++++++++++++-- rules/swupdate.make | 4 ++-- 2 files changed, 16 insertions(+), 4 deletions(-) diff --git a/rules/swupdate.in b/rules/swupdate.in index 2fc4f6627..d4eab8402 100644 --- a/rules/swupdate.in +++ b/rules/swupdate.in @@ -1,10 +1,11 @@ ## SECTION=applications -config SWUPDATE +menuconfig SWUPDATE tristate select LIBUBOOTENV select JSON_C - prompt "swupdate" + select OPENSSL if SWUPDATE_WITH_OPENSSL + prompt "swupdate " help SWUpdate is a Linux Update agent with the goal to provide an efficient and safe way to update an embedded Linux system in @@ -14,4 +15,15 @@ config SWUPDATE https://swupdate.org/ +if SWUPDATE + +config SWUPDATE_WITH_OPENSSL + bool + prompt "OpenSSL support" + help + Allows to enable hash verification, signed image verification, + image encryption, and https for embedded webserver. + +endif + # vim: ft=kconfig noet tw=72 ts=8 sw=8 diff --git a/rules/swupdate.make b/rules/swupdate.make index ef6e8711f..bcd109f05 100644 --- a/rules/swupdate.make +++ b/rules/swupdate.make @@ -69,9 +69,9 @@ SWUPDATE_CONF_ENV := \ HAVE_ZSTD=n \ HAVE_LIBEXT2FS=n \ HAVE_LIBBTRFS=n \ - HAVE_LIBSSL=n \ + HAVE_LIBSSL=$(call ptx/ifdef, PTXCONF_SWUPDATE_WITH_OPENSSL, y, n) \ HAVE_LIBSYSTEMD=n \ - HAVE_LIBCRYPTO=n \ + HAVE_LIBCRYPTO=$(call ptx/ifdef, PTXCONF_SWUPDATE_WITH_OPENSSL, y, n) \ HAVE_WOLFSSL=n \ HAVE_MBEDTLS=n \ HAVE_P11KIT=n \ -- 2.39.5