aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity/bearssl
AgeCommit message (Collapse)Author
2023-06-21*.patch: add Upstream-Status to all patchesMartin Jansa
There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-03recipes: Update SRC_URI branch and protocolsRichard Purdie
This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-22bearssl: Update to tip of masterKhem Raj
changelog * 79b1a99 Fixed comment. * b2ec203 Fixed carry propagation bug in m64 impl for P-256. * dda1f8a Harmonized behaviour when point length is invalid. * acc70b1 Typo fix in comment. * 946f5ba Added discard of unread appdata on explicit close. * 252dba9 Fixed carry propagation bug in P-256 'm62' implementation (found by Auke Zeilstra; consequences unclear, possibly some invalid curve attacks in static ECDH contexts). * 15b3af7 Typo fix in comment. * 69807a3 Fixed typo in comment. * fb4296c Fixed some errors in comments. * 4b60464 Fixed small display bug in debug tool. * b715b43 Fixed buffer overflow in private key decoding (wrong buffer length used in size check). * 2893441 Fixed a spurious warning on some compilers. * e4edfb8 Added support for getrandom()/getentropy(), and a fix for the RDRAND bug on AMD CPU (family 22). * 924921d Fixed mishandling of UTF-8 codepoints in the FDF0..FEDF range (these were unduly rejected when extracting names from certificates, thereby preventing use of the extra presentation forms of Arabic). * 9721b3e Fixed efficiency pre-test on RSA prime generation (no security issue, but RSA key generation with pubexp 5, 7 or 11 may be slightly more efficient). * ecdf897 Normalize use of BR_DOXYGEN_IGNORE. * c1bb535 Small workaround for CompCert compatibility. * 87a796d Fixed computing of intermediate buffer size for maximum-size RSA keys. * 6433cc2 Added detection for MIPS64 with n32 ABI. * 001d094 Some small performance improvements on 32-bit architectures. * 08eb078 Fixed fd leak in test code. * d5acc4f Made m64 implementations of elliptic curves the default (when available). * f0ddbc3 Added new 64-bit implementations of Curve25519 and P-256. * b2a08e9 Made ec_c25519_m62 implementation the default on supported architectures. * 52a69fe Fixed endianness in Curve25519 implementation (no consequence on security). Also added new Curve25519 code for 64-bit platforms. * fd98320 Cosmetic fix (value did not conform to its announced bit length, but this did not have bad consequences since br_i31_decode_mod() is lenient on that). * 431629d Changed speed benchmark for i31 to a 521-bit modulus. * c6ffcd2 Fixed warning on GCC 4.6 to 4.9 (macro redefinition). * 420f50c Added stand-alone RSA/PSS implementation. * 966078b Added SHAKE implementation. Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-01bearssl: fix GNU_HASH link errorKhem Raj
Fixes No GNU_HASH in the ELF binary /mnt/b/yoe/master/build/tmp/work/cortexa57-yoe-linux/bearssl/0.6-r0/packages-split/bearssl/usr/lib/libbearssl.so.6.0.0, didn't pass LDFLAGS? [ldflag s] Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21bearssl: fix missing installJens Rehsack
Default Makefile of bearssl doesn't have a make target which hadn't enough attraction when creating the recipe. Add missing functionality. Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-19bearssl: add new recipeJens Rehsack
Add recipe for BearSSL - an an implementation of the SSL/TLS protocol with the approach of: * Be correct and secure. * Be small * Be highly portable * Be feature-rich and extensible See https://bearssl.org for more details. Signed-off-by: Jens Rehsack <sno@netbsd.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>