openssl: update to version 1.1.1a
authorEneas U de Queiroz <cote2004-github@yahoo.com>
Wed, 24 Oct 2018 14:25:00 +0000 (11:25 -0300)
committerHauke Mehrtens <hauke@hauke-m.de>
Tue, 12 Feb 2019 21:23:26 +0000 (22:23 +0100)
commitd872d00b2f7e31b98e11e83922d1aaefc270647e
tree70a74b004144e1a2d16c71b6d4aff626e085c498
parentbe3892284ca77a69615351b106b8dfbadad728c4
openssl: update to version 1.1.1a

This version adds the following functionality:
  * TLS 1.3
  * AFALG engine support for hardware accelleration
  * x25519 ECC curve support
  * CRIME protection: disable use of compression by default
  * Support for ChaCha20 and Poly1305

Patches fixing bugs in the /dev/crypto engine were applied, from
https://github.com/openssl/openssl/pull/7585

This increses the size of the ipk binray on MIPS32 by about 32%:
old:
693.941 bin/packages/mips_24kc/base/libopenssl1.0.0_1.0.2q-2_mips_24kc.ipk
193.827 bin/packages/mips_24kc/base/openssl-util_1.0.2q-2_mips_24kc.ipk

new:
912.493 bin/packages/mips_24kc/base/libopenssl1.1_1.1.1a-2_mips_24kc.ipk
239.316 bin/packages/mips_24kc/base/openssl-util_1.1.1a-2_mips_24kc.ipk

Signed-off-by: Eneas U de Queiroz <cote2004-github@yahoo.com>
22 files changed:
package/libs/openssl/Config.in
package/libs/openssl/Makefile
package/libs/openssl/patches/100-Configure-afalg-support.patch [new file with mode: 0644]
package/libs/openssl/patches/100-openwrt_targets.patch [deleted file]
package/libs/openssl/patches/110-openwrt_targets.patch [new file with mode: 0644]
package/libs/openssl/patches/110-perl-path.patch [deleted file]
package/libs/openssl/patches/120-makefile-dirs.patch [deleted file]
package/libs/openssl/patches/120-strip-cflags-from-binary.patch [new file with mode: 0644]
package/libs/openssl/patches/130-disable_doc_tests.patch [deleted file]
package/libs/openssl/patches/130-dont-build-tests-fuzz.patch [new file with mode: 0644]
package/libs/openssl/patches/140-bash_path.patch [deleted file]
package/libs/openssl/patches/150-fix_link_segfault.patch [deleted file]
package/libs/openssl/patches/160-remove_timestamp_check.patch [deleted file]
package/libs/openssl/patches/170-parallel_build.patch [deleted file]
package/libs/openssl/patches/180-strip-cflags-from-binary.patch [deleted file]
package/libs/openssl/patches/200-eng_devcrypto-don-t-leak-methods-tables.patch [new file with mode: 0644]
package/libs/openssl/patches/210-eng_devcrypto-expand-digest-failure-cases.patch [new file with mode: 0644]
package/libs/openssl/patches/220-eng_devcrypto-fix-copy-of-unitilialized-digest.patch [new file with mode: 0644]
package/libs/openssl/patches/230-eng_devcrypto-close-session-on-cleanup-not-final.patch [new file with mode: 0644]
package/libs/openssl/patches/240-eng_devcrypto-add-cipher-CTX-copy-function.patch [new file with mode: 0644]
package/libs/openssl/patches/250-eng_devcrypto-fix-ctr-mode.patch [new file with mode: 0644]
package/libs/openssl/patches/260-eng_devcrypto-make-sure-digest-can-do-copy.patch [new file with mode: 0644]