Andrew Geissler | 9aee500 | 2022-03-30 16:27:02 +0000 | [diff] [blame] | 1 | SUMMARY = "GNU Transport Layer Security Library" |
| 2 | DESCRIPTION = "a secure communications library implementing the SSL, \ |
| 3 | TLS and DTLS protocols and technologies around them." |
| 4 | HOMEPAGE = "https://gnutls.org/" |
| 5 | BUGTRACKER = "https://savannah.gnu.org/support/?group=gnutls" |
| 6 | |
| 7 | LICENSE = "GPL-3.0-or-later & LGPL-2.1-or-later" |
| 8 | LICENSE:${PN} = "LGPL-2.1-or-later" |
| 9 | LICENSE:${PN}-xx = "LGPL-2.1-or-later" |
| 10 | LICENSE:${PN}-bin = "GPL-3.0-or-later" |
| 11 | LICENSE:${PN}-OpenSSL = "GPL-3.0-or-later" |
| 12 | |
| 13 | LIC_FILES_CHKSUM = "file://LICENSE;md5=71391c8e0c1cfe68077e7fce3b586283 \ |
| 14 | file://doc/COPYING;md5=c678957b0c8e964aa6c70fd77641a71e \ |
| 15 | file://doc/COPYING.LESSER;md5=a6f89e2100d9b6cdffcea4f398e37343" |
| 16 | |
| 17 | DEPENDS = "nettle gmp virtual/libiconv libunistring" |
| 18 | DEPENDS:append:libc-musl = " argp-standalone" |
| 19 | |
| 20 | SHRT_VER = "${@d.getVar('PV').split('.')[0]}.${@d.getVar('PV').split('.')[1]}" |
| 21 | |
| 22 | SRC_URI = "https://www.gnupg.org/ftp/gcrypt/gnutls/v${SHRT_VER}/gnutls-${PV}.tar.xz \ |
| 23 | file://arm_eabi.patch \ |
Andrew Geissler | 78b7279 | 2022-06-14 06:47:25 -0500 | [diff] [blame] | 24 | file://0001-Creating-.hmac-file-should-be-excuted-in-target-envi.patch \ |
Andrew Geissler | 9aee500 | 2022-03-30 16:27:02 +0000 | [diff] [blame] | 25 | " |
| 26 | |
Andrew Geissler | 78b7279 | 2022-06-14 06:47:25 -0500 | [diff] [blame] | 27 | SRC_URI[sha256sum] = "77065719a345bfb18faa250134be4c53bef70c1bd61f6c0c23ceb8b44f0262ff" |
Andrew Geissler | 9aee500 | 2022-03-30 16:27:02 +0000 | [diff] [blame] | 28 | |
| 29 | inherit autotools texinfo pkgconfig gettext lib_package gtk-doc |
| 30 | |
| 31 | PACKAGECONFIG ??= "libidn ${@bb.utils.filter('DISTRO_FEATURES', 'seccomp', d)}" |
| 32 | |
| 33 | # You must also have CONFIG_SECCOMP enabled in the kernel for |
| 34 | # seccomp to work. |
| 35 | PACKAGECONFIG[seccomp] = "--with-libseccomp-prefix=${STAGING_EXECPREFIXDIR},ac_cv_libseccomp=no,libseccomp" |
| 36 | PACKAGECONFIG[libidn] = "--with-idn,--without-idn,libidn2" |
| 37 | PACKAGECONFIG[libtasn1] = "--with-included-libtasn1=no,--with-included-libtasn1,libtasn1" |
| 38 | PACKAGECONFIG[p11-kit] = "--with-p11-kit,--without-p11-kit,p11-kit" |
| 39 | PACKAGECONFIG[tpm] = "--with-tpm,--without-tpm,trousers" |
Andrew Geissler | 78b7279 | 2022-06-14 06:47:25 -0500 | [diff] [blame] | 40 | PACKAGECONFIG[fips] = "--enable-fips140-mode --with-libdl-prefix=${STAGING_BASELIBDIR}" |
Andrew Geissler | 9aee500 | 2022-03-30 16:27:02 +0000 | [diff] [blame] | 41 | |
| 42 | EXTRA_OECONF = " \ |
| 43 | --enable-doc \ |
| 44 | --disable-libdane \ |
| 45 | --disable-guile \ |
| 46 | --disable-rpath \ |
| 47 | --enable-openssl-compatibility \ |
| 48 | --with-libpthread-prefix=${STAGING_DIR_HOST}${prefix} \ |
| 49 | --with-librt-prefix=${STAGING_DIR_HOST}${prefix} \ |
| 50 | --with-default-trust-store-file=${sysconfdir}/ssl/certs/ca-certificates.crt \ |
| 51 | " |
| 52 | |
| 53 | # Otherwise the tools try and use HOSTTOOLS_DIR/bash as a shell. |
| 54 | export POSIX_SHELL="${base_bindir}/sh" |
| 55 | |
| 56 | LDFLAGS:append:libc-musl = " -largp" |
| 57 | |
| 58 | do_configure:prepend() { |
| 59 | for dir in . lib; do |
| 60 | rm -f ${dir}/aclocal.m4 ${dir}/m4/libtool.m4 ${dir}/m4/lt*.m4 |
| 61 | done |
| 62 | } |
| 63 | |
Andrew Geissler | 78b7279 | 2022-06-14 06:47:25 -0500 | [diff] [blame] | 64 | do_install:append:class-target() { |
| 65 | if ${@bb.utils.contains('PACKAGECONFIG', 'fips', 'true', 'false', d)}; then |
| 66 | install -d ${D}${bindir}/bin |
| 67 | install -m 0755 ${B}/lib/.libs/fipshmac ${D}/${bindir}/ |
| 68 | fi |
| 69 | } |
| 70 | |
| 71 | PACKAGES =+ "${PN}-openssl ${PN}-xx ${PN}-fips" |
Andrew Geissler | 9aee500 | 2022-03-30 16:27:02 +0000 | [diff] [blame] | 72 | |
| 73 | FILES:${PN}-dev += "${bindir}/gnutls-cli-debug" |
| 74 | FILES:${PN}-openssl = "${libdir}/libgnutls-openssl.so.*" |
| 75 | FILES:${PN}-xx = "${libdir}/libgnutlsxx.so.*" |
Andrew Geissler | 78b7279 | 2022-06-14 06:47:25 -0500 | [diff] [blame] | 76 | FILES:${PN}-fips = "${bindir}/fipshmac" |
Andrew Geissler | 9aee500 | 2022-03-30 16:27:02 +0000 | [diff] [blame] | 77 | |
| 78 | BBCLASSEXTEND = "native nativesdk" |
Andrew Geissler | 78b7279 | 2022-06-14 06:47:25 -0500 | [diff] [blame] | 79 | |
| 80 | pkg_postinst_ontarget:${PN}-fips () { |
| 81 | if test -x ${bindir}/fipshmac |
| 82 | then |
| 83 | mkdir ${sysconfdir}/gnutls |
| 84 | touch ${sysconfdir}/gnutls/config |
| 85 | ${bindir}/fipshmac ${libdir}/libgnutls.so.30.*.* > ${libdir}/.libgnutls.so.30.hmac |
| 86 | ${bindir}/fipshmac ${libdir}/libnettle.so.8.* > ${libdir}/.libnettle.so.8.hmac |
| 87 | ${bindir}/fipshmac ${libdir}/libgmp.so.10.*.* > ${libdir}/.libgmp.so.10.hmac |
| 88 | ${bindir}/fipshmac ${libdir}/libhogweed.so.6.* > ${libdir}/.libhogweed.so.6.hmac |
| 89 | fi |
| 90 | } |