diff options
| author | Viacheslav Hletenko <v.gletenko@vyos.io> | 2026-07-03 12:39:14 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-07-03 12:39:14 +0300 |
| commit | f8964489511b7dc0034beddd4370e5ebd39a3ba9 (patch) | |
| tree | 39e3bff95ee431812d138d3532ffd4e14bb16e6a /scripts | |
| parent | 9ca716980a6d50a88d39be824ee30709384c2ce8 (diff) | |
| parent | 0f2061f73bf1fb441480918de7be8511f0ab52f2 (diff) | |
| download | vyos-build-f8964489511b7dc0034beddd4370e5ebd39a3ba9.tar.gz vyos-build-f8964489511b7dc0034beddd4370e5ebd39a3ba9.zip | |
Merge pull request #1233 from sever-sever/T8508-curr
T9040: Build FIPS-provider OpenSSL version
Diffstat (limited to 'scripts')
4 files changed, 54 insertions, 0 deletions
diff --git a/scripts/package-build/openssl/.gitignore b/scripts/package-build/openssl/.gitignore new file mode 100644 index 00000000..67f067a4 --- /dev/null +++ b/scripts/package-build/openssl/.gitignore @@ -0,0 +1 @@ +/openssl/ diff --git a/scripts/package-build/openssl/build.py b/scripts/package-build/openssl/build.py new file mode 120000 index 00000000..3c76af73 --- /dev/null +++ b/scripts/package-build/openssl/build.py @@ -0,0 +1 @@ +../build.py
\ No newline at end of file diff --git a/scripts/package-build/openssl/package.toml b/scripts/package-build/openssl/package.toml new file mode 100644 index 00000000..6dfd32e0 --- /dev/null +++ b/scripts/package-build/openssl/package.toml @@ -0,0 +1,5 @@ +[[packages]] +name = "openssl" +commit_id = "debian/openssl-3.0.20-1_deb12u2" +scm_url = "https://salsa.debian.org/debian/openssl.git" +build_cmd = "dpkg-buildpackage -us -uc -tc -b" diff --git a/scripts/package-build/openssl/patches/openssl/0001-Enable-FIPS-module.patch b/scripts/package-build/openssl/patches/openssl/0001-Enable-FIPS-module.patch new file mode 100644 index 00000000..19b47856 --- /dev/null +++ b/scripts/package-build/openssl/patches/openssl/0001-Enable-FIPS-module.patch @@ -0,0 +1,47 @@ +From 361b8051af88376d3667ee087f31a0de75fe276e Mon Sep 17 00:00:00 2001 +From: Viacheslav Hletenko <v.gletenko@vyos.io> +Date: Wed, 1 Jul 2026 16:32:31 +0000 +Subject: [PATCH] Enable FIPS module + +--- + debian/openssl.install | 1 + + debian/rules | 4 +++- + 2 files changed, 4 insertions(+), 1 deletion(-) + +diff --git a/debian/openssl.install b/debian/openssl.install +index 1f270a762a..44444be066 100644 +--- a/debian/openssl.install ++++ b/debian/openssl.install +@@ -5,6 +5,7 @@ usr/lib/ssl/certs + usr/lib/ssl/private + usr/lib/ssl/misc/* + usr/lib/ssl/openssl.cnf ++usr/lib/ssl/fipsmodule.cnf + usr/share/man/man1/* + usr/share/man/man5/* + usr/share/man/man7/* +diff --git a/debian/rules b/debian/rules +index 4e260eedf2..54d6db4513 100755 +--- a/debian/rules ++++ b/debian/rules +@@ -29,7 +29,7 @@ ifneq (,$(filter parallel=%,$(DEB_BUILD_OPTIONS))) + MAKEFLAGS += -j$(NUMJOBS) + endif + +-CONFARGS = --prefix=/usr --openssldir=/usr/lib/ssl --libdir=lib/$(DEB_HOST_MULTIARCH) no-idea no-mdc2 no-rc5 no-zlib no-ssl3 enable-unit-test no-ssl3-method enable-rfc3779 enable-cms no-capieng no-rdrand ++CONFARGS = --prefix=/usr --openssldir=/usr/lib/ssl --libdir=lib/$(DEB_HOST_MULTIARCH) no-idea no-mdc2 no-rc5 no-zlib no-ssl3 enable-unit-test no-ssl3-method enable-rfc3779 enable-cms no-capieng no-rdrand enable-fips + #OPT_alpha = ev4 ev5 + ARCHOPTS = OPT_$(DEB_HOST_ARCH) + OPTS = $($(ARCHOPTS)) +@@ -113,6 +113,8 @@ override_dh_auto_install-indep: + + override_dh_auto_install-arch: + $(MAKE) -C build_shared install DESTDIR=`pwd`/debian/tmp ++ # Install FIPS module ++ $(MAKE) -C build_shared install_fips DESTDIR=`pwd`/debian/tmp + # pic static libraries, nobody should need them + cp -pf build_static/libcrypto.a debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/libcrypto.a + cp -pf build_static/libssl.a debian/tmp/usr/lib/$(DEB_HOST_MULTIARCH)/libssl.a +-- +2.39.5 + |