[Buildroot] [PATCH] polarssl: remove unmaintained
Arnout Vandecappelle
arnout at mind.be
Fri Mar 17 16:30:50 UTC 2017
On 16-03-17 14:04, Gustavo Zacarias wrote:
> The 1.2.x branch is no longer maintained, so remove it since it's
> likely security-vulnerable.
>
> mbedtls is the modern replacement which was renamed from polarssl when
> ARM bought them up.
> However major releases broke API so polarssl 1.2.x isn't always
> interchangeable with polarssl/mbedtls 1.3.x (interim mixed naming
> because of new ownership) or newer 2.x series.
>
> Fortunately we don't have any package in the tree that uses polarssl
> exclusively.
>
> Signed-off-by: Gustavo Zacarias <gustavo at zacarias.com.ar>
Two nits below, with that:
Acked-by: Arnout Vandecappelle (Essensium/Mind) <arnout at mind.be>
First, Thomas is still mentioned in the DEVELOPERS file.
Second...
[snip]
> diff --git a/package/bctoolbox/bctoolbox.mk b/package/bctoolbox/bctoolbox.mk
> index 7826975..f19f36e 100644
> --- a/package/bctoolbox/bctoolbox.mk
> +++ b/package/bctoolbox/bctoolbox.mk
> @@ -13,6 +13,7 @@ BCTOOLBOX_INSTALL_STAGING = YES
> # Set CMAKE_SKIP_RPATH to prevent bctoolbox from adding the rpath to
> # shared library.
> BCTOOLBOX_CONF_OPTS = \
> + -DENABLE_POLARSSL=OFF \
> -DENABLE_STRICT=OFF \
> -DENABLE_TESTS_COMPONENT=OFF \
> -DENABLE_TESTS=OFF \
> @@ -28,13 +29,6 @@ else
> BCTOOLBOX_CONF_OPTS += -DENABLE_MBEDTLS=OFF
> endif
There's a comment above this chunk saying that we prefer mbedtls over polarssl.
That is no longer relevant and can be removed completely.
Regards,
Arnout
>
> -ifeq ($(BR2_PACKAGE_POLARSSL),y)
> -BCTOOLBOX_DEPENDENCIES += polarssl
> -BCTOOLBOX_CONF_OPTS += -DENABLE_POLARSSL=ON
> -else
> -BCTOOLBOX_CONF_OPTS += -DENABLE_POLARSSL=OFF
> -endif
> -
> ifeq ($(BR2_STATIC_LIBS),y)
> BCTOOLBOX_CONF_OPTS += -DENABLE_SHARED=OFF -DENABLE_STATIC=ON
> else ifeq ($(BR2_SHARED_STATIC_LIBS),y)
[snip]
--
Arnout Vandecappelle arnout at mind be
Senior Embedded Software Architect +32-16-286500
Essensium/Mind http://www.mind.be
G.Geenslaan 9, 3001 Leuven, Belgium BE 872 984 063 RPR Leuven
LinkedIn profile: http://www.linkedin.com/in/arnoutvandecappelle
GPG fingerprint: 7493 020B C7E3 8618 8DEC 222C 82EB F404 F9AC 0DDF
More information about the buildroot
mailing list