[OE-core] [PATCH v3] openssl: Remove the c_rehash shell re-implementation

Otavio Salvador otavio.salvador at ossystems.com.br
Tue Mar 19 12:57:21 UTC 2019


Hello Martin,

On Mon, Mar 18, 2019 at 9:56 PM Martin Jansa <martin.jansa at gmail.com> wrote:
> This won't work if someone uses only openssl10 in the image (a bit difficult to do with current master, but still some people have to do it), in case someone needs it as well, here is how Gentoo makes ca-certificate backwards compatible with old openssl:
> https://github.com/gentoo/gentoo/commit/03f9b674ca3315198c72849e8dd77583974759c2#diff-1801ddca78e57240592ef16b1c5262e7
> more details in:
> https://bugs.gentoo.org/653382

On OE-Core case, even if someone uses openssl10 as the library
provider, it will still use the openssl 1.1 binaries under target.
See:

+PACKAGE_PREPROCESS_FUNCS += "openssl_package_preprocess"
+
+# openssl 1.0 development files and executable binaries clash with openssl 1.1
+# files when installed into target rootfs. So we don't put them into
+# packages, but they continue to be provided via target sysroot for
+# cross-compilation on the host, if some software still depends on openssl 1.0.
+openssl_package_preprocess () {
+        for file in `find ${PKGD} -name *.h -o -name *.pc -o -name *.so`; do
+                rm $file
+        done
+        rm ${PKGD}${bindir}/openssl
+        rm ${PKGD}${bindir}/c_rehash
+        rmdir ${PKGD}${bindir}
+
+}

So for OE-Core, it is not supported. The rootfs generation will still
work, it seems.

-- 
Otavio Salvador                             O.S. Systems
http://www.ossystems.com.br        http://code.ossystems.com.br
Mobile: +55 (53) 9 9981-7854          Mobile: +1 (347) 903-9750


More information about the Openembedded-core mailing list