[oe] [meta-oe][PATCH 04/10] krb5: toggle configure option pkinit

kai.kang at windriver.com kai.kang at windriver.com
Wed Jul 5 08:11:27 UTC 2017


From: Kai Kang <kai.kang at windriver.com>

Toggle configure option pkinit of krb5 according to distro feature
openssl-no-weak-ciphers. openssl-no-weak-ciphers is introduced to
disable openssl weak ciphers support which include des. It could not
build plugin pkinit without openssl des support.

Signed-off-by: Kai Kang <kai.kang at windriver.com>
---
 meta-oe/recipes-connectivity/krb5/krb5_1.15.1.bb | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/meta-oe/recipes-connectivity/krb5/krb5_1.15.1.bb b/meta-oe/recipes-connectivity/krb5/krb5_1.15.1.bb
index 61cdd60..013a7e1 100644
--- a/meta-oe/recipes-connectivity/krb5/krb5_1.15.1.bb
+++ b/meta-oe/recipes-connectivity/krb5/krb5_1.15.1.bb
@@ -43,7 +43,9 @@ PACKAGECONFIG[keyutils] = "--enable-keyutils,--disable-keyutils,keyutils"
 PACKAGECONFIG[ldap] = "--with-ldap,--without-ldap,openldap"
 PACKAGECONFIG[readline] = "--with-readline,--without-readline,readline"
 
-EXTRA_OECONF += " --without-tcl --with-system-et --disable-rpath"
+EXTRA_OECONF += "--without-tcl --with-system-et --disable-rpath \
+                 ${@bb.utils.contains('DISTRO_FEATURES', 'openssl-no-weak-ciphers', '--disable-pkinit', '--enable-pkinit', d)} \
+                 "
 CACHED_CONFIGUREVARS += "krb5_cv_attr_constructor_destructor=yes ac_cv_func_regcomp=yes \
                   ac_cv_printf_positional=yes ac_cv_file__etc_environment=yes \
                   ac_cv_file__etc_TIMEZONE=no"
-- 
2.10.1




More information about the Openembedded-devel mailing list