Peter Stadler [Thu, 5 Dec 2019 07:48:20 +0000 (08:48 +0100)]
nginx-util: add package
This can do the main work of nginx/nginx-ssl init script.
For nginx-ssl it can create selfsigned certificates, too.
It uses libpcre and libopenssl iff nginx(-ssl) uses them.
Stijn Tintel [Thu, 16 Jan 2020 22:24:40 +0000 (00:24 +0200)]
libftdi1: disable building documentation
This fixes the following build failure:
[ 66%] Generating ../doc/xml/ftdi_8c.xml
warning: Tag 'PERL_PATH' at line 2083 of file 'Doxyfile' has become obsolete.
To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u"
warning: Tag 'MSCGEN_PATH' at line 2105 of file 'Doxyfile' has become obsolete.
To avoid this warning please remove this line from your configuration file or upgrade it using "doxygen -u"
[ 72%] Generating ftdi1_doc.i
Traceback (most recent call last):
File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 457, in <module>
main()
File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 453, in main
convert(args[0], args[1], not options.func_def, options.quiet)
File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 430, in convert
p = Doxy2SWIG(input, include_function_definition, quiet)
File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 72, in __init__
f = my_open_read(src)
File "/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/python/doxy2swig.py", line 44, in my_open_read
return open(source)
FileNotFoundError: [Errno 2] No such file or directory: '/home/stijn/Development/LEDE/source/build_dir/target-x86_64_musl/libftdi1-1.4/doc/xml/ftdi_8c.xml'
Jeffery To [Thu, 16 Jan 2020 12:04:37 +0000 (20:04 +0800)]
scons: Switch to standalone version, update to 3.1.2
* Install the standalone (scons-local) version
Advantages:
- The regular version of SCons requires distutils during installation;
the standalone version does not have this requirement
Disadvantages:
- The scons-local package is not available from the Fossies mirror
- The patch will need to be manually updated with each version update
* Install files to $(STAGING_DIR_HOSTPKG) instead of $(STAGING_DIR_HOST)
* Write the correct shebang into scripts instead of using the wrapper
This version adds a new RegSet API, and fixes the following:
- CVE-2019-19012
- CVE-2019-19203
- CVE-2019-19204
- CVE-2019-19246
- some problems (found by libFuzzer test)
Sebastian Kemper [Wed, 15 Jan 2020 18:27:17 +0000 (19:27 +0100)]
apr-util: prevent recursive linking
004-avoid_ldap_by_defaut.patch:
By default use --avoid-ldap since apache2 is the only user, and we don't
want to add extra dependencies to other apr-utils rdepends. Patch from
Ryan Niebur <redacted>, copied from Debian.
005-apu_config_dont_list_indep_libs.patch:
Prevent recursive linking of dependent libraries by apr-util users.
Patch from Peter Samuelson <redacted>, also copied from Debian.
Makes libexpat and libiconv private.
006-avoid_db_by-default.patch:
Make apu-config not output dbm libs by default. See Debian #622081.
Patch from Stefan Fritsch <redacted>, also copied from Debian
While bumping the revision also correct license information.
Jeffery To [Wed, 15 Jan 2020 11:36:09 +0000 (19:36 +0800)]
golang: Update for ASLR PIE tristate option change
The ASLR PIE option was changed to a tristate option
(openwrt/openwrt@19cbac7d264dfca1f75849de64beb98830fbb1e4). This updates
the Go compiler package and golang-package.mk to account for this
change.
This also adds warning messages for when the user has selected PIE but
Go does not have PIE support for the chosen target.
Jeffery To [Tue, 14 Jan 2020 14:17:21 +0000 (22:17 +0800)]
golang: Add support for ASLR/PIE for Go packages
This adds support to compile position-independent executables for
packages that use golang-package.mk.
Go packages will have PIE enabled if:
* Go supports PIE on the target platform;
* CONFIG_PKG_ASLR_PIE is selected; and
* PKG_ASLR_PIE (for the package) is not set to 0
Go 1.13 supports PIE for x86 and arm targets; mips support is in
progress[1].
cyrus-sasl: install module symbolic links of form libX.so
I was too aggressive in recommending that we remove the module symbolic
links of form libX.so as part of commit c9ce769b. It turns out that at
least Postfix relies on these, and I suspect any application that makes
use of libsasl2 will require them too.
acme: Correctly handle domain state dir for ECC certificates
When issuing an ECC certificate, acme.sh for some reason changes the name
of the directory used for the certificate state. Handle this correctly when
moving directories and updating config files.
php7: update the gd module to depend on libgd-full
The php7-mod-gd package requires that freetype support exist in libgd. The
libgd-full package provides this, whereas the libgd package does only
if explicitly configured.
Ref: https://github.com/openwrt/packages/issues/10944 Signed-off-by: W. Michael Petullo <redacted> Signed-off-by: Michael Heimpold <redacted>
Andre Heider [Sat, 11 Jan 2020 17:40:41 +0000 (18:40 +0100)]
meson: fix building host binaries with ccache
With CONFIG_CCACHE, $HOSTCC is 'ccache gcc' while $TARGET_CC points to a
single wrapper script. Compiling target binaries with ccache works, but
doesn't for host binaries, because we need to supply an argv array for
argc > 1 in the meson cross file.
Always pass an array for the c and c++ compiler, and while at it, do it
for the target as well - just to be on the safe side if that ever
changes.
Karl Palsson [Thu, 2 Jan 2020 13:38:29 +0000 (13:38 +0000)]
libwebsockets: move to 3.2.1
3.2.x is formally "not maintained" and people should stick with 3.1.x
until a new release of the master branch occurs. However, in reality,
3.2.1 has been released, with performance improvements and fixes.