[meta-freescale] [meta-fsl-ppc][PATCH 2/5] openssl: remove native dependency on cryptodev

b28495 at freescale.com b28495 at freescale.com
Fri Jul 17 02:29:41 PDT 2015


From: Cristian Stoica <cristian.stoica at freescale.com>

The original intent of the code was good but the comment was missleading
since the cryptodev dependency was always set, even for the native package.

Dependency on acceleration engines (including cryptodev) should be disabled
for the native package to reduce the risk of incorrect builds and other
runtime issues. In particular, the chain of dependencies for such a high
profile crypto package should be minimal to help with code audit.

Signed-off-by: Cristian Stoica <cristian.stoica at freescale.com>
---
 recipes-connectivity/openssl/openssl_1.0.1i.bb | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/recipes-connectivity/openssl/openssl_1.0.1i.bb b/recipes-connectivity/openssl/openssl_1.0.1i.bb
index ccc3126..54c052e 100644
--- a/recipes-connectivity/openssl/openssl_1.0.1i.bb
+++ b/recipes-connectivity/openssl/openssl_1.0.1i.bb
@@ -1,10 +1,9 @@
 require openssl.inc
 
-# For target side versions of openssl enable support for OCF Linux driver
+# For target side versions of openssl enable support for cryptodev Linux driver
 # if they are available.
-DEPENDS += "cryptodev-linux"
-
-CFLAG += "-DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS"
+DEPENDS_class-target += "cryptodev-linux"
+CFLAG_class-target += "-DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS"
 
 LIC_FILES_CHKSUM = "file://LICENSE;md5=f9a8f968107345e0b75aa8c2ecaa7ec8"
 
-- 
1.9.1



More information about the meta-freescale mailing list