* [Buildroot] [Bug 13181] New: libopenssl package enables Cryptodev engine even if BR2_PACKAGE_LIBOPENSSL_ENGINES is disabled
@ 2020-09-07 13:30 bugzilla at busybox.net
2020-09-07 20:45 ` [Buildroot] [Bug 13181] " bugzilla at busybox.net
0 siblings, 1 reply; 2+ messages in thread
From: bugzilla at busybox.net @ 2020-09-07 13:30 UTC (permalink / raw)
To: buildroot
https://bugs.busybox.net/show_bug.cgi?id=13181
Bug ID: 13181
Summary: libopenssl package enables Cryptodev engine even if
BR2_PACKAGE_LIBOPENSSL_ENGINES is disabled
Product: buildroot
Version: 2020.02
Hardware: All
OS: Linux
Status: NEW
Severity: normal
Priority: P5
Component: Other
Assignee: unassigned at buildroot.uclibc.org
Reporter: bradley.gamble at ncipher.com
CC: buildroot at uclibc.org
Target Milestone: ---
OpenSSL builds a number of seperate engines that provide cryptographic API and
hardware offload support. This is currently configured from Buildroot via the
BR2_PACKAGE_LIBOPENSSL_ENGINES option.
Previously disabling this option would remove these engines from the completed
filesystem, disabling their use. However, recent versions of OpenSSL build the
devcrypto engine in to libcrypto as default, rather than as a dynamic library.
This can lead to Cryptodev being used even if it was not intended.
The libopenssl.mk file currently checks if BR2_PACKAGE_HAS_CRYPTODEV is set and
will enable the Cryptodev engine via the "enable-devcryptoeng" configure flag
if true. This is a manual override as all the other engines can be specified in
a similar manner (ie enable-afalgeng) but Buildroot seems to imply that
enabling the Cryptodev Package should also force OpenSSL to use it (which is
incorrect).
OpenSSL's Cryptodev engine should either be overridden by the additional
engines option (disabling it if BR2_PACKAGE_LIBOPENSSL_ENGINES is not set) or
should be a manual override due to it's ability to be built statically in to
libcrypto.
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 2+ messages in thread
* [Buildroot] [Bug 13181] libopenssl package enables Cryptodev engine even if BR2_PACKAGE_LIBOPENSSL_ENGINES is disabled
2020-09-07 13:30 [Buildroot] [Bug 13181] New: libopenssl package enables Cryptodev engine even if BR2_PACKAGE_LIBOPENSSL_ENGINES is disabled bugzilla at busybox.net
@ 2020-09-07 20:45 ` bugzilla at busybox.net
0 siblings, 0 replies; 2+ messages in thread
From: bugzilla at busybox.net @ 2020-09-07 20:45 UTC (permalink / raw)
To: buildroot
https://bugs.busybox.net/show_bug.cgi?id=13181
--- Comment #1 from Thomas Petazzoni <thomas.petazzoni@bootlin.com> ---
Thanks for your bug report.
It is pretty common in Buildroot to enable an optional feature in a package
(here OpenSSL) if the dependencies needed for that feature (here cryptodev) are
available.
Do you have a practical situation where one cryptodev implementation
(BR2_PACKAGE_CRYPTODEV_LINUX or BR2_PACKAGE_OCF_LINUX) is enabled, but for some
reason OpenSSL cannot / should not use cryptodev ?
--
You are receiving this mail because:
You are on the CC list for the bug.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2020-09-07 20:45 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-09-07 13:30 [Buildroot] [Bug 13181] New: libopenssl package enables Cryptodev engine even if BR2_PACKAGE_LIBOPENSSL_ENGINES is disabled bugzilla at busybox.net
2020-09-07 20:45 ` [Buildroot] [Bug 13181] " bugzilla at busybox.net
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.