if BR2_PACKAGE_LIBOPENSSL # 4xx PowerPC cores seem to have trouble with openssl's ASM # optimizations config BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH_LINUX_PPC bool default y if BR2_powerpc depends on !BR2_powerpc_401 depends on !BR2_powerpc_403 depends on !BR2_powerpc_405 depends on !BR2_powerpc_405fp depends on !BR2_powerpc_440 depends on !BR2_powerpc_440fp config BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH string # Doesn't work for thumb-only (Cortex-M?) default "linux-armv4" if BR2_ARM_CPU_HAS_ARM default "linux-aarch64" if BR2_aarch64 default "linux-ppc" if BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH_LINUX_PPC default "linux-ppc64" if BR2_powerpc64 default "linux-ppc64le" if BR2_powerpc64le default "linux-x86" if BR2_i386 && !BR2_TOOLCHAIN_HAS_LIBATOMIC default "linux-x86-latomic" if BR2_i386 && BR2_TOOLCHAIN_HAS_LIBATOMIC default "linux-x86_64" if BR2_x86_64 default "linux64-riscv64" if BR2_riscv && BR2_ARCH_IS_64 default "linux32-riscv32" if BR2_riscv && !BR2_ARCH_IS_64 default "linux64-s390x" if BR2_s390x # no-asm is needed with generic architectures such as # linux-generic{32,64}, see # https://github.com/openssl/openssl/issues/9839 default "linux-generic64 no-asm" if BR2_ARCH_IS_64 && !BR2_MIPS_NABI32 default "linux-latomic no-asm" if BR2_TOOLCHAIN_HAS_LIBATOMIC default "linux-generic32 no-asm" config BR2_PACKAGE_LIBOPENSSL_BIN bool "openssl binary" help Install the openssl binary and the associated helper scripts to the target file system. This is a command line tool for doing various cryptographic stuff. config BR2_PACKAGE_LIBOPENSSL_ENGINES bool "openssl additional engines" help Install additional encryption engine libraries. config BR2_PACKAGE_LIBOPENSSL_ENABLE_CHACHA bool "enable CHACHA" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC2 bool "enable RC2" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC4 bool "enable RC4" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD2 bool "enable MD2" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD4 bool "enable MD4" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_MDC2 bool "enable MDC2" default y select BR2_PACKAGE_LIBOPENSSL_ENABLE_DES config BR2_PACKAGE_LIBOPENSSL_ENABLE_BLAKE2 bool "enable BLAKE2" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_IDEA bool "enable IDEA" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_SEED bool "enable SEED" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_DES bool "enable DES" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_RMD160 bool "enable RMD160" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_WHIRLPOOL bool "enable WHIRLPOOL" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_BLOWFISH bool "enable BLOWFISH" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL bool "enable SSL" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL3 bool "enable SSL3" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_WEAK_SSL bool "enable WEAK_SSL" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_PSK bool "enable mode PSK" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_CAST bool "enable mode CAST" default y config BR2_PACKAGE_LIBOPENSSL_UNSECURE bool "enable unit test, debug, backtrace" default y help Enable unit-test crypto-mdebug-backtrace crypto-mdebug autoerrinit mode. config BR2_PACKAGE_LIBOPENSSL_DYNAMIC_ENGINE bool "enable dynamic engine" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_COMP bool "enable compression" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_ARGON2 bool "enable ARGON2" default y config BR2_PACKAGE_LIBOPENSSL_ENABLE_CACHED_FETCH bool "enable cached fetch" default y help Cache algorithms when they are fetched from a provider. Normally, a provider indicates if the algorithms it supplies can be cached or not. Using this option will reduce run-time memory usage but it also introduces a significant performance penalty. This option is primarily designed to help with detecting incorrect reference counting. config BR2_PACKAGE_LIBOPENSSL_ENABLE_CMP bool "enable CMP" default y help Build support for Certificate Management Protocol (CMP) and Certificate Request Message Format (CRMF). config BR2_PACKAGE_LIBOPENSSL_ENABLE_THREAD_POOL bool "enable thread pool" default y depends on BR2_TOOLCHAIN_HAS_THREADS help Build with thread pool functionality. If enabled, OpenSSL algorithms may use the thread pool to perform parallel computation. This option in itself does not enable OpenSSL to spawn new threads. Currently the only supported thread pool mechanism is the default thread pool. config BR2_PACKAGE_LIBOPENSSL_ENABLE_ECX bool "enable ECX" default y help Build with ECX support. Disabling this option can be used to disable support for X25519, X448, and EdDSA. config BR2_PACKAGE_LIBOPENSSL_ENABLE_LOADER_ENGINE bool "enable 'loader_attic' engine" default y depends on BR2_PACKAGE_LIBOPENSSL_DYNAMIC_ENGINE help Build with 'loader_attic' engine support, which is meant just for internal OpenSSL testing purposes and supports loading keys, parameters, certificates, and CRLs from files. When this engine is used, files with such credentials are read via this engine. config BR2_PACKAGE_LIBOPENSSL_ENABLE_PADLOCK_ENGINE bool "enable padlock engine" default y help Build the padlock engine. config BR2_PACKAGE_LIBOPENSSL_ENABLE_MODULE bool "enable modules" default y help Build modules. config BR2_PACKAGE_LIBOPENSSL_ENABLE_QUIC bool "enable QUIC" default y help Build with QUIC support. config BR2_PACKAGE_LIBOPENSSL_SECURE_MEMORY bool "enable secure memory" default y help Build with secure memory support. config BR2_PACKAGE_LIBOPENSSL_ENABLE_SIV bool "enable SIV" default y help Build with RFC5297 AES-SIV support. config BR2_PACKAGE_LIBOPENSSL_ENABLE_SM2_PRECOMP_TABLE bool "enable SM2 precomputed table" default y depends on BR2_aarch64 help Enable using the SM2 precomputed table. Disabling this option makes the library smaller. config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL_TRACE bool "enable SSL trace" default y help Build with SSL Trace support. Disabling this option may provide a small reduction in libssl binary size. endif # BR2_PACKAGE_LIBOPENSSL