Build openssl debian library with with SCTP enable

By default sctp is not enabled in openssl .
To support the DTLS protocol , openssl
library must be built with 'enable-sctp' flag.
So as part of this commit,added files required to build opessl lilbray.
It is ensured to use same compile option as old openssl library
with additional flag 'enable-sctp'.

TestPlan:
PASSED: Sanity and Daily regression
PASSED: build-pkgs --parallel 4
PASSED: build-image
PASSED: Installed binary on AIO-SX
PASSED: openssl version
PASSED: system host-list
PASSED: system host-lock
PASSED: system host-unlock
PASSED: openssl genrsa -out domain.key 2048
PASSED: openssl rsa -in domain.key -pubout -out yourdomain_public.key
PASSED: SCTP intra-node traffic validation across PODs.
PASSED: Validating DTLS over SCTP in Simplex.
PASSED: Validating DTLS over SCTP in Duplex.
PASSED: DTLS over SCTP intra-node traffic validation across PODs.

Depends-On: https://review.opendev.org/c/starlingx/root/+/897102
Depends-On: https://review.opendev.org/c/starlingx/tools/+/899631

story: 2010925
Task: 48879

Change-Id: Ie0f39b625a3975db4a99c379b3d20d1a6dfa2512
Signed-off-by: Sabyasachi Nayak <sabyasachi.nayak@windriver.com>
This commit is contained in:
Sabyasachi Nayak 2023-09-27 02:18:17 -04:00
parent e498d0257c
commit 7ab59e24e6
6 changed files with 70 additions and 0 deletions

17
base/openssl/PKG-INFO Normal file
View File

@ -0,0 +1,17 @@
Metadata-Version: 1
Name: openssl
Version: 1.1.1w
Summary: Openssl with sctp enabling
Home-page:
Author:
Author-email:
License: BSD
Description:
By default, OpenSSL is typically configured and built with support for
TCP and UDP, but SCTP is not included.
To support DTLS Protocol, openssl library must be built with
'enable-sctp' flag.
Platform: UNKNOWN

View File

@ -0,0 +1,37 @@
From 50a3ade26e25df25f9ce800195e232e6e504a79f Mon Sep 17 00:00:00 2001
From: sabyasachi nayak <sabyasachi.nayak@windriver.com>
Date: Fri, 10 Nov 2023 11:20:36 +0000
Subject: [PATCH] Build-in-support-for-sctp
Signed-off-by: sabyasachi nayak <sabyasachi.nayak@windriver.com>
---
debian/control | 2 +-
debian/rules | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/debian/control b/debian/control
index 2ad5a22..6dd24bb 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
Source: openssl
-Build-Depends: debhelper-compat (= 12), m4, bc, dpkg-dev (>= 1.15.7)
+Build-Depends: debhelper-compat (= 12), m4, bc, dpkg-dev (>= 1.15.7), libsctp-dev
Section: utils
Priority: optional
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
diff --git a/debian/rules b/debian/rules
index 9a46f89..dce8e49 100755
--- a/debian/rules
+++ b/debian/rules
@@ -29,7 +29,7 @@ ifneq (,$(filter parallel=%,$(DEB_BUILD_OPTIONS)))
MAKEFLAGS += -j$(NUMJOBS)
endif
-CONFARGS = --prefix=/usr --openssldir=/usr/lib/ssl --libdir=lib/$(DEB_HOST_MULTIARCH) no-idea no-mdc2 no-rc5 no-zlib no-ssl3 enable-unit-test no-ssl3-method enable-rfc3779 enable-cms no-capieng
+CONFARGS = --prefix=/usr --openssldir=/usr/lib/ssl --libdir=lib/$(DEB_HOST_MULTIARCH) no-idea no-mdc2 no-rc5 no-zlib no-ssl3 enable-unit-test no-ssl3-method enable-rfc3779 enable-cms no-capieng enable-sctp
OPT_alpha = ev4 ev5
ARCHOPTS = OPT_$(DEB_HOST_ARCH)
OPTS = $($(ARCHOPTS))
--
2.30.2

View File

@ -0,0 +1 @@
0001-Build-in-support-for-sctp.patch

View File

@ -0,0 +1,10 @@
---
debver: 1.1.1w-0+deb11u1
debname: openssl
dl_path:
name: openssl-debian-openssl-1.1.1w-0+deb11u1.tar.gz
url: https://salsa.debian.org/debian/openssl/-/archive/debian/openssl-1.1.1w-0+deb11u1/openssl-debian-openssl-1.1.1w-0+deb11u1.tar.gz
sha256sum: 89d98075fc77871eb619d7c48e3fb1ced0ce431c43b8cd85241a67597d984622
revision:
dist: $STX_DIST
PKG_GITREVCOUNT: true

View File

@ -382,6 +382,10 @@ openscap-scanner
openscap-utils openscap-utils
python3-openscap python3-openscap
#openssl
openssl
libssl1.1
#openvswitch #openvswitch
openvswitch-common openvswitch-common
openvswitch-switch-dpdk openvswitch-switch-dpdk

View File

@ -8,6 +8,7 @@ base/lighttpd
base/linuxptp base/linuxptp
base/lvm2 base/lvm2
base/lsb base/lsb
base/openssl
base/pf-bb-config base/pf-bb-config
base/synce4l base/synce4l
base/systemd base/systemd