Skip to content

Conversation

@rhubert
Copy link
Contributor

@rhubert rhubert commented Jan 21, 2026

No description provided.

Openssl has many config options controlling the included algrithms. Make
them configureable by `OPENSSL_ADDITIONAL_OPTIONS`.
Openssl uses plugins via (dlopen). If plugins are used for host-openssl
the host build must use shared linkage. Provide an option to override
the default link mode.
Update openssl to latest LTS Release.
@rhubert rhubert marked this pull request as draft January 21, 2026 13:55
@rhubert rhubert marked this pull request as ready for review January 23, 2026 13:41
patchApplySeries $<@openssl/*.patch@>
Config:
OPENSSL_ADDITIONAL_OPTIONS:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does it make sense to name the algorithms explicitly like buildroot does? This catch-all variable seems a bit coarse grained. Even if not done now, would it be a problem on your side if we go in this direction?

Config:
OPENSSL_ADDITIONAL_OPTIONS:
help: additional configure options
OPENSSL_LINK_MODE:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The idea for such things was to set BASEMENT_LIBS to shared when declaring the dependency:

depends:
    - name: libs::openssl
      environment:
          BASEMENT_LIBS: shared

This will override the heuristic for cpackageLibraryType. Of course, this will apply for the dependencies as well.

Actually, I think our openssl recipe is wrong and should pass no-dso in case of static linking. At least buildroot does that and it looks correct to me. Would you mind fixing that with a separate commit while you're at it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants