Akagi201
1/29/2015 - 4:15 AM

openssl-error-on-openwrt.md

在OpenWrt下跑goagent有时会引起openssl库崩溃, 接连python也跟着崩溃...

查了一下, 要在openssl的makefile那里加上一行东西, SVN:33269

修改好的makefile 如下:

#
# Copyright (C) 2006-2010 OpenWrt.org
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#

include $(TOPDIR)/rules.mk

PKG_NAME:=openssl
PKG_VERSION:=0.9.8p
PKG_RELEASE:=1

PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=http://www.openssl.org/source/ \
    ftp://ftp.funet.fi/pub/crypt/cryptography/libs/openssl/source/ \
    ftp://ftp.webmonster.de/pub/openssl/source/ \
    ftp://ftp.sunet.se/pub/security/tools/net/openssl/source/
PKG_MD5SUM:=7f24047f70364c9eabc94899e356ce39

PKG_BUILD_DEPENDS:=ocf-crypto-headers
PKG_CONFIG_DEPENDS:=CONFIG_OPENSSL_ENGINE

include $(INCLUDE_DIR)/package.mk

define Package/openssl/Default
  TITLE:=Open source SSL toolkit
  URL:=http://www.openssl.org/
endef

define Package/libopenssl/config
source "$(SOURCE)/Config.in"
endef

define Package/openssl/Default/description
The OpenSSL Project is a collaborative effort to develop a robust,
commercial-grade, full-featured, and Open Source toolkit implementing the Secure
Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well
as a full-strength general purpose cryptography library.
endef

define Package/libopenssl
$(call Package/openssl/Default)
  SECTION:=libs
  SUBMENU:=SSL
  CATEGORY:=Libraries
  DEPENDS:=+zlib
  TITLE+= (libraries)
  MENU:=1
endef

define Package/libopenssl/description
$(call Package/openssl/Default/description)
This package contains the OpenSSL shared libraries, needed by other programs.
endef

define Package/openssl-util
  $(call Package/openssl/Default)
  SECTION:=utils
  CATEGORY:=Utilities
  DEPENDS:=+libopenssl
  TITLE+= (utility)
endef

define Package/openssl-util/conffiles
/etc/ssl/openssl.cnf
endef

define Package/openssl-util/description
$(call Package/openssl/Default/description)
This package contains the OpenSSL command-line utility.
endef


OPENSSL_NO_CIPHERS:= no-idea no-md2 no-mdc2 no-rc5 no-sha0 no-smime \
                    no-rmd160 no-aes192 no-ripemd no-camellia no-ans1 no-krb5
OPENSSL_OPTIONS:= shared no-ec no-err no-hw no-threads zlib-dynamic no-sse2

ifdef CONFIG_OPENSSL_ENGINE
  OPENSSL_OPTIONS += --with-cryptodev
else
  OPENSSL_OPTIONS += no-engines
endif

OPENSSL_OPTIONS += no-perlasm

define Build/Configure
    (cd $(PKG_BUILD_DIR); \
        ./Configure linux-openwrt \
            --prefix=/usr \
            --openssldir=/etc/ssl \
            $(TARGET_CPPFLAGS) \
            $(TARGET_LDFLAGS) -ldl \
            -DOPENSSL_SMALL_FOOTPRINT \
            $(OPENSSL_NO_CIPHERS) \
            $(OPENSSL_OPTIONS) \
    )
endef

#TARGET_CFLAGS += $(FPIC) 
TARGET_CFLAGS += $(FPIC) -DOPENSSL_THREADS -pthread -D_REENTRANT -D_THREAD_SAFE -D_THREADSAFE

define Build/Compile
    # XXX: OpenSSL "make depend" will look for installed headers before its own,
    # so remove installed stuff first
    -$(SUBMAKE) -j1 clean-staging
    $(MAKE) -C $(PKG_BUILD_DIR) \
        MAKEDEPPROG="$(TARGET_CROSS)gcc" \
        OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
        $(OPENSSL_MAKEFLAGS) \
        depend
    $(_SINGLE)$(MAKE) -C $(PKG_BUILD_DIR) \
        CC="$(TARGET_CC)" \
        AR="$(TARGET_CROSS)ar r" \
        RANLIB="$(TARGET_CROSS)ranlib" \
        OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
        $(OPENSSL_MAKEFLAGS) \
        all
    $(MAKE) -C $(PKG_BUILD_DIR) \
        CC="$(TARGET_CC)" \
        AR="$(TARGET_CROSS)ar r" \
        RANLIB="$(TARGET_CROSS)ranlib" \
        OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
        $(OPENSSL_MAKEFLAGS) \
        build-shared
    # Work around openssl build bug to link libssl.so with libcrypto.so.
    -rm $(PKG_BUILD_DIR)/libssl.so.*.*.*
    $(MAKE) -C $(PKG_BUILD_DIR) \
        CC="$(TARGET_CC)" \
        OPENWRT_OPTIMIZATION_FLAGS="$(TARGET_CFLAGS)" \
        $(OPENSSL_MAKEFLAGS) \
        do_linux-shared
    $(MAKE) -C $(PKG_BUILD_DIR) \
        INSTALL_PREFIX="$(PKG_INSTALL_DIR)" \
        $(OPENSSL_MAKEFLAGS) \
        install
endef

define Build/InstallDev
    $(INSTALL_DIR) $(1)/usr/include
    $(CP) $(PKG_INSTALL_DIR)/usr/include/openssl $(1)/usr/include/
    $(INSTALL_DIR) $(1)/usr/lib/
    $(CP) $(PKG_INSTALL_DIR)/usr/lib/lib{crypto,ssl}.{a,so*} $(1)/usr/lib/
    $(INSTALL_DIR) $(1)/usr/lib/pkgconfig
    $(CP) $(PKG_INSTALL_DIR)/usr/lib/pkgconfig/{openssl,libcrypto,libssl}.pc $(1)/usr/lib/pkgconfig/
    $(SED) 's#$(TARGET_LDFLAGS)##g' $(1)/usr/lib/pkgconfig/{openssl,libcrypto,libssl}.pc
endef

define Package/libopenssl/install
    $(INSTALL_DIR) $(1)/usr/lib
    $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libcrypto.so.* $(1)/usr/lib/
    $(INSTALL_DATA) $(PKG_INSTALL_DIR)/usr/lib/libssl.so.* $(1)/usr/lib/
endef

define Package/openssl-util/install
    $(INSTALL_DIR) $(1)/etc/ssl
    $(CP) $(PKG_INSTALL_DIR)/etc/ssl/openssl.cnf $(1)/etc/ssl/
    $(INSTALL_DIR) $(1)/etc/ssl/certs
    $(INSTALL_DIR) $(1)/etc/ssl/private
    chmod 0700 $(1)/etc/ssl/private
    $(INSTALL_DIR) $(1)/usr/bin
    $(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/openssl $(1)/usr/bin/
endef

$(eval $(call BuildPackage,libopenssl))
$(eval $(call BuildPackage,openssl-util))

Refs