[opkg][opkg-0.4.5 PATCH] configure.ac: announce openssl sig checking deprecation

5 views
Skip to first unread message

Alex Stewart

unread,
Feb 22, 2021, 2:21:22 PM2/22/21
to opkg-...@googlegroups.com, alex.s...@ni.com
Assert that OpenSSL signature checking is a relatively unused feature by
opkg integrators. Further, the OpenSSL licenses have never been
accomodating to static builders.

So begin to deprecate OpenSSL signature checking by first announcing
our intentions to builders with an AutoConf warning.

Signed-off-by: Alex Stewart <alex.s...@ni.com>
---
configure.ac | 4 ++++
1 file changed, 4 insertions(+)

diff --git a/configure.ac b/configure.ac
index ad58619bb71a23731aec9d88c76f52eb53c004ef..74619b1fd3b0b8e49426f84c4bb74ce12224814b 100644
--- a/configure.ac
+++ b/configure.ac
@@ -62,6 +62,8 @@ AC_ARG_ENABLE(pathfinder,
[want_pathfinder="$enableval"], [want_pathfinder="no"])
dnl Check for libpathfinder
if test "x$want_pathfinder" = "xyes"; then
+ AC_MSG_WARN(Pathfinder-pki x509 path validation is depracted and will be \
+removed in future releases.)
PKG_CHECK_MODULES([PATHFINDER], [pathfinder-openssl dbus-1 openssl])
if test -n "$PATHFINDER_CFLAGS$PATHFINDER_LIBS"; then
AC_DEFINE(HAVE_PATHFINDER, 1, [we have pathfinder])
@@ -134,6 +136,8 @@ AC_ARG_ENABLE(openssl,
[want_openssl="$enableval"], [want_openssl="no"])

if test "x$want_openssl" = "xyes"; then
+ AC_MSG_WARN(OpenSSL signature-checking support is depracted and will be \
+removed in future releases. Consider using GPGME (--enable-gpg) instead.)
AC_DEFINE(HAVE_OPENSSL, 1, [Define if you want OpenSSL support])
NEED_SSL_LIBS="yes"
fi
--
2.30.1

Alex Stewart

unread,
Feb 22, 2021, 2:24:45 PM2/22/21
to opkg-...@googlegroups.com
Merged 1 commit to master.

e544c04eeadec7ade2c58c7be506acafb011a4a9

--
Alex Stewart
Software Engineer - NI Real-Time OS
NI (National Instruments)

alex.s...@ni.com

Reply all
Reply to author
Forward
0 new messages