dbroqua/kobol-wiki
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Update libssl instruction, patch and prebuild deb for CESA

Browse source
This commit is contained in:
Gauthier Provost 2019-03-17 23:52:53 +08:00
parent faae3e7cde
commit aa7866eb29
4 changed files with 457 additions and 2617 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
docs/cesa.md
View file

@ -52,12 +52,16 @@ You can refer to following forum [thread](https://forum.armbian.com/topic/8486-h
### Prerequisites ### Prerequisites
You will need to add *debian source* repository to your APT list in order to download **libssl** source code. Edit */etc/apt/sources.list* and uncomment the following line. You will need to add *debian source* repository to your APT list in order to download **libssl** source code. Edit */etc/apt/sources.list* and uncomment the following lines.
``` ```
deb-src http://httpredir.debian.org/debian stretch main contrib non-free deb-src http://httpredir.debian.org/debian stretch main contrib non-free
``` ```
```
deb-src http://security.debian.org/ stretch/updates main contrib non-free
```
Don't forget after to update your APT database. Don't forget after to update your APT database.
``` ```
@ -144,13 +148,13 @@ Apply the patch that you can find [here](/files/cesa/openssl-add-cryptodev-suppo
``` ```
wget https://wiki.kobol.io/files/cesa/openssl-add-cryptodev-support.patch wget https://wiki.kobol.io/files/cesa/openssl-add-cryptodev-support.patch
patch < openssl-add-cryptodev-support.patch openssl1.0-1.0.2l/crypto/engine/eng_cryptodev.c patch < openssl-add-cryptodev-support.patch openssl1.0-1.0.2*/crypto/engine/eng_cryptodev.c
``` ```
Now let's compile libssl with **cryptodev** enabled. Now let's compile libssl with **cryptodev** enabled.
``` ```
cd openssl1.0-1.0.2l/ cd openssl1.0-1.0.2*/
sed -i -e "s/CONFARGS =/CONFARGS = -DHAVE_CRYPTODEV/" debian/rules sed -i -e "s/CONFARGS =/CONFARGS = -DHAVE_CRYPTODEV/" debian/rules
@ -171,7 +175,7 @@ sudo dpkg -i libssl1.0.2_1.0.2l-2+deb9u3.1_armhf.deb
``` ```
!!! info !!! info
A pre-build Debian libssl package (libssl1.0.2_1.0.2l-2+deb9u3.1_armhf.deb) with cryptodev enable is available [here](/files/cesa/libssl1.0.2_1.0.2l-2+deb9u3.1_armhf.deb), if you want to skip the recompile step. A pre-build Debian libssl package (libssl1.0.2_1.0.2r-1~deb9u1.1_armhf.deb) with cryptodev enable is available [here](/files/cesa/libssl1.0.2_1.0.2r-1~deb9u1.1_armhf.deb), if you want to skip the recompile step.
### Apache2 ### Apache2
@ -217,11 +221,11 @@ UsePrivilegeSeparation yes
**Client Side: (optional)** **Client Side: (optional)**
To make your SSH client supports the cipher define in SSH server side, you might need to edit */etc/ssh/ssh_config* and add the following line. To make your SSH client supports the cipher define in SSH server side, you will need to edit */etc/ssh/ssh_config* and add the following line.
``` ```
# Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc # Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc
Ciphers aes128-cbc Ciphers +aes128-cbc
``` ```
!!! Important !!! Important

BIN
docs/files/cesa/libssl1.0.2_1.0.2l-2+deb9u3.1_armhf.deb
View file

Binary file not shown.

BIN
docs/files/cesa/libssl1.0.2_1.0.2r-1~deb9u1.1_armhf.deb Normal file
View file

Binary file not shown.

3058
docs/files/cesa/openssl-add-cryptodev-support.patch
View file

File diff suppressed because it is too large Load diff