mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
https://github.com/OpenVPN/openvpn/blob/v2.7.5/Changes.rst Fixes CVE-2026-11771, CVE-2026-12932, CVE-2026-12996, CVE-2026-13117, CVE-2026-13122, CVE-2026-13379 & CVE-2026-13698. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
89 lines
2.2 KiB
Makefile
89 lines
2.2 KiB
Makefile
################################################################################
|
|
#
|
|
# openvpn
|
|
#
|
|
################################################################################
|
|
|
|
OPENVPN_VERSION = 2.7.5
|
|
OPENVPN_SITE = https://swupdate.openvpn.net/community/releases
|
|
OPENVPN_DEPENDENCIES = host-pkgconf libcap-ng
|
|
OPENVPN_LICENSE = GPL-2.0
|
|
OPENVPN_LICENSE_FILES = COPYRIGHT.GPL
|
|
OPENVPN_CPE_ID_VENDOR = openvpn
|
|
OPENVPN_SELINUX_MODULES = openvpn
|
|
OPENVPN_CONF_OPTS = \
|
|
--disable-unit-tests \
|
|
$(if $(BR2_STATIC_LIBS),--disable-plugins)
|
|
OPENVPN_CONF_ENV = NETSTAT=/bin/netstat
|
|
|
|
# workaround for static_assert on uclibc-ng < 1.0.42
|
|
OPENVPN_CONF_ENV += CFLAGS="$(TARGET_CFLAGS) -Dstatic_assert=_Static_assert"
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBNL)$(BR2_TOOLCHAIN_HEADERS_AT_LEAST_4_16),yy)
|
|
OPENVPN_CONF_OPTS += --enable-dco
|
|
OPENVPN_DEPENDENCIES += libnl
|
|
else
|
|
OPENVPN_CONF_OPTS += --disable-dco
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENVPN_SMALL),y)
|
|
OPENVPN_CONF_OPTS += \
|
|
--enable-small \
|
|
--disable-plugins
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENVPN_LZ4),y)
|
|
OPENVPN_DEPENDENCIES += lz4
|
|
else
|
|
OPENVPN_CONF_OPTS += --disable-lz4
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENVPN_LZO),y)
|
|
OPENVPN_DEPENDENCIES += lzo
|
|
else
|
|
OPENVPN_CONF_OPTS += --disable-lzo
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
|
|
OPENVPN_DEPENDENCIES += libselinux
|
|
OPENVPN_CONF_OPTS += --enable-selinux
|
|
else
|
|
OPENVPN_CONF_OPTS += --disable-selinux
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LINUX_PAM),y)
|
|
OPENVPN_DEPENDENCIES += linux-pam
|
|
OPENVPN_CONF_OPTS += --enable-plugin-auth-pam
|
|
else
|
|
OPENVPN_CONF_OPTS += --disable-plugin-auth-pam
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
|
OPENVPN_DEPENDENCIES += openssl
|
|
OPENVPN_CONF_OPTS += --with-crypto-library=openssl
|
|
else ifeq ($(BR2_PACKAGE_MBEDTLS),y)
|
|
OPENVPN_DEPENDENCIES += mbedtls
|
|
OPENVPN_CONF_OPTS += --with-crypto-library=mbedtls
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_PKCS11_HELPER),y)
|
|
OPENVPN_DEPENDENCIES += pkcs11-helper
|
|
OPENVPN_CONF_OPTS += --enable-pkcs11
|
|
else
|
|
OPENVPN_CONF_OPTS += --disable-pkcs11
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_SYSTEMD),y)
|
|
OPENVPN_DEPENDENCIES += systemd
|
|
OPENVPN_CONF_OPTS += --enable-systemd
|
|
else
|
|
OPENVPN_CONF_OPTS += --disable-systemd
|
|
endif
|
|
|
|
define OPENVPN_INSTALL_INIT_SYSV
|
|
$(INSTALL) -m 755 -D package/openvpn/S60openvpn \
|
|
$(TARGET_DIR)/etc/init.d/S60openvpn
|
|
endef
|
|
|
|
$(eval $(autotools-package))
|