lede/package
Eneas U de Queiroz 9d77bd7666 openssl: configure engines with uci
This uses uci to configure engines, by generating a list of enabled
engines in /var/etc/ssl/engines.cnf from engines configured in
/etc/config/openssl:

    config engine 'devcrypto'
            option enabled '1'

Currently the only options implemented are 'enabled', which defaults to
true and enables the named engine, and the 'force' option, that enables
the engine even if the init script thinks the engine does not exist.

The existence test is to check for either a configuration file
/etc/ssl/engines.cnf.d/%ENGINE%.cnf, or a shared object file
/usr/lib/engines-1.1/%ENGINE%.so.

The engine list is generated by an init script which is set to run after
'log' because it informs the engines being enabled or skipped.  It
should run before any service using OpenSSL as the crypto library,
otherwise the service will not use any engine.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-02-22 16:28:15 +00:00
..
base-files base-files: upgrade: fix efi partitions size calculation 2021-12-31 10:40:40 +08:00
boot rockchip:Fix doornet2 device tree (#8897) 2022-02-18 11:45:13 +08:00
devel Revert "binutils: sync upstream" 2022-01-11 11:31:45 +08:00
firmware x86: improve Intel gen 11/12th GPU i915 and GVT-g capability 2022-02-12 20:29:20 +08:00
kernel ksmbd: add out-of-tree module 2022-02-20 16:15:52 +00:00
lean fullconenat: fix avoid replacing existing notifier on 5.15 2022-02-17 23:24:55 +08:00
libs openssl: configure engines with uci 2022-02-22 16:28:15 +00:00
network add dnsmasq-filter-aaaa+https+unknown.patch (#8909) 2022-02-20 16:04:59 +08:00
qca ipq806x: enable NSS Multicast Snooping Support 2022-02-16 17:39:01 +08:00
system Revert "procd: update to git HEAD (#7676)" 2021-08-26 16:46:06 +08:00
utils dtc: support printing binary data with fdtget 2022-02-14 19:16:01 +00:00
Makefile add kernel 5.10 support and sync with upstream 2021-06-14 18:30:08 +08:00