Преглед на файлове

package/libldns: enable dane-verify for OpenSSL

Since the bump of libopenssl to 1.1.x support for offline DANE
verification can be enabled.

Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de>
Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
Bernd Kuhls преди 3 години
родител
ревизия
39aa793c0f
променени са 1 файла, в които са добавени 6 реда и са изтрити 2 реда
  1. 6 2
      package/libldns/libldns.mk

+ 6 - 2
package/libldns/libldns.mk

@@ -13,11 +13,9 @@ LIBLDNS_CPE_ID_VENDOR = nlnetlabs
 LIBLDNS_CPE_ID_PRODUCT = ldns
 LIBLDNS_INSTALL_STAGING = YES
 LIBLDNS_DEPENDENCIES = openssl
-# --disable-dane-verify can be removed after openssl bump to 1.1.x
 LIBLDNS_CONF_OPTS = \
 	--with-ssl=$(STAGING_DIR)/usr \
 	--enable-dane \
-	--disable-dane-verify \
 	--enable-ecdsa \
 	--enable-gost \
 	--enable-sha2 \
@@ -26,6 +24,12 @@ LIBLDNS_CONF_OPTS = \
 	--without-pyldns \
 	--without-pyldnsx
 
+ifeq ($(BR2_PACKAGE_LIBOPENSSL),y)
+LIBLDNS_CONF_OPTS += --enable-dane-verify
+else
+LIBLDNS_CONF_OPTS += --disable-dane-verify
+endif
+
 ifeq ($(BR2_STATIC_LIBS),y)
 LIBLDNS_DEPENDENCIES += host-pkgconf
 # missing -lz breaks configure, add it using pkgconf