diff options
3 files changed, 227 insertions, 0 deletions
diff --git a/meta-networking/recipes-support/ntpsec/ntpsec/0001-Update-to-OpenSSL-3.0.0-alpha15.patch b/meta-networking/recipes-support/ntpsec/ntpsec/0001-Update-to-OpenSSL-3.0.0-alpha15.patch new file mode 100644 index 0000000000..825f6c93c3 --- /dev/null +++ b/meta-networking/recipes-support/ntpsec/ntpsec/0001-Update-to-OpenSSL-3.0.0-alpha15.patch | |||
| @@ -0,0 +1,111 @@ | |||
| 1 | From ba368822d0a197cb84c46c911d40d0c52cf9c391 Mon Sep 17 00:00:00 2001 | ||
| 2 | From: Hal Murray <hmurray@megapathdsl.net> | ||
| 3 | Date: Sun, 2 May 2021 22:24:26 -0700 | ||
| 4 | Subject: [PATCH] Update to OpenSSL 3.0.0-alpha15 | ||
| 5 | |||
| 6 | Upstream-Status: Backport [https://gitlab.com/NTPsec/ntpsec/-/commit/ba368822d0a197cb84c46c911d40d0c52cf9c391] | ||
| 7 | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> | ||
| 8 | Signed-off-by: Alex Kiernan <alexk@zuma.ai> | ||
| 9 | --- | ||
| 10 | attic/cmac-timing.c | 37 ++++++++++++++----------------------- | ||
| 11 | 1 file changed, 14 insertions(+), 23 deletions(-) | ||
| 12 | |||
| 13 | diff --git a/attic/cmac-timing.c b/attic/cmac-timing.c | ||
| 14 | index c2088db63a4c..464daa76b9e6 100644 | ||
| 15 | --- a/attic/cmac-timing.c | ||
| 16 | +++ b/attic/cmac-timing.c | ||
| 17 | @@ -225,28 +225,14 @@ static void DoPKEY( | ||
| 18 | #if OPENSSL_VERSION_NUMBER > 0x20000000L | ||
| 19 | static size_t One_EVP_MAC( | ||
| 20 | EVP_MAC_CTX *ctx, /* context */ | ||
| 21 | - char *cipher, | ||
| 22 | uint8_t *key, /* key pointer */ | ||
| 23 | int keylength, /* key length */ | ||
| 24 | uint8_t *pkt, /* packet pointer */ | ||
| 25 | int pktlength /* packet length */ | ||
| 26 | ) { | ||
| 27 | - OSSL_PARAM params[3]; | ||
| 28 | size_t len = EVP_MAX_MD_SIZE; | ||
| 29 | |||
| 30 | - params[0] = | ||
| 31 | - OSSL_PARAM_construct_utf8_string("cipher", cipher, 0); | ||
| 32 | - params[1] = | ||
| 33 | - OSSL_PARAM_construct_octet_string("key", key, keylength); | ||
| 34 | - params[2] = OSSL_PARAM_construct_end(); | ||
| 35 | - if (0 == EVP_MAC_CTX_set_params(ctx, params)) { | ||
| 36 | - unsigned long err = ERR_get_error(); | ||
| 37 | - char * str = ERR_error_string(err, NULL); | ||
| 38 | - printf("## Oops, EVP_MAC_CTX_set_params() failed: %s.\n", str); | ||
| 39 | - return 0; | ||
| 40 | - } | ||
| 41 | - | ||
| 42 | - if (0 == EVP_MAC_init(ctx)) { | ||
| 43 | + if (0 == EVP_MAC_init(ctx, key, keylength, NULL)) { | ||
| 44 | unsigned long err = ERR_get_error(); | ||
| 45 | char * str = ERR_error_string(err, NULL); | ||
| 46 | printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
| 47 | @@ -255,13 +241,13 @@ static size_t One_EVP_MAC( | ||
| 48 | if (0 == EVP_MAC_update(ctx, pkt, pktlength)) { | ||
| 49 | unsigned long err = ERR_get_error(); | ||
| 50 | char * str = ERR_error_string(err, NULL); | ||
| 51 | - printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
| 52 | + printf("## Oops, EVP_MAC_update() failed: %s.\n", str); | ||
| 53 | return 0; | ||
| 54 | } | ||
| 55 | if (0 == EVP_MAC_final(ctx, answer, &len, sizeof(answer))) { | ||
| 56 | unsigned long err = ERR_get_error(); | ||
| 57 | char * str = ERR_error_string(err, NULL); | ||
| 58 | - printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
| 59 | + printf("## Oops, EVP_MAC_final() failed: %s.\n", str); | ||
| 60 | return 0; | ||
| 61 | } | ||
| 62 | return len; | ||
| 63 | @@ -290,7 +276,7 @@ static void Do_EVP_MAC( | ||
| 64 | |||
| 65 | clock_gettime(CLOCK_MONOTONIC, &start); | ||
| 66 | for (int i = 0; i < SAMPLESIZE; i++) { | ||
| 67 | - digestlength = One_EVP_MAC(evp, cbc, key, keylength, pkt, pktlength); | ||
| 68 | + digestlength = One_EVP_MAC(evp, key, keylength, pkt, pktlength); | ||
| 69 | if (0 == digestlength) break; | ||
| 70 | } | ||
| 71 | clock_gettime(CLOCK_MONOTONIC, &stop); | ||
| 72 | @@ -305,26 +291,31 @@ static size_t One_EVP_MAC2( | ||
| 73 | uint8_t *pkt, /* packet pointer */ | ||
| 74 | int pktlength /* packet length */ | ||
| 75 | ) { | ||
| 76 | + EVP_MAC_CTX *dup; | ||
| 77 | size_t len = EVP_MAX_MD_SIZE; | ||
| 78 | |||
| 79 | - if (0 == EVP_MAC_init(ctx)) { | ||
| 80 | + // dup = ctx; | ||
| 81 | + dup = EVP_MAC_CTX_dup(ctx); | ||
| 82 | + | ||
| 83 | + if (0 == EVP_MAC_init(dup, NULL, 0, NULL)) { | ||
| 84 | unsigned long err = ERR_get_error(); | ||
| 85 | char * str = ERR_error_string(err, NULL); | ||
| 86 | printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
| 87 | return 0; | ||
| 88 | } | ||
| 89 | - if (0 == EVP_MAC_update(ctx, pkt, pktlength)) { | ||
| 90 | + if (0 == EVP_MAC_update(dup, pkt, pktlength)) { | ||
| 91 | unsigned long err = ERR_get_error(); | ||
| 92 | char * str = ERR_error_string(err, NULL); | ||
| 93 | - printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
| 94 | + printf("## Oops, EVP_MAC_update() failed: %s.\n", str); | ||
| 95 | return 0; | ||
| 96 | } | ||
| 97 | - if (0 == EVP_MAC_final(ctx, answer, &len, sizeof(answer))) { | ||
| 98 | + if (0 == EVP_MAC_final(dup, answer, &len, sizeof(answer))) { | ||
| 99 | unsigned long err = ERR_get_error(); | ||
| 100 | char * str = ERR_error_string(err, NULL); | ||
| 101 | - printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
| 102 | + printf("## Oops, EVP_MAC_final() failed: %s.\n", str); | ||
| 103 | return 0; | ||
| 104 | } | ||
| 105 | + EVP_MAC_CTX_free(dup); | ||
| 106 | return len; | ||
| 107 | } | ||
| 108 | |||
| 109 | -- | ||
| 110 | 2.33.0 | ||
| 111 | |||
diff --git a/meta-networking/recipes-support/ntpsec/ntpsec/volatiles.ntpsec b/meta-networking/recipes-support/ntpsec/ntpsec/volatiles.ntpsec new file mode 100644 index 0000000000..b5f93568cd --- /dev/null +++ b/meta-networking/recipes-support/ntpsec/ntpsec/volatiles.ntpsec | |||
| @@ -0,0 +1,3 @@ | |||
| 1 | d ntp ntp 0755 @NTP_USER_HOME@ none | ||
| 2 | d ntp ntp 0755 /var/log/ntpstats none | ||
| 3 | f ntp ntp 0644 /var/log/ntpd.log none | ||
diff --git a/meta-networking/recipes-support/ntpsec/ntpsec_1.2.1.bb b/meta-networking/recipes-support/ntpsec/ntpsec_1.2.1.bb new file mode 100644 index 0000000000..1e075b0971 --- /dev/null +++ b/meta-networking/recipes-support/ntpsec/ntpsec_1.2.1.bb | |||
| @@ -0,0 +1,113 @@ | |||
| 1 | SUMMARY = "The Network Time Protocol suite, refactored" | ||
| 2 | HOMEPAGE = "https://www.ntpsec.org/" | ||
| 3 | |||
| 4 | LICENSE = "CC-BY-4.0 & BSD-2-Clause & NTP & BSD-3-Clause & MIT" | ||
| 5 | LIC_FILES_CHKSUM = "file://LICENSE.adoc;md5=0520591566b6ed3a9ced8b15b4d4abf9 \ | ||
| 6 | file://libjsmn/LICENSE;md5=38118982429881235de8adf478a8e75d \ | ||
| 7 | file://docs/copyright.adoc;md5=9a1e3fce4b630078cb67ba2b619d2b13 \ | ||
| 8 | file://libaes_siv/COPYING;md5=3b83ef96387f14655fc854ddc3c6bd57" | ||
| 9 | |||
| 10 | DEPENDS += "bison-native \ | ||
| 11 | openssl \ | ||
| 12 | python3" | ||
| 13 | |||
| 14 | SRC_URI = "https://ftp.ntpsec.org/pub/releases/ntpsec-${PV}.tar.gz \ | ||
| 15 | file://0001-Update-to-OpenSSL-3.0.0-alpha15.patch \ | ||
| 16 | file://volatiles.ntpsec" | ||
| 17 | |||
| 18 | SRC_URI[sha256sum] = "f2684835116c80b8f21782a5959a805ba3c44e3a681dd6c17c7cb00cc242c27a" | ||
| 19 | |||
| 20 | inherit pkgconfig python3-dir python3targetconfig systemd update-alternatives update-rc.d useradd waf | ||
| 21 | |||
| 22 | PACKAGECONFIG = "${@bb.utils.filter('DISTRO_FEATURES', 'seccomp systemd', d)} \ | ||
| 23 | cap \ | ||
| 24 | leap-smear \ | ||
| 25 | mdns \ | ||
| 26 | mssntp \ | ||
| 27 | nts \ | ||
| 28 | refclocks" | ||
| 29 | PACKAGECONFIG[cap] = ",,libcap" | ||
| 30 | PACKAGECONFIG[leap-smear] = "--enable-leap-smear" | ||
| 31 | PACKAGECONFIG[mdns] = ",,mdns" | ||
| 32 | PACKAGECONFIG[mssntp] = "--enable-mssntp" | ||
| 33 | PACKAGECONFIG[nts] = ",--disable-nts" | ||
| 34 | PACKAGECONFIG[refclocks] = "--refclock=all,,pps-tools" | ||
| 35 | PACKAGECONFIG[seccomp] = "--enable-seccomp,,libseccomp" | ||
| 36 | PACKAGECONFIG[systemd] = ",,systemd" | ||
| 37 | |||
| 38 | CC[unexport] = "1" | ||
| 39 | CFLAGS[unexport] = "1" | ||
| 40 | LDFLAGS[unexport] = "1" | ||
| 41 | |||
| 42 | export PYTHON_VERSION = "${PYTHON_BASEVERSION}" | ||
| 43 | export PYTAG = "cpython${@ d.getVar('PYTHON_BASEVERSION').replace('.', '')}" | ||
| 44 | export pyext_PATTERN = "%s.so" | ||
| 45 | export PYTHON_LDFLAGS = "-lpthread -ldl" | ||
| 46 | |||
| 47 | CFLAGS:append = " -I${PYTHON_INCLUDE_DIR}" | ||
| 48 | |||
| 49 | EXTRA_OECONF = "--cross-compiler='${CC}' \ | ||
| 50 | --cross-cflags='${CFLAGS}' \ | ||
| 51 | --cross-ldflags='${LDFLAGS}' \ | ||
| 52 | --pyshebang=${bindir}/python3 \ | ||
| 53 | --pythondir=${PYTHON_SITEPACKAGES_DIR} \ | ||
| 54 | --pythonarchdir=${PYTHON_SITEPACKAGES_DIR} \ | ||
| 55 | --enable-debug \ | ||
| 56 | --enable-debug-gdb \ | ||
| 57 | --enable-early-droproot" | ||
| 58 | |||
| 59 | EXTRA_OEWAF_BUILD ?= "-v" | ||
| 60 | |||
| 61 | NTP_USER_HOME ?= "/var/lib/ntp" | ||
| 62 | |||
| 63 | do_install:append() { | ||
| 64 | install -d ${D}${sysconfdir}/init.d | ||
| 65 | install -m 755 ${S}/etc/rc/ntpd ${D}${sysconfdir}/init.d | ||
| 66 | cp -r ${S}/etc/ntp.d ${D}${sysconfdir} | ||
| 67 | |||
| 68 | sed -e 's:@NTP_USER_HOME@:${NTP_USER_HOME}:g' ${WORKDIR}/volatiles.ntpsec >${T}/volatiles.ntpsec | ||
| 69 | if ${@bb.utils.contains('DISTRO_FEATURES','systemd','true','false',d)}; then | ||
| 70 | cp ${B}/main/etc/* ${D}${systemd_system_unitdir} | ||
| 71 | awk '{print $1, $5, $4, $2, $3, "-"}' ${T}/volatiles.ntpsec >${T}/tmpfiles.ntpsec | ||
| 72 | install -D -m 0644 ${T}/tmpfiles.ntpsec ${D}${nonarch_libdir}/tmpfiles.d/${BPN}.conf | ||
| 73 | else | ||
| 74 | install -D -m 0644 ${T}/volatiles.ntpsec ${D}${sysconfdir}/default/volatiles/99_${BPN} | ||
| 75 | fi | ||
| 76 | } | ||
| 77 | |||
| 78 | PACKAGE_BEFORE_PN = "${PN}-python ${PN}-utils ${PN}-viz" | ||
| 79 | |||
| 80 | FILES:${PN} += "${nonarch_libdir}/tmpfiles.d/ntpsec.conf" | ||
| 81 | FILES:${PN}-python = "${PYTHON_SITEPACKAGES_DIR} \ | ||
| 82 | ${libdir}/libntpc.so.*" | ||
| 83 | FILES:${PN}-utils = "${bindir}/ntpdig \ | ||
| 84 | ${bindir}/ntpkeygen \ | ||
| 85 | ${bindir}/ntpleapfetch \ | ||
| 86 | ${bindir}/ntpmon \ | ||
| 87 | ${bindir}/ntpq \ | ||
| 88 | ${bindir}/ntpsnmpd \ | ||
| 89 | ${bindir}/ntpsweep \ | ||
| 90 | ${bindir}/ntptrace \ | ||
| 91 | ${bindir}/ntpwait" | ||
| 92 | FILES:${PN}-viz = "${bindir}/ntplogtemp \ | ||
| 93 | ${bindir}/ntpviz" | ||
| 94 | |||
| 95 | RDEPENDS:${PN} += "libgcc" | ||
| 96 | RDEPENDS:${PN}-utils += "${PN}-python python3-core" | ||
| 97 | RDEPENDS:${PN}-viz += "gnuplot ${PN}-python python3-core python3-compression python3-ctypes python3-logging python3-shell" | ||
| 98 | |||
| 99 | USERADD_PACKAGES = "${PN}" | ||
| 100 | USERADD_PARAM:${PN} = "--system --home-dir ${NTP_USER_HOME} \ | ||
| 101 | --no-create-home \ | ||
| 102 | --shell /bin/false --user-group ntp" | ||
| 103 | |||
| 104 | INITSCRIPT_NAME = "ntpd" | ||
| 105 | |||
| 106 | SYSTEMD_PACKAGES = "${PN} ${PN}-viz" | ||
| 107 | SYSTEMD_SERVICE:${PN} = "ntpd.service ntp-wait.service" | ||
| 108 | SYSTEMD_SERVICE:${PN}-viz = "ntplogtemp.service ntpviz-weekly.timer ntpviz-weekly.service ntpviz-daily.timer ntpviz-daily.service ntplogtemp.timer" | ||
| 109 | |||
| 110 | ALTERNATIVE_PRIORITY = "80" | ||
| 111 | |||
| 112 | ALTERNATIVE:${PN} = "ntpd" | ||
| 113 | ALTERNATIVE_LINK_NAME[ntpd] = "${sbindir}/ntpd" | ||
