diff options
3 files changed, 227 insertions, 0 deletions
diff --git a/meta-networking/recipes-support/ntpsec/ntpsec/0001-Update-to-OpenSSL-3.0.0-alpha15.patch b/meta-networking/recipes-support/ntpsec/ntpsec/0001-Update-to-OpenSSL-3.0.0-alpha15.patch new file mode 100644 index 0000000000..825f6c93c3 --- /dev/null +++ b/meta-networking/recipes-support/ntpsec/ntpsec/0001-Update-to-OpenSSL-3.0.0-alpha15.patch | |||
@@ -0,0 +1,111 @@ | |||
1 | From ba368822d0a197cb84c46c911d40d0c52cf9c391 Mon Sep 17 00:00:00 2001 | ||
2 | From: Hal Murray <hmurray@megapathdsl.net> | ||
3 | Date: Sun, 2 May 2021 22:24:26 -0700 | ||
4 | Subject: [PATCH] Update to OpenSSL 3.0.0-alpha15 | ||
5 | |||
6 | Upstream-Status: Backport [https://gitlab.com/NTPsec/ntpsec/-/commit/ba368822d0a197cb84c46c911d40d0c52cf9c391] | ||
7 | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> | ||
8 | Signed-off-by: Alex Kiernan <alexk@zuma.ai> | ||
9 | --- | ||
10 | attic/cmac-timing.c | 37 ++++++++++++++----------------------- | ||
11 | 1 file changed, 14 insertions(+), 23 deletions(-) | ||
12 | |||
13 | diff --git a/attic/cmac-timing.c b/attic/cmac-timing.c | ||
14 | index c2088db63a4c..464daa76b9e6 100644 | ||
15 | --- a/attic/cmac-timing.c | ||
16 | +++ b/attic/cmac-timing.c | ||
17 | @@ -225,28 +225,14 @@ static void DoPKEY( | ||
18 | #if OPENSSL_VERSION_NUMBER > 0x20000000L | ||
19 | static size_t One_EVP_MAC( | ||
20 | EVP_MAC_CTX *ctx, /* context */ | ||
21 | - char *cipher, | ||
22 | uint8_t *key, /* key pointer */ | ||
23 | int keylength, /* key length */ | ||
24 | uint8_t *pkt, /* packet pointer */ | ||
25 | int pktlength /* packet length */ | ||
26 | ) { | ||
27 | - OSSL_PARAM params[3]; | ||
28 | size_t len = EVP_MAX_MD_SIZE; | ||
29 | |||
30 | - params[0] = | ||
31 | - OSSL_PARAM_construct_utf8_string("cipher", cipher, 0); | ||
32 | - params[1] = | ||
33 | - OSSL_PARAM_construct_octet_string("key", key, keylength); | ||
34 | - params[2] = OSSL_PARAM_construct_end(); | ||
35 | - if (0 == EVP_MAC_CTX_set_params(ctx, params)) { | ||
36 | - unsigned long err = ERR_get_error(); | ||
37 | - char * str = ERR_error_string(err, NULL); | ||
38 | - printf("## Oops, EVP_MAC_CTX_set_params() failed: %s.\n", str); | ||
39 | - return 0; | ||
40 | - } | ||
41 | - | ||
42 | - if (0 == EVP_MAC_init(ctx)) { | ||
43 | + if (0 == EVP_MAC_init(ctx, key, keylength, NULL)) { | ||
44 | unsigned long err = ERR_get_error(); | ||
45 | char * str = ERR_error_string(err, NULL); | ||
46 | printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
47 | @@ -255,13 +241,13 @@ static size_t One_EVP_MAC( | ||
48 | if (0 == EVP_MAC_update(ctx, pkt, pktlength)) { | ||
49 | unsigned long err = ERR_get_error(); | ||
50 | char * str = ERR_error_string(err, NULL); | ||
51 | - printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
52 | + printf("## Oops, EVP_MAC_update() failed: %s.\n", str); | ||
53 | return 0; | ||
54 | } | ||
55 | if (0 == EVP_MAC_final(ctx, answer, &len, sizeof(answer))) { | ||
56 | unsigned long err = ERR_get_error(); | ||
57 | char * str = ERR_error_string(err, NULL); | ||
58 | - printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
59 | + printf("## Oops, EVP_MAC_final() failed: %s.\n", str); | ||
60 | return 0; | ||
61 | } | ||
62 | return len; | ||
63 | @@ -290,7 +276,7 @@ static void Do_EVP_MAC( | ||
64 | |||
65 | clock_gettime(CLOCK_MONOTONIC, &start); | ||
66 | for (int i = 0; i < SAMPLESIZE; i++) { | ||
67 | - digestlength = One_EVP_MAC(evp, cbc, key, keylength, pkt, pktlength); | ||
68 | + digestlength = One_EVP_MAC(evp, key, keylength, pkt, pktlength); | ||
69 | if (0 == digestlength) break; | ||
70 | } | ||
71 | clock_gettime(CLOCK_MONOTONIC, &stop); | ||
72 | @@ -305,26 +291,31 @@ static size_t One_EVP_MAC2( | ||
73 | uint8_t *pkt, /* packet pointer */ | ||
74 | int pktlength /* packet length */ | ||
75 | ) { | ||
76 | + EVP_MAC_CTX *dup; | ||
77 | size_t len = EVP_MAX_MD_SIZE; | ||
78 | |||
79 | - if (0 == EVP_MAC_init(ctx)) { | ||
80 | + // dup = ctx; | ||
81 | + dup = EVP_MAC_CTX_dup(ctx); | ||
82 | + | ||
83 | + if (0 == EVP_MAC_init(dup, NULL, 0, NULL)) { | ||
84 | unsigned long err = ERR_get_error(); | ||
85 | char * str = ERR_error_string(err, NULL); | ||
86 | printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
87 | return 0; | ||
88 | } | ||
89 | - if (0 == EVP_MAC_update(ctx, pkt, pktlength)) { | ||
90 | + if (0 == EVP_MAC_update(dup, pkt, pktlength)) { | ||
91 | unsigned long err = ERR_get_error(); | ||
92 | char * str = ERR_error_string(err, NULL); | ||
93 | - printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
94 | + printf("## Oops, EVP_MAC_update() failed: %s.\n", str); | ||
95 | return 0; | ||
96 | } | ||
97 | - if (0 == EVP_MAC_final(ctx, answer, &len, sizeof(answer))) { | ||
98 | + if (0 == EVP_MAC_final(dup, answer, &len, sizeof(answer))) { | ||
99 | unsigned long err = ERR_get_error(); | ||
100 | char * str = ERR_error_string(err, NULL); | ||
101 | - printf("## Oops, EVP_MAC_init() failed: %s.\n", str); | ||
102 | + printf("## Oops, EVP_MAC_final() failed: %s.\n", str); | ||
103 | return 0; | ||
104 | } | ||
105 | + EVP_MAC_CTX_free(dup); | ||
106 | return len; | ||
107 | } | ||
108 | |||
109 | -- | ||
110 | 2.33.0 | ||
111 | |||
diff --git a/meta-networking/recipes-support/ntpsec/ntpsec/volatiles.ntpsec b/meta-networking/recipes-support/ntpsec/ntpsec/volatiles.ntpsec new file mode 100644 index 0000000000..b5f93568cd --- /dev/null +++ b/meta-networking/recipes-support/ntpsec/ntpsec/volatiles.ntpsec | |||
@@ -0,0 +1,3 @@ | |||
1 | d ntp ntp 0755 @NTP_USER_HOME@ none | ||
2 | d ntp ntp 0755 /var/log/ntpstats none | ||
3 | f ntp ntp 0644 /var/log/ntpd.log none | ||
diff --git a/meta-networking/recipes-support/ntpsec/ntpsec_1.2.1.bb b/meta-networking/recipes-support/ntpsec/ntpsec_1.2.1.bb new file mode 100644 index 0000000000..1e075b0971 --- /dev/null +++ b/meta-networking/recipes-support/ntpsec/ntpsec_1.2.1.bb | |||
@@ -0,0 +1,113 @@ | |||
1 | SUMMARY = "The Network Time Protocol suite, refactored" | ||
2 | HOMEPAGE = "https://www.ntpsec.org/" | ||
3 | |||
4 | LICENSE = "CC-BY-4.0 & BSD-2-Clause & NTP & BSD-3-Clause & MIT" | ||
5 | LIC_FILES_CHKSUM = "file://LICENSE.adoc;md5=0520591566b6ed3a9ced8b15b4d4abf9 \ | ||
6 | file://libjsmn/LICENSE;md5=38118982429881235de8adf478a8e75d \ | ||
7 | file://docs/copyright.adoc;md5=9a1e3fce4b630078cb67ba2b619d2b13 \ | ||
8 | file://libaes_siv/COPYING;md5=3b83ef96387f14655fc854ddc3c6bd57" | ||
9 | |||
10 | DEPENDS += "bison-native \ | ||
11 | openssl \ | ||
12 | python3" | ||
13 | |||
14 | SRC_URI = "https://ftp.ntpsec.org/pub/releases/ntpsec-${PV}.tar.gz \ | ||
15 | file://0001-Update-to-OpenSSL-3.0.0-alpha15.patch \ | ||
16 | file://volatiles.ntpsec" | ||
17 | |||
18 | SRC_URI[sha256sum] = "f2684835116c80b8f21782a5959a805ba3c44e3a681dd6c17c7cb00cc242c27a" | ||
19 | |||
20 | inherit pkgconfig python3-dir python3targetconfig systemd update-alternatives update-rc.d useradd waf | ||
21 | |||
22 | PACKAGECONFIG = "${@bb.utils.filter('DISTRO_FEATURES', 'seccomp systemd', d)} \ | ||
23 | cap \ | ||
24 | leap-smear \ | ||
25 | mdns \ | ||
26 | mssntp \ | ||
27 | nts \ | ||
28 | refclocks" | ||
29 | PACKAGECONFIG[cap] = ",,libcap" | ||
30 | PACKAGECONFIG[leap-smear] = "--enable-leap-smear" | ||
31 | PACKAGECONFIG[mdns] = ",,mdns" | ||
32 | PACKAGECONFIG[mssntp] = "--enable-mssntp" | ||
33 | PACKAGECONFIG[nts] = ",--disable-nts" | ||
34 | PACKAGECONFIG[refclocks] = "--refclock=all,,pps-tools" | ||
35 | PACKAGECONFIG[seccomp] = "--enable-seccomp,,libseccomp" | ||
36 | PACKAGECONFIG[systemd] = ",,systemd" | ||
37 | |||
38 | CC[unexport] = "1" | ||
39 | CFLAGS[unexport] = "1" | ||
40 | LDFLAGS[unexport] = "1" | ||
41 | |||
42 | export PYTHON_VERSION = "${PYTHON_BASEVERSION}" | ||
43 | export PYTAG = "cpython${@ d.getVar('PYTHON_BASEVERSION').replace('.', '')}" | ||
44 | export pyext_PATTERN = "%s.so" | ||
45 | export PYTHON_LDFLAGS = "-lpthread -ldl" | ||
46 | |||
47 | CFLAGS:append = " -I${PYTHON_INCLUDE_DIR}" | ||
48 | |||
49 | EXTRA_OECONF = "--cross-compiler='${CC}' \ | ||
50 | --cross-cflags='${CFLAGS}' \ | ||
51 | --cross-ldflags='${LDFLAGS}' \ | ||
52 | --pyshebang=${bindir}/python3 \ | ||
53 | --pythondir=${PYTHON_SITEPACKAGES_DIR} \ | ||
54 | --pythonarchdir=${PYTHON_SITEPACKAGES_DIR} \ | ||
55 | --enable-debug \ | ||
56 | --enable-debug-gdb \ | ||
57 | --enable-early-droproot" | ||
58 | |||
59 | EXTRA_OEWAF_BUILD ?= "-v" | ||
60 | |||
61 | NTP_USER_HOME ?= "/var/lib/ntp" | ||
62 | |||
63 | do_install:append() { | ||
64 | install -d ${D}${sysconfdir}/init.d | ||
65 | install -m 755 ${S}/etc/rc/ntpd ${D}${sysconfdir}/init.d | ||
66 | cp -r ${S}/etc/ntp.d ${D}${sysconfdir} | ||
67 | |||
68 | sed -e 's:@NTP_USER_HOME@:${NTP_USER_HOME}:g' ${WORKDIR}/volatiles.ntpsec >${T}/volatiles.ntpsec | ||
69 | if ${@bb.utils.contains('DISTRO_FEATURES','systemd','true','false',d)}; then | ||
70 | cp ${B}/main/etc/* ${D}${systemd_system_unitdir} | ||
71 | awk '{print $1, $5, $4, $2, $3, "-"}' ${T}/volatiles.ntpsec >${T}/tmpfiles.ntpsec | ||
72 | install -D -m 0644 ${T}/tmpfiles.ntpsec ${D}${nonarch_libdir}/tmpfiles.d/${BPN}.conf | ||
73 | else | ||
74 | install -D -m 0644 ${T}/volatiles.ntpsec ${D}${sysconfdir}/default/volatiles/99_${BPN} | ||
75 | fi | ||
76 | } | ||
77 | |||
78 | PACKAGE_BEFORE_PN = "${PN}-python ${PN}-utils ${PN}-viz" | ||
79 | |||
80 | FILES:${PN} += "${nonarch_libdir}/tmpfiles.d/ntpsec.conf" | ||
81 | FILES:${PN}-python = "${PYTHON_SITEPACKAGES_DIR} \ | ||
82 | ${libdir}/libntpc.so.*" | ||
83 | FILES:${PN}-utils = "${bindir}/ntpdig \ | ||
84 | ${bindir}/ntpkeygen \ | ||
85 | ${bindir}/ntpleapfetch \ | ||
86 | ${bindir}/ntpmon \ | ||
87 | ${bindir}/ntpq \ | ||
88 | ${bindir}/ntpsnmpd \ | ||
89 | ${bindir}/ntpsweep \ | ||
90 | ${bindir}/ntptrace \ | ||
91 | ${bindir}/ntpwait" | ||
92 | FILES:${PN}-viz = "${bindir}/ntplogtemp \ | ||
93 | ${bindir}/ntpviz" | ||
94 | |||
95 | RDEPENDS:${PN} += "libgcc" | ||
96 | RDEPENDS:${PN}-utils += "${PN}-python python3-core" | ||
97 | RDEPENDS:${PN}-viz += "gnuplot ${PN}-python python3-core python3-compression python3-ctypes python3-logging python3-shell" | ||
98 | |||
99 | USERADD_PACKAGES = "${PN}" | ||
100 | USERADD_PARAM:${PN} = "--system --home-dir ${NTP_USER_HOME} \ | ||
101 | --no-create-home \ | ||
102 | --shell /bin/false --user-group ntp" | ||
103 | |||
104 | INITSCRIPT_NAME = "ntpd" | ||
105 | |||
106 | SYSTEMD_PACKAGES = "${PN} ${PN}-viz" | ||
107 | SYSTEMD_SERVICE:${PN} = "ntpd.service ntp-wait.service" | ||
108 | SYSTEMD_SERVICE:${PN}-viz = "ntplogtemp.service ntpviz-weekly.timer ntpviz-weekly.service ntpviz-daily.timer ntpviz-daily.service ntplogtemp.timer" | ||
109 | |||
110 | ALTERNATIVE_PRIORITY = "80" | ||
111 | |||
112 | ALTERNATIVE:${PN} = "ntpd" | ||
113 | ALTERNATIVE_LINK_NAME[ntpd] = "${sbindir}/ntpd" | ||