aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGravatar Gustavo Zacarias <gustavo.zacarias@free-electrons.com>2015-12-09 15:30:23 -0300
committerGravatar Thomas Petazzoni <thomas.petazzoni@free-electrons.com>2015-12-12 16:58:56 +0100
commit984ec386096513c5b3fcfbc4f77f3dbe1ef9d35d (patch)
tree83c86a5ca71e0834a32fb730db448e32554ca768
parent40afc40cc41073554c284edb4afcf7cbc328ea23 (diff)
downloadbuildroot-984ec386096513c5b3fcfbc4f77f3dbe1ef9d35d.tar.gz
buildroot-984ec386096513c5b3fcfbc4f77f3dbe1ef9d35d.tar.bz2
netsnmp: enable tsm + DTLSUDP/TLSTCP with openssl
Otherwise the openssl support is basically unused. net-snmp provides a stripped-down openssl implementation that can be used to enable tsm/DTLSUDP/TLSTCP but given it's security track record it's best to rely on the external one, it also saves space. usm is the user validation module, it's default on, however when passing --with-security-modules we must keep it otherwise it won't be. Signed-off-by: Gustavo Zacarias <gustavo.zacarias@free-electrons.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
-rw-r--r--package/netsnmp/netsnmp.mk4
1 files changed, 3 insertions, 1 deletions
diff --git a/package/netsnmp/netsnmp.mk b/package/netsnmp/netsnmp.mk
index 6eff5e3016..fb7217964e 100644
--- a/package/netsnmp/netsnmp.mk
+++ b/package/netsnmp/netsnmp.mk
@@ -49,7 +49,9 @@ endif
ifeq ($(BR2_PACKAGE_OPENSSL),y)
NETSNMP_DEPENDENCIES += openssl
NETSNMP_CONF_OPTS += \
- --with-openssl=$(STAGING_DIR)/usr/include/openssl
+ --with-openssl=$(STAGING_DIR)/usr/include/openssl \
+ --with-security-modules="tsm,usm" \
+ --with-transports="DTLSUDP,TLSTCP"
ifeq ($(BR2_STATIC_LIBS),y)
# openssl uses zlib, so we need to explicitly link with it when static
NETSNMP_CONF_ENV += LIBS=-lz