This set of patches introduces a couple of config options to leave out stuff from OpenSSL. Additionally the hardcoded configure options have been extended to omit some rarely used functionality and algorithms. I'm not sure about the defaults for the introduced config options so please take a closer look at them. In my case with these changes libcrypto shrunk by about 100K and libssl by about 22K. Note that I'm introducing two (small) patches to OpenSSL but these have been sent upstream and will probably be included in the next 1.0.2 release.
Dirk Feytons (6): openssl: add option to omit deprecated APIs openssl: add option to disable compression support openssl: add option for NPN support openssl: add option to disable PSK support openssl: remove some unneeded functionality and algorithms openssl: add --gc-sections package/libs/openssl/Config.in | 20 +++++++++++ package/libs/openssl/Makefile | 36 ++++++++++++++++---- .../patches/301-fix_no_nextprotoneg_build.patch | 12 +++++++ .../openssl/patches/302-fix_no_cmac_build.patch | 24 +++++++++++++ 4 files changed, 86 insertions(+), 6 deletions(-) create mode 100644 package/libs/openssl/patches/301-fix_no_nextprotoneg_build.patch create mode 100644 package/libs/openssl/patches/302-fix_no_cmac_build.patch -- 1.7.9.5 _______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
