Re: [OpenWrt-Devel] [PATCH v2 5/6] openssl: remove some unneeded functionality and algorithms

2016-06-09 Thread Karl Palsson
On this one, does SRP have to be included? I'm not using it, and i know it's super uncommon, but it's like PSK, only easier to use, and disabling it in even more places is just guaranteeing that it's never going to be used. Totally understand tossing all the others though. Cheers, Karl P Dirk Fe

Re: [OpenWrt-Devel] [PATCH v2 0/6] openssl: tweaks to reduce size

2016-06-09 Thread Dirk Feytons
Ah crap, forgot the "v2" in the subject. Should I resend? On 9 June 2016 at 17:37, Dirk Feytons wrote: > This set of patches introduces a couple of config options to leave out stuff > from OpenSSL. Additionally the hardcoded configure options have been extended > to omit some rarely used function

[OpenWrt-Devel] [PATCH v2 6/6] openssl: add --gc-sections

2016-06-09 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile index 4782c42..d10b447 100644 --- a/package/libs/openssl/Makefile +++ b/package/libs/openssl/Makefil

[OpenWrt-Devel] [PATCH v2 5/6] openssl: remove some unneeded functionality and algorithms

2016-06-09 Thread Dirk Feytons
The patch needed for this commit has been sent upstream: https://github.com/openssl/openssl/pull/1155 Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |7 +++--- .../openssl/patches/302-fix_no_cmac_build.patch| 24 2 files changed,

[OpenWrt-Devel] [PATCH v2 4/6] openssl: add option to disable PSK support

2016-06-09 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 492b042..7224b65 100644 --- a/package/li

[OpenWrt-Devel] [PATCH v2 3/6] openssl: add option for NPN support

2016-06-09 Thread Dirk Feytons
NPN has been superseded by ALPN so NPN is disabled by default The patch has been sent to OpenSSL for inclusion, see https://github.com/openssl/openssl/pull/1100 Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile

[OpenWrt-Devel] [PATCH v2 2/6] openssl: add option to disable compression support

2016-06-09 Thread Dirk Feytons
By default it's disabled. After the CRIME attack it seems the use of compression is discouraged. Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile | 13 ++--- 2 files changed, 15 insertions(+), 3 deletions(-) diff --git a/packa

[OpenWrt-Devel] [PATCH v2 1/6] openssl: add option to omit deprecated APIs

2016-06-09 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 3d76dab..aa94300 100644 --- a/package/li

[OpenWrt-Devel] [PATCH v2 0/6] openssl: tweaks to reduce size

2016-06-09 Thread Dirk Feytons
This set of patches introduces a couple of config options to leave out stuff from OpenSSL. Additionally the hardcoded configure options have been extended to omit some rarely used functionality and algorithms. I'm not sure about the defaults for the introduced config options so please take a closer

Re: [OpenWrt-Devel] [PATCH 4/6] openssl: add option to disable PSK support

2016-06-09 Thread Karl Palsson
Dirk Feytons wrote: > On 9 June 2016 at 13:55, Karl Palsson > wrote: > > > > This is turning off PSK by default right? I actually use that > > option, and it's a relatively common use with mosquitto, which > > supports PSK for client auth. Could you leave it on by default > > please? PSK, and SR

Re: [OpenWrt-Devel] [PATCH 4/6] openssl: add option to disable PSK support

2016-06-09 Thread Dirk Feytons
On 9 June 2016 at 13:55, Karl Palsson wrote: > > This is turning off PSK by default right? I actually use that > option, and it's a relatively common use with mosquitto, which > supports PSK for client auth. Could you leave it on by default > please? PSK, and SRP are badly treated by people who wa

Re: [OpenWrt-Devel] [PATCH 2/6] openssl: add option to disable compression support

2016-06-09 Thread Dirk Feytons
On 9 June 2016 at 13:51, Karl Palsson wrote: > > You've changed the default for compression in this patch, was > that intentional? Yes. From what I gathered after attacks like CRIME the use of TLS compression seems to be discouraged. > Dirk Feytons wrote: >> Signed-off-by: Dirk Feytons >> ---

Re: [OpenWrt-Devel] [PATCH] wpa_supplicant: GNU Readline and History Support for command line

2016-06-09 Thread Felix Fietkau
On 2016-06-07 19:25, Bima Hutama wrote: > -Description: > Include support for GNU Readline and History Libraries in wpa_cli. By > enabling > this, we will get history support for wpa_cli, so that > wpa_cli-interactive-mode > interprets up and down key as historical commands ra

Re: [OpenWrt-Devel] [PATCH 4/6] openssl: add option to disable PSK support

2016-06-09 Thread Karl Palsson
This is turning off PSK by default right? I actually use that option, and it's a relatively common use with mosquitto, which supports PSK for client auth. Could you leave it on by default please? PSK, and SRP are badly treated by people who wants certs everywhere, but they're perfectly reasonable,

Re: [OpenWrt-Devel] [PATCH 2/6] openssl: add option to disable compression support

2016-06-09 Thread Karl Palsson
You've changed the default for compression in this patch, was that intentional? Dirk Feytons wrote: > Signed-off-by: Dirk Feytons > --- > package/libs/openssl/Config.in |5 + > package/libs/openssl/Makefile | 13 ++--- > 2 files changed, 15 insertions(+), 3 deletions(-) > >

Re: [OpenWrt-Devel] [OpenWrt-Devel, 2/2] Add support for AVM FritzBox 7360SL

2016-06-09 Thread Guido L.
Hi Sebastian, Nice work so far, i have a 7360SL at home so i tested your 2 patches There are a few things that have be changed before we can merge this! - As Hauke sayed, you are loading the wrong firmware for the PHYs, so change the a1x prefix in the filename to a2x - Near the bottom in the

[OpenWrt-Devel] [PATCH 6/6] openssl: add --gc-sections

2016-06-09 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile index bab05bc..9e2195c 100644 --- a/package/libs/openssl/Makefile +++ b/package/libs/openssl/Makefil

[OpenWrt-Devel] [PATCH 5/6] openssl: remove some unneeded functionality and algorithms

2016-06-09 Thread Dirk Feytons
The patch needed for this commit has been sent upstream: https://github.com/openssl/openssl/pull/1155 Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |7 +++--- .../openssl/patches/302-fix_no_cmac_build.patch| 24 2 files changed,

[OpenWrt-Devel] [PATCH 3/6] openssl: add option for NPN support

2016-06-09 Thread Dirk Feytons
NPN has been superseded by ALPN so NPN is disabled by default The patch has been sent to OpenSSL for inclusion, see https://github.com/openssl/openssl/pull/1100 Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile

[OpenWrt-Devel] [PATCH 4/6] openssl: add option to disable PSK support

2016-06-09 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 492b042..47b9fb5 100644 --- a/package/li

[OpenWrt-Devel] [PATCH 1/6] openssl: add option to omit deprecated APIs

2016-06-09 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 3d76dab..aa94300 100644 --- a/package/li

[OpenWrt-Devel] [PATCH 2/6] openssl: add option to disable compression support

2016-06-09 Thread Dirk Feytons
Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile | 13 ++--- 2 files changed, 15 insertions(+), 3 deletions(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index aa94300..02b5da9 100644 --- a/pac

[OpenWrt-Devel] [PATCH 0/6] openssl: tweaks to reduce size

2016-06-09 Thread Dirk Feytons
This set of patches introduces a couple of config options to leave out stuff from OpenSSL. Additionally the hardcoded configure options have been extended to omit some rarely used functionality and algorithms. I'm not sure about the defaults for the introduced config options so please take a closer

[OpenWrt-Devel] [PATCH 0/6] openssl: tweaks to reduce size

2016-06-09 Thread Dirk Feytons
This set of patches introduces a couple of config options to leave out stuff from OpenSSL. Additionally the hardcoded configure options have been extended to omit some rarely used functionality and algorithms. In my case with these changes libcrypto shrunk by about 100K and libssl by about 22K. Not

[OpenWrt-Devel] [PATCH] toolchain/gdb: Use correct folder name for ARC patches

2016-06-09 Thread Alexey Brodkin
Even though ARC tools were released as arc-2016.03 we have a little bit different version name for GDB. That's because both Binutils and GDB come from the same git repo but from different branches (and so different tags). Also removing an extra patch that made its way into release. Signed-off-by: