Re: [OpenWrt-Devel] [PATCH] dropbear: fix dropbear startup issue

On Tue, 18 Dec 2018 at 14:16, Hans Dedecker wrote: > > Interface triggers are installed by the dropbear init script in case an > interface is configured for a given dropbear uci section. > As dropbear is started after network the interface trigger event can be > missed during a small window; this

[OpenWrt-Devel] TR-069 for OpenWrt (part 2)

Hi all, Back in May, when the conversations started about an open source TR-069 solution for OpenWrt/LEDE, we committed to support this initiative by open sourcing Technicolor’s in-house TR-069 solution. This solution consists of three parts: 1) a TR-069 protocol agent, 2) a data model mapping fra

[OpenWrt-Devel] [PATCH v3 6/7] openssl: add --gc-sections

Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile index 4782c42..d10b447 100644 --- a/package/libs/openssl/Makefile +++ b/package/libs/openssl

[OpenWrt-Devel] [PATCH v3 7/7] openssl: add option to disable SRP support

Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |9 +++-- 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 7224b65..e1d9952 100644 --- a

[OpenWrt-Devel] [PATCH v3 3/7] openssl: add option for NPN support

NPN has been superseded by ALPN so NPN is disabled by default The patch has been sent to OpenSSL for inclusion, see https://github.com/openssl/openssl/pull/1100 Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile

[OpenWrt-Devel] [PATCH v3 5/7] openssl: remove some unneeded functionality and algorithms

The patch needed for this commit has been sent upstream: https://github.com/openssl/openssl/pull/1155 Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |7 +++--- .../openssl/patches/302-fix_no_cmac_build.patch| 24 2 files changed

[OpenWrt-Devel] [PATCH v3 4/7] openssl: add option to disable PSK support

Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 492b042..7224b65 100644 --- a/package

[OpenWrt-Devel] [PATCH v3 2/7] openssl: add option to disable compression support

By default it's disabled. After the CRIME attack it seems the use of compression is discouraged. Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile | 13 ++--- 2 files changed, 15 insertions(+), 3 deletions(-) diff --

[OpenWrt-Devel] [PATCH v3 1/7] openssl: add option to omit deprecated APIs

Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 3d76dab..aa94300 100644 --- a/package

[OpenWrt-Devel] [PATCH v3 0/7] openssl: tweaks to reduce size

und logic for OPENSSL_WITH_COMPRESSION - enable PSK by default v2 -> v3: - add option to disable SRP support Dirk Feytons (7): openssl: add option to omit deprecated APIs openssl: add option to disable compression support openssl: add option for NPN support openssl: add option to disable PSK support

Re: [OpenWrt-Devel] [PATCH v2 5/6] openssl: remove some unneeded functionality and algorithms

common, but it's like PSK, only easier to > use, and disabling it in even more places is just guaranteeing > that it's never going to be used. Totally understand tossing all > the others though. > > Cheers, > Karl P > > > Dirk Feytons wrote: >> The pa

Re: [OpenWrt-Devel] [PATCH v2 0/6] openssl: tweaks to reduce size

Ah crap, forgot the "v2" in the subject. Should I resend? On 9 June 2016 at 17:37, Dirk Feytons wrote: > This set of patches introduces a couple of config options to leave out stuff > from OpenSSL. Additionally the hardcoded configure options have been extended > to om

[OpenWrt-Devel] [PATCH v2 6/6] openssl: add --gc-sections

Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile index 4782c42..d10b447 100644 --- a/package/libs/openssl/Makefile +++ b/package/libs/openssl

[OpenWrt-Devel] [PATCH v2 5/6] openssl: remove some unneeded functionality and algorithms

The patch needed for this commit has been sent upstream: https://github.com/openssl/openssl/pull/1155 Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |7 +++--- .../openssl/patches/302-fix_no_cmac_build.patch| 24 2 files changed

[OpenWrt-Devel] [PATCH v2 4/6] openssl: add option to disable PSK support

Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 492b042..7224b65 100644 --- a/package

[OpenWrt-Devel] [PATCH v2 3/6] openssl: add option for NPN support

NPN has been superseded by ALPN so NPN is disabled by default The patch has been sent to OpenSSL for inclusion, see https://github.com/openssl/openssl/pull/1100 Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile

[OpenWrt-Devel] [PATCH v2 2/6] openssl: add option to disable compression support

By default it's disabled. After the CRIME attack it seems the use of compression is discouraged. Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile | 13 ++--- 2 files changed, 15 insertions(+), 3 deletions(-) diff --

[OpenWrt-Devel] [PATCH v2 1/6] openssl: add option to omit deprecated APIs

Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 3d76dab..aa94300 100644 --- a/package

[OpenWrt-Devel] [PATCH v2 0/6] openssl: tweaks to reduce size

und logic for OPENSSL_WITH_COMPRESSION - enable PSK by default Dirk Feytons (6): openssl: add option to omit deprecated APIs openssl: add option to disable compression support openssl: add option for NPN support openssl: add option to disable PSK support openssl: remove some unneeded functionality a

Re: [OpenWrt-Devel] [PATCH 4/6] openssl: add option to disable PSK support

u still want the default for PSK to be 'y'? > > Cheers, > Karl P > > Dirk Feytons wrote: >> Signed-off-by: Dirk Feytons >> --- >> package/libs/openssl/Config.in |5 + >> package/libs/openssl/Makefile |7 ++- >> 2 files changed, 11

Re: [OpenWrt-Devel] [PATCH 2/6] openssl: add option to disable compression support

On 9 June 2016 at 13:51, Karl Palsson wrote: > > You've changed the default for compression in this patch, was > that intentional? Yes. From what I gathered after attacks like CRIME the use of TLS compression seems to be discouraged. > Dirk Feytons wrote: >> Sign

[OpenWrt-Devel] [PATCH 6/6] openssl: add --gc-sections

Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile index bab05bc..9e2195c 100644 --- a/package/libs/openssl/Makefile +++ b/package/libs/openssl

[OpenWrt-Devel] [PATCH 5/6] openssl: remove some unneeded functionality and algorithms

The patch needed for this commit has been sent upstream: https://github.com/openssl/openssl/pull/1155 Signed-off-by: Dirk Feytons --- package/libs/openssl/Makefile |7 +++--- .../openssl/patches/302-fix_no_cmac_build.patch| 24 2 files changed

[OpenWrt-Devel] [PATCH 3/6] openssl: add option for NPN support

NPN has been superseded by ALPN so NPN is disabled by default The patch has been sent to OpenSSL for inclusion, see https://github.com/openssl/openssl/pull/1100 Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile

[OpenWrt-Devel] [PATCH 4/6] openssl: add option to disable PSK support

Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 492b042..47b9fb5 100644 --- a/package

[OpenWrt-Devel] [PATCH 1/6] openssl: add option to omit deprecated APIs

Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile |7 ++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index 3d76dab..aa94300 100644 --- a/package

[OpenWrt-Devel] [PATCH 2/6] openssl: add option to disable compression support

Signed-off-by: Dirk Feytons --- package/libs/openssl/Config.in |5 + package/libs/openssl/Makefile | 13 ++--- 2 files changed, 15 insertions(+), 3 deletions(-) diff --git a/package/libs/openssl/Config.in b/package/libs/openssl/Config.in index aa94300..02b5da9 100644 --- a

[OpenWrt-Devel] [PATCH 0/6] openssl: tweaks to reduce size

ake a closer look at them. In my case with these changes libcrypto shrunk by about 100K and libssl by about 22K. Note that I'm introducing two (small) patches to OpenSSL but these have been sent upstream and will probably be included in the next 1.0.2 release. Dirk Feytons (6): openssl: add opti

[OpenWrt-Devel] [PATCH 0/6] openssl: tweaks to reduce size

. Note that I'm introducing two (small) patches to OpenSSL but these have been sent upstream and will probably be included in the next 1.0.2 release. Dirk Feytons (6): openssl: add option to omit deprecated APIs openssl: add option to disable compression support openssl: add option fo

Re: [OpenWrt-Devel] [OpenWrt] [LEDE-DEV] TR-069 for OpenWrt

On 30 May 2016 at 11:58, Delbar Jos wrote: > Felix Fietkau wrote: > > > We are conscious of the fact that together with the proposals made by > > > Felix, Luka and Wojtek we are now looking at many "competing" > proposals. > > > As a next step, we recommend to organize a wo

Re: [OpenWrt-Devel] [PATCH 3/3] curl: add flags to allow gc-sections to strip out unused code

On 7 April 2016 at 18:22, Hauke Mehrtens wrote: > On 04/07/2016 10:21 AM, Dirk Feytons wrote: > > Signed-off-by: Dirk Feytons > > --- > > package/network/utils/curl/Makefile |3 ++- > > 1 file changed, 2 insertions(+), 1 deletion(-) > > > > diff --gi

[OpenWrt-Devel] [PATCH 3/3] curl: add flags to allow gc-sections to strip out unused code

Signed-off-by: Dirk Feytons --- package/network/utils/curl/Makefile |3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/network/utils/curl/Makefile b/package/network/utils/curl/Makefile index 319c0b7..af38ed4 100644 --- a/package/network/utils/curl/Makefile +++ b

[OpenWrt-Devel] [PATCH 2/3] curl: add config option for NTLM support

Signed-off-by: Dirk Feytons --- package/network/utils/curl/Config.in |5 + package/network/utils/curl/Makefile |4 +++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/package/network/utils/curl/Config.in b/package/network/utils/curl/Config.in index f41307a..14d2047

[OpenWrt-Devel] [PATCH 1/3] curl: upstep to latest version 7.48.0

Signed-off-by: Dirk Feytons --- package/network/utils/curl/Makefile|6 +++--- .../utils/curl/patches/200-no_docs_tests.patch |4 ++-- .../curl/patches/300-fix-disable-crypto-auth.patch |2 +- ...10-polarssl-disable-runtime-version-check.patch |2 +- 4 files