Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
lighttpd: add option to use OpenSSL crypto library
Currently, it is not feasible to configure lighttpd to use OpenSSL as its internal crypto library. Instead, one must rely on alternative crypto libraries such as Nettle or mbedTLS. This setup is not ideal in scenarios where a single crypto library is preferred. To address this issue, lets propose introducing OpenSSL as an additional configuration option. Similarly, propose GnuTLS as additional configuration option. Details of patch: Each TLS module in lighttpd is built to utilize its corresponding TLS library. For example, lighttpd's mod_openssl module utilizes OpenSSL, and its mod_mbedtls module uses mbedTLS. Separately, the core lighttpd application may employ cryptographic functions. For efficiency and portability, if lighttpd is compiled with Nettle, it becomes the default cryptographic library for the base application. However, each TLS module within lighttpd still relies on its respective TLS library. In scenarios where lighttpd is configured with only one TLS library and without Nettle, the base application adopts the cryptographic functions from that specific TLS library. When preparing for Linux distributions, lighttpd might be built with several TLS modules, where each module uses its designated TLS library. Presently, lighttpd does not offer a distinct, dedicated option to select the cryptographic library for the base application. In contexts like embedded systems, where a single TLS library might be utilized across the entire base system, specific configurations allow the use of either mbedTLS or wolfSSL. For these, lighttpd is compiled with -DFORCE_MBEDTLS_CRYPTO or -DFORCE_WOLFSSL_CRYPTO, respectively. To extend this capability, let's introduce the FORCE_OPENSSL_CRYPTO define, enabling lighttpd to also use OpenSSL as an additional cryptographic library, akin to the existing support for mbedTLS and wolfSSL. Closes: openwrt#24004 Co-developed-by: Glenn Strauss <gstrauss@gluelogic.com> Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com> Signed-off-by: Petr Štetiar <ynezz@true.cz>
- Loading branch information