Attachment #439716 for bug #510798





LICENSE="openssl"
SLOT="0"
KEYWORDS="~amd64"
IUSE="+asm bindist +camellia +des gmp idea kerberos mdc2 rc2 +rc4 rc5 rfc3779 sctp cpu_flags_x86_sse2 sslv2 +sslv3 static-libs test +tls-heartbeat vanilla zlib"
RESTRICT="!bindist? ( bindist )"

RDEPEND=">=app-misc/c_rehash-1.7-r1

		epatch "${FILESDIR}"/${PN}-1.0.2-ipv6.patch
		epatch "${FILESDIR}"/${PN}-1.0.2a-x32-asm.patch #542618
		epatch "${FILESDIR}"/${PN}-1.0.1p-default-source.patch #554338
		epatch "${FILESDIR}"/${PN}-1.0.2-no_des.patch

		epatch_user #332661
	fi

	./${config} \
		${sslout} \
		$(use cpu_flags_x86_sse2 || echo "no-sse2") \
		enable-camellia \
		$(use_ssl !bindist ec) \
		${ec_nistp_64_gcc_128} \
		enable-idea \
		enable-mdc2 \
		enable-rc5 \
		enable-tlsext \
		$(use_ssl asm) \
		$(use_ssl camellia) \
		$(use_ssl des) \
		$(use_ssl gmp gmp -lgmp) \
		$(use_ssl idea) \
		$(use_ssl kerberos krb5 --with-krb5-flavor=${krb5}) \
		$(use_ssl mdc2) \
		$(use_ssl rc2) \
		$(use_ssl rc4) \
		$(use_ssl rc5) \
		$(use_ssl rfc3779) \
		$(use_ssl sctp) \
		$(use_ssl sslv2 ssl2) \

Lines 8-13 Link Here

(-)/mnt/builder/portage/dev-libs/openssl/metadata.xml (+7 lines)
8	<use>	8	<use>
9	<flag name="asm">Support assembly hand optimized crypto functions (i.e. faster run time)</flag>	9	<flag name="asm">Support assembly hand optimized crypto functions (i.e. faster run time)</flag>
10	<flag name="bindist">Disable EC algorithms (as they seem to be patented) -- note: changes the ABI</flag>	10	<flag name="bindist">Disable EC algorithms (as they seem to be patented) -- note: changes the ABI</flag>
		11	<flag name="camellia">Support for the symmetric key block cipher Camellia (same class as AES)</flag>
		12	<flag name="des">Support for the old/insecure DES cipher -- many apps still depend on this for 3DES</flag>
		13	<flag name="idea">Support for the old/insecure IDEA cipher</flag>
		14	<flag name="mdc2">Support for the MDC2 cipher -- not widely used</flag>
		15	<flag name="rc2">Support for the old/insecure RC2 cipher</flag>
		16	<flag name="rc4">Support for the old/insecure RC2 cipher -- some apps still depend on this</flag>
		17	<flag name="rc5">Support for the old/insecure RC2 cipher</flag>
11	<flag name="rfc3779">Enable support for RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers)</flag>	18	<flag name="rfc3779">Enable support for RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers)</flag>
12	<flag name="sctp">Support for Stream Control Transmission Protocol</flag>	19	<flag name="sctp">Support for Stream Control Transmission Protocol</flag>
13	<flag name="sslv2">Support for the old/insecure SSLv2 protocol -- note: not required for TLS/https</flag>	20	<flag name="sslv2">Support for the old/insecure SSLv2 protocol -- note: not required for TLS/https</flag>

Return to bug 510798

Lines 13-20 Link Here

(-)/mnt/builder/portage/dev-libs/openssl/openssl-1.0.2h-r2.ebuild (-6 / +10 lines)
13		13
14	LICENSE="openssl"	14	LICENSE="openssl"
15	SLOT="0"	15	SLOT="0"
16	KEYWORDS="alpha amd64 ~arm ~arm64 hppa ~ia64 ~m68k ~mips ~ppc ppc64 ~s390 ~sh ~sparc x86 ~amd64-fbsd ~sparc-fbsd ~x86-fbsd ~arm-linux ~x86-linux"	16	KEYWORDS="~amd64"
17	IUSE="+asm bindist gmp kerberos rfc3779 sctp cpu_flags_x86_sse2 sslv2 +sslv3 static-libs test +tls-heartbeat vanilla zlib"	17	IUSE="+asm bindist +camellia +des gmp idea kerberos mdc2 rc2 +rc4 rc5 rfc3779 sctp cpu_flags_x86_sse2 sslv2 +sslv3 static-libs test +tls-heartbeat vanilla zlib"
18	RESTRICT="!bindist? ( bindist )"	18	RESTRICT="!bindist? ( bindist )"
19		19
20	RDEPEND=">=app-misc/c_rehash-1.7-r1	20	RDEPEND=">=app-misc/c_rehash-1.7-r1
Lines 58-63 Link Here
58	epatch "${FILESDIR}"/${PN}-1.0.2-ipv6.patch	58	epatch "${FILESDIR}"/${PN}-1.0.2-ipv6.patch
59	epatch "${FILESDIR}"/${PN}-1.0.2a-x32-asm.patch #542618	59	epatch "${FILESDIR}"/${PN}-1.0.2a-x32-asm.patch #542618
60	epatch "${FILESDIR}"/${PN}-1.0.1p-default-source.patch #554338	60	epatch "${FILESDIR}"/${PN}-1.0.1p-default-source.patch #554338
		61	epatch "${FILESDIR}"/${PN}-1.0.2-no_des.patch
61		62
62	epatch_user #332661	63	epatch_user #332661
63	fi	64	fi
Lines 142-157 Link Here
142	./${config} \	142	./${config} \
143	${sslout} \	143	${sslout} \
144	$(use cpu_flags_x86_sse2 \|\| echo "no-sse2") \	144	$(use cpu_flags_x86_sse2 \|\| echo "no-sse2") \
145	enable-camellia \
146	$(use_ssl !bindist ec) \	145	$(use_ssl !bindist ec) \
147	${ec_nistp_64_gcc_128} \	146	${ec_nistp_64_gcc_128} \
148	enable-idea \
149	enable-mdc2 \
150	enable-rc5 \
151	enable-tlsext \	147	enable-tlsext \
152	$(use_ssl asm) \	148	$(use_ssl asm) \
		149	$(use_ssl camellia) \
		150	$(use_ssl des) \
153	$(use_ssl gmp gmp -lgmp) \	151	$(use_ssl gmp gmp -lgmp) \
		152	$(use_ssl idea) \
154	$(use_ssl kerberos krb5 --with-krb5-flavor=${krb5}) \	153	$(use_ssl kerberos krb5 --with-krb5-flavor=${krb5}) \
		154	$(use_ssl mdc2) \
		155	$(use_ssl rc2) \
		156	$(use_ssl rc4) \
		157	$(use_ssl rc5) \
155	$(use_ssl rfc3779) \	158	$(use_ssl rfc3779) \
156	$(use_ssl sctp) \	159	$(use_ssl sctp) \
157	$(use_ssl sslv2 ssl2) \	160	$(use_ssl sslv2 ssl2) \