staging/stintel/tools/libressl, branch master

treewide: use HTTPS for PKG_SOURCE_URL where possible

2026-04-20T03:58:37Z

Switch http:// (and redundant ftp://) PKG_SOURCE_URL entries to https:// across tools/ and package/. PKG_HASH alone does not protect against an attacker tampering with insecure downloads when a maintainer regenerates the hash via `make ... FIXUP=1`: HTTPS authenticates the upstream so the captured hash reflects real upstream content. In-place http -> https (HTTPS reachability verified per host): - tools/elftosb, tools/lzop, tools/liblzo, tools/mpfr, tools/dosfstools, tools/libressl, tools/xz - package/libs/mpfr, package/libs/libmnl, package/libs/libnfnetlink Replaced with @OPENWRT (HTTPS-only mirror) where the upstream HTTPS host is dead or has a broken certificate: - package/libs/popt (ftp.rpm.org cert mismatch) - package/firmware/ixp4xx-microcode (was http://downloads.openwrt.org) - package/boot/imx-bootlets (trabant.uid0.hu cert mismatch) - package/boot/kobs-ng (freescale.com URL is dead, redirects to nxp.com root) Dropped redundant ftp://ftp.denx.de fallback (https://ftp.denx.de is already listed): - package/boot/uboot-tools, tools/mkimage Signed-off-by: Paul Spooren

tools: libressl: update to 4.2.1

2025-11-22T22:17:09Z

Changelog: - 3.8.0: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.0-relnotes.txt - 3.8.1: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.1-relnotes.txt - 3.8.2: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.3-relnotes.txt - 3.8.4: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.4-relnotes.txt - 3.9.0: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.9.0-relnotes.txt - 3.9.1: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.9.1-relnotes.txt - 3.9.2: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.9.2-relnotes.txt - 4.0.0: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.0.0-relnotes.txt - 4.1.0: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.1.0-relnotes.txt - 4.2.0: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.2.0-relnotes.txt - 4.2.1: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.2.1-relnotes.txt Further add patches: - 010-static.patch - 011-fix-linking.patch Link: https://github.com/openwrt/openwrt/pull/19562 Signed-off-by: Nick Hainke

Revert "tools/libressl: update to 4.0.0"

2025-03-29T18:23:15Z

This reverts commit 21cece29e9eebc397eadee259e60c7fc44828cce. Unfortunately, LibreSSL 4.0 causes the host APK tools to segfault under fakeroot when .apk is being generated and it is completely breaking building under Debian and Ubuntu hosts. So, until this is fixed lets revert the update. Signed-off-by: Robert Marko

tools/libressl: update to 4.0.0

2025-03-28T14:39:26Z

Stable version. Odd versions are betas. Added static patch to rename some ecdsa symbols that conflict with u-boot's mkimage. These symbols are not exported by default but because OpenWrt uses a static libressl, they are present and conflict with mkimage's libecdsa. Signed-off-by: Rosen Penev Link: https://github.com/openwrt/openwrt/pull/16901 Signed-off-by: Nick Hainke

tools/libressl: update to version 3.7.3

2023-09-22T12:11:22Z

Release notes: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.3-relnotes.txt Signed-off-by: Josef Schlehofer

tools/libressl: update to 3.7.2

2023-04-21T23:31:50Z

Release Notes: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.2-relnotes.txt Signed-off-by: Nick Hainke

tools/libressl: bump to 3.7.1

2023-03-20T22:40:23Z

Release Notes: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.1-relnotes.txt Signed-off-by: Linhui Liu

tools/libressl: update to 3.7.0

2022-12-18T15:34:47Z

Release notes: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.0-relnotes.txt https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.1-relnotes.txt https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.0-relnotes.txt Signed-off-by: Linhui Liu

tools: add Host/Uninstall where possible

2022-10-19T22:33:22Z

This cleans staging_dir when calling tool/x/clean. Signed-off-by: Rosen Penev

build: prefer HTTPS if available (for packages)

2022-10-05T15:37:07Z

Changes PKG_SOURCE_URL's for arptables, bsdiff, dnsmasq, fortify-headers, ipset, ipset-dns, libaudit, libpcap, libressl, lua, lua5.3, tcpdump and valgrind, to HTTPS Signed-off-by: Daniel Cousens