staging/xback/tools/libressl, branch master

tools: cache the configure results of eleven more autotools tools

2026-09-22T18:29:59Z

Configure stage without a cache against a warm cache: mtools 3.34 s -> 0.28 s gengetopt 4.39 s -> 2.13 s fakeroot 10.97 s -> 8.73 s xz 4.32 s -> 2.17 s libressl 3.07 s -> 1.46 s flex 12.32 s -> 10.98 s expat 2.74 s -> 1.52 s bc 1.34 s -> 0.38 s dosfstools 3.13 s -> 2.54 s libtool 2.86 s -> 2.29 s mtd-utils 4.06 s -> 3.56 s flex, fakeroot, dosfstools and mtd-utils run autoreconf in the same stage, and the cache does not reach that part. Each of the eleven configures the same way with a warm cache as it does without one: the check configures three times, without a cache, with a cold cache and with a warm cache, and every generated file of the first and the last run is identical. A static scan of each configure script found no cache check that changes CFLAGS, CPPFLAGS, LDFLAGS or LIBS without restoring it. patchelf, mklibs and automake pass the same check but gain less than half a second, so they stay out. make world after make tools/clean now takes 121 s against 177 s with cold caches. Signed-off-by: John Crispin

treewide: use HTTPS for PKG_SOURCE_URL where possible

2026-04-20T03:58:37Z

Switch http:// (and redundant ftp://) PKG_SOURCE_URL entries to https:// across tools/ and package/. PKG_HASH alone does not protect against an attacker tampering with insecure downloads when a maintainer regenerates the hash via `make ... FIXUP=1`: HTTPS authenticates the upstream so the captured hash reflects real upstream content. In-place http -> https (HTTPS reachability verified per host): - tools/elftosb, tools/lzop, tools/liblzo, tools/mpfr, tools/dosfstools, tools/libressl, tools/xz - package/libs/mpfr, package/libs/libmnl, package/libs/libnfnetlink Replaced with @OPENWRT (HTTPS-only mirror) where the upstream HTTPS host is dead or has a broken certificate: - package/libs/popt (ftp.rpm.org cert mismatch) - package/firmware/ixp4xx-microcode (was http://downloads.openwrt.org) - package/boot/imx-bootlets (trabant.uid0.hu cert mismatch) - package/boot/kobs-ng (freescale.com URL is dead, redirects to nxp.com root) Dropped redundant ftp://ftp.denx.de fallback (https://ftp.denx.de is already listed): - package/boot/uboot-tools, tools/mkimage Signed-off-by: Paul Spooren

tools: libressl: update to 4.2.1

2025-11-22T22:17:09Z

Changelog: - 3.8.0: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.0-relnotes.txt - 3.8.1: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.1-relnotes.txt - 3.8.2: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.3-relnotes.txt - 3.8.4: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.4-relnotes.txt - 3.9.0: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.9.0-relnotes.txt - 3.9.1: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.9.1-relnotes.txt - 3.9.2: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.9.2-relnotes.txt - 4.0.0: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.0.0-relnotes.txt - 4.1.0: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.1.0-relnotes.txt - 4.2.0: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.2.0-relnotes.txt - 4.2.1: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-4.2.1-relnotes.txt Further add patches: - 010-static.patch - 011-fix-linking.patch Link: https://github.com/openwrt/openwrt/pull/19562 Signed-off-by: Nick Hainke

Revert "tools/libressl: update to 4.0.0"

2025-03-29T18:23:15Z

This reverts commit 21cece29e9eebc397eadee259e60c7fc44828cce. Unfortunately, LibreSSL 4.0 causes the host APK tools to segfault under fakeroot when .apk is being generated and it is completely breaking building under Debian and Ubuntu hosts. So, until this is fixed lets revert the update. Signed-off-by: Robert Marko

tools/libressl: update to 4.0.0

2025-03-28T14:39:26Z

Stable version. Odd versions are betas. Added static patch to rename some ecdsa symbols that conflict with u-boot's mkimage. These symbols are not exported by default but because OpenWrt uses a static libressl, they are present and conflict with mkimage's libecdsa. Signed-off-by: Rosen Penev Link: https://github.com/openwrt/openwrt/pull/16901 Signed-off-by: Nick Hainke

tools/libressl: update to version 3.7.3

2023-09-22T12:11:22Z

Release notes: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.3-relnotes.txt Signed-off-by: Josef Schlehofer

tools/libressl: update to 3.7.2

2023-04-21T23:31:50Z

Release Notes: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.2-relnotes.txt Signed-off-by: Nick Hainke

tools/libressl: bump to 3.7.1

2023-03-20T22:40:23Z

Release Notes: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.1-relnotes.txt Signed-off-by: Linhui Liu

tools/libressl: update to 3.7.0

2022-12-18T15:34:47Z

Release notes: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.0-relnotes.txt https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.6.1-relnotes.txt https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.7.0-relnotes.txt Signed-off-by: Linhui Liu

tools: add Host/Uninstall where possible

2022-10-19T22:33:22Z

This cleans staging_dir when calling tool/x/clean. Signed-off-by: Rosen Penev