Commit Graph

1915 Commits

Author SHA1 Message Date
Ross Burton
21a9066b1b shared-mime-info: fix license statement
The freedesktop.org.xml data and the update-mime-database tool are both GPLv2 as
per COPYING, so change LICENSE to GPLv2.

test-mime-magic.c is LGPLv2+ but we don't install that so isn't relevant.

(From OE-Core rev: 4ca838097c43755e19f8ffc66436f9ad773fcd39)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-06-07 08:52:55 +01:00
Denys Dmytriyenko
03e0a1f196 lz4: upgrade 1.8.1.2 -> 1.8.2
(From OE-Core rev: 235afa344423188af2a24aa2664c628d5809699b)

Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-29 21:07:15 +01:00
Armin Kuster
a2f714f3e5 nss: update to 3.36.1
removed patches included in update:
0001-Bug-1437734-Use-snprintf-in-sign.c-r-ttaubert.patch
nss-build-hacl-poly1305-aarch64.patch

(From OE-Core rev: 9755699275e6290950145685c186082dfcd28a9e)

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-29 21:07:14 +01:00
Andre McCurdy
293e0a313d curl: update 7.59.0 -> 7.60.0
https://curl.haxx.se/changes.html#7_60_0

Also refresh 0001-replace-krb5-config-with-pkg-config.patch and drop
configure_ac.patch, which we've apparently been dragging along
unnecessarily for the past 5 years:

  c277bd6ce7

(From OE-Core rev: 4063c1e4b233b28ae14420a83960fd93b437a4a4)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-29 21:07:14 +01:00
Changqing Li
cc8f888018 gmp: do the multilib_header magic for gmp.h
Add multilib support feature for this recipe

(From OE-Core rev: a2b4552b96c49dbdc9aef4b64820c3ff16dc5bb6)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-29 21:07:13 +01:00
Andre McCurdy
b1b506a810 pinentry: let autotools.bbclass handle --disable-dependency-tracking
autotools.bbclass adds --disable-dependency-tracking to the configure
command line by default, so there's no need for individual recipes to
do so.

Also make some minor recipe formatting cleanups.

(From OE-Core rev: 2f0f9b7f0b209798a74ee7fc8eafde5a109364b9)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-29 21:07:13 +01:00
Andrej Valek
669a89f377 libxslt: Fix handling of RVTs returned from nested EXSLT functions
Set the context variable to NULL when evaluating EXSLT functions.
Fixes potential use-after-free errors or memory leaks.

Fixes bug 792580

(From OE-Core rev: a997bcd3f985b65141f9b7a497581da2fd7afc10)

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-22 13:13:33 +01:00
Marko, Peter
865e34547a sqlite3: upgrade 3.23.0 -> 3.23.1
(From OE-Core rev: 6a90852e7e8fd6d17308d78966e700f17f567898)

Signed-off-by: Marko Peter <peter.marko@siemens.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-22 13:13:32 +01:00
Mingli Yu
bce155af1f boost: add contract lib
Add the contract lib which implements contract
programming (a.k.a., Design by Contract or DbC) [1]
for the C++ programming language.

(From OE-Core rev: 53756087222a12646c4e63dba5c91df16c873111)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-15 10:56:50 +01:00
Andre McCurdy
08cdb50847 icu: move ASNEEDED over-ride into icu.inc
Move the recipe specific over-ride for ASNEEDED into the recipe to
make it more apparent that the over-ride is being applied (and that
it should be re-checked on version updates, etc).

(From OE-Core rev: a4c29153c7ffef024b31e7e3a197a09758a7beb4)

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-15 10:56:50 +01:00
Khem Raj
6d8644569e libgpg-error: Upgrade 1.28 -> 1.31
License-Update: Check 19 lines of gpg-error.h.in only, more lines are not representing license text

Drop upstreamed patch

(From OE-Core rev: 9d26c595f648a8375ac92c2923b1cce3a1217c53)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-15 10:56:49 +01:00
Mark Asselstine
c6e502bc61 libcap: fix -native and usrmerge builds
When attempting to build a -native package which DEPENDS on
libcap-native the libcap libraries are not found and the build will
fail (for example attempting to build qemu-native with
'PACKAGECONFIG_append = " virtfs"').

It turns out commit 2c9c4a406a [libcap: fix (base_)libdir usage]
breaks builds of libcap(-native) when $root_prefix is not "". This is
because the variables which define $root_prefix are also part of
$prefix so you end up with part of the path being used twice, first as
part of 'lib=' in do_compile, and secondly as part of 'prefix=' in
do_install. When $root_prefix is "" this isn't noticed.

By using $baselib we should not re-break the issue which commit
2c9c4a406a was fixing but we should avoid doubling down on the
paths thus fixing the -native and usrmerge builds.

(From OE-Core rev: b46c55c3b9db5d8f2080ae2611294a5b24efe4a4)

Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-11 07:49:38 +01:00
Juro Bystricky
26cccb9305 libical-dev_2.0: improve reproducibility
Remove build host references from distributed files.

(From OE-Core rev: 20f2670e755bcbf90b2b6c08192c022fe7e7eaad)

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-11 07:49:38 +01:00
Khem Raj
b07bbe597d libunwind: Drop adding libssp to linker flags
This is no longer needed as gcc provided libssp
is not built

(From OE-Core rev: 6d025fe137e835ef2388f402d8d58728e62ed280)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-09 10:47:50 +01:00
Aníbal Limón
69942186ed recipes-support/ptest-runner: Upgrade to v2.2
The new version contains an option to exclude certain tests to
run, example:

$ ptest-runner -e "perl"

(From OE-Core rev: e529b8a68741992a21be874b62c0ea37f51d6a19)

Signed-off-by: Aníbal Limón <anibal.limon@linaro.org>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-08 16:14:14 +01:00
Alexander Kanavin
9fec5109ae libfm: update to 1.3.0.2
(From OE-Core rev: 3f2961e7d2311c106d92a999bfe8b6af01c0f9bb)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-08 16:14:14 +01:00
Mingli Yu
d336110b94 boost: update to 1.67.0
* Remove the backported patch 0001-Fix-a-strange-assert-typo-how-was-this-released-with.patch
* Remove the patch 0002-Don-t-set-up-m32-m64-we-do-that-ourselves.patch
  as it already rewritten gcc to use toolset.flags again
  as below:

  commit 12decb3ce680031b915f69902795eec47224fc7d
  Author: Steven Watanabe <steven@providere-consulting.com>
  Date:   Mon Jan 1 12:51:43 2018 -0700

    Rewrite gcc to use toolset.flags again.
* Remove the hardcoded parallel build limit as the
  mechanism already changed as below commit:
  commit 316e26ca718afc65d6170029284521392524e4f8
  Author: Steven Watanabe <steven@providere-consulting.com>
  Date:   Wed Apr 26 14:22:06 2017 -0600

    Remove fixed limit to -j.  Fixes #189.
    * execunix.c: Replace select with poll.
    * execnt.c: Use RegisterWaitForSingleObject when the number of jobs exceeds MAXIMUM_WAIT_OBJECTS.

Reference: 316e26ca71 (diff-c88fe8afebc632d0bef2bd5985137af2)

(From OE-Core rev: 358cf46ea4d01b7ad8c355fa103d4a6922cc0a88)

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:05 +01:00
Zhixiong Chi
aa5d47925a liburcu: fix multilib header conflict-urcu/config.h
(From OE-Core rev: 362787f252285658c86566db81758d4a3f55e67e)

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:04 +01:00
Zhixiong Chi
b79e1ffa8a npth: fix multilib header conflict-npth.h
(From OE-Core rev: 445644efd08f76762ec980999e9a6e91e4e88598)

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:04 +01:00
Koen Kooi
2c9c4a406a libcap: fix (base_)libdir usage
The recipe wants to install libs into base_libdir, but uses "basename $libdir" to derive that. That breaks in a multiarch setup. Use the proper variable and remove the inline python usage.

(From OE-Core rev: 6427bcae42fb9ec05ccfd5b63db6bc3ee2afcd4f)

Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:04 +01:00
Ross Burton
c5e230aba9 beecrypt: remove
This was only in oe-core for RPM5, but RPM4 doesn't use it.

(From OE-Core rev: fb8ca4225f3e26bfc46cf6c06d55df72684c47c6)

Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:04 +01:00
Maxin B. John
85a4690f83 libatomic-ops: upgrade to version 7.6.4
* Add RISC-V support
* Convert atomic_ops_malloc.c and tests to valid C++ code
* Eliminate 'function is never used' cppcheck warning for
* load_before_cas
* Eliminate 'using argument that points at uninitialized var' cppcheck
* error
* Fix 'AO_pt_lock undefined' error if cross-compiling manually (MinGW)
* Fix public headers inclusion from clients C++ code
* Remove gcc/nios2.h file (include gcc/generic.h directly for nios2)
* Support MIPS rel6

(From OE-Core rev: 053a61ef23981e23c9ab25b7900787a842f304c3)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:04 +01:00
Anuj Mittal
dabd0c0c11 atk: make sure that introspection is enabled
Fix the meson flags to make sure that introspection files are built
when it is enabled.

(From OE-Core rev: 31dfa9983e8793977936f52ec860b1476ec37e18)

Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:04 +01:00
Maxin B. John
a8eb3f6301 atk: upgrade to version 2.28.1
convert to meson build and provide flags for introspection and
documentation.

(From OE-Core rev: d06b0f899f840fb1a9b15584e6cf272a6f7f2562)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:04 +01:00
Maxin B. John
5a683ef2b1 libevdev: upgrade to version 1.5.9
1.5.8 -> 1.5.9

(From OE-Core rev: 0ba37befba81ab0caea4f5d51289bb560ea59b8f)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:03 +01:00
Maxin B. John
a6646df0ca sqlite3: upgrade to version 3.23.0
3.22.0 -> 3.23.0

Includes optimizations and fixes for issues detected by OSSFuzz

(From OE-Core rev: b478af4cd9c1cb0cab35b0160f7df3f31ca7358b)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:03 +01:00
Maxin B. John
6752661043 libsoup-2.4: upgrade to version 2.62.0
2.60.3 -> 2.62.0

(From OE-Core rev: cf4cb9d788797411f555235148650c3a6645fd8c)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:03 +01:00
Maxin B. John
d0dc306752 libusb1: upgrade to version 1.0.22
1.0.21 -> 1.0.22

(From OE-Core rev: 1488b9e6c56ea46b5612352ab9dd16a1ee028f8c)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:03 +01:00
Maxin B. John
d661de4a3b vte: upgrade to version 0.52.0
Removed configuration option "--disable-test-application"
[unknown-configure-option]

(From OE-Core rev: 583a501aa4924ff3d754ff37c7fc739860dd1c8e)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:03 +01:00
Maxin B. John
1244333aad at-spi2-atk: upgrade to version 2.26.2
1. convert to meson build
2. inherit gnomebase and associated cleanup
3. add libxml2 to DEPENDS list

(From OE-Core rev: 13b717f7cf05aa2f8b1bed27c5dc6ec91b9179e1)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:03 +01:00
Maxin B. John
4e380d7f4b at-spi2-core: upgrade to version 2.28.0
1. Convert to meson build
2. Remove the following patch made obsolete by moving to meson:
        0001-build-Add-with-systemduserunitdir.patch
3.  Provide meson flags for introspection and documentation

(From OE-Core rev: 0e1f4b0f0339fa5afd674c8f67dfe35f58cdf77e)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:03 +01:00
Hongxu Jia
76c840c584 libgpg-error: 1.27 -> 1.28
- Rebase pkgconfig.patch

- Fix regression on arm64 due to invalid use of va_list

License-Update: copyright years

(From OE-Core rev: 4a59b8a3d81ce6391da59f0aced763d0c16f73eb)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:03 +01:00
Armin Kuster
5ec4ea91ae curl: update to 7.59.0
(From OE-Core rev: 4c1ed0a1a265add8d856a6d2c6f04562b975c180)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:03 +01:00
Armin Kuster
ea5b9e9c8a gnutls: update to 3.6.2
(From OE-Core rev: 47249a21354f1cf44eb8e46db6e613cf4718bfab)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:03 +01:00
Armin Kuster
3f5488219e libpcre2: update to 10.31
LICENSE changed do to updating copyrige date

(From OE-Core rev: 20e589f0cdae0b062231891f8597c4d90110ceee)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:02 +01:00
Alexander Kanavin
0f9586023a icu: update to 61.1
License-Update: copyright years updated, added terms for Google double-conversion

(From OE-Core rev: b5797e80ccfa080bc1e57c5fb1f2f4a39d0266cf)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:02 +01:00
Alexander Kanavin
8cbbadd444 bash-completion: update to 2.8
(From OE-Core rev: e974ce6e4d3c54cde5b43c9056c649bb98ed69f5)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:02 +01:00
Andrej Valek
18ddd22163 libpcre: 8.41 -> 8.42
License-Update: The checksum of LIC_FILES_CHKSUM has been changed due to
 time update of copyright LICENCE to 2018. The content of LICENCE has no
 change.

(From OE-Core rev: 7e3b2e462172a8fd457e50726b9cd167736d2347)

Signed-off-by: Andrej Valek <andrej.valek@siemens.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:01 +01:00
Yi Zhao
b1c503af65 libcap-ng: update to 0.7.9
Rebase python.patch.

(From OE-Core rev: f98f0e6d8096290fdcc5fc6fc3b15638fa56158f)

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:01 +01:00
Hongxu Jia
38f1d8b32c gnupg: upgrade 2.2.4 -> 2.2.5
(From OE-Core rev: 37b17c45e643171e3cfb9a4b1f84c6f0ee934a94)

Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:01 +01:00
Denys Dmytriyenko
f6cb244907 lz4: upgrade 1.7.4 -> 1.8.1.2
0001-tests-Makefile-don-t-use-LIBDIR-as-variable.patch accepted upstream.

License-Update: rephrased clarification regarding lib/ vs. programs/, tests/ and examples/
97df1c9789

(From OE-Core rev: 633a2ac95b72c685031aa6c76943c2fb073e1921)

Signed-off-by: Denys Dmytriyenko <denys@ti.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-05-04 13:28:01 +01:00
André Draszik
a306bcc427 curl: DEPENDS on libidn2 (not libidn)
Since v7.51.0, libidn2 is the only available option, libidn
support was dropped.
The configure option was renamed as of v7.53.0

Therefore, curl unconditionally tries to build against libidn2,
which in particular is a problem for curl-native, as that might
or might not build against the build-machine's libidn2 now,
which furthermore causes problems when trying to share sstate
between multiple build machines.

We therefore see the following in the config log:
    ...
    checking whether to build with libidn2... (assumed) yes
    ...
    checking for libidn2 options with pkg-config... no
    configure: IDN_LIBS: "-lidn2"
    configure: IDN_LDFLAGS: ""
    configure: IDN_CPPFLAGS: ""
    configure: IDN_DIR: ""
    checking if idn2_lookup_ul can be linked... yes
    checking idn2.h usability... yes
    checking idn2.h presence... yes
    checking for idn2.h... yes
    ...
      IDN support:      enabled (libidn2)
    ...
even though this recipe tries to disable that.

While libidn2 isn't available in OE, this change at least:
* prevents curl-native to silently build against libidn2 if
  that is installed on build machine, even if not requested
* alerts people who use the PACKAGECONFIG option that it's
  not actually doing what they intend to do

(From OE-Core rev: 705eaea991622bdbb2ee83eefa8df8e665e3efe4)

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-04-07 11:44:50 +01:00
Maxin B. John
bb570816ac libcroco: remove duplication in inherit
Since gnomebase class already inherits autotools and pkgconfig,
there is no need to repeat it here.

(From OE-Core rev: 301d153781c7ddb6e38178c56f960e18d62788ab)

Signed-off-by: Maxin B. John <maxin.john@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-04-05 14:49:07 +01:00
Juro Bystricky
2212687352 libpcre-ptest: skip locale test
If a fr_FR locale is found, it is automatically tested. The test
will fail if the locale is UTF-8, as the test blindly assumes
(and expects) a non-UTF fr_FR locale.
The remedy is to skip the test.

[YOCTO #12215]

(From OE-Core rev: 4cedddb83623c79980b354642dfeaf78218ca4b7)

Signed-off-by: Juro Bystricky <juro.bystricky@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-31 09:48:43 +01:00
André Draszik
20e6d8762b ca-certificates: use relative symlinks from $ETCCERTSDIR
update-ca-certificates symlinks (trusted) certificates
from $CERTSDIR or $LOCALCERTSDIR into $ETCCERTSDIR.
update-ca-certificates can call hook scripts installed
into /etc/ca-certificates/update.d. Those scripts are
passed the pem file in /etc/ssl/certs/ that was added or
removed in this run and those pem files are absolute
symlinks into $CERTSDIR or $LOCALCERTSDIR at the moment.

When running update-ca-certificates during image build
time, they thusly all point into the host's file system,
not into the $SYSROOT. This means:
* the host's file system layout must match the one
  produced by OE, and
* it also means that the host must have installed the same
  (or more) certificates as the target in $CERTSDIR and
  $LOCALCERTSDIR

This is a problem when wanting to execute hook scripts,
because they all need to be taught about $SYSROOT, and
behave differently depending on whether they're called
at image build time, or on the target, as otherwise they
will be trying to actually read the host's certificates
from $CERTSDIR or $LOCALCERTSDIR.

This also is a problem when running anything else during
image build time that depends on the trusted CA
certificates.

Changing the symlink to be relative solves all of these
problems. At the same time, we have to make sure to add
$CERTSDIR to SYSROOT_DIRS, so that the symlinks are still
valid when somebody DEPENDS on ca-certificates-native. As
a side-effect, this also fixes a problem in meta-java,
where some recipes (e.g. openjdk-8-native) try to access
certificates from $CERTSDIR to generate the java trustStore
at build time.

Do so.

Upstream-Status: Inappropriate [OE-specific]
(From OE-Core rev: 09bb7718d74573be9a5db4d0737fb14126f6489c)

Signed-off-by: André Draszik <andre.draszik@jci.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-31 09:48:42 +01:00
Khem Raj
9280c47662 nss: Use snprintf in sign.c
Fies security warnings
| sign.c:86:31: error: 'sprintf' may write a terminating nul past the end of the destination [-Werror=format-overflow=]
|          sprintf(fullfn, "%s/%s", tree, tempfn);

(From OE-Core rev: 7171e96f3a5f54c63674cf5282aea31bcb9cd7f9)

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-30 00:31:18 +01:00
Armin Kuster
697e36fb75 nspr: update to 4.19
patch 0001-include-stdint.h-for-SSIZE_MAX-and-SIZE_MAX-definiti.patch remove
as it is included in update

(From OE-Core rev: 3f203582ac646f96e6b86ec4b19721e7a78d55f8)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-30 00:31:18 +01:00
Armin Kuster
a5463fc07f nss: update to 3.35
(From OE-Core rev: d136548ad7aef23021eac6af2ffc6317f36bd1c5)

Signed-off-by: Armin Kuster <akuster@mvista.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-30 00:31:18 +01:00
Mikko Rapeli
1fe6ca8206 ca-certificates: change SRC_URI from Debian anonscm to salsa
Debian anonscm service in Alioth is shutdown and thus
fetching ca-certificates sources fails.

https://wiki.debian.org/Alioth

"Alioth is broken, and there is nobody around to fix it. Don't ask the remaining people who give it life support to implement fixes and changes. It is being replaced by a cocktail of ?GitLab (see Salsa), read-only repos and keep-alive mechanisms. See below for more information."

(From OE-Core rev: fc20ff2003cee7ee3b78ba3bc236a60a8caabc35)

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-28 12:09:52 +01:00
Alexander Kanavin
f2103873bd ca-certificates: run postinst script only for -target package
Nativesdk package has a special arrangement where the same thing is done
in do_install(). It was assumed (in the comment) that postinsts don't run when
installing nativesdk packages, but this was incorrect: they are run, but
any failures were previously silently ignored. Now this missing failure reporting has
been fixed, and so we get to see the failures.

(From OE-Core rev: 8ebb695c1429f8d57d655072a362a4f176258699)

Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2018-03-20 09:59:31 +00:00