diff options
| -rw-r--r-- | target/linux/generic/patches-4.4/211-sign-file-libressl.patch | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/target/linux/generic/patches-4.4/211-sign-file-libressl.patch b/target/linux/generic/patches-4.4/211-sign-file-libressl.patch new file mode 100644 index 0000000000..c174087f10 --- /dev/null +++ b/target/linux/generic/patches-4.4/211-sign-file-libressl.patch @@ -0,0 +1,16 @@ +LibreSSL disables the CMS subsystem, so sign-file.c needs to fall back to using +PKCS#7 in that case. + +Signed-off-by: Felix Fietkau <nbd@nbd.name> + +--- a/scripts/sign-file.c ++++ b/scripts/sign-file.c +@@ -39,7 +39,7 @@ + * signing with anything other than SHA1 - so we're stuck with that if such is + * the case. + */ +-#if OPENSSL_VERSION_NUMBER < 0x10000000L ++#if defined(LIBRESSL_VERSION_NUMBER) || OPENSSL_VERSION_NUMBER < 0x10000000L + #define USE_PKCS7 + #endif + #ifndef USE_PKCS7 |