mirror of
https://git.openwrt.org/openwrt/openwrt.git
synced 2026-05-05 01:46:11 +02:00
7a991c8d88
Switch http:// (and redundant ftp://) PKG_SOURCE_URL entries to https:// across tools/ and package/. PKG_HASH alone does not protect against an attacker tampering with insecure downloads when a maintainer regenerates the hash via `make ... FIXUP=1`: HTTPS authenticates the upstream so the captured hash reflects real upstream content. In-place http -> https (HTTPS reachability verified per host): - tools/elftosb, tools/lzop, tools/liblzo, tools/mpfr, tools/dosfstools, tools/libressl, tools/xz - package/libs/mpfr, package/libs/libmnl, package/libs/libnfnetlink Replaced with @OPENWRT (HTTPS-only mirror) where the upstream HTTPS host is dead or has a broken certificate: - package/libs/popt (ftp.rpm.org cert mismatch) - package/firmware/ixp4xx-microcode (was http://downloads.openwrt.org) - package/boot/imx-bootlets (trabant.uid0.hu cert mismatch) - package/boot/kobs-ng (freescale.com URL is dead, redirects to nxp.com root) Dropped redundant ftp://ftp.denx.de fallback (https://ftp.denx.de is already listed): - package/boot/uboot-tools, tools/mkimage Signed-off-by: Paul Spooren <mail@aparcar.org>
57 lines
1.4 KiB
Makefile
57 lines
1.4 KiB
Makefile
#
|
|
# Copyright (C) 2006-2014 OpenWrt.org
|
|
#
|
|
# This is free software, licensed under the GNU General Public License v2.
|
|
# See /LICENSE for more information.
|
|
#
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=mkimage
|
|
PKG_VERSION:=2026.04
|
|
|
|
PKG_SOURCE:=u-boot-$(PKG_VERSION).tar.bz2
|
|
PKG_SOURCE_URL:= \
|
|
https://mirror.cyberbits.eu/u-boot \
|
|
https://ftp.denx.de/pub/u-boot
|
|
PKG_HASH:=ac7c04b8b7004923b00a4e5d6699c5df4d21233bac9fda690d8cfbc209fff2fd
|
|
|
|
HOST_BUILD_DIR:=$(BUILD_DIR_HOST)/u-boot-$(PKG_VERSION)
|
|
|
|
include $(INCLUDE_DIR)/host-build.mk
|
|
|
|
define Host/Configure
|
|
$(MAKE) -C $(HOST_BUILD_DIR) \
|
|
HOSTCFLAGS="$(HOST_CFLAGS)" \
|
|
HOSTLDFLAGS="$(HOST_LDFLAGS)" \
|
|
PKG_CONFIG_EXTRAARGS="--static" \
|
|
V=$(if $(findstring c,$(OPENWRT_VERBOSE)),1) \
|
|
tools-only_defconfig
|
|
|
|
$(HOST_BUILD_DIR)/scripts/config \
|
|
--file $(HOST_BUILD_DIR)/.config \
|
|
--disable TOOLS_KWBIMAGE \
|
|
--disable TOOLS_LIBCRYPTO \
|
|
--disable TOOLS_MKEFICAPSULE
|
|
endef
|
|
|
|
define Host/Compile
|
|
$(MAKE) -C $(HOST_BUILD_DIR) \
|
|
HOSTCFLAGS="$(HOST_CFLAGS)" \
|
|
HOSTLDFLAGS="$(HOST_LDFLAGS)" \
|
|
PKG_CONFIG_EXTRAARGS="--static" \
|
|
V=$(if $(findstring c,$(OPENWRT_VERBOSE)),1) \
|
|
tools-only
|
|
endef
|
|
|
|
define Host/Install
|
|
$(CP) $(HOST_BUILD_DIR)/tools/mkimage $(STAGING_DIR_HOST)/bin/
|
|
$(CP) $(HOST_BUILD_DIR)/tools/mkenvimage $(STAGING_DIR_HOST)/bin/
|
|
endef
|
|
|
|
define Host/Clean
|
|
rm -f $(STAGING_DIR_HOST)/bin/mkimage
|
|
rm -f $(STAGING_DIR_HOST)/bin/mkenvimage
|
|
endef
|
|
|
|
$(eval $(call HostBuild))
|