mirror of
https://github.com/breeze303/nss-packages.git
synced 2025-12-16 16:57:29 +00:00
f9ca66a002
Because of the way these modules will hook into the kernel certain applications that use devcrypto will try to offload to it. This just kernel panics and user confusion. These modules are broken on IPQ807x and there has been no work upstream to fix it in over 3 years. Luckily these modules aren't required to get offloading for over 95% of use cases (mostly just affects IPSec/OpenVPN). Rather than removing, I'm disabling these modules from showing up in default build options when "@BROKEN" isn't explicitly enabled. Signed-off-by: Sean Khan <datapronix@protonmail.com>
90 lines
2.5 KiB
Makefile
90 lines
2.5 KiB
Makefile
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=qca-nss-cfi
|
|
PKG_RELEASE:=2
|
|
|
|
PKG_SOURCE_URL:=https://git.codelinaro.org/clo/qsdk/oss/lklm/nss-cfi.git
|
|
PKG_SOURCE_PROTO:=git
|
|
PKG_SOURCE_DATE:=2022-12-15
|
|
PKG_SOURCE_VERSION:=5cd07ce
|
|
PKG_MIRROR_HASH:=4f6fc96b7f17875d4d1059b13f686d3515a8a2768f752cbb0da2a04c389fdf61
|
|
QSDK_VERSION:=12.5.r2
|
|
PKG_VERSION:=$(QSDK_VERSION)-$(PKG_SOURCE_DATE)-$(PKG_SOURCE_VERSION)
|
|
|
|
PKG_BUILD_PARALLEL:=1
|
|
|
|
include $(INCLUDE_DIR)/kernel.mk
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
ifneq (, $(findstring $(CONFIG_TARGET_SUBTARGET), "ipq807x" "ipq60xx"))
|
|
#4.4/5.4 + ipq807x/ipq60xx/ipq50xx
|
|
CFI_OCF_DIR:=ocf/v2.0
|
|
CFI_CRYPTOAPI_DIR:=cryptoapi/v2.0
|
|
else
|
|
#4.4 Kernel + ipq806x
|
|
CFI_CRYPTOAPI_DIR:=cryptoapi/v1.1
|
|
CFI_OCF_DIR:=ocf/v1.0
|
|
CFI_IPSEC_DIR:=ipsec/v1.0
|
|
endif
|
|
|
|
define KernelPackage/qca-nss-cfi-cryptoapi
|
|
SECTION:=kernel
|
|
CATEGORY:=Kernel modules
|
|
SUBMENU:=Cryptographic API modules
|
|
DEPENDS:=@TARGET_qualcommax +kmod-qca-nss-crypto +kmod-crypto-authenc @BROKEN
|
|
TITLE:=Kernel driver for NSS cfi
|
|
FILES:=$(PKG_BUILD_DIR)/$(CFI_CRYPTOAPI_DIR)/qca-nss-cfi-cryptoapi.ko
|
|
AUTOLOAD:=$(call AutoLoad,59,qca-nss-cfi-cryptoapi)
|
|
endef
|
|
|
|
define Build/InstallDev
|
|
$(INSTALL_DIR) $(1)/usr/include/qca-nss-cfi
|
|
$(CP) $(PKG_BUILD_DIR)/$(CFI_CRYPTOAPI_DIR)/../exports/* $(1)/usr/include/qca-nss-cfi
|
|
$(CP) $(PKG_BUILD_DIR)/include/* $(1)/usr/include/qca-nss-cfi
|
|
endef
|
|
|
|
define KernelPackage/qca-nss-cfi-cryptoapi/Description
|
|
This package contains a NSS cfi driver for QCA chipset
|
|
endef
|
|
|
|
EXTRA_CFLAGS+= \
|
|
-DCONFIG_NSS_DEBUG_LEVEL=4 \
|
|
-I$(LINUX_DIR)/crypto/ocf \
|
|
-I$(STAGING_DIR)/usr/include/qca-nss-crypto \
|
|
-I$(STAGING_DIR)/usr/include/crypto \
|
|
-I$(STAGING_DIR)/usr/include/qca-nss-drv
|
|
|
|
ifneq (, $(findstring $(CONFIG_TARGET_SUBTARGET), "ipq807x"))
|
|
EXTRA_CFLAGS+= -I$(STAGING_DIR)/usr/include/qca-nss-clients
|
|
endif
|
|
|
|
# Build individual packages if selected
|
|
ifneq ($(CONFIG_PACKAGE_kmod-qca-nss-cfi-cryptoapi),)
|
|
MAKE_OPTS+= \
|
|
cryptoapi=y \
|
|
NSS_CRYPTOAPI_ABLK=n \
|
|
NSS_CRYPTOAPI_SKCIPHER=y
|
|
endif
|
|
|
|
ifeq ($(CONFIG_TARGET_BOARD), "qualcommax")
|
|
SOC:=$(CONFIG_TARGET_SUBTARGET)
|
|
endif
|
|
|
|
define Build/Compile
|
|
+$(MAKE) -C "$(LINUX_DIR)" $(strip $(MAKE_OPTS)) \
|
|
CROSS_COMPILE="$(TARGET_CROSS)" \
|
|
ARCH="$(LINUX_KARCH)" \
|
|
M="$(PKG_BUILD_DIR)" \
|
|
EXTRA_CFLAGS="$(EXTRA_CFLAGS)" \
|
|
CC="$(TARGET_CC)" \
|
|
CFI_CRYPTOAPI_DIR=$(CFI_CRYPTOAPI_DIR) \
|
|
CFI_OCF_DIR=$(CFI_OCF_DIR) \
|
|
CFI_IPSEC_DIR=$(CFI_IPSEC_DIR) \
|
|
SoC=$(SOC) \
|
|
$(KERNEL_MAKE_FLAGS) \
|
|
$(PKG_JOBS) \
|
|
modules
|
|
endef
|
|
|
|
$(eval $(call KernelPackage,qca-nss-cfi-cryptoapi))
|