[openwrt/openwrt] openssl: fix uci config for built-in engines

[LEDE Commits]

chunkeey pushed a commit to openwrt/openwrt.git, branch openwrt-23.05:
https://git.openwrt.org/a48d0bdb77eb93f7fba6e055dace125c72755b6a

commit a48d0bdb77eb93f7fba6e055dace125c72755b6a
Author: Tianling Shen <cnsztl at immortalwrt.org>
AuthorDate: Thu Jun 1 15:22:26 2023 +0800

    openssl: fix uci config for built-in engines
    
    Built-in engine configs are added in libopenssl-conf/install stage
    already, postinst/add_engine_config is just duplicating them, and
    due to the lack of `config` header it results a broken uci config:
    
    > uci: Parse error (invalid command) at line 3, byte 0
    
    ```
    config engine 'devcrypto'
            option enabled '1'
    engine 'devcrypto'
            option enabled '1'
            option builtin '1'
    ```
    
    Add `builtin` option in libopenssl-conf/install stage and remove
    duplicate engine configuration in postinst/add_engine_config to
    fix this issue.
    
    Fixes: 0b70d55a64c39d ("openssl: make UCI config aware of built-in engines")
    Signed-off-by: Tianling Shen <cnsztl at immortalwrt.org>
    (cherry picked from commit a0d71934253f599f4ac651b1b3a429901049e802)
---
 package/libs/openssl/Makefile | 13 +++----------
 1 file changed, 3 insertions(+), 10 deletions(-)

diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile
index bd1cfed447..66ababab3c 100644
--- a/package/libs/openssl/Makefile
+++ b/package/libs/openssl/Makefile
@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=openssl
 PKG_VERSION:=3.0.8
-PKG_RELEASE:=9
+PKG_RELEASE:=10
 PKG_BUILD_FLAGS:=no-mips16 gc-sections
 
 PKG_BUILD_PARALLEL:=1
@@ -141,7 +141,6 @@ endef
 ifneq ($(CONFIG_OPENSSL_ENGINE_BUILTIN_PADLOCK)$(CONFIG_OPENSSL_ENGINE_BUILTIN_DEVCRYPTO),)
 define Package/libopenssl-conf/postinst
 #!/bin/sh
-OPENSSL_UCI="$${IPKG_INSTROOT}/etc/config/openssl"
 
 add_engine_config() {
 	if [ -z "$${IPKG_INSTROOT}" ] && uci -q get "openssl.$$1" >/dev/null; then
@@ -149,12 +148,6 @@ add_engine_config() {
 		uci set "openssl.$$1.builtin=1" && uci commit openssl
 		return
 	fi
-	{
-		echo "engine '$$1'"
-		echo "	option enabled '1'"
-		echo "	option builtin '1'"
-		echo
-	} >>"$${OPENSSL_UCI}"
 }
 
 $(if $(CONFIG_OPENSSL_ENGINE_BUILTIN_DEVCRYPTO),add_engine_config devcrypto)
@@ -424,10 +417,10 @@ define Package/libopenssl-conf/install
 	touch $(1)/etc/config/openssl
 	$(if $(CONFIG_OPENSSL_ENGINE_BUILTIN_DEVCRYPTO),
 		$(CP) ./files/devcrypto.cnf $(1)/etc/ssl/modules.cnf.d/
-		echo -e "config engine 'devcrypto'\n\toption enabled '1'" >> $(1)/etc/config/openssl)
+		echo -e "config engine 'devcrypto'\n\toption enabled '1'\n\toption builtin '1'" >> $(1)/etc/config/openssl)
 	$(if $(CONFIG_OPENSSL_ENGINE_BUILTIN_PADLOCK),
 		$(CP) ./files/padlock.cnf $(1)/etc/ssl/modules.cnf.d/
-		echo -e "\nconfig engine 'padlock'\n\toption enabled '1'" >> $(1)/etc/config/openssl)
+		echo -e "\nconfig engine 'padlock'\n\toption enabled '1'\n\toption builtin '1'" >> $(1)/etc/config/openssl)
 endef
 
 define Package/openssl-util/install