[OpenWrt-Devel] [PATCH v2 0/6] openssl: tweaks to reduce size

Dirk Feytons dirk.feytons at gmail.com
Thu Jun 9 11:37:13 EDT 2016


This set of patches introduces a couple of config options to leave out stuff
from OpenSSL. Additionally the hardcoded configure options have been extended
to omit some rarely used functionality and algorithms.
I'm not sure about the defaults for the introduced config options so please
take a closer look at them.
In my case with these changes libcrypto shrunk by about 100K and libssl by
about 22K.
Note that I'm introducing two (small) patches to OpenSSL but these have been
sent upstream and will probably be included in the next 1.0.2 release.

v1 -> v2:
- switch around logic for OPENSSL_WITH_COMPRESSION
- enable PSK by default

Dirk Feytons (6):
  openssl: add option to omit deprecated APIs
  openssl: add option to disable compression support
  openssl: add option for NPN support
  openssl: add option to disable PSK support
  openssl: remove some unneeded functionality and algorithms
  openssl: add --gc-sections

 package/libs/openssl/Config.in                     |   20 +++++++++++
 package/libs/openssl/Makefile                      |   36 ++++++++++++++++----
 .../patches/301-fix_no_nextprotoneg_build.patch    |   12 +++++++
 .../openssl/patches/302-fix_no_cmac_build.patch    |   24 +++++++++++++
 4 files changed, 86 insertions(+), 6 deletions(-)
 create mode 100644 package/libs/openssl/patches/301-fix_no_nextprotoneg_build.patch
 create mode 100644 package/libs/openssl/patches/302-fix_no_cmac_build.patch

-- 
1.7.9.5
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel


More information about the openwrt-devel mailing list