Re: [PATCH v2] netfilter: remove no-op kconfig symbols

2021-04-22 Thread Jason A. Donenfeld
https://git.zx2c4.com/wireguard-linux/commit/?h=backport-5.4.y=ac8265d3b26e7c2674e066af6451c5a61d3f2e7a

This will be included in the patchset next time I push a refresh of those.

___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel


Re: [PATCH] package: openssl: Enable built engines per default

2021-04-22 Thread Eneas U de Queiroz
On Thu, Apr 22, 2021 at 3:55 AM Daniel Danzberger  wrote:
>
> Automatically enable an engine in the openssl.cnf if it has been build.
> Before this change, /etc/openssl.cnf had to be edited manually on the
> system to enable the engine.
>

> +define Package/libopenssl-conf/enable
> +   $(if $(CONFIG_PACKAGE_libopenssl-$(2)),sed -i 
> s/^\#*$(2)=$(2)/$(2)=$(2)/ $(1)/etc/ssl/openssl.cnf)
> +endef

>  define Package/libopenssl-conf/install
> $(INSTALL_DIR) $(1)/etc/ssl
> $(CP) $(PKG_INSTALL_DIR)/etc/ssl/openssl.cnf $(1)/etc/ssl/
> +   $(call Package/libopenssl-conf/enable,$(1),devcrypto)
> +   $(call Package/libopenssl-conf/enable,$(1),afalg)
> +   $(call Package/libopenssl-conf/enable,$(1),padlock)

Hi Daniel

The problem with this is that it will enable the config for all
engines in the bots configuration (all packages =m).  OpenSSL will
stop loading the engines past the point where one of them fails.  It
may do it silently, or it may show an error.  If you run the `openssl
engine` command (no flags or with -c), it will show the error; if you
add the `-t` flag, the error message is gone.  In either case, the
engines configured after the first failed one will not load.  Suppose
that you install the afalg engine, but not devcrypto.  When it loads
the config file, devcrypto comes first, and openssl will fail to find
it; then the afalg engine will not be loaded.

I do like the idea, though. My first thought was to add an install
script to the engine packages.  The problem is that the config file
may have been changed in a way that sed may produce unwanted results.
It can be mitigated by configuring engines in a separate file, so only
that file needs to be changed.  It will have a nice effect, that a
feed-installed engine can configure itself without needing a config
section added to the openssl-conf package.

Another option, which may be the easiest and safest, is to use your
approach, but only uncomment the engines built into the firmware (=y),
and not the ones built as modules.

Cheers,

Eneas

___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel


[PATCH] ramips: add support for Wavlink WL-WN578A2

2021-04-22 Thread dev . aldrian
From: Thomas Aldrian 

This commit adds support for the Wavlink WL-WN578A2 dual-band wall-plug
wireless router. This device is also sold under the name SilverCrest
SWV 733 A2.

Device Specifications:

- CPU: MediaTek MT7628AN (580MHz)
- Flash: 8MB
- RAM: 64MB
- Bootloader: U-Boot
- Ethernet: 2x 10/100 Mbps
- 2.4 GHz: 802.11b/g/n SoC
- 5 GHz: 802.11a/n/ac MT7610E
- Antennas: internal
- 4 green LEDs: WPS/Power, LAN, WAN, wifi-low, wifi-med, wifi-high
- Buttons: Reset, WPS
- Sliding mode switch: AP, repeater, client
- Small sliding power switch

Flashing instructions:

U-Boot launches TFTP client if WPS button is pressed during power-on.
Configure as follows:

- Server IP: 192.168.10.100
- Filename (rename sysupgrade file to this): firmware.bin

Flashing should not take more than a minute, device will reboot
automatically.

Signed-off-by: Thomas Aldrian 
---
 .../dts/mt7628an_wavlink_wl-wn578a2.dts   | 165 ++
 target/linux/ramips/image/mt76x8.mk   |  10 ++
 .../mt76x8/base-files/etc/board.d/01_leds |   8 +
 .../mt76x8/base-files/etc/board.d/02_network  |   6 +-
 4 files changed, 187 insertions(+), 2 deletions(-)
 create mode 100644 target/linux/ramips/dts/mt7628an_wavlink_wl-wn578a2.dts

diff --git a/target/linux/ramips/dts/mt7628an_wavlink_wl-wn578a2.dts 
b/target/linux/ramips/dts/mt7628an_wavlink_wl-wn578a2.dts
new file mode 100644
index 00..69a54c297b
--- /dev/null
+++ b/target/linux/ramips/dts/mt7628an_wavlink_wl-wn578a2.dts
@@ -0,0 +1,165 @@
+// SPDX-License-Identifier: GPL-2.0-or-later OR MIT
+
+#include "mt7628an.dtsi"
+
+#include 
+#include 
+
+/ {
+   compatible = "wavlink,wl-wn578a2", "mediatek,mt7628an-soc";
+   model = "Wavlink WL-WN578A2";
+
+   aliases {
+   led-boot = _wps;
+   led-failsafe = _wps;
+   led-running = _wps;
+   led-upgrade = _wps;
+   };
+
+   keys {
+   compatible = "gpio-keys";
+
+   reset {
+   label = "reset";
+   gpios = < 43 GPIO_ACTIVE_LOW>;
+   linux,code = ;
+   };
+
+   wps {
+   label = "wps";
+   gpios = < 38 GPIO_ACTIVE_LOW>;
+   linux,code = ;
+   };
+
+   ap {
+   label = "ap";
+   gpios = < 41 GPIO_ACTIVE_LOW>;
+   linux,code = ;
+   linux,input-type = ;
+   };
+
+   repeater {
+   label = "repeater";
+   gpios = < 42 GPIO_ACTIVE_LOW>;
+   linux,code = ;
+   linux,input-type = ;
+   };
+   };
+
+   leds {
+   compatible = "gpio-leds";
+
+   wifi-high {
+   label = "green:wifi-high";
+   gpios = < 37 GPIO_ACTIVE_LOW>;
+   };
+
+   wifi-med {
+   label = "green:wifi-med";
+   gpios = < 11 GPIO_ACTIVE_LOW>;
+   };
+
+   wifi-low {
+   label = "green:wifi-low";
+   gpios = < 44 GPIO_ACTIVE_LOW>;
+   };
+
+   lan {
+   label = "green:lan";
+   gpios = < 40 GPIO_ACTIVE_LOW>;
+   };
+
+   wan {
+   label = "green:wan";
+   gpios = < 39 GPIO_ACTIVE_LOW>;
+   };
+
+   led_wps: wps {
+   label = "green:wps";
+   gpios = < 4 GPIO_ACTIVE_LOW>;
+   };
+   };
+};
+
+_default {
+   gpio {
+   groups = "i2c", "wdt", "wled_an", "p0led_an", "p1led_an", 
"p2_led", "p3led_an", "p4led_an", "refclk";
+   function = "gpio";
+   };
+};
+
+ {
+   status = "okay";
+};
+
+ {
+   mt76@0,0 {
+   reg = <0x 0 0 0 0>;
+   mediatek,mtd-eeprom = < 0x8000>;
+   ieee80211-freq-limit = <500 600>;
+   };
+};
+
+ {
+   status = "okay";
+
+   flash@0 {
+   compatible = "jedec,spi-nor";
+   reg = <0>;
+   spi-max-frequency = <4000>;
+
+   partitions {
+   compatible = "fixed-partitions";
+   #address-cells = <1>;
+   #size-cells = <1>;
+
+   partition@0 {
+   label = "u-boot";
+   reg = <0x0 0x3>;
+   read-only;
+   };
+
+   partition@3 {
+   label = "u-boot-env";
+   reg = <0x3 0x1>;
+   read-only;
+   };
+
+   factory: 

Merged: kernel: drop the conntrack rtcache patch

2021-04-22 Thread Kevin Darbyshire-Bryant
Merged into my staging tree.
Thank you!


___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel


[PATCH] package: openssl: Enable built engines per default

2021-04-22 Thread Daniel Danzberger
Automatically enable an engine in the openssl.cnf if it has been build.
Before this change, /etc/openssl.cnf had to be edited manually on the
system to enable the engine.

Signed-off-by: Daniel Danzberger 
---
 package/libs/openssl/Makefile | 7 +++
 1 file changed, 7 insertions(+)

diff --git a/package/libs/openssl/Makefile b/package/libs/openssl/Makefile
index 7ab4c6ccd0..d101ee3aa2 100644
--- a/package/libs/openssl/Makefile
+++ b/package/libs/openssl/Makefile
@@ -375,9 +375,16 @@ define Package/libopenssl/install
$(if $(CONFIG_OPENSSL_ENGINE),$(INSTALL_DIR) 
$(1)/usr/lib/$(ENGINES_DIR))
 endef
 
+define Package/libopenssl-conf/enable
+   $(if $(CONFIG_PACKAGE_libopenssl-$(2)),sed -i 
s/^\#*$(2)=$(2)/$(2)=$(2)/ $(1)/etc/ssl/openssl.cnf)
+endef
+
 define Package/libopenssl-conf/install
$(INSTALL_DIR) $(1)/etc/ssl
$(CP) $(PKG_INSTALL_DIR)/etc/ssl/openssl.cnf $(1)/etc/ssl/
+   $(call Package/libopenssl-conf/enable,$(1),devcrypto)
+   $(call Package/libopenssl-conf/enable,$(1),afalg)
+   $(call Package/libopenssl-conf/enable,$(1),padlock)
 endef
 
 define Package/openssl-util/install
-- 
2.30.2


___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel