[yocto] Adding nativesdk package to toolchain

2014-10-14 Thread Navani Srivastava
Hello,

I am trying to add a nativesdk package of a custom recipe to toolchain in
Poky-8.0.2. I have added nativesdk-qjson (custom package) to
TOOLCHAIN_HOST_TASK variable, but it is throwing following error while
generating the toolchain-

Collected errors:
|  * opkg_install_cmd: Cannot install package nativesdk-qjson.

Attached is the recipe for nativesdk package. How can I make it work?

Thanks
Navani


nativesdk-qjson_0.8.1.bb
Description: Binary data
-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


[yocto] FW: [oss-security] Truly scary SSL 3.0 vuln to be revealed soon:

2014-10-14 Thread Sona Sarmadi
Hi all,

It seems that another vulnerability is coming soon, the advice is disable 
SSLv3.:
http://www.theregister.co.uk/2014/10/14/nasty_ssl_30_vulnerability_to_drop_tomorrow/


From Hanno Böck [ha...@hboeck.de]:

Whether it's scary or not I have an advice for you: Disable SSLv3.

It causes a lot of headache already. I once had to debug a rather subtle issue 
in combination with SNI.
The problem: Browsers downgrade out of protocol to SSLv3 if they can't connect 
via TLS. They do this in order to support broken server implementations. 
However this downgrade can also be triggered by bad or slow internet 
connections - and then you'll loose SNI. So sometimes your visitors will get 
the wrong certificate presented.
I solved this for my servers by disabling SSLv3. It was a minor problem when I 
did this but it is almost no problem today.

You will lock out IE6 users on Windows XP. However even people who use Windows 
XP+IE and installed their updates have TLS 1.0 support.
I also encountered a small number of people who had manually disabled TLS 1.0 
in firefox for unknown reasons. However this was a few years ago. Current 
Firefox versions make it harder to do this. I assume the reason was that they 
thought v3 sound newer than v1.0.

A number of people already recommend disabling SSLv3, e.g. the Qualys 
configuration guide. Disable it now - no matter if the rumors about a serious 
vuln are true, you'll be safe.

BR - Sona 


signature.asc
Description: signature.asc
-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto


Re: [yocto] How to include static library and headers in sdk

2014-10-14 Thread Paul Eggleton
On Tuesday 23 September 2014 11:38:35 Matt Schuckmann wrote:
 Paul Eggleton wrote:
  So the way our system works, we assume that a recipe will have a main
  package and in the case of a library that that will contain the actual
  library file; the dev package just contains headers and the non-
  versioned symlink to the library. Thus if you install the -dev package,
  it's assumed it won't be of any use unless you install the main
  package, hence the hard dependency. Also, the -staticdev package
  depends upon the -dev package. However, if the main package is empty,
  it won't be produced at all, but the -dev package still depends upon it
  and you'll get the error above. If all you want to do is ship a static
  .a file in the -staticdev package and you're never going to have a main
  package, probably the thing to do is just drop the dependency on the
  main package, by adding the following to your recipe:
  
  RDEPENDS_${PN}-dev = 
 
 Ok that did it.
 The final solution was to add
 RDEPENDS_${PN}-dev = 
 To the library recipe file so that dev and staticdev don't depend on the
 binary package (because it's empty because it's a static library).
 
 And to add the staticdev packages to the TOOLCHAIN_TARGET_TASK list in the
 image file. (question could this part be put in a package group, should
 it?)

It could be, that's largely up to how you want to package things for 
convenience.

 That was really hard for a beginner to figure out, I never would have gotten
 it without your help Paul. It makes sense now but I don't think I could
 have figured it out from just reading the documentation (partially because
 there is so much documentation and variation in how things are done).
 
 It seems like there should be a repository of example recipes covering
 common cases like this, has anything been started?

Well, I'd hope that what we provide in the Writing a new recipe manual
section [1] should be helpful enough to get started, if not we should extend
or improve that. 

Another thing we should look at going forward is trying to avoid annoying
issues such as this one coming up at all. For example we could change the
RDEPENDS relationship here to an RRECOMMENDS and then it shouldn't cause the
error to occur. FYI I've opened an enhancement bug to track improving the
behaviour in this situation:

  https://bugzilla.yoctoproject.org/show_bug.cgi?id=6839

Cheers,
Paul

[1] 
http://www.yoctoproject.org/docs/current/dev-manual/dev-manual.html#new-recipe-writing-a-new-recipe

-- 

Paul Eggleton
Intel Open Source Technology Centre
-- 
___
yocto mailing list
yocto@yoctoproject.org
https://lists.yoctoproject.org/listinfo/yocto