The package is only useful when running an official build. The
ImageBuilders used for this service can not contain any special compiler
flags etc. used by custom builds.
Instead of installing the package whenever `luci` is installed, it
should be installed via the buildbots itself, like it's currently done
for `luci`.
Signed-off-by: Paul Spooren <mail@aparcar.org>
OpenWrt has switched the default SSL library to be mbedtls instead
of WolfSSL. To avoid the need of installing both SSL libraries,
switch luci-ssl to use the mbedtls variant of libustream and px5g.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
The `luci` collection contains package management and attended
sysupgrades support, which are not that useful if not even undesired for
self-compiled images.
Rework the `luci-light` collection to exclude the two above mentioned
features, and make `luci` instead depend on the light collection in
additon to those features.
The `luci-ssl` and `luci-ssl-openssl` collections then only need
to depend on `luci-light`.
We now have three variants with won't pull in `luci-app-opkg` or
`luci-app-attendedsysupgrade`, making everybody happy.
Signed-off-by: Andre Heider <a.heider@gmail.com>
None of the components pulled in by the standard luci collection require
server side Lua processing anymore, so we're free to drop the explicit
dependency on the libiwinfo Lua binding.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
The attendedsysupgrade makes it trivial to upgrade to newer releases by
requesting custom firmware images from an API.
Signed-off-by: Paul Spooren <mail@aparcar.org>
OpenWrt installs WolfSSL per default to offer WPA3. To save some space
switch to a WolfSSL based px5g implementation for self-signed
certificate generation instead of a MbedTLS version.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Commit 391e82d6a3 in 2018 added luci-app-opkg dependency to
the 'luci' collection and its derivatives, but as nginx collections
do not depend on main 'luci', they did not get the intended change.
Fixes#4148
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
As nginx-ssl is now available, we fix luci-ssl-nginx package dep to use the right package. DRop luci-ssl-openssl-nginx as openssl is needed by nginx anyway.
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
Replace a dependency for px5g with openssl-util. Both LEDE and
Openwrt have now uhttpd versions that can generate keys with
OpenSSL cmd tools if px5g is not found. This change enables an
"OpenSSL-only" version of LuCI without mbedTLS/PolarSSL.
(Note: if px5g is found, uhttpd will prefer that.)
Relevant commits in uhttpd:
LEDE:
3c4858eeb282132540a39097dc5ad8
Openwrt:
6ec32832d2
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
px5g still requires libmbedtls (in LEDE) or libpolarssl (in Openwrt).
In LEDE it is also possible to replace px5g with openssl-util and
achieve "openssl-only" build without libmbedtls, as uhttpd can also
generate keys with openssl commandline tools if px5g is not present.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Add a new OpenSSL-based collection that uses libustream-openssl
instead of the default libustream-polarssl.
(Note: px5g still needs libpolarssl, so both libs will be included)
Mention PolarSSL in the title of luci-ssl.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* Rename subdirectories to their repective OpenWrt package names
* Make each LuCI module its own standalone package
* Deploy a shared luci.mk which is used by each module Makefile
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
