if BR2_PACKAGE_LIBOPENSSL

# 4xx PowerPC cores seem to have trouble with openssl's ASM
# optimizations
config BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH_LINUX_PPC
	bool
	default y if BR2_powerpc
	depends on !BR2_powerpc_401
	depends on !BR2_powerpc_403
	depends on !BR2_powerpc_405
	depends on !BR2_powerpc_405fp
	depends on !BR2_powerpc_440
	depends on !BR2_powerpc_440fp

config BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH
	string
	# Doesn't work for thumb-only (Cortex-M?)
	default "linux-armv4"			if BR2_ARM_CPU_HAS_ARM
	default "linux-aarch64"			if BR2_aarch64
	default "linux-ppc"			if BR2_PACKAGE_LIBOPENSSL_TARGET_ARCH_LINUX_PPC
	default "linux-ppc64"			if BR2_powerpc64
	default "linux-ppc64le"			if BR2_powerpc64le
	default "linux-x86"			if BR2_i386 && !BR2_TOOLCHAIN_HAS_LIBATOMIC
	default "linux-x86-latomic"		if BR2_i386 && BR2_TOOLCHAIN_HAS_LIBATOMIC
	default "linux-x86_64"			if BR2_x86_64
	default "linux64-riscv64"               if BR2_riscv && BR2_ARCH_IS_64
	default "linux32-riscv32"               if BR2_riscv && !BR2_ARCH_IS_64
	default "linux64-s390x"                 if BR2_s390x
	# no-asm is needed with generic architectures such as
	# linux-generic{32,64}, see
	# https://github.com/openssl/openssl/issues/9839
	default "linux-generic64 no-asm"	if BR2_ARCH_IS_64 && !BR2_MIPS_NABI32
	default "linux-latomic no-asm"		if BR2_TOOLCHAIN_HAS_LIBATOMIC
	default "linux-generic32 no-asm"

config BR2_PACKAGE_LIBOPENSSL_BIN
	bool "openssl binary"
	help
	  Install the openssl binary and the associated helper scripts
	  to the target file system. This is a command line tool for
	  doing various cryptographic stuff.

config BR2_PACKAGE_LIBOPENSSL_ENGINES
	bool "openssl additional engines"
	help
	  Install additional encryption engine libraries.

config BR2_PACKAGE_LIBOPENSSL_ENABLE_CHACHA
	bool "enable CHACHA"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC2
	bool "enable RC2"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_RC4
	bool "enable RC4"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD2
	bool "enable MD2"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_MD4
	bool "enable MD4"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_MDC2
	bool "enable MDC2"
	default y
	select BR2_PACKAGE_LIBOPENSSL_ENABLE_DES

config BR2_PACKAGE_LIBOPENSSL_ENABLE_BLAKE2
	bool "enable BLAKE2"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_IDEA
	bool "enable IDEA"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_SEED
	bool "enable SEED"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_DES
	bool "enable DES"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_RMD160
	bool "enable RMD160"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_WHIRLPOOL
	bool "enable WHIRLPOOL"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_BLOWFISH
	bool "enable BLOWFISH"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL
	bool "enable SSL"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL3
	bool "enable SSL3"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_WEAK_SSL
	bool "enable WEAK_SSL"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_PSK
	bool "enable mode PSK"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_CAST
	bool "enable mode CAST"
	default y

config BR2_PACKAGE_LIBOPENSSL_UNSECURE
	bool "enable unit test, debug, backtrace"
	default y
	help
	  Enable unit-test crypto-mdebug-backtrace
	  crypto-mdebug autoerrinit mode.

config BR2_PACKAGE_LIBOPENSSL_DYNAMIC_ENGINE
	bool "enable dynamic engine"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_COMP
	bool "enable compression"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_ARGON2
	bool "enable ARGON2"
	default y

config BR2_PACKAGE_LIBOPENSSL_ENABLE_CACHED_FETCH
	bool "enable cached fetch"
	default y
	help
	  Cache algorithms when they are fetched from a provider.
	  Normally, a provider indicates if the algorithms it supplies
	  can be cached or not. Using this option will reduce run-time
	  memory usage but it also introduces a significant performance
	  penalty. This option is primarily designed to help with
	  detecting incorrect reference counting.

config BR2_PACKAGE_LIBOPENSSL_ENABLE_CMP
	bool "enable CMP"
	default y
	help
	  Build support for Certificate Management Protocol (CMP) and
	  Certificate Request Message Format (CRMF).

config BR2_PACKAGE_LIBOPENSSL_ENABLE_THREAD_POOL
	bool "enable thread pool"
	default y
	depends on BR2_TOOLCHAIN_HAS_THREADS
	help
	  Build with thread pool functionality. If enabled, OpenSSL
	  algorithms may use the thread pool to perform parallel
	  computation. This option in itself does not enable OpenSSL
	  to spawn new threads. Currently the only supported thread
	  pool mechanism is the default thread pool.

config BR2_PACKAGE_LIBOPENSSL_ENABLE_ECX
	bool "enable ECX"
	default y
	help
	  Build with ECX support. Disabling this option can be used
	  to disable support for X25519, X448, and EdDSA.

config BR2_PACKAGE_LIBOPENSSL_ENABLE_LOADER_ENGINE
	bool "enable 'loader_attic' engine"
	default y
	depends on BR2_PACKAGE_LIBOPENSSL_DYNAMIC_ENGINE
	help
	  Build with 'loader_attic' engine support, which is meant
	  just for internal OpenSSL testing purposes and supports
	  loading keys, parameters, certificates, and CRLs from files.
	  When this engine is used, files with such credentials are
	  read via this engine.

config BR2_PACKAGE_LIBOPENSSL_ENABLE_PADLOCK_ENGINE
	bool "enable padlock engine"
	default y
	help
	  Build the padlock engine.

config BR2_PACKAGE_LIBOPENSSL_ENABLE_MODULE
	bool "enable modules"
	default y
	help
	  Build modules.

config BR2_PACKAGE_LIBOPENSSL_ENABLE_QUIC
	bool "enable QUIC"
	default y
	help
	  Build with QUIC support.

config BR2_PACKAGE_LIBOPENSSL_SECURE_MEMORY
	bool "enable secure memory"
	default y
	help
	  Build with secure memory support.

config BR2_PACKAGE_LIBOPENSSL_ENABLE_SIV
	bool "enable SIV"
	default y
	help
	  Build with RFC5297 AES-SIV support.

config BR2_PACKAGE_LIBOPENSSL_ENABLE_SM2_PRECOMP_TABLE
	bool "enable SM2 precomputed table"
	default y
	depends on BR2_aarch64
	help
	  Enable using the SM2 precomputed table. Disabling this option
	  makes the library smaller.

config BR2_PACKAGE_LIBOPENSSL_ENABLE_SSL_TRACE
	bool "enable SSL trace"
	default y
	help
	  Build with SSL Trace support. Disabling this option may
	  provide a small reduction in libssl binary size.

endif # BR2_PACKAGE_LIBOPENSSL