Unverified Commit 02aba0fb authored by jopejoe1's avatar jopejoe1 Committed by GitHub
Browse files

wolfssl: drop (#504471)

parents 0e5c18db 6fd28ab3

pkgs/by-name/ar/art-standalone/package.nix

+1 −2
Original line number Diff line number Diff line
@@ -2,7 +2,6 @@ 
  lib,

  stdenv,

  fetchFromGitLab,

  wolfssl,

  bionic-translation,

  python3,

  which,
@@ -35,6 +34,7 @@ stdenv.mkDerivation (finalAttrs: { 
  patches = [

    # Do not hardocde addr2line binary path

    ./no-hardcode-path-addr2line.patch

    ./remove-wolfssljni.patch

  ];



  postPatch = ''
@@ -65,7 +65,6 @@ stdenv.mkDerivation (finalAttrs: { 
    libpng

    lz4

    openssl

    (wolfssl.override { enableJni = true; })

    xz

    zlib

  ];

pkgs/by-name/ar/art-standalone/remove-wolfssljni.patch

0 → 100644
+96 −0
Original line number Diff line number Diff line 
diff --git a/Makefile b/Makefile

index 3383a64b36..b658f49c23 100644

--- a/Makefile

+++ b/Makefile

@@ -53,7 +53,7 @@

 

 default: ____art_all

 

-____art_all: dalvikvm art dex2oat libjavacore libcore libopenjdk libopenjdkjvm core-libart-hostdex core-oj-hostdex apachehttp-hostdex apache-xml-hostdex hamcrest-hostdex core-junit-hostdex junit-runner-hostdex bouncycastle-hostdex wolfssljni-hostdex okhttp-hostdex libandroidfw art-standalone.pc

+____art_all: dalvikvm art dex2oat libjavacore libcore libopenjdk libopenjdkjvm core-libart-hostdex core-oj-hostdex apachehttp-hostdex apache-xml-hostdex hamcrest-hostdex core-junit-hostdex junit-runner-hostdex bouncycastle-hostdex okhttp-hostdex libandroidfw art-standalone.pc

 

 art-standalone.pc: art-standalone.pc.in

 	sed -e 's|@prefix@|$(____PREFIX)|g' \

@@ -68,8 +68,7 @@

 	install -Dt $(____INSTALL_LIBDIR)/java/dex/art/natives/ $(____TOPDIR)/out/host/linux-x86/lib64/libjavacore.so \

 	                                                        $(____TOPDIR)/out/host/linux-x86/lib64/libnativehelper.so \

 	                                                        $(____TOPDIR)/out/host/linux-x86/lib64/libopenjdk.so \

-	                                                        $(____TOPDIR)/out/host/linux-x86/lib64/libopenjdkjvm.so \

-	                                                        $(____TOPDIR)/out/host/linux-x86/lib64/libwolfssljni.so

+	                                                        $(____TOPDIR)/out/host/linux-x86/lib64/libopenjdkjvm.so

 #

 # these are mostly internal libs which there's no point in versioning because they don't have any kind of stable ABI - so we just shove them in art/ namespace

 # even the libunwind is actually a fork of libunwind 1.1 with added stuff that will likely never be upstreamed, especially since google stopped using libunwind

@@ -108,8 +107,7 @@

 	                                                $(____TOPDIR)/out/host/linux-x86/framework/core-oj-hostdex.jar \

 	                                                $(____TOPDIR)/out/host/linux-x86/framework/hamcrest-hostdex.jar \

 	                                                $(____TOPDIR)/out/host/linux-x86/framework/junit-runner-hostdex.jar \

-	                                                $(____TOPDIR)/out/host/linux-x86/framework/okhttp-hostdex.jar \

-	                                                $(____TOPDIR)/out/host/linux-x86/framework/wolfssljni-hostdex.jar

+	                                                $(____TOPDIR)/out/host/linux-x86/framework/okhttp-hostdex.jar

 #

 # packaging note: this is needed as bootclasspath when compiling android_translation_layer. Can be in -dev package.

 	install -D $(____TOPDIR)/out/host/common/obj/JAVA_LIBRARIES/core-all-hostdex_intermediates/classes.jar $(____INSTALL_LIBDIR)/java/core-all_classes.jar

diff --git a/art/runtime/parsed_options.cc b/art/runtime/parsed_options.cc

index 1f8936114a..b8f7566401 100644

--- a/art/runtime/parsed_options.cc

+++ b/art/runtime/parsed_options.cc

@@ -597,8 +597,7 @@

                                         bootclasspath_prefix + "/core-libart-hostdex.jar"  + ':' +

                                         bootclasspath_prefix + "/hamcrest-hostdex.jar"     + ':' +

                                         bootclasspath_prefix + "/junit-runner-hostdex.jar" + ':' +

-                                        bootclasspath_prefix + "/okhttp-hostdex.jar"       + ':' +

-                                        bootclasspath_prefix + "/wolfssljni-hostdex.jar";

+                                        bootclasspath_prefix + "/okhttp-hostdex.jar";

       free(bootclasspath_prefix);

 

       if(args.Exists(M::BootClassPath_a))

diff --git a/libcore/luni/src/main/java/java/security/security.properties b/libcore/luni/src/main/java/java/security/security.properties

index ca55328279..b17437f81e 100644

--- a/libcore/luni/src/main/java/java/security/security.properties

+++ b/libcore/luni/src/main/java/java/security/security.properties

@@ -18,15 +18,13 @@

 # Providers

 # See also: J2SE doc. "How to Implement a Provider for the JavaTM Cryptography Architecture"

 #

-# Android's provider of OpenSSL backed implementations

-security.provider.1=com.wolfssl.provider.jsse.WolfSSLProvider

 # Android's stripped down BouncyCastle provider

-security.provider.2=com.android.org.bouncycastle.jce.provider.BouncyCastleProvider

+security.provider.1=com.android.org.bouncycastle.jce.provider.BouncyCastleProvider

 # provides implementations that would normally be provided by sun.security.provider.Sun

 # (CertPathValidator, CertPathBuilder and (ATL added) JKS)

-security.provider.3=sun.security.provider.CertPathProvider

+security.provider.2=sun.security.provider.CertPathProvider

 # Remaining Harmony providers

-security.provider.4=org.apache.harmony.security.provider.crypto.CryptoProvider

+security.provider.3=org.apache.harmony.security.provider.crypto.CryptoProvider

 

 

 

@@ -39,13 +37,6 @@

 # javax/net/ssl/SSLSocketFactory.html#getDefault()

 # javax/net/ssl/SSLServerSocketFactory.html#getDefault()

 

-# For regular SSLSockets, we have two implementations:

-ssl.SocketFactory.provider=com.wolfssl.provider.jsse.WolfSSLSocketFactory

-#ssl.SocketFactory.provider=com.android.org.conscrypt.SSLSocketFactoryImpl

-

-# For SSLServerSockets, there's only the new, OpenSSL-based implementation:

-ssl.ServerSocketFactory.provider=com.wolfssl.provider.jsse.WolfSSLServerSocketFactory

-

 # Default KeyStore type.

 # See specification for java/security/KeyStore.html#getDefaultType()

 keystore.type=BKS

diff --git a/libcore/ojluni/src/main/java/sun/security/jca/Providers.java b/libcore/ojluni/src/main/java/sun/security/jca/Providers.java

index e60c3e3ba8..ec66dcb8f0 100644

--- a/libcore/ojluni/src/main/java/sun/security/jca/Providers.java

+++ b/libcore/ojluni/src/main/java/sun/security/jca/Providers.java

@@ -103,7 +103,6 @@

         */

         "com.android.org.bouncycastle.jce.provider.BouncyCastleProvider",

         "org.apache.harmony.security.provider.crypto.CryptoProvider", // we need SecureRandom

-        "com.wolfssl.provider.jsse.WolfSSLProvider",

         // END Android-changed: Use Conscrypt and BC, not the sun.security providers.

         BACKUP_PROVIDER_CLASSNAME,

     };

pkgs/by-name/cu/curlMinimal/package.nix

+3 −6
Original line number Diff line number Diff line
@@ -48,8 +48,6 @@ 
  rtmpdump,

  scpSupport ? zlibSupport && !stdenv.hostPlatform.isSunOS && !stdenv.hostPlatform.isCygwin,

  libssh2,

  wolfsslSupport ? false,

  wolfssl,

  rustlsSupport ? false,

  rustls-ffi,

  zlibSupport ? true,
@@ -80,7 +78,6 @@ assert 
    (lib.count (x: x) [

      gnutlsSupport

      opensslSupport

      wolfsslSupport

      rustlsSupport

    ]) > 1

  );
@@ -160,7 +157,6 @@ stdenv.mkDerivation (finalAttrs: { 
    ++ lib.optional pslSupport libpsl

    ++ lib.optional rtmpSupport rtmpdump

    ++ lib.optional scpSupport libssh2

    ++ lib.optional wolfsslSupport wolfssl

    ++ lib.optional rustlsSupport rustls-ffi

    ++ lib.optional zlibSupport zlib

    ++ lib.optional zstdSupport zstd;
@@ -192,7 +188,8 @@ stdenv.mkDerivation (finalAttrs: { 
    (lib.withFeatureAs idnSupport "libidn2" (lib.getDev libidn2))

    (lib.withFeatureAs opensslSupport "openssl" (lib.getDev openssl))

    (lib.withFeatureAs scpSupport "libssh2" (lib.getDev libssh2))

    (lib.withFeatureAs wolfsslSupport "wolfssl" (lib.getDev wolfssl))

    # TODO: Clean up on `staging`.

    "--without-wolfssl"

  ]

  ++ lib.optional gssSupport "--with-gssapi=${lib.getDev libkrb5}"

  # For the 'urandom', maybe it should be a cross-system option
@@ -203,7 +200,7 @@ stdenv.mkDerivation (finalAttrs: { 
    "--without-ca-bundle"

    "--without-ca-path"

  ]

  ++ lib.optionals (!gnutlsSupport && !opensslSupport && !wolfsslSupport && !rustlsSupport) [

  ++ lib.optionals (!gnutlsSupport && !opensslSupport && !rustlsSupport) [

    "--without-ssl"

  ]

  ++ lib.optionals (rustlsSupport && !stdenv.hostPlatform.isDarwin) [

pkgs/by-name/ha/haproxy/package.nix

+0 −9
Original line number Diff line number Diff line
@@ -12,7 +12,6 @@ 
  aws-lc,

  libressl,

  openssl,

  wolfssl,

  lua5_4,

  pcre2,

}:
@@ -21,7 +20,6 @@ assert lib.assertOneOf "sslLibrary" sslLibrary [ 
  "aws-lc"

  "libressl"

  "openssl"

  "wolfssl"

];

let

  sslPkgs = {
@@ -30,10 +28,6 @@ let 
      libressl

      openssl

      ;

    wolfssl = wolfssl.override {

      variant = "haproxy";

      extraConfigureFlags = [ "--enable-quic" ];

    };

  };

  sslPkg = sslPkgs.${sslLibrary};

in
@@ -85,9 +79,6 @@ stdenv.mkDerivation (finalAttrs: { 
  ++ lib.optionals (sslLibrary == "openssl" && lib.versionOlder openssl.version "3.5.2") [

    "USE_QUIC_OPENSSL_COMPAT=yes"

  ]

  ++ lib.optionals (sslLibrary == "wolfssl") [

    "USE_OPENSSL_WOLFSSL=yes"

  ]

  ++ lib.optionals usePcre [

    "USE_PCRE2=yes"

    "USE_PCRE2_JIT=yes"

pkgs/by-name/li/lightway/package.nix

+4 −4
Original line number Diff line number Diff line
@@ -10,16 +10,16 @@ 


rustPlatform.buildRustPackage {

  pname = "lightway";

  version = "0-unstable-2026-04-10";

  version = "0-unstable-2026-04-24";



  src = fetchFromGitHub {

    owner = "expressvpn";

    repo = "lightway";

    rev = "72a924935df9db641e7f4fe28cbeafaead59014f";

    hash = "sha256-tygK2CQmbbynJiwGkMvYzt2dHoE17DCJeqD+jlai/m8=";

    rev = "8e0940f047ee72db5daa1fb7c3bb82bc89e0f1d9";

    hash = "sha256-OFMAEw613aIGG7N5LBAGbVrpkqMUBi7lUy7jm5tZowc=";

  };



  cargoHash = "sha256-NdVOphyBW5sflv5jZPV/ShfAJXb3ZOyDRctmn/2JY38=";

  cargoHash = "sha256-gY8KokOtdBT7Vq+lGn2sk4/o3A0TypEqv09TVJqaZjc=";



  cargoBuildFlags = lib.cli.toCommandLineGNU { } {

    package = [