[OpenWrt-Devel] changeset 40948 breaks loading ath9k calibration data from EEPROM
Hi, Since changeset 40948, calibration data is no longer correctly loaded from EEPROM on the BTHOMEHUBV2B. I've been trying to make sense of the various changes to 0010-MIPS-lantiq-wifi-and-ethernet-eeprom-handling.patch and it looks to me as though merging José's recent patch for the ARV4518PW has left us with an old version of the ath9k EEPROM loading code, without the succession of changes made last year culminating in patch #4417 from Daniel Gimpelevitch. I should imagine therefore that the DGN3500 is broken as well as the BTHOMEHUBV2B. Ben ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] changeset 40948 breaks loading ath9k calibration data from EEPROM
On 14/06/2014 13:29, Ben Mulvihill wrote: Hi, Since changeset 40948, calibration data is no longer correctly loaded from EEPROM on the BTHOMEHUBV2B. I've been trying to make sense of the various changes to 0010-MIPS-lantiq-wifi-and-ethernet-eeprom-handling.patch and it looks to me as though merging José's recent patch for the ARV4518PW has left us with an old version of the ath9k EEPROM loading code, without the succession of changes made last year culminating in patch #4417 from Daniel Gimpelevitch. I should imagine therefore that the DGN3500 is broken as well as the BTHOMEHUBV2B. Ben ok, i will look into it and merge the version we had previous to the 3.10 rebase John u ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] changeset 40948 breaks loading ath9k calibration data from EEPROM
On Sat, 2014-06-14 at 14:06 +0200, John Crispin wrote: On 14/06/2014 13:29, Ben Mulvihill wrote: Hi, Since changeset 40948, calibration data is no longer correctly loaded from EEPROM on the BTHOMEHUBV2B. I've been trying to make sense of the various changes to 0010-MIPS-lantiq-wifi-and-ethernet-eeprom-handling.patch and it looks to me as though merging José's recent patch for the ARV4518PW has left us with an old version of the ath9k EEPROM loading code, without the succession of changes made last year culminating in patch #4417 from Daniel Gimpelevitch. I should imagine therefore that the DGN3500 is broken as well as the BTHOMEHUBV2B. Ben ok, i will look into it and merge the version we had previous to the 3.10 rebase John u Thank you. Let me know if you want me to test anything, or if there is anything else I can do. ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support
Hi, this set adds DNSSEC validation to dnsmasq, tested on ar71xx. The set is pretty small and should be self explanatory. There's room for improvement though: - compilation will fail under CONFIG_LIBNETTLE_MINI. I failed to express the dependencies so that this combination is not allowed... Hints? - the Configuration submenu shows up between the two variants but influences both. Is there a recommended way how to handle compile time options for variants? To test: 1) use a DNSSEC-capable upstream DNS server 2) add to /etc/config/dhcp: config dnsmasq ... # Activate DNSSEC validation option dnssec '1' # Ensure answers without DNSSEC are in unsigned zones option dnsseccheckunsigned '1' setting the latter option to '1' without fullfilling 1) will break all queries! - `dig +dnssec +multi +tcp posteo.de` should resolve with 'ad' in flags - `dig +dnssec +multi +tcp dnssec-failed.org` should not resolve Thanks, Andre Andre Heider (4): dnsmasq: use COPTS for compile time options dnsmasq: respect target's LDFLAGS dnsmasq: Add config option to enable DNSSEC validation dnsmasq: add UCI DNSSEC runtime support package/network/services/dnsmasq/Config.in | 25 ++ package/network/services/dnsmasq/Makefile | 24 +++-- .../network/services/dnsmasq/files/dnsmasq.init| 8 +++ 3 files changed, 51 insertions(+), 6 deletions(-) create mode 100644 package/network/services/dnsmasq/Config.in -- 2.0.0 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH 2/4] dnsmasq: respect target's LDFLAGS
Append local flags, don't overwrite. Signed-off-by: Andre Heider a.hei...@gmail.com --- package/network/services/dnsmasq/Makefile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/package/network/services/dnsmasq/Makefile b/package/network/services/dnsmasq/Makefile index c0d3dc4..8473656 100644 --- a/package/network/services/dnsmasq/Makefile +++ b/package/network/services/dnsmasq/Makefile @@ -62,6 +62,7 @@ endef Package/dnsmasq-dhcpv6/conffiles = $(Package/dnsmasq/conffiles) TARGET_CFLAGS += -ffunction-sections -fdata-sections +TARGET_LDFLAGS += -Wl,--gc-sections COPTS = $(if $(CONFIG_IPV6),,-DNO_IPV6) -DNO_IPSET -DNO_AUTH @@ -72,7 +73,7 @@ endif MAKE_FLAGS := \ $(TARGET_CONFIGURE_OPTS) \ CFLAGS=$(TARGET_CFLAGS) \ - LDFLAGS=-Wl,--gc-sections \ + LDFLAGS=$(TARGET_LDFLAGS) \ COPTS=$(COPTS) \ PREFIX=/usr -- 2.0.0 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH 1/4] dnsmasq: use COPTS for compile time options
As documented in config.h. Doing otherwise will break dnsmasq's pkg-wrapper script to find its libs to link to. Signed-off-by: Andre Heider a.hei...@gmail.com --- package/network/services/dnsmasq/Makefile | 9 + 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/package/network/services/dnsmasq/Makefile b/package/network/services/dnsmasq/Makefile index 8e2d41c..c0d3dc4 100644 --- a/package/network/services/dnsmasq/Makefile +++ b/package/network/services/dnsmasq/Makefile @@ -61,18 +61,19 @@ endef Package/dnsmasq-dhcpv6/conffiles = $(Package/dnsmasq/conffiles) -TARGET_CFLAGS += \ - -ffunction-sections -fdata-sections \ - $(if $(CONFIG_IPV6),,-DNO_IPV6) -DNO_IPSET -DNO_AUTH +TARGET_CFLAGS += -ffunction-sections -fdata-sections + +COPTS = $(if $(CONFIG_IPV6),,-DNO_IPV6) -DNO_IPSET -DNO_AUTH ifeq ($(BUILD_VARIANT),nodhcpv6) - TARGET_CFLAGS += -DNO_DHCP6 + COPTS += -DNO_DHCP6 endif MAKE_FLAGS := \ $(TARGET_CONFIGURE_OPTS) \ CFLAGS=$(TARGET_CFLAGS) \ LDFLAGS=-Wl,--gc-sections \ + COPTS=$(COPTS) \ PREFIX=/usr define Package/dnsmasq/install -- 2.0.0 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH 3/4] dnsmasq: Add config option to enable DNSSEC validation
Enabling this compile time option adds a dependency on libnettle. Signed-off-by: Andre Heider a.hei...@gmail.com --- package/network/services/dnsmasq/Config.in | 25 + package/network/services/dnsmasq/Makefile | 10 +- 2 files changed, 34 insertions(+), 1 deletion(-) create mode 100644 package/network/services/dnsmasq/Config.in diff --git a/package/network/services/dnsmasq/Config.in b/package/network/services/dnsmasq/Config.in new file mode 100644 index 000..cf02c5c --- /dev/null +++ b/package/network/services/dnsmasq/Config.in @@ -0,0 +1,25 @@ +menu Configuration + depends on PACKAGE_dnsmasq + +config DNSMASQ_DNSSEC + bool DNSSEC support + default n + help + Enable support to validate DNS replies and cache DNSSEC data. + + When forwarding DNS queries, dnsmasq requests the DNSSEC records needed + to validate the replies. The replies are validated and the result + returned as the Authenticated Data bit in the DNS packet. In addition + the DNSSEC records are stored in the cache, making validation by + clients more efficient. + + Note that validation by clients is the most secure DNSSEC mode, but for + clients unable to do validation, use of the AD bit set by dnsmasq is + useful, provided that the network between the dnsmasq server and the + client is trusted. + + The nameservers upstream of dnsmasq must be DNSSEC-capable, ie capable + of returning DNSSEC records with data. If they are not, then dnsmasq + will not be able to determine the trusted status of answers. + +endmenu diff --git a/package/network/services/dnsmasq/Makefile b/package/network/services/dnsmasq/Makefile index 8473656..dfd9c3a 100644 --- a/package/network/services/dnsmasq/Makefile +++ b/package/network/services/dnsmasq/Makefile @@ -23,6 +23,8 @@ PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSI PKG_INSTALL:=1 PKG_BUILD_PARALLEL:=1 +PKG_CONFIG_DEPENDS:=CONFIG_DNSMASQ_DNSSEC + include $(INCLUDE_DIR)/package.mk define Package/dnsmasq/Default @@ -32,15 +34,20 @@ define Package/dnsmasq/Default URL:=http://www.thekelleys.org.uk/dnsmasq/ endef +define Package/dnsmasq/config + source $(SOURCE)/Config.in +endef + define Package/dnsmasq $(call Package/dnsmasq/Default) + DEPENDS:=+DNSMASQ_DNSSEC:libnettle VARIANT:=nodhcpv6 endef define Package/dnsmasq-dhcpv6 $(call Package/dnsmasq/Default) TITLE += (with DHCPv6 support) - DEPENDS:=@IPV6 +kmod-ipv6 + DEPENDS:=@IPV6 +kmod-ipv6 +DNSMASQ_DNSSEC:libnettle VARIANT:=dhcpv6 endef @@ -65,6 +72,7 @@ TARGET_CFLAGS += -ffunction-sections -fdata-sections TARGET_LDFLAGS += -Wl,--gc-sections COPTS = $(if $(CONFIG_IPV6),,-DNO_IPV6) -DNO_IPSET -DNO_AUTH +COPTS += $(if $(CONFIG_DNSMASQ_DNSSEC),-DHAVE_DNSSEC,) ifeq ($(BUILD_VARIANT),nodhcpv6) COPTS += -DNO_DHCP6 -- 2.0.0 ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH 4/4] dnsmasq: add UCI DNSSEC runtime support
Ship keys for the root zone and add two uci options to enable
DNSSEC checks:
Option 'dnssec': Activate DNSSEC validation
Option 'dnsseccheckunsigned': Ensure answers without DNSSEC are in
unsigned zones
Signed-off-by: Andre Heider a.hei...@gmail.com
---
package/network/services/dnsmasq/Makefile | 2 ++
package/network/services/dnsmasq/files/dnsmasq.init | 8
2 files changed, 10 insertions(+)
diff --git a/package/network/services/dnsmasq/Makefile
b/package/network/services/dnsmasq/Makefile
index dfd9c3a..6250a8a 100644
--- a/package/network/services/dnsmasq/Makefile
+++ b/package/network/services/dnsmasq/Makefile
@@ -91,6 +91,8 @@ define Package/dnsmasq/install
$(INSTALL_DIR) $(1)/etc/config
$(INSTALL_DATA) ./files/dhcp.conf $(1)/etc/config/dhcp
$(INSTALL_DATA) ./files/dnsmasq.conf $(1)/etc/dnsmasq.conf
+ $(INSTALL_DIR) $(1)/usr/share/dnsmasq
+ $(INSTALL_DATA) $(PKG_BUILD_DIR)/trust-anchors.conf
$(1)/usr/share/dnsmasq
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/dnsmasq.init $(1)/etc/init.d/dnsmasq
$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
diff --git a/package/network/services/dnsmasq/files/dnsmasq.init
b/package/network/services/dnsmasq/files/dnsmasq.init
index f7edb28..9f16d5f 100644
--- a/package/network/services/dnsmasq/files/dnsmasq.init
+++ b/package/network/services/dnsmasq/files/dnsmasq.init
@@ -14,6 +14,7 @@ ADD_LOCAL_HOSTNAME=1
CONFIGFILE=/var/etc/dnsmasq.conf
HOSTFILE=/tmp/hosts/dhcp
+TRUSTANCHORSFILE=/usr/share/dnsmasq/trust-anchors.conf
xappend() {
local value=$1
@@ -186,6 +187,13 @@ dnsmasq() {
config_list_foreach $cfg rebind_domain append_rebind_domain
}
+ config_get dnssec $cfg dnssec
+ [ $dnssec -gt 0 ] {
+ xappend --conf-file=$TRUSTANCHORSFILE
+ xappend --dnssec
+ append_bool $cfg dnsseccheckunsigned --dnssec-check-unsigned
+ }
+
dhcp_option_add $cfg 0
xappend --dhcp-broadcast=tag:needs-broadcast
--
2.0.0
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] changeset 40948 breaks loading ath9k calibration data from EEPROM
2014-06-14 14:32 GMT+02:00, Ben Mulvihill ben.mulvih...@gmail.com: On Sat, 2014-06-14 at 14:06 +0200, John Crispin wrote: On 14/06/2014 13:29, Ben Mulvihill wrote: Hi, Since changeset 40948, calibration data is no longer correctly loaded from EEPROM on the BTHOMEHUBV2B. I've been trying to make sense of the various changes to 0010-MIPS-lantiq-wifi-and-ethernet-eeprom-handling.patch and it looks to me as though merging José's recent patch for the ARV4518PW has left us with an old version of the ath9k EEPROM loading code, without the succession of changes made last year culminating in patch #4417 from Daniel Gimpelevitch. I should imagine therefore that the DGN3500 is broken as well as the BTHOMEHUBV2B. Ben ok, i will look into it and merge the version we had previous to the 3.10 rebase John u Thank you. Let me know if you want me to test anything, or if there is anything else I can do. Unless the BTHOMEHUBV2B has an Atheros b/g wireless chip the patch should have no effect in the routers that need ath9k driver. My main concern with that patch were the Siemens SX76x but not the others. AFAIK the cal_data partition is a bit problematic because each manufacturer make the things in its own way, and Daniel Gimpelevitch and Álvaro Fernández know how to fix this problem in the less traumatic way. Regards: José Vázquez ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support
On Sat, 2014-06-14 at 17:34 +0200, Andre Heider wrote: Hi, this set adds DNSSEC validation to dnsmasq, tested on ar71xx. The set is pretty small and should be self explanatory. There's room for improvement though: - compilation will fail under CONFIG_LIBNETTLE_MINI. I failed to express the dependencies so that this combination is not allowed... Hints? Hello, Why would it fail? If the issue is the missing gmp.h, you could simply replace it with nettle's bignum.h and avoid direct linking with gmp. regards, Nikos ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] changeset 40948 breaks loading ath9k calibration data from EEPROM
On Sat, 2014-06-14 at 18:53 +0200, José Vázquez wrote: 2014-06-14 14:32 GMT+02:00, Ben Mulvihill ben.mulvih...@gmail.com: On Sat, 2014-06-14 at 14:06 +0200, John Crispin wrote: On 14/06/2014 13:29, Ben Mulvihill wrote: Hi, Since changeset 40948, calibration data is no longer correctly loaded from EEPROM on the BTHOMEHUBV2B. I've been trying to make sense of the various changes to 0010-MIPS-lantiq-wifi-and-ethernet-eeprom-handling.patch and it looks to me as though merging José's recent patch for the ARV4518PW has left us with an old version of the ath9k EEPROM loading code, without the succession of changes made last year culminating in patch #4417 from Daniel Gimpelevitch. I should imagine therefore that the DGN3500 is broken as well as the BTHOMEHUBV2B. Ben ok, i will look into it and merge the version we had previous to the 3.10 rebase John u Thank you. Let me know if you want me to test anything, or if there is anything else I can do. Unless the BTHOMEHUBV2B has an Atheros b/g wireless chip the patch should have no effect in the routers that need ath9k driver. My main concern with that patch were the Siemens SX76x but not the others. AFAIK the cal_data partition is a bit problematic because each manufacturer make the things in its own way, and Daniel Gimpelevitch and Álvaro Fernández know how to fix this problem in the less traumatic way. Regards: José Vázquez I've just had a closer look, and realised that only one of your recent patches (http://patchwork.openwrt.org/patch/5582/) has actually been applied, in changeset 40999. As you say, that shouldn't cause problems. The BTHOMEHUBV2B is definitely broken though. and what has broken things is the previous changeset, 40948. Let's see what John comes up with. Your other two patches, #5453 and #5454, are marked as non-applicable in patchwork. Do you still need them? Regards, Ben ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [PATCH 0/4] dnsmasq: DNSSEC support
On Sat, Jun 14, 2014 at 6:56 PM, Nikos Mavrogiannopoulos n...@gnutls.org wrote: On Sat, 2014-06-14 at 17:34 +0200, Andre Heider wrote: Hi, this set adds DNSSEC validation to dnsmasq, tested on ar71xx. The set is pretty small and should be self explanatory. There's room for improvement though: - compilation will fail under CONFIG_LIBNETTLE_MINI. I failed to express the dependencies so that this combination is not allowed... Hints? Hello, Why would it fail? If the issue is the missing gmp.h, you could simply replace it with nettle's bignum.h and avoid direct linking with gmp. I was getting errors about mismatching symbols before, I guess that's because it included gmp.h and then tried to link against a libnettle-mini. But you're right, with that header change it indeed does work, thanks! Regards, Andre ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] changeset 40948 breaks loading ath9k calibration data from EEPROM
2014-06-14 21:47 GMT+02:00, Ben Mulvihill ben.mulvih...@gmail.com: On Sat, 2014-06-14 at 18:53 +0200, José Vázquez wrote: Unless the BTHOMEHUBV2B has an Atheros b/g wireless chip the patch should have no effect in the routers that need ath9k driver. My main concern with that patch were the Siemens SX76x but not the others. AFAIK the cal_data partition is a bit problematic because each manufacturer make the things in its own way, and Daniel Gimpelevitch and Álvaro Fernández know how to fix this problem in the less traumatic way. Regards: José Vázquez I've just had a closer look, and realised that only one of your recent patches (http://patchwork.openwrt.org/patch/5582/) has actually been applied, in changeset 40999. As you say, that shouldn't cause problems. The BTHOMEHUBV2B is definitely broken though. and what has broken things is the previous changeset, 40948. Let's see what John comes up with. Your other two patches, #5453 and #5454, are marked as non-applicable in patchwork. Do you still need them? Regards, Ben Patches 5453 and 5454 were marked as not applicable due to the changeset 40948. Were an attemp to correct the problems reading cal_data in Arcadyan/Astoria boards and were wrote by two seguridadwireless forum users. They wrote the code trying to make it backwards compatible. Feel free to use them. The main problem with the wifi in the Lantiq target are the ARV boards: a lot of people, John included, spent a lot of time an still there are some problems, as you see. Regards: Pepe ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] changeset 40948 breaks loading ath9k calibration data from EEPROM
On Sat, 2014-06-14 at 23:08 +0200, José Vázquez wrote: 2014-06-14 21:47 GMT+02:00, Ben Mulvihill ben.mulvih...@gmail.com: On Sat, 2014-06-14 at 18:53 +0200, José Vázquez wrote: Unless the BTHOMEHUBV2B has an Atheros b/g wireless chip the patch should have no effect in the routers that need ath9k driver. My main concern with that patch were the Siemens SX76x but not the others. AFAIK the cal_data partition is a bit problematic because each manufacturer make the things in its own way, and Daniel Gimpelevitch and Álvaro Fernández know how to fix this problem in the less traumatic way. Regards: José Vázquez I've just had a closer look, and realised that only one of your recent patches (http://patchwork.openwrt.org/patch/5582/) has actually been applied, in changeset 40999. As you say, that shouldn't cause problems. The BTHOMEHUBV2B is definitely broken though. and what has broken things is the previous changeset, 40948. Let's see what John comes up with. Your other two patches, #5453 and #5454, are marked as non-applicable in patchwork. Do you still need them? Regards, Ben Patches 5453 and 5454 were marked as not applicable due to the changeset 40948. Were an attemp to correct the problems reading cal_data in Arcadyan/Astoria boards and were wrote by two seguridadwireless forum users. They wrote the code trying to make it backwards compatible. Feel free to use them. The main problem with the wifi in the Lantiq target are the ARV boards: a lot of people, John included, spent a lot of time an still there are some problems, as you see. Regards: Pepe Thanks for clarifying the origin of patches 5453 and 5454. I can see that following changeset 40948 they will not apply in their current form. What I really wanted to know was whether the combination of changesets 40948 and 40999 has solved the problems on the ARV boards that those two patches were intended to solve. Thanks, Ben ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [PATCH 3/4] dnsmasq: Add config option to enable DNSSEC validation
Hi, On 14 June 2014 23:34, Andre Heider a.hei...@gmail.com wrote: Enabling this compile time option adds a dependency on libnettle. Signed-off-by: Andre Heider a.hei...@gmail.com --- package/network/services/dnsmasq/Config.in | 25 + package/network/services/dnsmasq/Makefile | 10 +- 2 files changed, 34 insertions(+), 1 deletion(-) create mode 100644 package/network/services/dnsmasq/Config.in diff --git a/package/network/services/dnsmasq/Config.in b/package/network/services/dnsmasq/Config.in new file mode 100644 index 000..cf02c5c --- /dev/null +++ b/package/network/services/dnsmasq/Config.in @@ -0,0 +1,25 @@ +menu Configuration + depends on PACKAGE_dnsmasq + +config DNSMASQ_DNSSEC + bool DNSSEC support + default n + help + Enable support to validate DNS replies and cache DNSSEC data. + + When forwarding DNS queries, dnsmasq requests the DNSSEC records needed + to validate the replies. The replies are validated and the result + returned as the Authenticated Data bit in the DNS packet. In addition + the DNSSEC records are stored in the cache, making validation by + clients more efficient. + + Note that validation by clients is the most secure DNSSEC mode, but for + clients unable to do validation, use of the AD bit set by dnsmasq is + useful, provided that the network between the dnsmasq server and the + client is trusted. + + The nameservers upstream of dnsmasq must be DNSSEC-capable, ie capable + of returning DNSSEC records with data. If they are not, then dnsmasq + will not be able to determine the trusted status of answers. + +endmenu diff --git a/package/network/services/dnsmasq/Makefile b/package/network/services/dnsmasq/Makefile index 8473656..dfd9c3a 100644 --- a/package/network/services/dnsmasq/Makefile +++ b/package/network/services/dnsmasq/Makefile @@ -23,6 +23,8 @@ PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSI PKG_INSTALL:=1 PKG_BUILD_PARALLEL:=1 +PKG_CONFIG_DEPENDS:=CONFIG_DNSMASQ_DNSSEC + include $(INCLUDE_DIR)/package.mk define Package/dnsmasq/Default @@ -32,15 +34,20 @@ define Package/dnsmasq/Default URL:=http://www.thekelleys.org.uk/dnsmasq/ endef +define Package/dnsmasq/config + source $(SOURCE)/Config.in +endef + It will be more complete if dnsmasq-dhcpv6 is also covered by this config option. Even better is letting this option depend on the actual dnsmasq build variant selected. yousong ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH] Restore AWM002-EVB profile in asiarf.mk
In a recent revision (r41177) John Crispin removed the profile for the AsiaRF AWM002 eval board while adding another AsiaRF board. This patch restores AWM002 and also corrects a misspelling and an apparently errant reference to an Allnet ALL0239-3G device. Signed-off-by: Galen Seitz gal...@seitzassoc.com Signed-off-by: Russell Senior russ...@personaltelco.net --- target/linux/ramips/rt305x/profiles/asiarf.mk | 15 +-- 1 files changed, 13 insertions(+), 2 deletions(-) diff --git a/target/linux/ramips/rt305x/profiles/asiarf.mk b/target/linux/ramips/rt305x/profiles/asiarf.mk index 2d5231d..8aef8a8 100644 --- a/target/linux/ramips/rt305x/profiles/asiarf.mk +++ b/target/linux/ramips/rt305x/profiles/asiarf.mk @@ -5,12 +5,23 @@ # See /LICENSE for more information. # +define Profile/AWM002EVB + NAME:=AsiaRF AWM002-EVB + PACKAGES:=kmod-usb-core kmod-usb-ohci kmod-usb2 kmod-ledtrig-usbdev \ + kmod-i2c-core kmod-i2c-gpio +endef + +define Profile/AWM002EVB/Description + Package set for AsiaRF AWM002 Evaluation Board +endef + define Profile/AWAPN2403 - NAME:=AisaRF AWAPN2403 + NAME:=AsiaRF AWAPN2403 endef define Profile/AWAPN2403/Description - Package set for Allnet ALL0239-3G + Package set for AsiaRF AWAPN2403 Pocket Router endef +$(eval $(call Profile,AWM002EVB)) $(eval $(call Profile,AWAPN2403)) -- 1.7.1 -- Russell Senior, President russ...@personaltelco.net ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
