Microhttpd & SSL

bossanova808 · 7 February 2023 08:37

Hi Folks

Any chance you’d consider building Coreelec with libmicrohttpd with SSL support (for info: Javascript and Kodi - Summary (at Nexus) - can things be improved??)

This would mean one could add a certificate, which would potentially help with Javascript <> Kodi, and in general SSL isn’t a bad thing for a webserver to offer…

Thanks for considering!

Portisch · 7 February 2023 08:53

I guess you want to add –with-gnutls option here?

diff --git a/packages/web/libmicrohttpd/package.mk b/packages/web/libmicrohttpd/package.mk
index 3f6005cff6..2003711eff 100644
--- a/packages/web/libmicrohttpd/package.mk
+++ b/packages/web/libmicrohttpd/package.mk
@@ -15,7 +15,8 @@ PKG_CONFIGURE_OPTS_TARGET="--disable-shared \
                            --enable-static \
                            --disable-examples \
                            --disable-curl \
-                           --enable-https"
+                           --enable-https \
+                           --with-gnutls"
 
 post_makeinstall_target() {
   rm -rf ${INSTALL}/usr/bin

This package is maintained by LE so maybe open there a issue/pull request:

github.com

LibreELEC/LibreELEC.tv/blob/master/packages/web/libmicrohttpd/package.mk

# SPDX-License-Identifier: GPL-2.0-or-later
# Copyright (C) 2009-2016 Stephan Raue (stephan@openelec.tv)
# Copyright (C) 2018-present Team LibreELEC (https://libreelec.tv)

PKG_NAME="libmicrohttpd"
PKG_VERSION="0.9.75"
PKG_SHA256="9278907a6f571b391aab9644fd646a5108ed97311ec66f6359cebbedb0a4e3bb"
PKG_LICENSE="LGPLv2.1"
PKG_SITE="http://www.gnu.org/software/libmicrohttpd/"
PKG_URL="http://ftpmirror.gnu.org/libmicrohttpd/${PKG_NAME}-${PKG_VERSION}.tar.gz"
PKG_DEPENDS_TARGET="toolchain gnutls"
PKG_LONGDESC="A small C library that is supposed to make it easy to run an HTTP server as part of another application."

PKG_CONFIGURE_OPTS_TARGET="--disable-shared \
                           --enable-static \
                           --disable-examples \
                           --disable-curl \
                           --enable-https"

post_makeinstall_target() {

This file has been truncated. show original

bossanova808 · 7 February 2023 08:57

Hmmm that has enable https on it already. Which I think is the key thing. But I don’t see the corresponding option in Kodi defined that should then be available…hmmm

Portisch · 7 February 2023 08:58

I did edit the post, maybe it’s with-gnutls:

github.com

openwrt/packages/blob/master/libs/libmicrohttpd/Makefile#L63


      
          
          CONFIGURE_ARGS += \
          	--disable-curl \
          	--disable-rpath \
          	--disable-doc \
          	--disable-examples \
          	--disable-poll \
          	--enable-epoll \
          	--with-pic
          
          ifeq ($(BUILD_VARIANT),ssl)
          CONFIGURE_ARGS += \
          	--enable-https \
          	--with-gnutls
          else
          CONFIGURE_ARGS += \
          	--disable-https \
          	--without-gnutls
          endif
          
          define Build/InstallDev

With this option set the lib does compile, if it works? No idea.

bossanova808 · 7 February 2023 10:14

Yes it does need gnutls apparently.

Any chance of a Nexus build with it in??

Portisch · 7 February 2023 10:23

As I wrote

But the configuration already reports:
HTTPS support: yes (using libgnutls)
Without any change

bossanova808 · 7 February 2023 10:43

Apologies, missed that.

vpeter · 7 February 2023 11:03

What exactly is missing with SSL?

Kodi on CE supports SSL but needs to be enabled under Settings/Services/Control and keys put as /storage/.kodi/userdata/server.key and server.pem.

bossanova808 · 7 February 2023 21:10

Thankyou, I’m an idiot - I managed to look right past the Enable SSL setting somehow. Have just checked again and there it is. Not even sure how I missed it, my brain must have been thinking it was in another spot. My apologies for the noise, and thanks for your help!

system · 21 February 2023 21:10

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.