From d5921d64e491247cd3039399f98b489447262307 Mon Sep 17 00:00:00 2001
From: Daniel Pawlik <pawlik.dan@gmail.com>
Date: Thu, 10 Oct 2024 10:04:32 +0200
Subject: [PATCH] Improve openssl config

---
 configs/common/openssl | 14 ++++++--------
 openwrt-configure.sh   |  2 +-
 2 files changed, 7 insertions(+), 9 deletions(-)

diff --git a/configs/common/openssl b/configs/common/openssl
index 74bf9cc..c73f47d 100644
--- a/configs/common/openssl
+++ b/configs/common/openssl
@@ -17,15 +17,13 @@ CONFIG_OPENSSL_OPTIMIZE_SPEED=y
 
 # enable /dev/crypto
 CONFIG_PACKAGE_kmod-cryptodev=y
-CONFIG_PACKAGE_kmod-crypto-user=y
-CONFIG_PACKAGE_libopenssl-devcrypto=y
 CONFIG_PACKAGE_openssl-util=y
-# additional modules
-# CONFIG_PACKAGE_libopenssl-afalg=y
-# CONFIG_PACKAGE_libopenssl-gost_engine=y
+CONFIG_PACKAGE_libopenssl-devcrypto=y
+CONFIG_PACKAGE_libopenssl-afalg_sync=y
+# CONFIG_PACKAGE_kmod-crypto-user=y
 
-### Force enable /dev/crypto
-CONFIG_OPENSSL_ENGINE_BUILTIN=y
-CONFIG_OPENSSL_ENGINE_BUILTIN_DEVCRYPTO=y
+### Force add /dev/crypto into libcrypto
+# CONFIG_OPENSSL_ENGINE_BUILTIN=y
+# CONFIG_OPENSSL_ENGINE_BUILTIN_DEVCRYPTO=y
 
 #### replace mbedtls with openssl - remember to leave commented "is not set" or remove it!
diff --git a/openwrt-configure.sh b/openwrt-configure.sh
index 07aa0c9..dbeefaa 100755
--- a/openwrt-configure.sh
+++ b/openwrt-configure.sh
@@ -45,7 +45,7 @@ if [ -n "$CRYPTO_LIB" ]; then
   if [[ "$CRYPTO_LIB" =~ ^(Wolfssl|wolfssl)$ ]]; then
     FS_FULL_WPAD_PACKAGES="$FS_FULL_WPAD_PACKAGES -libustream-mbedtls -libmbedtls libustream-wolfssl wpad-wolfssl"
   elif [[ "$CRYPTO_LIB" =~ ^(Openssl|openssl)$ ]]; then
-    FS_FULL_WPAD_PACKAGES="$FS_FULL_WPAD_PACKAGES -libustream-mbedtls -libmbedtls libustream-openssl wpad-openssl libopenssl-devcrypto"
+    FS_FULL_WPAD_PACKAGES="$FS_FULL_WPAD_PACKAGES -libustream-mbedtls -libmbedtls libustream-openssl wpad-openssl libopenssl-devcrypto libopenssl-afalg_sync"
   fi
 fi