openvswitch: Turn off ssl integration by default

The openssl library is an optional component for the openvswitch.  The
problem with it enabled by default is that it will consume system
entropy to try to initialize the openssl library even though we are not
using it by default.  With the 4.16 kernel and up there is not always
enough entropy available at the early boot time which can cause a
lengthy stall, while waiting to initialize the openvswitch.

If ssl is needed, it can of course be turned on with the package
config option "ssl".

Signed-off-by: Jason Wessel <jason.wessel@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
This commit is contained in:
Jason Wessel 2018-09-05 15:44:45 -07:00 committed by Bruce Ashfield
parent 4e02acfb79
commit 09b67e49bf

View File

@ -40,6 +40,7 @@ DPDK_INSTALL_DIR ?= "/opt/dpdk"
PACKAGECONFIG ?= "libcap-ng"
PACKAGECONFIG[dpdk] = "--with-dpdk=${STAGING_DIR_TARGET}${DPDK_INSTALL_DIR}/share/${TARGET_ARCH}-native-linuxapp-gcc,,dpdk,dpdk"
PACKAGECONFIG[libcap-ng] = "--enable-libcapng,--disable-libcapng,libcap-ng,"
PACKAGECONFIG[ssl] = ",--disable-ssl,openssl,"
# Don't compile kernel modules by default since it heavily depends on
# kernel version. Use the in-kernel module for now.